$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/85ce620d-a483-4984-985b-c3d0f9506e58.roa File: 85ce620d-a483-4984-985b-c3d0f9506e58.roa (raw, json) Hash identifier: s3uNAUY4blq+zfwca1JyEkTNiVY/qBn8F3qd62SYGjs= Subject key identifier: C8:77:8B:D2:7D:64:D5:D6:74:A9:BC:A1:51:8F:93:11:A2:67:DB:A0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7DF045585484FA145D170D6CC158758A5A2B6D53 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/85ce620d-a483-4984-985b-c3d0f9506e58.roa Signing time: Fri 31 Oct 2025 01:40:05 +0000 ROA not before: Fri 31 Oct 2025 01:40:05 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:f0:45:58:54:84:fa:14:5d:17:0d:6c:c1:58:75:8a:5a:2b:6d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:05 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=d3096aab7a1a39d8bd83d8cf34149e938c7bf033db2993bd19c754571b8b51d3, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:52:e8:8b:c8:d6:dd:44:cf:82:30:fa:6f:fb: 1b:4c:a3:2c:10:04:1d:43:2b:c4:e8:82:2b:92:39: a9:a2:cb:0e:0f:46:a0:a9:d4:ba:b9:37:af:80:3e: b8:ba:bd:1f:69:5b:d4:bd:49:7b:1b:bb:4c:7f:5c: f4:a5:66:a7:06:35:22:19:18:a6:7f:09:81:4f:ce: 58:7a:31:2f:57:2e:bd:2c:0f:46:02:c2:a1:24:9b: e7:37:27:5b:8b:b1:9c:4b:92:38:7c:e9:57:68:48: 8f:39:e8:f6:cc:0c:b5:be:6d:45:44:14:eb:cc:f7: 28:77:55:76:0c:30:c7:b0:03:c1:83:81:c2:b9:1a: 6b:8a:e4:49:9e:7e:14:2f:e8:7a:07:3e:4e:41:7f: 29:df:1c:cd:bd:5f:b7:7d:89:2b:65:71:ac:a5:82: 2c:eb:0b:c8:0a:7c:c5:95:6e:1f:b6:c2:3a:c4:7c: 9b:cf:0c:7a:b9:c7:5f:4b:ab:9b:36:df:50:b1:d2: bf:89:58:f0:c6:7d:8d:dc:49:59:5e:98:3b:f2:20: 07:b2:d2:72:1e:43:62:e6:49:02:e1:f1:67:55:76: ab:f6:6c:65:ab:16:00:f6:c1:2f:ae:b1:ad:8d:38: 63:48:30:8d:26:bc:da:51:d7:e5:94:ae:f2:19:80: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:8B:D2:7D:64:D5:D6:74:A9:BC:A1:51:8F:93:11:A2:67:DB:A0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/85ce620d-a483-4984-985b-c3d0f9506e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 77:5e:25:0d:cd:a2:d1:71:88:43:27:74:16:66:eb:da:59:b3: da:9b:73:c8:53:8b:d4:5f:09:4b:04:22:85:d9:22:22:67:12: 34:4c:7e:b1:84:2e:ff:e9:7a:a7:84:55:8b:ee:cf:14:32:01: 20:83:fd:e1:72:95:55:7e:38:9a:ad:ae:6e:dd:46:e3:39:fa: b6:68:cb:b6:02:3e:64:23:d9:5b:cd:94:f0:e7:f9:91:34:5d: c5:7e:34:26:b4:36:63:28:c3:96:87:a9:d5:97:1d:8c:bd:82: 37:d4:fa:66:f0:9b:db:14:68:66:c8:03:31:f5:14:39:36:3e: d8:e4:42:40:f1:c4:13:4e:aa:24:8c:ba:b4:d1:51:cd:a0:1f: 5c:99:f9:a5:37:c6:a2:b0:fe:b7:ea:46:f2:84:1f:d3:e5:eb: f8:d7:08:80:9a:7d:4b:6a:da:04:69:63:88:1c:09:e2:ef:27: 41:5b:c2:cd:70:4a:fd:2f:63:0f:f5:56:5b:ef:46:c9:ef:c5: 0a:ec:95:69:eb:ff:91:40:bf:d4:46:c7:93:64:5d:e8:74:68: 9d:9a:8d:bd:c3:ba:94:b9:c5:5b:54:96:e6:ba:04:db:7d:2f: ab:92:2e:a3:97:b5:a6:51:c6:6a:a2:70:9d:02:90:42:8c:59: bd:5c:f5:68 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUffBFWFSE+hRdFw1swVh1ilorbVMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDA1WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzA5NmFhYjdhMWEzOWQ4YmQ4M2Q4Y2YzNDE0OWU5Mzhj N2JmMDMzZGIyOTkzYmQxOWM3NTQ1NzFiOGI1MWQzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuUuiLyNbdRM+CMPpv+xtMoywQBB1DK8TogiuSOamiyw4P RqCp1Lq5N6+APri6vR9pW9S9SXsbu0x/XPSlZqcGNSIZGKZ/CYFPzlh6MS9XLr0s D0YCwqEkm+c3J1uLsZxLkjh86VdoSI856PbMDLW+bUVEFOvM9yh3VXYMMMewA8GD gcK5GmuK5EmefhQv6HoHPk5BfynfHM29X7d9iStlcaylgizrC8gKfMWVbh+2wjrE fJvPDHq5x19Lq5s231Cx0r+JWPDGfY3cSVlemDvyIAey0nIeQ2LmSQLh8WdVdqv2 bGWrFgD2wS+usa2NOGNIMI0mvNpR1+WUrvIZgEmfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyHeL0n1k1dZ0qbyhUY+TEaJn26AwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg1Y2U2MjBkLWE0ODMtNDk4NC05ODViLWMzZDBmOTUwNmU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBAHdeJQ3NotFxiEMndBZm69pZs9qb c8hTi9RfCUsEIoXZIiJnEjRMfrGELv/peqeEVYvuzxQyASCD/eFylVV+OJqtrm7d RuM5+rZoy7YCPmQj2VvNlPDn+ZE0XcV+NCa0NmMow5aHqdWXHYy9gjfU+mbwm9sU aGbIAzH1FDk2PtjkQkDxxBNOqiSMurTRUc2gH1yZ+aU3xqKw/rfqRvKEH9Pl6/jX CICafUtq2gRpY4gcCeLvJ0Fbws1wSv0vYw/1VlvvRsnvxQrslWnr/5FAv9RGx5Nk Xeh0aJ2ajb3DupS5xVtUlua6BNt9L6uSLqOXtaZRxmqicJ0CkEKMWb1c9Wg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:02:06 2025 by rpki-client