$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa File: 816351d7-264c-4dde-b647-b477b194cfb6.roa (raw, json) Hash identifier: ICWRqYAjxs/ZSMEcURJQ5XKZlXvPr51EWnJ/VW0MUK8= Subject key identifier: 0A:01:E7:B2:80:96:08:F8:34:62:53:AD:8A:BD:48:66:5C:F2:2B:69 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 37A26DDC1E45AD53E515F089677246BF717B4B59 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa Signing time: Mon 27 Oct 2025 15:06:50 +0000 ROA not before: Mon 27 Oct 2025 15:06:50 +0000 ROA not after: Mon 01 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a2:6d:dc:1e:45:ad:53:e5:15:f0:89:67:72:46:bf:71:7b:4b:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 27 15:06:50 2025 GMT Not After : Dec 1 23:59:59 2025 GMT Subject: serialNumber=841a5b5426b3b4289d3b980379a757d6880b36c3290407ace2cf457eec2f5f38, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:19:65:31:3e:e4:22:de:ca:1c:68:fe:82:e8: 38:82:25:d6:b2:ca:7a:03:1d:c5:0a:4d:2d:99:d3: ea:64:3b:d3:d7:14:bb:93:62:b2:b4:99:bd:d8:e3: 9d:16:99:54:27:28:f8:ff:94:12:16:12:00:c2:d7: 77:35:e9:4d:1c:62:6d:b0:a7:6b:01:00:49:a9:0a: f6:af:ac:e0:79:26:bf:a3:55:c7:4a:f8:ab:ac:13: 9c:7e:37:3e:1b:c3:8f:b2:d2:95:e8:cd:c6:8d:89: f8:5d:f5:d6:f5:d1:78:e8:15:1c:ec:ba:d2:1f:cd: 44:74:19:70:6f:39:0d:61:10:ef:a7:8e:16:0e:17: ae:1a:59:ee:c7:a0:89:2a:27:bd:43:bc:47:7d:8b: fb:ad:aa:7b:48:5e:b1:b1:e0:b0:4c:1d:8d:25:6e: a5:94:74:02:b7:0c:14:00:4d:c3:43:64:c7:d4:f6: 73:9a:55:60:1e:8f:6d:d2:a2:36:8d:99:9c:94:4f: d9:74:d2:74:e1:67:fd:ac:3b:5a:4a:55:26:25:07: a1:1a:ff:d2:21:d5:3e:5e:d1:a1:f7:64:87:35:d4: ba:0a:1d:5e:99:57:a0:ca:15:25:30:67:7e:3f:69: 3d:ce:0d:db:83:a9:36:e4:2e:59:79:1b:d6:c3:81: f7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:01:E7:B2:80:96:08:F8:34:62:53:AD:8A:BD:48:66:5C:F2:2B:69 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/12 Signature Algorithm: sha256WithRSAEncryption 9e:53:6c:06:58:dd:36:92:e2:44:76:8b:21:a6:a6:98:6e:0d: 1f:d0:58:f7:05:a0:16:50:a8:b5:f4:7f:ff:d3:c3:0c:86:06: 59:74:16:1b:4f:13:a1:7a:c2:6b:b4:12:9d:1d:20:b1:52:9e: 98:7e:62:6a:07:69:36:61:b9:b3:08:38:cf:d5:a2:ad:32:ed: 04:6d:38:d9:72:fa:2c:19:90:b3:cc:3b:50:ae:1d:c1:bd:f4: 06:58:73:7d:a4:cc:a6:bb:20:14:af:b6:b2:e0:df:2f:91:c2: c7:7f:b2:61:7e:c0:4c:fd:0d:8d:59:4a:03:2b:40:85:46:de: 38:fb:ec:63:fe:b0:ca:a2:51:45:94:f2:df:12:f9:2c:dc:db: c5:e1:6a:10:02:07:06:f0:11:a0:8b:d0:f8:87:05:fd:65:fd: 0d:40:a5:36:f9:fb:20:38:ae:a6:c3:cf:78:3c:cc:3a:02:9d: fc:ff:a2:6f:14:be:8a:76:da:11:61:c7:46:73:a7:df:43:9c: b3:81:a8:7a:53:42:7a:8c:61:11:53:00:17:8f:79:85:95:2a: f5:93:d9:aa:b6:12:6c:46:7f:5a:c6:f5:57:63:ac:67:0c:b7: 8f:bf:59:10:17:47:03:a6:4c:79:0e:93:87:eb:d4:ab:c5:67: ca:d0:d9:b2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUN6Jt3B5FrVPlFfCJZ3JGv3F7S1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDI3MTUwNjUwWhcNMjUxMjAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDFhNWI1NDI2YjNiNDI4OWQzYjk4MDM3OWE3NTdkNjg4 MGIzNmMzMjkwNDA3YWNlMmNmNDU3ZWVjMmY1ZjM4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgGWUxPuQi3socaP6C6DiCJdayynoDHcUKTS2Z0+pkO9PX FLuTYrK0mb3Y450WmVQnKPj/lBIWEgDC13c16U0cYm2wp2sBAEmpCvavrOB5Jr+j VcdK+KusE5x+Nz4bw4+y0pXozcaNifhd9db10XjoFRzsutIfzUR0GXBvOQ1hEO+n jhYOF64aWe7HoIkqJ71DvEd9i/utqntIXrGx4LBMHY0lbqWUdAK3DBQATcNDZMfU 9nOaVWAej23SojaNmZyUT9l00nThZ/2sO1pKVSYlB6Ea/9Ih1T5e0aH3ZIc11LoK HV6ZV6DKFSUwZ34/aT3ODduDqTbkLll5G9bDgfdrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUCgHnsoCWCPg0YlOtir1IZlzyK2kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzgxNjM1MWQ3LTI2NGMtNGRkZS1iNjQ3LWI0NzdiMTk0Y2ZiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQjYDANBgkqhkiG9w0BAQsFAAOCAQEAnlNsBljdNpLiRHaLIaammG4NH9BY 9wWgFlCotfR//9PDDIYGWXQWG08ToXrCa7QSnR0gsVKemH5iagdpNmG5swg4z9Wi rTLtBG042XL6LBmQs8w7UK4dwb30BlhzfaTMprsgFK+2suDfL5HCx3+yYX7ATP0N jVlKAytAhUbeOPvsY/6wyqJRRZTy3xL5LNzbxeFqEAIHBvARoIvQ+IcF/WX9DUCl Nvn7IDiupsPPeDzMOgKd/P+ibxS+inbaEWHHRnOn30Ocs4GoelNCeoxhEVMAF495 hZUq9ZPZqrYSbEZ/Wsb1V2OsZwy3j79ZEBdHA6ZMeQ6Th+vUq8VnytDZsg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:57 2025 by rpki-client