$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa File: 38682ae8-11e8-4bbd-9b5b-0703a469a802.roa (raw, json) Hash identifier: JvupDewgEC8xunnfV1f2pGl+FlISiS02MKnBubM6ac4= Subject key identifier: 12:E3:D3:9B:3B:3D:EE:C9:8A:51:A3:E8:CB:D0:80:C1:E9:65:85:BF Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1A04F8EA0CE54C877EA16542885787293C5574BD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa Signing time: Tue 21 Oct 2025 12:20:04 +0000 ROA not before: Tue 21 Oct 2025 12:20:04 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:04:f8:ea:0c:e5:4c:87:7e:a1:65:42:88:57:87:29:3c:55:74:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 21 12:20:04 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=6457970143aadb8f0ddfd229602a79106b7e2573734a6da0f5397f4478788532, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a6:b8:47:93:da:da:cd:8e:16:aa:67:70:bd: 33:42:62:2c:40:a1:f6:b9:3a:fb:88:ac:a5:23:9d: 25:83:b4:58:7e:aa:dd:33:ea:09:03:36:a5:c1:a2: 4d:f7:91:e0:40:b0:25:c4:8d:ac:b0:dc:ce:22:55: 08:b4:7c:89:d1:01:66:79:75:02:60:b2:44:ba:e8: f8:ca:d3:8f:3c:ff:cb:97:23:c7:e3:20:d7:ae:65: 1b:cd:45:ee:39:e3:ab:ce:38:b4:c8:84:a4:1a:b8: a8:0c:71:68:60:51:89:12:68:94:a2:46:2a:db:a0: 76:e1:4d:bb:9c:af:16:d4:bb:6e:a8:96:58:3b:74: 55:d7:a7:e3:c7:03:46:f6:93:1a:58:15:0d:30:d0: 99:0b:d5:d1:4f:a7:fc:64:ee:07:6b:14:49:56:34: 24:04:02:00:46:43:b1:68:bf:9a:ca:3d:8a:07:f1: 64:15:37:20:a7:24:6f:80:75:15:3b:d3:7c:4e:72: 10:d1:e3:cd:43:86:06:70:03:2a:3c:f4:db:7e:ce: d7:d1:be:8d:35:9c:fe:90:61:b1:65:92:67:eb:15: 63:d2:c8:e2:c3:91:85:2d:3e:dd:3a:ed:63:72:23: 7c:59:b5:ac:f9:bc:16:9f:75:ee:8c:e3:b7:a8:09: 44:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E3:D3:9B:3B:3D:EE:C9:8A:51:A3:E8:CB:D0:80:C1:E9:65:85:BF X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/38682ae8-11e8-4bbd-9b5b-0703a469a802.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:7b:8d:98:36:05:22:c6:12:2d:24:64:de:94:bf:d7:cb:e7: 54:a3:0d:bd:64:85:50:5e:0e:e3:d5:91:3a:47:fa:ad:86:d2: f0:7b:28:16:02:29:b0:c5:95:b4:f6:fd:fe:1b:8c:42:8e:4e: 94:aa:70:9c:18:37:73:52:d3:7f:89:b8:ed:84:31:93:d4:8c: c7:44:e4:ca:c1:fa:1e:28:53:05:56:34:e7:2b:ff:a0:f3:2b: ae:01:06:c1:b9:81:b9:90:0b:94:20:c8:f6:e4:f9:10:b7:b1: ac:be:95:15:89:14:7a:49:f4:68:4e:fe:94:84:4e:80:5c:0d: 82:1d:fe:e0:8d:1f:86:b1:cd:3a:0d:9d:26:0f:3e:24:99:84: 25:65:6d:cf:2a:79:0a:c5:ec:1d:f7:33:40:2d:c9:23:5e:75: 01:85:b1:42:c0:0b:04:c2:69:1b:0d:9c:c9:f8:0c:e6:db:b2: 2f:bb:c0:b4:b5:90:82:db:bf:a4:91:90:92:26:e5:86:d3:a8: 9b:54:00:50:92:8b:c3:93:7f:05:ed:1c:64:1e:30:13:53:75: 80:54:8e:b4:a1:08:74:4c:c8:30:13:55:c1:49:d8:dc:c9:45: 30:e6:3e:84:b1:1a:7e:0d:6c:24:56:f3:0d:36:63:24:a0:15: c2:6e:94:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGgT46gzlTId+oWVCiFeHKTxVdL0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDIxMTIyMDA0WhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDU3OTcwMTQzYWFkYjhmMGRkZmQyMjk2MDJhNzkxMDZi N2UyNTczNzM0YTZkYTBmNTM5N2Y0NDc4Nzg4NTMyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdprhHk9razY4WqmdwvTNCYixAofa5OvuIrKUjnSWDtFh+ qt0z6gkDNqXBok33keBAsCXEjayw3M4iVQi0fInRAWZ5dQJgskS66PjK0488/8uX I8fjINeuZRvNRe4546vOOLTIhKQauKgMcWhgUYkSaJSiRirboHbhTbucrxbUu26o llg7dFXXp+PHA0b2kxpYFQ0w0JkL1dFPp/xk7gdrFElWNCQEAgBGQ7Fov5rKPYoH 8WQVNyCnJG+AdRU703xOchDR481DhgZwAyo89Nt+ztfRvo01nP6QYbFlkmfrFWPS yOLDkYUtPt067WNyI3xZtaz5vBafde6M47eoCUQdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEuPTmzs97smKUaPoy9CAwellhb8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM4NjgyYWU4LTExZTgtNGJiZC05YjViLTA3MDNhNDY5YTgwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC4wDQYJKoZIhvcNAQELBQADggEBAH57jZg2BSLGEi0kZN6Uv9fL51Sj Db1khVBeDuPVkTpH+q2G0vB7KBYCKbDFlbT2/f4bjEKOTpSqcJwYN3NS03+JuO2E MZPUjMdE5MrB+h4oUwVWNOcr/6DzK64BBsG5gbmQC5QgyPbk+RC3say+lRWJFHpJ 9GhO/pSEToBcDYId/uCNH4axzToNnSYPPiSZhCVlbc8qeQrF7B33M0AtySNedQGF sULACwTCaRsNnMn4DObbsi+7wLS1kILbv6SRkJIm5YbTqJtUAFCSi8OTfwXtHGQe MBNTdYBUjrShCHRMyDATVcFJ2NzJRTDmPoSxGn4NbCRW8w02YySgFcJulC8= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:19 2025 by rpki-client