$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa File: 8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa (raw, json) Hash identifier: Zuey7lqBcuKusGXOK+GLYmOw2b/njbLcT8PkwUK2cws= Subject key identifier: 27:B3:AB:E1:E4:E9:3B:E1:16:C8:BB:F5:18:19:04:2F:94:AD:A2:1B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4792412C6520468B40F97FC8D920D83D069FFD3A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa Signing time: Fri 24 Oct 2025 15:38:48 +0000 ROA not before: Fri 24 Oct 2025 15:38:48 +0000 ROA not after: Fri 28 Nov 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.111.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:92:41:2c:65:20:46:8b:40:f9:7f:c8:d9:20:d8:3d:06:9f:fd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 24 15:38:48 2025 GMT Not After : Nov 28 23:59:59 2025 GMT Subject: serialNumber=0fe628121bd8d3e838f9de079778349861cb9011f617e8a781092af8b78af89a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3c:ca:5c:78:94:8f:af:3d:44:8d:fd:62:e1: 62:5d:18:c3:5c:f7:79:33:9f:06:71:f9:73:32:83: 9f:ee:8a:39:c6:81:63:a1:ef:0e:b5:53:64:be:a4: 33:19:98:1f:23:03:f8:09:ea:f5:4b:ac:7f:36:a7: 0e:75:f1:b8:e2:43:4e:27:5f:06:da:13:14:a8:ae: d9:3b:8e:ef:b3:6c:b4:6c:a2:6b:e9:7f:c7:b3:66: b6:0d:d5:17:50:11:32:88:bf:fb:4c:6b:9d:f9:51: e4:f0:b6:a7:3e:56:fa:0f:e8:94:fa:a3:25:27:6a: 74:cd:c8:9e:9b:3b:b3:ee:b9:8e:7b:2f:e1:ab:28: a2:84:fe:8e:db:1f:25:db:57:0f:a3:74:a6:09:5b: 1a:e6:64:87:49:a0:e3:ce:b4:ac:0d:8f:27:5f:63: 31:bc:ef:be:19:10:e6:2c:a3:2f:83:c9:09:79:f5: 0c:00:3d:7a:f2:51:79:0d:d0:77:fe:c0:1a:24:5d: 56:4b:a0:e7:17:e0:8b:d0:1f:e2:3c:a7:b3:b0:4f: 00:26:86:cd:c6:5a:be:c1:8a:19:19:a4:3a:ac:27: ef:2e:d4:b4:3e:36:d2:bf:51:64:52:63:77:83:65: 58:97:3c:b1:11:4b:f7:ee:6b:92:01:df:7a:2c:9f: 0e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B3:AB:E1:E4:E9:3B:E1:16:C8:BB:F5:18:19:04:2F:94:AD:A2:1B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8600fbe2-26e0-4292-a4f0-3077eb8e1e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.111.252.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:2c:e2:4e:c8:35:ea:bf:a9:c4:a0:60:34:7f:3a:35:a5:4c: 3e:9b:c0:9b:f7:91:a8:25:64:5a:56:44:4d:d8:30:3b:ba:7d: 09:5d:18:a9:92:0f:43:a6:7c:9e:93:e3:c6:40:77:06:40:03: f0:97:9b:63:87:2b:d9:13:af:b0:33:29:25:f0:a4:28:dd:50: 40:f9:76:fd:3e:aa:54:e7:f5:02:88:64:80:30:ad:92:0c:90: 22:7f:73:f1:6a:36:0f:9f:30:c9:ba:80:ce:13:84:1c:c1:d3: c9:16:4e:f5:6a:57:4b:ca:59:e1:80:dd:81:ec:83:1b:35:18: 81:e6:75:48:de:08:e8:c2:9c:06:8c:e5:c0:f6:67:1c:b6:57: f2:ac:47:f9:b8:3c:b6:07:12:72:7b:99:b3:0f:44:1c:0d:37: a9:72:d0:43:b0:06:e0:91:3b:d5:eb:c2:7e:10:2e:11:b0:96: ec:98:9f:48:a5:4a:b9:3d:b8:ec:2b:dc:87:b3:75:4f:97:b3: 7b:fe:32:4e:28:ba:45:66:ef:8e:9b:7b:a4:de:96:a3:2e:aa: 48:85:66:7c:f7:eb:86:08:8f:8c:fa:a1:83:e8:04:e1:a5:66: 1d:f5:44:e5:c4:d3:0b:4b:b1:73:ef:72:3f:3d:e7:06:3e:14: 60:40:b2:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR5JBLGUgRotA+X/I2SDYPQaf/TowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDI0MTUzODQ4WhcNMjUxMTI4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmU2MjgxMjFiZDhkM2U4MzhmOWRlMDc5Nzc4MzQ5ODYx Y2I5MDExZjYxN2U4YTc4MTA5MmFmOGI3OGFmODlhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMPMpceJSPrz1Ejf1i4WJdGMNc93kznwZx+XMyg5/uijnG gWOh7w61U2S+pDMZmB8jA/gJ6vVLrH82pw518bjiQ04nXwbaExSortk7ju+zbLRs omvpf8ezZrYN1RdQETKIv/tMa535UeTwtqc+VvoP6JT6oyUnanTNyJ6bO7PuuY57 L+GrKKKE/o7bHyXbVw+jdKYJWxrmZIdJoOPOtKwNjydfYzG8774ZEOYsoy+DyQl5 9QwAPXryUXkN0Hf+wBokXVZLoOcX4IvQH+I8p7OwTwAmhs3GWr7BihkZpDqsJ+8u 1LQ+NtK/UWRSY3eDZViXPLERS/fua5IB33osnw5tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJ7Or4eTpO+EWyLv1GBkEL5StohswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg2MDBmYmUyLTI2ZTAtNDI5Mi1hNGYwLTMwNzdlYjhlMWUzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjb/wwDQYJKoZIhvcNAQELBQADggEBAB4s4k7INeq/qcSgYDR/OjWlTD6b wJv3kaglZFpWRE3YMDu6fQldGKmSD0OmfJ6T48ZAdwZAA/CXm2OHK9kTr7AzKSXw pCjdUED5dv0+qlTn9QKIZIAwrZIMkCJ/c/FqNg+fMMm6gM4ThBzB08kWTvVqV0vK WeGA3YHsgxs1GIHmdUjeCOjCnAaM5cD2Zxy2V/KsR/m4PLYHEnJ7mbMPRBwNN6ly 0EOwBuCRO9Xrwn4QLhGwluyYn0ilSrk9uOwr3IezdU+Xs3v+Mk4oukVm746be6Te lqMuqkiFZnz364YIj4z6oYPoBOGlZh31ROXE0wtLsXPvcj895wY+FGBAsps= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:28 2025 by rpki-client