$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/44f47a87-fa5e-4db0-bb12-60c873b8710c.roa File: 44f47a87-fa5e-4db0-bb12-60c873b8710c.roa (raw, json) Hash identifier: SZJwIB5M1ukFWQgCst/N1c8b7kTICTkdbT1CaLUt8uo= Subject key identifier: 06:3B:79:53:2D:CA:F5:17:A3:C1:FB:53:12:77:F6:A4:79:76:1C:23 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6E74020EA9E6976A587C6F64F0EB7EAC1FADA7C5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/44f47a87-fa5e-4db0-bb12-60c873b8710c.roa Signing time: Tue 04 Nov 2025 00:30:12 +0000 ROA not before: Tue 04 Nov 2025 00:30:12 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:74:02:0e:a9:e6:97:6a:58:7c:6f:64:f0:eb:7e:ac:1f:ad:a7:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 4 00:30:12 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=01559b718a636ad649862093dd9a935441f86558ab10636a881ffc3988a2afe6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:38:72:a2:5d:20:a7:73:ab:5b:13:71:26:68: 89:5a:b5:7c:7d:8d:4a:0d:97:36:f5:3f:58:72:d3: 69:ce:ae:e4:b1:5d:18:47:23:97:17:7e:e6:b4:cb: 32:97:b4:43:96:8b:a2:0c:0e:dc:52:a0:a3:9b:52: e0:78:5f:1e:3d:d6:48:b4:d1:5c:01:c3:ed:1b:82: f4:0b:14:26:9a:c3:55:b3:a8:4d:7d:ab:85:8e:81: a4:42:ba:27:ea:f4:37:12:ad:91:0f:a6:b1:78:f8: cd:4f:f6:ab:47:f8:0b:26:a1:75:5b:ed:25:23:45: 84:81:0d:3b:33:13:db:c4:51:dc:ca:ac:fd:8d:6d: 4c:6e:60:e7:a0:da:cd:7c:10:a1:ae:ef:8c:7a:53: 10:6e:6d:c9:35:53:eb:a4:c4:93:cc:06:37:85:57: c5:19:13:0f:c1:b1:86:e4:a6:a4:be:8f:75:72:31: 99:51:7f:2f:4c:52:1d:11:68:a8:65:96:5f:cd:4e: e5:f8:2d:34:85:0f:49:d9:d4:bb:ee:87:9e:e6:72: 3f:ba:0a:a6:e4:86:cd:eb:16:32:e7:05:84:91:56: ae:a3:e2:ec:25:c6:b6:cd:0c:53:e4:4e:1f:c2:09: 06:9c:32:4a:bb:22:11:1f:50:5c:a8:c0:c4:3d:1d: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3B:79:53:2D:CA:F5:17:A3:C1:FB:53:12:77:F6:A4:79:76:1C:23 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/44f47a87-fa5e-4db0-bb12-60c873b8710c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/24 Signature Algorithm: sha256WithRSAEncryption 10:5d:ca:7e:8a:e3:96:e6:ec:3b:e5:ab:fc:7e:20:bb:ff:67: 21:6b:f1:64:58:4c:b7:d8:cd:7c:0a:ee:ef:40:b6:d8:ad:3a: eb:5b:c5:a5:23:bd:e1:56:a7:ec:80:da:42:09:1f:14:1b:3a: 6e:d7:27:de:c5:95:16:9e:9e:c0:35:fd:7f:7e:7c:4c:79:98: c3:61:0e:6a:0c:90:49:2c:a5:6c:62:62:0c:b4:7a:18:4a:1c: d9:aa:81:34:79:0f:c0:77:9f:5e:dd:e4:15:e0:66:f6:fc:8f: b3:e4:5a:07:ce:e1:90:62:92:16:4d:a7:51:f1:e0:9a:03:fb: ed:f3:3d:40:bd:2a:21:aa:6f:1c:34:47:61:72:0c:16:95:59: c4:d6:fb:ad:0b:89:fa:c3:3d:31:14:52:18:7b:d5:fc:6d:f5: c4:c6:31:84:e5:03:06:50:ba:37:32:f5:f5:66:1f:66:e4:ee: 70:7f:7a:dd:50:6b:72:a2:6d:4c:ef:2b:31:ca:86:83:db:45: 11:11:94:01:fa:2b:25:78:b0:eb:3a:0c:04:46:85:5b:be:36: 16:9d:8c:44:23:9f:87:cd:31:bb:c8:3a:c6:d1:10:70:85:b0: 99:16:d2:a4:77:64:f1:e4:1a:ff:1f:fa:04:d1:3d:a8:05:78: 33:71:a0:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbnQCDqnml2pYfG9k8Ot+rB+tp8UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTA0MDAzMDEyWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTU1OWI3MThhNjM2YWQ2NDk4NjIwOTNkZDlhOTM1NDQx Zjg2NTU4YWIxMDYzNmE4ODFmZmMzOTg4YTJhZmU2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwOHKiXSCnc6tbE3EmaIlatXx9jUoNlzb1P1hy02nOruSx XRhHI5cXfua0yzKXtEOWi6IMDtxSoKObUuB4Xx491ki00VwBw+0bgvQLFCaaw1Wz qE19q4WOgaRCuifq9DcSrZEPprF4+M1P9qtH+AsmoXVb7SUjRYSBDTszE9vEUdzK rP2NbUxuYOeg2s18EKGu74x6UxBubck1U+ukxJPMBjeFV8UZEw/BsYbkpqS+j3Vy MZlRfy9MUh0RaKhlll/NTuX4LTSFD0nZ1Lvuh57mcj+6Cqbkhs3rFjLnBYSRVq6j 4uwlxrbNDFPkTh/CCQacMkq7IhEfUFyowMQ9HanfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBjt5Uy3K9RejwftTEnf2pHl2HCMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzQ0ZjQ3YTg3LWZhNWUtNGRiMC1iYjEyLTYwYzg3M2I4NzEwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCAwDQYJKoZIhvcNAQELBQADggEBABBdyn6K45bm7Dvlq/x+ILv/ZyFr 8WRYTLfYzXwK7u9AttitOutbxaUjveFWp+yA2kIJHxQbOm7XJ97FlRaensA1/X9+ fEx5mMNhDmoMkEkspWxiYgy0ehhKHNmqgTR5D8B3n17d5BXgZvb8j7PkWgfO4ZBi khZNp1Hx4JoD++3zPUC9KiGqbxw0R2FyDBaVWcTW+60LifrDPTEUUhh71fxt9cTG MYTlAwZQujcy9fVmH2bk7nB/et1Qa3KibUzvKzHKhoPbRRERlAH6KyV4sOs6DARG hVu+NhadjEQjn4fNMbvIOsbREHCFsJkW0qR3ZPHkGv8f+gTRPagFeDNxoGY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:31 2025 by rpki-client