$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa File: 5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa (raw, json) Hash identifier: gKHZFp3hMPU/NMmkG2G5B3CtU6N4s0a9bbnkcAp/thw= Subject key identifier: 7E:FE:51:CF:CF:F6:53:46:C3:2B:65:30:A2:64:1B:A1:04:4C:B6:97 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 161F47683030BBB626620B894433FD5B53C0B940 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa Signing time: Tue 21 Oct 2025 12:20:01 +0000 ROA not before: Tue 21 Oct 2025 12:20:01 +0000 ROA not after: Tue 25 Nov 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:1f:47:68:30:30:bb:b6:26:62:0b:89:44:33:fd:5b:53:c0:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 21 12:20:01 2025 GMT Not After : Nov 25 23:59:59 2025 GMT Subject: serialNumber=eea74212e21e9f028f7f826279e1824c7630a4a9d96646506de40626905e63b3, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:00:84:9d:79:da:80:7a:30:45:9c:e7:a5:d1: 8e:4f:35:95:a3:b3:0a:a1:58:eb:a2:ea:0e:56:bd: 59:1e:77:81:1f:08:d9:81:fa:48:15:5b:b6:96:eb: ad:a2:1a:ac:b6:1a:ca:39:3a:25:95:83:64:03:67: 5b:f7:3d:ba:f5:27:cf:73:2b:c7:fd:c0:57:6b:58: 14:30:15:df:81:01:ac:65:d2:06:db:39:c4:79:e3: 24:b7:18:4a:48:ec:7d:2a:94:be:3a:96:66:4b:fb: 5d:53:5a:02:a9:31:2a:3f:03:de:c5:a2:29:47:d6: a9:15:a5:83:3e:dc:ad:f3:99:75:67:c7:5a:61:b2: 38:d3:34:ed:0d:b5:9b:26:e6:39:3b:da:bb:d1:33: 52:6b:4e:d5:5d:a6:24:ba:24:b4:06:b0:f4:54:bc: 7a:ab:00:fd:db:5b:21:30:75:9a:6a:93:a2:fd:c2: 10:e4:3e:2b:33:ce:d6:c6:8f:d0:cf:62:f5:7c:7d: 15:e0:d9:2e:e4:17:05:7c:9b:f9:a0:ac:86:b4:71: a5:a9:a0:ce:73:25:43:ea:7f:f1:73:cd:b0:ba:ee: 67:65:2b:27:f9:46:77:f8:75:e6:72:86:f3:cd:8e: 91:d8:16:03:00:da:81:68:12:50:ef:a9:35:6d:f3: 8b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FE:51:CF:CF:F6:53:46:C3:2B:65:30:A2:64:1B:A1:04:4C:B6:97 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.2.0/24 Signature Algorithm: sha256WithRSAEncryption 28:65:ab:7e:dd:a6:57:55:95:77:65:f5:49:64:ef:d5:8a:0f: 8a:42:59:e5:3c:dc:7b:24:e5:6c:2f:a1:ef:53:ca:19:3f:3b: 8f:3c:e5:35:81:f7:b5:21:8e:12:cb:3a:9d:7b:3d:39:0c:5a: 69:b8:60:d5:19:6e:15:6c:e5:11:61:e7:dc:b3:e1:a9:3e:26: 50:e4:2c:1b:b3:00:cb:0a:80:29:b5:8d:17:8d:d6:6f:3b:73: 80:11:b8:b8:51:cf:24:7d:29:40:1d:68:83:7f:b1:87:c6:02: 18:07:dc:4c:42:bb:38:58:4b:94:b0:7e:b1:b1:64:1c:2a:2a: 3a:a7:e3:54:39:b9:ee:97:a0:73:c3:c9:90:37:9a:4a:5d:46: 57:0e:48:fe:11:a5:8b:f0:96:0f:e9:a7:21:33:70:99:0f:c6: 4c:bf:92:69:f5:f8:cd:e6:7e:af:06:df:63:88:41:1b:8b:ca: 21:7d:dc:e4:a7:9f:1b:26:c2:fe:4b:1d:24:5c:24:41:2e:bd: 8b:44:f8:be:37:fc:a4:6f:50:64:3f:e1:24:b2:96:0f:fc:05: 59:1a:00:61:3d:96:7c:0e:26:8f:a8:d5:f5:db:eb:e8:0c:bf: b0:70:58:9f:84:99:bc:44:85:5c:49:26:61:c8:63:21:a2:4d: 74:bc:3d:60 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFh9HaDAwu7YmYguJRDP9W1PAuUAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDIxMTIyMDAxWhcNMjUxMTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZWE3NDIxMmUyMWU5ZjAyOGY3ZjgyNjI3OWUxODI0Yzc2 MzBhNGE5ZDk2NjQ2NTA2ZGU0MDYyNjkwNWU2M2IzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuAISdedqAejBFnOel0Y5PNZWjswqhWOui6g5WvVked4Ef CNmB+kgVW7aW662iGqy2Gso5OiWVg2QDZ1v3Pbr1J89zK8f9wFdrWBQwFd+BAaxl 0gbbOcR54yS3GEpI7H0qlL46lmZL+11TWgKpMSo/A97FoilH1qkVpYM+3K3zmXVn x1phsjjTNO0NtZsm5jk72rvRM1JrTtVdpiS6JLQGsPRUvHqrAP3bWyEwdZpqk6L9 whDkPiszztbGj9DPYvV8fRXg2S7kFwV8m/mgrIa0caWpoM5zJUPqf/FzzbC67mdl Kyf5Rnf4deZyhvPNjpHYFgMA2oFoElDvqTVt84unAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfv5Rz8/2U0bDK2UwomQboQRMtpcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVmZmFlYjZmLTIwNTYtNDJhZS1iMGRlLWQxZmZmMDUzYTY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAIwDQYJKoZIhvcNAQELBQADggEBAChlq37dpldVlXdl9Ulk79WKD4pC WeU83Hsk5Wwvoe9Tyhk/O4885TWB97UhjhLLOp17PTkMWmm4YNUZbhVs5RFh59yz 4ak+JlDkLBuzAMsKgCm1jReN1m87c4ARuLhRzyR9KUAdaIN/sYfGAhgH3ExCuzhY S5SwfrGxZBwqKjqn41Q5ue6XoHPDyZA3mkpdRlcOSP4RpYvwlg/ppyEzcJkPxky/ kmn1+M3mfq8G32OIQRuLyiF93OSnnxsmwv5LHSRcJEEuvYtE+L43/KRvUGQ/4SSy lg/8BVkaAGE9lnwOJo+o1fXb6+gMv7BwWJ+EmbxEhVxJJmHIYyGiTXS8PWA= -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:36 2025 by rpki-client