$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa File: 2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa (raw, json) Hash identifier: 8SNurveTcVTmmhL6ZuznwkYbtUFS9WpZ34xO5d3JEmc= Subject key identifier: E6:D4:40:AC:5E:B7:B1:19:DC:52:15:E5:04:02:7C:CD:0F:DB:E8:10 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 672DDC28106694000F5B4286632D86B18EB91A8B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa Signing time: Fri 31 Oct 2025 01:40:10 +0000 ROA not before: Fri 31 Oct 2025 01:40:10 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:2d:dc:28:10:66:94:00:0f:5b:42:86:63:2d:86:b1:8e:b9:1a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:10 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d6b46d75de53e53e44589b11177976015b76208d8fce24470bc6d7f12e0bd0b6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:09:eb:29:cf:e6:6c:66:1f:f4:7f:49:25:29: 60:2a:54:6c:09:41:58:d6:ec:33:04:53:00:2c:32: f8:bb:2e:44:b6:5e:9b:12:bf:78:0c:2a:3a:e0:43: 0c:a9:26:f4:45:92:00:e2:45:b2:c2:0d:44:49:58: 1c:94:ce:60:3b:23:38:74:e8:c3:d8:f2:e2:fd:8b: a2:b0:62:7d:f5:a9:d8:e5:14:a5:64:6e:6e:e7:d1: 35:ff:13:53:1c:84:23:4c:27:e6:06:68:82:e5:37: b8:ec:09:ec:68:19:01:68:dc:33:d2:47:b7:f6:84: 66:c1:fb:ae:36:59:b9:c7:7f:87:8e:9c:50:13:78: f0:7d:63:f5:3a:94:8e:58:28:90:fa:9b:0f:15:97: 5b:3b:23:e1:7c:61:da:bc:2a:3c:6f:5c:5f:17:de: 0f:71:6b:f5:38:a0:e6:85:7c:bc:b7:8a:25:41:44: 91:7c:be:b9:6d:bd:05:3b:52:95:3f:18:ce:dc:5d: a8:6f:8f:43:80:60:d3:3e:6d:07:8b:70:9d:b3:96: 99:ba:a5:65:e5:e9:14:a9:af:a6:0c:71:21:72:9c: 4a:bd:a0:21:cc:87:99:ef:4e:57:f4:02:a4:e3:7d: b7:d8:7c:9e:21:70:de:80:67:3b:84:f1:4a:d0:df: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D4:40:AC:5E:B7:B1:19:DC:52:15:E5:04:02:7C:CD:0F:DB:E8:10 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:c3:58:85:36:ab:df:e3:08:d2:52:d0:dc:d2:5b:91:9e:22: 2a:03:8d:7e:8a:c4:68:59:8b:d3:4e:55:00:63:f6:02:46:00: 6b:dc:9f:da:96:87:98:59:e6:7c:e7:a8:b1:52:c8:af:0e:f9: e6:06:90:06:4b:39:25:8e:07:85:b5:53:04:10:e9:6d:73:49: 17:8a:ac:74:30:9d:c8:6f:62:70:77:e0:05:de:91:ec:af:a2: a7:e2:df:f0:39:82:fa:1d:09:43:b5:9b:5b:3f:0e:ba:2b:12: 60:52:35:85:80:5f:b6:67:a0:1a:39:8d:bc:fe:26:95:ce:62: 21:e3:ab:43:b6:20:a4:cd:0e:e0:9f:1a:e1:81:e8:97:54:bd: bc:b0:ac:34:26:cc:4a:92:14:b2:5e:85:1c:b2:e6:49:52:73: 6a:1d:46:27:3d:70:7b:54:3d:69:45:32:c5:15:ab:9e:77:e2: b5:4a:4b:97:5a:c9:89:7f:47:0a:d4:c7:06:31:17:e8:1c:c5: b6:cc:08:0e:97:fb:e9:96:81:6d:71:da:b9:4c:26:1a:2c:c6: 5f:a4:88:3b:27:fa:95:04:07:38:95:2d:4a:fc:12:35:e9:31: c6:b9:d2:6a:e7:93:42:b4:4d:26:1c:01:bf:42:94:93:5d:2e: 06:df:fa:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZy3cKBBmlAAPW0KGYy2GsY65GoswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDEwWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNmI0NmQ3NWRlNTNlNTNlNDQ1ODliMTExNzc5NzYwMTVi NzYyMDhkOGZjZTI0NDcwYmM2ZDdmMTJlMGJkMGI2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbCespz+ZsZh/0f0klKWAqVGwJQVjW7DMEUwAsMvi7LkS2 XpsSv3gMKjrgQwypJvRFkgDiRbLCDURJWByUzmA7Izh06MPY8uL9i6KwYn31qdjl FKVkbm7n0TX/E1MchCNMJ+YGaILlN7jsCexoGQFo3DPSR7f2hGbB+642WbnHf4eO nFATePB9Y/U6lI5YKJD6mw8Vl1s7I+F8Ydq8KjxvXF8X3g9xa/U4oOaFfLy3iiVB RJF8vrltvQU7UpU/GM7cXahvj0OAYNM+bQeLcJ2zlpm6pWXl6RSpr6YMcSFynEq9 oCHMh5nvTlf0AqTjfbfYfJ4hcN6AZzuE8UrQ330/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5tRArF63sRncUhXlBAJ8zQ/b6BAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJjM2Q3MjQ3LWUwN2ItNGQxYy1hNmVlLWViYWExM2ZiZDljYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAHzDWIU2q9/jCNJS0NzSW5GeIioD jX6KxGhZi9NOVQBj9gJGAGvcn9qWh5hZ5nznqLFSyK8O+eYGkAZLOSWOB4W1UwQQ 6W1zSReKrHQwnchvYnB34AXekeyvoqfi3/A5gvodCUO1m1s/DrorEmBSNYWAX7Zn oBo5jbz+JpXOYiHjq0O2IKTNDuCfGuGB6JdUvbywrDQmzEqSFLJehRyy5klSc2od Ric9cHtUPWlFMsUVq5534rVKS5dayYl/RwrUxwYxF+gcxbbMCA6X++mWgW1x2rlM Jhosxl+kiDsn+pUEBziVLUr8EjXpMca50mrnk0K0TSYcAb9ClJNdLgbf+ks= -----END CERTIFICATE-----Generated at Thu Nov 6 00:28:45 2025 by rpki-client