$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/363b7fd5-bc16-4c3e-a390-ff62d952ac87.roa File: 363b7fd5-bc16-4c3e-a390-ff62d952ac87.roa (raw, json) Hash identifier: CfjHk6Z9hD1v8l5nDeRyhTG3qBFD50mNE5bDuYOxiyo= Subject key identifier: 9E:64:BB:06:68:A5:9A:5C:1B:87:43:B7:06:FE:34:67:1F:1F:E7:9A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 663D6E8DA545841E556DD784A1B4BE6C74234B9B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/363b7fd5-bc16-4c3e-a390-ff62d952ac87.roa Signing time: Fri 31 Oct 2025 01:40:08 +0000 ROA not before: Fri 31 Oct 2025 01:40:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:3d:6e:8d:a5:45:84:1e:55:6d:d7:84:a1:b4:be:6c:74:23:4b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=ef5307cc00ed177ff3ba451b52ea83e9c748a4c36037aed5368d130ff1a8b058, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3b:71:ad:7e:5b:47:32:49:e1:e2:73:55:92: 88:86:30:12:8f:d1:31:9d:3c:32:1d:fd:a9:e2:bb: 44:92:58:82:4b:67:75:fb:1d:a9:00:5c:44:bf:18: 4a:01:4d:61:57:13:57:17:b5:62:22:70:b0:01:de: 66:4d:25:87:42:ad:38:4d:ed:ed:33:66:a7:28:bb: 82:cb:09:30:c3:f6:82:94:47:df:d1:4c:5b:22:f5: 53:85:16:b7:5c:64:56:4d:b6:da:3e:79:61:6a:af: a2:60:0b:b4:1d:17:ad:7d:24:84:a4:9c:63:00:f7: 61:53:25:12:c6:43:4b:14:f7:ea:4f:27:b5:cc:34: 0e:63:12:3d:a8:e2:79:50:40:e4:23:e3:aa:d9:f9: 53:01:f9:47:e0:62:fa:32:91:13:87:b7:7c:44:10: 04:de:94:6f:5f:ee:d7:ba:26:e7:40:03:ab:bc:cd: d2:47:2b:59:26:94:2e:f2:89:ea:ca:49:cb:e8:ad: dc:84:48:8f:88:66:60:ce:dc:cb:ba:7f:48:ad:0a: 9b:3a:5c:51:44:8a:94:8d:97:7c:2b:72:33:a2:9a: 2d:54:6e:e7:cb:4b:09:66:63:c1:d2:39:2b:d1:67: 7e:fb:ee:76:68:22:3b:6d:38:b3:c2:db:29:30:10: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:64:BB:06:68:A5:9A:5C:1B:87:43:B7:06:FE:34:67:1F:1F:E7:9A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/363b7fd5-bc16-4c3e-a390-ff62d952ac87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.24.0/23 Signature Algorithm: sha256WithRSAEncryption 20:be:25:2b:08:ed:4a:63:9c:e6:64:12:95:f5:e1:ff:d5:bb: 7f:c4:2f:2e:9b:7c:ab:bf:c3:93:2e:7f:69:a5:de:a6:69:9b: 5e:7e:56:b5:32:8d:d3:b8:0b:6b:5e:ed:a4:68:f5:d7:95:78: 88:50:6a:ce:8f:c8:74:72:a4:77:16:0a:24:35:b3:eb:d3:f8: 48:27:ef:87:cf:15:9c:39:61:9e:67:6d:90:5b:8f:e4:aa:0f: 14:39:bf:85:c8:ca:20:d1:f7:0b:87:66:98:27:40:e6:a4:b1: 3a:36:eb:8b:21:49:02:91:4e:83:9b:1a:24:f8:f9:c9:ea:e1: cf:cd:c8:7f:8a:ec:36:4d:9c:a6:2f:03:6b:df:54:7f:f7:f2: f0:5c:c5:4f:ac:fd:bf:43:ea:10:3d:f3:d9:a3:01:9a:64:69: be:04:6f:35:88:5d:ec:06:d2:bf:34:22:eb:da:1f:4d:22:7e: d9:98:dc:99:58:8f:3f:f1:1e:88:b0:7f:1c:8e:75:98:ec:2c: 0f:30:50:0c:d8:20:cd:72:1a:85:b1:62:81:e1:aa:c4:aa:4a: 45:f8:d7:d5:3a:da:00:80:df:bc:07:eb:e2:3d:a9:27:cf:25: 9b:29:1a:22:51:54:ab:a4:35:d2:4e:5f:ad:60:a9:c1:72:d2: 29:df:69:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZj1ujaVFhB5VbdeEobS+bHQjS5swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjUzMDdjYzAwZWQxNzdmZjNiYTQ1MWI1MmVhODNlOWM3 NDhhNGMzNjAzN2FlZDUzNjhkMTMwZmYxYThiMDU4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4O3GtfltHMknh4nNVkoiGMBKP0TGdPDId/aniu0SSWIJL Z3X7HakAXES/GEoBTWFXE1cXtWIicLAB3mZNJYdCrThN7e0zZqcou4LLCTDD9oKU R9/RTFsi9VOFFrdcZFZNtto+eWFqr6JgC7QdF619JISknGMA92FTJRLGQ0sU9+pP J7XMNA5jEj2o4nlQQOQj46rZ+VMB+UfgYvoykROHt3xEEATelG9f7te6JudAA6u8 zdJHK1kmlC7yierKScvordyESI+IZmDO3Mu6f0itCps6XFFEipSNl3wrcjOimi1U bufLSwlmY8HSOSvRZ3777nZoIjttOLPC2ykwENpHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnmS7Bmilmlwbh0O3Bv40Zx8f55owHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM2M2I3ZmQ1LWJjMTYtNGMzZS1hMzkwLWZmNjJkOTUyYWM4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBgwDQYJKoZIhvcNAQELBQADggEBACC+JSsI7UpjnOZkEpX14f/Vu3/E Ly6bfKu/w5Muf2ml3qZpm15+VrUyjdO4C2te7aRo9deVeIhQas6PyHRypHcWCiQ1 s+vT+Egn74fPFZw5YZ5nbZBbj+SqDxQ5v4XIyiDR9wuHZpgnQOaksTo264shSQKR ToObGiT4+cnq4c/NyH+K7DZNnKYvA2vfVH/38vBcxU+s/b9D6hA989mjAZpkab4E bzWIXewG0r80IuvaH00iftmY3JlYjz/xHoiwfxyOdZjsLA8wUAzYIM1yGoWxYoHh qsSqSkX419U62gCA37wH6+I9qSfPJZspGiJRVKukNdJOX61gqcFy0infaUo= -----END CERTIFICATE-----Generated at Wed Nov 5 18:37:37 2025 by rpki-client