$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa File: 724c8337-ea3c-48d0-aa37-5e55be799b4e.roa (raw, json) Hash identifier: uxDwOXdchVKDX4eTvzkwX1VdPQQ/FLWVUFyFedLmeWs= Subject key identifier: B3:9D:FF:F2:25:D7:93:A5:87:D6:6A:11:3F:AD:87:0C:A7:C9:08:96 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4D826DFE244C9EDFBF1224201733A92FA72486E2 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa Signing time: Fri 31 Oct 2025 01:40:12 +0000 ROA not before: Fri 31 Oct 2025 01:40:12 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:82:6d:fe:24:4c:9e:df:bf:12:24:20:17:33:a9:2f:a7:24:86:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:12 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=352abdfb59a2d3136af3032ccfa3c27674b6fe240ad8303a1fa83650f2ad14ed, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:51:c8:db:1d:22:2c:e1:c1:de:0d:52:30:4e: 5a:ab:b9:09:93:4b:7e:d4:67:2f:b6:65:a5:49:ea: 81:a4:6b:a1:0b:4f:fb:5e:05:6c:66:fc:96:3a:48: 1f:1c:de:df:20:96:2a:63:a4:83:82:30:3a:af:69: d6:6b:35:40:b4:d4:ea:b7:cb:23:f2:77:82:de:e4: 50:a7:b4:6e:77:8f:4d:9f:ee:af:f7:89:a3:c0:a6: b6:3b:75:53:d4:6c:f2:4a:03:3e:f6:7a:6b:d8:99: 11:55:ee:ed:68:b3:6f:5f:81:ee:0d:9c:c2:a2:ee: 25:dc:23:32:fd:7f:a1:44:82:43:55:a9:e1:79:97: 9a:bb:19:f4:5a:ba:73:49:5c:06:3a:cb:1c:6d:f7: d9:fe:57:e0:b2:7f:97:e3:f7:12:16:c7:8c:21:2c: 31:63:87:3f:1a:28:71:b0:01:8c:a4:e3:76:b3:ee: 80:4e:2b:4b:e6:c5:01:44:90:2e:0e:52:b1:dc:ed: 24:c3:ae:35:a7:ea:17:4b:f4:5a:74:9d:05:0c:3c: 2f:9e:8c:93:5e:bb:1d:85:3c:cd:c5:c4:9d:42:f2: 8e:95:b9:4c:eb:0e:dd:be:74:47:2a:be:b3:6a:15: ac:47:18:a6:f1:e7:ad:dd:59:0c:d9:8a:50:03:28: b6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9D:FF:F2:25:D7:93:A5:87:D6:6A:11:3F:AD:87:0C:A7:C9:08:96 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 41:a2:65:82:67:0a:fa:66:5e:4b:e8:0b:c3:91:49:a3:a5:59: 74:e6:73:d4:67:75:8f:13:a8:a5:de:4f:1d:fc:1c:9e:8b:ba: b8:79:fb:b1:11:93:ba:c6:08:3b:cf:f0:4a:07:2c:24:49:49: 0c:6d:5e:b4:b6:ba:c6:4c:f3:25:15:49:09:1d:3d:78:95:a4: cc:9d:95:97:73:5e:6f:ef:8b:1a:d2:e7:fa:c0:89:27:11:a0: 66:fb:b7:a2:b6:17:11:54:07:0c:3a:21:d4:e4:73:12:82:d2: 1a:7c:25:81:f8:a4:fa:eb:f5:b9:13:77:aa:9f:11:24:b6:fd: 12:78:58:47:49:25:78:e7:bd:4e:40:09:61:74:e3:6f:79:29: e0:e7:e4:69:11:31:ce:11:a0:df:fa:d7:c8:3a:9a:2e:4f:65: 8f:3a:91:94:ca:de:d0:96:46:9d:32:3e:f5:da:86:ec:fc:cb: 2c:2f:aa:74:c4:2e:60:6e:68:e0:ac:67:76:eb:94:ac:06:4e: f8:3a:b8:33:12:0e:d6:46:d3:44:f8:b2:8f:72:95:84:18:fe: b2:81:4a:f7:d3:f6:e5:88:d3:7e:e8:2e:43:46:13:02:69:8b: fa:4a:6e:88:27:46:6c:72:52:45:18:6c:b3:dd:7c:ac:d5:9c: 63:a9:92:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTYJt/iRMnt+/EiQgFzOpL6ckhuIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDEyWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTJhYmRmYjU5YTJkMzEzNmFmMzAzMmNjZmEzYzI3Njc0 YjZmZTI0MGFkODMwM2ExZmE4MzY1MGYyYWQxNGVkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRUcjbHSIs4cHeDVIwTlqruQmTS37UZy+2ZaVJ6oGka6EL T/teBWxm/JY6SB8c3t8glipjpIOCMDqvadZrNUC01Oq3yyPyd4Le5FCntG53j02f 7q/3iaPAprY7dVPUbPJKAz72emvYmRFV7u1os29fge4NnMKi7iXcIzL9f6FEgkNV qeF5l5q7GfRaunNJXAY6yxxt99n+V+Cyf5fj9xIWx4whLDFjhz8aKHGwAYyk43az 7oBOK0vmxQFEkC4OUrHc7STDrjWn6hdL9Fp0nQUMPC+ejJNeux2FPM3FxJ1C8o6V uUzrDt2+dEcqvrNqFaxHGKbx563dWQzZilADKLYlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs53/8iXXk6WH1moRP62HDKfJCJYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcyNGM4MzM3LWVhM2MtNDhkMC1hYTM3LTVlNTViZTc5OWI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBAEGiZYJnCvpmXkvoC8ORSaOlWXTm c9RndY8TqKXeTx38HJ6Lurh5+7ERk7rGCDvP8EoHLCRJSQxtXrS2usZM8yUVSQkd PXiVpMydlZdzXm/vixrS5/rAiScRoGb7t6K2FxFUBww6IdTkcxKC0hp8JYH4pPrr 9bkTd6qfESS2/RJ4WEdJJXjnvU5ACWF04295KeDn5GkRMc4RoN/618g6mi5PZY86 kZTK3tCWRp0yPvXahuz8yywvqnTELmBuaOCsZ3brlKwGTvg6uDMSDtZG00T4so9y lYQY/rKBSvfT9uWI037oLkNGEwJpi/pKbognRmxyUkUYbLPdfKzVnGOpklo= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:16 2025 by rpki-client