$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa File: 9820da12-0a89-4f05-a638-5ca08cc892e3.roa (raw, json) Hash identifier: gDSpudAg0/DyVTa7pGgam9TtT6H0l9NoBFYYbiX0MYk= Subject key identifier: 72:7D:A9:40:8E:13:4E:94:AC:15:B5:65:6B:62:94:1C:5C:B6:31:95 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6B9D42484D1AD5156E27295EE722AD7674751EA1 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa Signing time: Fri 31 Oct 2025 01:40:13 +0000 ROA not before: Fri 31 Oct 2025 01:40:13 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9d:42:48:4d:1a:d5:15:6e:27:29:5e:e7:22:ad:76:74:75:1e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:13 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=cc98e068d4438c4d0736d93586036eb8cca4e5727136fb1eb2bfc701c4e76417, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b7:67:07:54:45:5f:93:3c:08:3b:9c:75:e4: e9:24:0a:6c:7b:0c:37:7d:80:be:2c:d0:9a:08:3d: 2a:68:87:cb:bf:6d:44:63:b5:d8:58:cf:01:1f:d6: 5f:b9:55:fa:5c:6d:ca:a1:46:a9:19:36:1e:d4:40: eb:73:65:8a:c0:ac:2e:cf:3c:a7:ff:e5:b5:14:cd: 39:c8:6c:8e:ce:d4:b8:88:63:7d:62:9b:7b:d1:7f: b6:63:69:5f:13:3c:14:e1:ce:22:e7:d4:b1:05:d6: 16:1b:38:5f:62:e2:ba:9e:62:14:a8:ae:b1:85:67: 43:1c:05:f3:ce:99:c9:1c:1f:f1:15:fc:16:56:a3: 2a:78:a8:11:0a:ae:82:9b:0d:9a:19:32:ac:69:4f: 37:e7:02:36:d9:b7:4c:6e:7b:94:ac:51:04:aa:c5: 67:d5:9b:14:e4:d1:85:b2:94:f6:88:ae:d9:07:03: cd:18:f6:ae:99:fe:6a:a7:a9:30:b3:00:72:cd:40: 4c:3f:f4:e6:58:01:b2:9a:d1:89:a3:29:41:ad:fa: 68:e0:6e:75:fd:05:dd:ca:27:8f:14:5a:e3:16:5c: 4f:67:70:d9:4d:c1:ee:c6:c7:4a:db:b3:9b:31:ca: 79:c7:f4:40:d6:22:75:2b:0a:64:9d:81:dd:c2:1d: d1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:7D:A9:40:8E:13:4E:94:AC:15:B5:65:6B:62:94:1C:5C:B6:31:95 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.253.0/24 Signature Algorithm: sha256WithRSAEncryption 31:68:52:1a:19:24:09:82:aa:63:0a:46:23:13:a6:a7:70:09: 96:5a:e6:bd:0a:18:45:9c:f5:7a:a1:df:91:26:85:f8:92:91: 6c:4f:88:02:a0:db:3b:c8:fa:1e:2a:44:03:65:ff:87:f2:91: 1b:16:3e:cf:e2:51:6b:1f:82:4c:ce:e4:de:78:b1:47:92:1f: 85:69:e1:e7:db:68:c3:f1:7d:f2:60:63:95:9d:ae:09:37:67: e1:fc:7f:4f:4d:34:c9:a5:0d:1d:db:29:4a:06:86:f2:cf:4a: 3c:77:17:8a:db:a0:36:2e:c3:95:88:84:44:0c:cf:65:b9:f2: 77:f9:57:7f:22:d8:57:69:75:53:2c:d6:38:92:e4:be:70:0c: 85:59:82:a3:00:78:75:5f:82:ab:8d:b3:d8:38:72:90:fd:d8: 0f:f2:a5:86:f9:86:d6:b0:92:8c:42:e2:ba:ee:33:0d:6f:76: c9:b9:46:3e:06:7c:de:07:bc:06:1c:04:7f:19:bb:ae:31:8b: 13:7b:12:bd:64:9c:c2:e3:ab:28:06:98:26:48:c1:66:36:94: a5:6f:2d:cd:61:9b:af:5f:d1:d4:d2:3b:3a:ce:85:9b:50:f6: 36:74:7a:f5:8f:c3:1d:00:df:e4:95:61:59:55:58:4e:c3:26: 7e:57:99:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa51CSE0a1RVuJyle5yKtdnR1HqEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDEzWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzk4ZTA2OGQ0NDM4YzRkMDczNmQ5MzU4NjAzNmViOGNj YTRlNTcyNzEzNmZiMWViMmJmYzcwMWM0ZTc2NDE3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXt2cHVEVfkzwIO5x15OkkCmx7DDd9gL4s0JoIPSpoh8u/ bURjtdhYzwEf1l+5VfpcbcqhRqkZNh7UQOtzZYrArC7PPKf/5bUUzTnIbI7O1LiI Y31im3vRf7ZjaV8TPBThziLn1LEF1hYbOF9i4rqeYhSorrGFZ0McBfPOmckcH/EV /BZWoyp4qBEKroKbDZoZMqxpTzfnAjbZt0xue5SsUQSqxWfVmxTk0YWylPaIrtkH A80Y9q6Z/mqnqTCzAHLNQEw/9OZYAbKa0YmjKUGt+mjgbnX9Bd3KJ48UWuMWXE9n cNlNwe7Gx0rbs5sxynnH9EDWInUrCmSdgd3CHdEzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcn2pQI4TTpSsFbVla2KUHFy2MZUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4MjBkYTEyLTBhODktNGYwNS1hNjM4LTVjYTA4Y2M4OTJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYP0wDQYJKoZIhvcNAQELBQADggEBADFoUhoZJAmCqmMKRiMTpqdwCZZa 5r0KGEWc9Xqh35EmhfiSkWxPiAKg2zvI+h4qRANl/4fykRsWPs/iUWsfgkzO5N54 sUeSH4Vp4efbaMPxffJgY5Wdrgk3Z+H8f09NNMmlDR3bKUoGhvLPSjx3F4rboDYu w5WIhEQMz2W58nf5V38i2FdpdVMs1jiS5L5wDIVZgqMAeHVfgquNs9g4cpD92A/y pYb5htawkoxC4rruMw1vdsm5Rj4GfN4HvAYcBH8Zu64xixN7Er1knMLjqygGmCZI wWY2lKVvLc1hm69f0dTSOzrOhZtQ9jZ0evWPwx0A3+SVYVlVWE7DJn5XmcY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:55 2025 by rpki-client