$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ca5264c-7bf5-4248-b6ad-dd9cf57a2be3.roa File: 2ca5264c-7bf5-4248-b6ad-dd9cf57a2be3.roa (raw, json) Hash identifier: M8cNplQ1J9+8Jb2fkpyZV4QyPouaqx9+YkZR9v9AR1s= Subject key identifier: A5:0F:F2:1B:BF:75:05:53:2C:EC:83:9E:47:6B:B3:3A:69:DD:DC:5B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3CC6E56E828FF3091C6C083769109702C83A7AF8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ca5264c-7bf5-4248-b6ad-dd9cf57a2be3.roa Signing time: Tue 04 Nov 2025 00:30:10 +0000 ROA not before: Tue 04 Nov 2025 00:30:10 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:c6:e5:6e:82:8f:f3:09:1c:6c:08:37:69:10:97:02:c8:3a:7a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 4 00:30:10 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=da32c942575109282fbb3d43c31332f05258e643d251abc9f0e4d69450fbd88a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:9e:9f:e1:d5:ba:4c:f8:ba:e3:aa:66:c5: ad:b5:ea:1c:bf:be:ce:73:9e:51:13:46:7c:d4:c3: 88:83:74:59:c1:27:69:39:d1:e8:1c:6f:a6:95:d8: 6c:ed:3b:bd:94:76:e3:93:fd:2c:b4:b2:45:ee:55: cc:e3:ea:b2:e1:c0:a9:80:24:7c:45:6c:07:11:ba: 99:7c:74:46:53:52:05:0e:66:cc:b6:29:ec:3f:a7: a5:aa:5a:bc:f4:24:36:c5:33:af:79:f1:34:5f:e8: 50:20:7f:5e:5b:47:35:b8:35:d9:b6:e4:76:07:22: 31:21:05:b5:dc:69:d3:57:1c:c3:40:03:91:04:1f: 4e:d8:17:9d:49:23:23:34:a4:e8:29:25:be:b6:92: 69:73:0d:2a:6b:2a:5b:be:9a:78:b4:7d:46:0f:ad: 52:29:2c:2e:7c:1b:a1:ca:57:46:72:fa:f9:ea:4c: 84:62:c5:61:c6:4d:ad:89:74:4d:eb:c3:63:e5:5e: db:f1:98:59:d1:04:95:6d:be:e0:f8:7d:59:83:fd: d8:5d:fa:88:ef:d1:5c:a7:69:18:c0:bd:f8:a7:81: e0:b1:19:02:93:62:cd:85:89:f0:b8:63:c3:68:a7: a1:5f:86:0b:0c:45:c0:80:99:65:12:45:82:8d:79: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0F:F2:1B:BF:75:05:53:2C:EC:83:9E:47:6B:B3:3A:69:DD:DC:5B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ca5264c-7bf5-4248-b6ad-dd9cf57a2be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.244.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:3f:8b:7e:6d:b3:4a:9f:56:5a:b6:6f:b9:72:c1:ac:34:54: 2e:53:3e:c5:98:9a:08:f5:d5:d9:65:7c:db:e0:9d:14:f4:4b: ca:7d:87:f1:4b:f1:94:9e:ab:9c:2e:19:3f:76:00:01:9c:20: 82:b0:31:18:13:26:41:8a:f7:0f:79:ea:fd:6c:2f:7c:75:11: 60:06:7d:4c:c0:65:c7:94:94:1e:79:7e:af:c9:02:69:01:0c: 3d:02:c3:7f:d8:ab:66:a8:61:42:92:b5:59:e1:91:0e:73:b7: f0:84:72:08:d4:57:11:32:65:64:8a:55:54:d1:d2:17:8d:c6: 5e:25:25:20:23:3e:4e:cb:e9:7b:ea:17:f0:4a:1e:d0:28:4b: c6:56:8e:7c:de:14:31:08:e8:ca:69:46:11:a2:4e:b6:5b:a4: b3:b7:3a:ef:47:fd:99:da:44:d2:0e:e1:9a:14:22:4c:95:1b: a8:f3:5e:0c:5c:96:ca:ce:c3:d7:d3:e9:b7:3e:cd:72:b0:fa: 74:dd:41:92:87:74:23:b1:e5:d9:f2:3d:aa:7e:93:26:5d:46: ee:0d:ea:23:3d:3d:6a:f5:2c:8c:df:ca:3d:e0:46:ad:ff:2e: f3:a7:ef:04:70:f6:6c:98:56:9d:c7:00:a2:0f:8e:0b:88:94: a4:93:13:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPMblboKP8wkcbAg3aRCXAsg6evgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTA0MDAzMDEwWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTMyYzk0MjU3NTEwOTI4MmZiYjNkNDNjMzEzMzJmMDUy NThlNjQzZDI1MWFiYzlmMGU0ZDY5NDUwZmJkODhhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC80J6f4dW6TPi646pmxa216hy/vs5znlETRnzUw4iDdFnB J2k50egcb6aV2GztO72UduOT/Sy0skXuVczj6rLhwKmAJHxFbAcRupl8dEZTUgUO Zsy2Kew/p6WqWrz0JDbFM6958TRf6FAgf15bRzW4Ndm25HYHIjEhBbXcadNXHMNA A5EEH07YF51JIyM0pOgpJb62kmlzDSprKlu+mni0fUYPrVIpLC58G6HKV0Zy+vnq TIRixWHGTa2JdE3rw2PlXtvxmFnRBJVtvuD4fVmD/dhd+ojv0VynaRjAvfingeCx GQKTYs2FifC4Y8Nop6FfhgsMRcCAmWUSRYKNeWJfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpQ/yG791BVMs7IOeR2uzOmnd3FswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJjYTUyNjRjLTdiZjUtNDI0OC1iNmFkLWRkOWNmNTdhMmJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPQwDQYJKoZIhvcNAQELBQADggEBAAo/i35ts0qfVlq2b7lywaw0VC5T PsWYmgj11dllfNvgnRT0S8p9h/FL8ZSeq5wuGT92AAGcIIKwMRgTJkGK9w956v1s L3x1EWAGfUzAZceUlB55fq/JAmkBDD0Cw3/Yq2aoYUKStVnhkQ5zt/CEcgjUVxEy ZWSKVVTR0heNxl4lJSAjPk7L6XvqF/BKHtAoS8ZWjnzeFDEI6MppRhGiTrZbpLO3 Ou9H/ZnaRNIO4ZoUIkyVG6jzXgxclsrOw9fT6bc+zXKw+nTdQZKHdCOx5dnyPap+ kyZdRu4N6iM9PWr1LIzfyj3gRq3/LvOn7wRw9myYVp3HAKIPjguIlKSTEz0= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:11 2025 by rpki-client