$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa File: 7410036b-a503-456e-a06c-b7b863590354.roa (raw, json) Hash identifier: TAe4ySuxtih522k+kwy2DH+U36MEelZ/LKWbnhL+4+U= Subject key identifier: 0A:02:02:51:5D:8E:C8:32:38:8D:79:35:A6:DB:34:B3:C5:4D:A0:5B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7264C87133EC6656B486A1D7606C68524249C649 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa Signing time: Mon 13 Oct 2025 17:55:05 +0000 ROA not before: Mon 13 Oct 2025 17:55:05 +0000 ROA not after: Mon 17 Nov 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:64:c8:71:33:ec:66:56:b4:86:a1:d7:60:6c:68:52:42:49:c6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 13 17:55:05 2025 GMT Not After : Nov 17 23:59:59 2025 GMT Subject: serialNumber=6c44c6a07ec610c3624db08a197cce636c1017b084d13baf7b028fe7f7b54e1d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:7b:ea:7d:62:c3:4a:9d:ee:a1:1f:e4:8a: 8e:e1:79:46:ae:ee:81:de:cb:01:0c:5d:d1:e9:c2: 82:b6:98:8c:e6:03:3b:1f:29:2d:b5:a3:f5:97:9e: 83:09:c8:a4:cd:73:c4:78:82:e2:5a:41:39:06:7f: 6c:ea:a1:69:db:21:2d:5f:44:b8:c4:0a:29:45:48: 3c:62:32:d3:a4:ec:33:1b:3f:45:b0:25:21:33:d2: cb:25:ea:cc:49:80:07:f4:ad:07:b6:4b:ea:2f:9a: f9:65:41:57:50:48:21:3e:08:db:b1:51:e5:b1:0f: 8d:e1:0d:2b:83:57:4c:22:ce:0e:ce:ab:23:dc:27: 5a:9c:41:ed:c6:92:36:39:6c:60:be:78:79:0d:d0: 8a:ca:1e:f6:8a:62:5c:0b:3b:d3:98:0a:68:99:03: 4d:93:ba:79:98:86:66:d5:91:0c:eb:14:e7:dd:64: 74:30:34:c7:65:c3:b9:82:81:3f:c1:3a:25:17:c5: 52:31:cc:07:af:8e:25:6f:a0:06:cc:23:d5:2e:c7: cd:37:6d:67:c1:9a:52:d4:a9:91:84:df:8c:04:7a: e7:cc:4d:d3:75:8a:6b:0e:5a:c6:75:43:b8:1d:70: 35:7f:ae:d8:07:f4:44:51:19:76:94:83:d7:43:99: 53:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:02:02:51:5D:8E:C8:32:38:8D:79:35:A6:DB:34:B3:C5:4D:A0:5B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7410036b-a503-456e-a06c-b7b863590354.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.50.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:31:5f:95:78:d5:18:08:fb:60:ce:a0:77:0e:41:f7:fa:e5: 46:b1:b2:87:ae:a8:32:47:1a:98:2f:48:57:f6:d4:9f:1d:c1: 22:c2:4c:c2:9c:be:21:7b:50:4a:30:30:d8:eb:8c:0f:5c:7b: 26:ef:c2:98:58:69:0c:d7:a9:c4:35:a2:50:f6:df:21:ca:18: 2e:c5:c2:1f:18:fe:51:0f:60:0a:00:88:d1:9c:6a:e5:f8:ec: ad:c4:f1:23:d7:61:b6:3c:d8:70:ae:fe:46:70:1b:d9:79:bf: 5a:6b:78:69:0e:8f:c4:14:00:cb:10:fc:3d:fc:4b:87:80:a9: 34:4f:0e:ff:0c:e8:04:17:05:97:cc:dd:a1:3e:8c:7e:20:f6: 92:fb:a4:88:04:99:b7:1c:c1:80:f9:c2:8a:95:fd:44:8e:6d: c8:fc:8c:bb:59:5c:0b:41:1f:42:9f:9c:96:bb:1d:8d:11:bc: d4:91:05:c9:a3:42:44:6b:6c:26:b9:67:8e:15:71:91:91:4d: b6:6b:d6:2e:6f:a2:8d:cb:22:b4:08:03:58:85:a8:de:35:c9: 49:8b:68:b5:dc:32:54:41:cb:df:88:e3:f4:75:2f:ab:bd:52: 96:c4:ab:f9:8a:f2:c3:ed:fc:e6:b7:24:15:27:e2:36:0b:fd: c8:6f:ae:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcmTIcTPsZla0hqHXYGxoUkJJxkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDEzMTc1NTA1WhcNMjUxMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzQ0YzZhMDdlYzYxMGMzNjI0ZGIwOGExOTdjY2U2MzZj MTAxN2IwODRkMTNiYWY3YjAyOGZlN2Y3YjU0ZTFkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCaXvqfWLDSp3uoR/kio7heUau7oHeywEMXdHpwoK2mIzm AzsfKS21o/WXnoMJyKTNc8R4guJaQTkGf2zqoWnbIS1fRLjECilFSDxiMtOk7DMb P0WwJSEz0ssl6sxJgAf0rQe2S+ovmvllQVdQSCE+CNuxUeWxD43hDSuDV0wizg7O qyPcJ1qcQe3GkjY5bGC+eHkN0IrKHvaKYlwLO9OYCmiZA02TunmYhmbVkQzrFOfd ZHQwNMdlw7mCgT/BOiUXxVIxzAevjiVvoAbMI9Uux803bWfBmlLUqZGE34wEeufM TdN1imsOWsZ1Q7gdcDV/rtgH9ERRGXaUg9dDmVPLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCgICUV2OyDI4jXk1pts0s8VNoFswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzc0MTAwMzZiLWE1MDMtNDU2ZS1hMDZjLWI3Yjg2MzU5MDM1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDIwDQYJKoZIhvcNAQELBQADggEBAG0xX5V41RgI+2DOoHcOQff65Uax soeuqDJHGpgvSFf21J8dwSLCTMKcviF7UEowMNjrjA9ceybvwphYaQzXqcQ1olD2 3yHKGC7Fwh8Y/lEPYAoAiNGcauX47K3E8SPXYbY82HCu/kZwG9l5v1preGkOj8QU AMsQ/D38S4eAqTRPDv8M6AQXBZfM3aE+jH4g9pL7pIgEmbccwYD5woqV/USObcj8 jLtZXAtBH0KfnJa7HY0RvNSRBcmjQkRrbCa5Z44VcZGRTbZr1i5voo3LIrQIA1iF qN41yUmLaLXcMlRBy9+I4/R1L6u9UpbEq/mK8sPt/Oa3JBUn4jYL/chvro4= -----END CERTIFICATE-----Generated at Wed Nov 5 21:04:27 2025 by rpki-client