$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa File: 95808009-fbc3-494a-8fba-ce3cf5711341.roa (raw, json) Hash identifier: mTlP75vamjA0AqWzTZBZUvYgNvKiO7b4XxiyiiytOPo= Subject key identifier: D7:99:64:83:72:9F:5B:A0:8A:0D:76:87:97:D0:25:05:A9:07:5C:79 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5679E991F78037EF353F967F3D79F125DEC37C03 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa Signing time: Fri 31 Oct 2025 01:40:06 +0000 ROA not before: Fri 31 Oct 2025 01:40:06 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:79:e9:91:f7:80:37:ef:35:3f:96:7f:3d:79:f1:25:de:c3:7c:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:06 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=8a808ed0a8c4177318bba9a3003d01a76b68ea308285b98c4b63119e501f39f9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2f:f2:47:3f:e0:0f:d1:73:15:ab:12:7a:01: aa:eb:59:8c:6e:0c:e0:9e:40:26:a3:3c:92:77:91: fc:ba:f5:46:3e:23:e7:ea:af:7d:7a:49:29:87:6f: 3e:80:46:96:48:f4:ea:17:90:fa:b4:04:17:b1:c6: 26:ed:ec:70:ee:31:ce:25:05:af:ad:d8:c2:37:2b: 84:48:2f:30:9d:a5:3f:af:c2:8e:4b:cf:98:85:cf: 13:fb:df:ee:ab:3f:0b:99:2c:b8:45:3e:06:ee:c9: a3:f1:49:b0:bf:be:79:24:d9:c1:d7:34:d3:07:10: 60:03:9e:e0:fb:e6:4b:8c:9f:34:c1:03:54:fa:c5: 40:d9:4c:0a:4b:66:e9:be:b5:b0:aa:5a:9f:1f:d1: 94:76:c2:ee:6b:e3:04:77:42:9e:ce:50:d9:4f:3e: b3:7d:e8:9e:81:5a:44:83:08:8e:78:5f:06:34:9f: 7d:25:1a:5d:cd:55:3e:b1:dc:8a:13:f7:55:78:0a: 81:6d:83:d2:50:ff:46:6a:84:e8:f9:d0:32:8c:2b: c1:bc:a3:03:5c:5f:e6:70:b8:f8:22:4b:ae:d8:69: 41:6b:0a:c6:67:55:67:63:d8:aa:c7:37:c3:6c:f6: eb:8c:37:25:a4:8c:df:ac:dd:7d:60:ea:6e:08:d4: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:99:64:83:72:9F:5B:A0:8A:0D:76:87:97:D0:25:05:A9:07:5C:79 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.22.0/23 Signature Algorithm: sha256WithRSAEncryption 81:7d:d4:3e:ae:2d:aa:eb:44:49:55:1c:9c:68:f6:1f:2f:77: c1:1a:3b:e7:aa:98:46:59:94:ae:9a:5b:d3:f3:a0:36:c5:c0: bc:e5:99:c8:b4:99:2c:4b:23:41:93:70:ce:eb:af:1a:20:2f: 8f:ae:c5:b9:d1:24:9b:aa:ce:33:49:22:83:a4:f0:15:0a:5b: 0e:ce:3f:48:bb:69:a1:e6:3e:95:ab:a8:6c:4d:7b:55:65:79: e0:21:49:9e:16:e3:3b:30:58:94:73:b3:99:57:e6:90:91:f6: 6e:15:8b:79:c9:f2:93:bb:f6:60:55:c7:d1:91:5f:b4:21:8e: 08:0e:38:ad:cc:7e:68:c7:77:a8:d8:fd:84:8d:01:43:c8:49: 77:64:a0:97:3c:f4:aa:70:5b:44:6a:d7:64:ff:16:d6:c5:72: 91:11:ac:f3:e7:36:c0:50:eb:2e:22:e3:b4:b5:f6:38:2b:c6: 82:d5:6d:f7:fd:d0:19:0a:fb:52:ec:2a:26:29:36:05:09:ea: 5b:c2:75:61:24:c9:77:38:4c:df:f3:4a:ec:f9:f6:63:b1:8d: 46:4f:fd:81:2c:d3:48:92:c2:50:72:e6:b5:47:b8:1b:dd:df: 85:a2:4b:e8:f0:d4:be:82:f1:60:97:a0:ab:41:a6:0d:d7:95: e1:40:36:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVnnpkfeAN+81P5Z/PXnxJd7DfAMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDA2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTgwOGVkMGE4YzQxNzczMThiYmE5YTMwMDNkMDFhNzZi NjhlYTMwODI4NWI5OGM0YjYzMTE5ZTUwMWYzOWY5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrL/JHP+AP0XMVqxJ6AarrWYxuDOCeQCajPJJ3kfy69UY+ I+fqr316SSmHbz6ARpZI9OoXkPq0BBexxibt7HDuMc4lBa+t2MI3K4RILzCdpT+v wo5Lz5iFzxP73+6rPwuZLLhFPgbuyaPxSbC/vnkk2cHXNNMHEGADnuD75kuMnzTB A1T6xUDZTApLZum+tbCqWp8f0ZR2wu5r4wR3Qp7OUNlPPrN96J6BWkSDCI54XwY0 n30lGl3NVT6x3IoT91V4CoFtg9JQ/0ZqhOj50DKMK8G8owNcX+ZwuPgiS67YaUFr CsZnVWdj2KrHN8Ns9uuMNyWkjN+s3X1g6m4I1BSNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU15lkg3KfW6CKDXaHl9AlBakHXHkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk1ODA4MDA5LWZiYzMtNDk0YS04ZmJhLWNlM2NmNTcxMTM0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBYwDQYJKoZIhvcNAQELBQADggEBAIF91D6uLarrRElVHJxo9h8vd8Ea O+eqmEZZlK6aW9PzoDbFwLzlmci0mSxLI0GTcM7rrxogL4+uxbnRJJuqzjNJIoOk 8BUKWw7OP0i7aaHmPpWrqGxNe1VleeAhSZ4W4zswWJRzs5lX5pCR9m4Vi3nJ8pO7 9mBVx9GRX7QhjggOOK3MfmjHd6jY/YSNAUPISXdkoJc89KpwW0Rq12T/FtbFcpER rPPnNsBQ6y4i47S19jgrxoLVbff90BkK+1LsKiYpNgUJ6lvCdWEkyXc4TN/zSuz5 9mOxjUZP/YEs00iSwlBy5rVHuBvd34WiS+jw1L6C8WCXoKtBpg3XleFANkQ= -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:32 2025 by rpki-client