$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa File: 9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa (raw, json) Hash identifier: oXPnlGUDAujcDsdhWrBp3Z66g3TY0rbVYq1epAWJHII= Subject key identifier: 29:93:AA:21:ED:3A:11:A2:AB:51:EA:E9:95:B0:9A:FC:3F:DB:3B:4F Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3BB6149B816EE5D45CD59DC082B25507E6A067D3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa Signing time: Tue 04 Nov 2025 00:30:09 +0000 ROA not before: Tue 04 Nov 2025 00:30:09 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b6:14:9b:81:6e:e5:d4:5c:d5:9d:c0:82:b2:55:07:e6:a0:67:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 4 00:30:09 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=1632f72289422ef6d1d904130e7d1a819ae4bea230100b2c7850ea2a0a244e02, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1d:a0:3c:58:bd:ef:5b:30:47:0c:1f:de:2a: e6:d2:e4:62:b4:54:ab:b6:98:cd:60:60:6f:c6:86: e2:bd:80:ff:f8:26:6e:89:c7:2f:8e:18:f2:50:78: 56:71:8e:27:e3:e3:f9:92:55:df:9f:09:5a:97:60: 3c:44:66:12:25:25:1d:4b:7a:ee:5d:6d:53:f7:16: c9:4c:12:21:47:3c:fa:f6:fe:0a:22:5e:bd:f1:f6: a6:f4:2d:0d:4d:e2:ef:96:a5:ae:0c:86:29:5f:0d: dd:36:ce:90:40:d1:28:f4:cd:da:68:83:59:69:1e: 98:f1:d4:e2:35:5b:d8:6c:e6:46:f0:62:1a:d2:57: 9c:7e:48:33:ff:98:7a:54:df:0d:4b:2f:9c:6d:6d: d9:ae:30:e6:dc:11:92:59:b4:81:2b:e5:68:8d:8b: 5b:d2:ca:00:aa:1f:6b:c7:6d:7c:01:d8:89:d5:a7: 01:67:b9:80:02:e3:39:71:57:31:36:d3:6c:07:27: f1:6b:31:13:ed:62:e4:db:e0:fa:fd:0a:a1:ed:de: 87:b8:e2:d9:d9:0e:53:3e:f6:8c:34:34:da:70:d1: 2d:39:8d:4f:41:6e:be:91:b4:43:07:5d:21:08:03: 1d:9f:14:72:3e:c5:b7:69:5d:38:0b:0e:da:da:b0: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:93:AA:21:ED:3A:11:A2:AB:51:EA:E9:95:B0:9A:FC:3F:DB:3B:4F X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.12.0/24 Signature Algorithm: sha256WithRSAEncryption 96:d5:18:9d:40:5c:15:31:1a:dd:b3:67:d2:f9:48:a0:d9:3c: b8:f1:b5:7d:75:81:8e:e5:0c:7c:3c:fb:f8:ad:d9:52:76:3a: 11:48:d1:b9:d1:d1:81:bf:18:c0:17:c1:45:c1:c7:db:05:eb: fd:15:1b:b6:e9:d9:58:53:0f:69:b4:89:1d:79:68:d9:4a:3a: cc:8e:eb:46:8c:3a:04:fc:c1:a0:f5:e4:3f:9e:32:c8:d4:2c: ba:f4:9a:70:9a:2e:fc:49:e3:77:57:60:0f:94:c2:87:d6:b6: 9c:44:87:8c:d6:de:9d:3d:be:80:de:f4:5a:53:5f:de:df:9f: 8d:7e:7f:7b:29:c0:95:c8:a4:a5:b8:46:f6:7a:f4:09:00:89: d9:6d:dd:6c:cf:c7:3e:fa:d8:c0:be:0d:b1:4f:ac:3c:d3:a4: dc:f2:b4:d7:cf:0c:3a:af:24:72:b8:44:66:39:0c:94:fe:af: 91:a0:7e:33:44:19:ff:43:8e:2a:34:12:e4:b9:28:e0:ab:bb: d2:05:54:28:36:33:bc:89:6f:5b:55:29:fe:89:69:99:03:56: d4:ca:56:af:63:fc:ac:87:d3:cc:df:7c:df:1c:35:1f:a0:81: 21:88:d4:ab:c3:b1:fd:fc:33:5b:f4:88:d7:5c:04:9c:d5:0d: cb:e4:df:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO7YUm4Fu5dRc1Z3AgrJVB+agZ9MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTA0MDAzMDA5WhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjMyZjcyMjg5NDIyZWY2ZDFkOTA0MTMwZTdkMWE4MTlh ZTRiZWEyMzAxMDBiMmM3ODUwZWEyYTBhMjQ0ZTAyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDoHaA8WL3vWzBHDB/eKubS5GK0VKu2mM1gYG/GhuK9gP/4 Jm6Jxy+OGPJQeFZxjifj4/mSVd+fCVqXYDxEZhIlJR1Leu5dbVP3FslMEiFHPPr2 /goiXr3x9qb0LQ1N4u+Wpa4MhilfDd02zpBA0Sj0zdpog1lpHpjx1OI1W9hs5kbw YhrSV5x+SDP/mHpU3w1LL5xtbdmuMObcEZJZtIEr5WiNi1vSygCqH2vHbXwB2InV pwFnuYAC4zlxVzE202wHJ/FrMRPtYuTb4Pr9CqHt3oe44tnZDlM+9ow0NNpw0S05 jU9Bbr6RtEMHXSEIAx2fFHI+xbdpXTgLDtrasOqXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKZOqIe06EaKrUerplbCa/D/bO08wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzlmY2Q5ZDZhLTcyNzItNGMxZS1iNDZjLWNjOTRlNTgzMjJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAwwDQYJKoZIhvcNAQELBQADggEBAJbVGJ1AXBUxGt2zZ9L5SKDZPLjx tX11gY7lDHw8+/it2VJ2OhFI0bnR0YG/GMAXwUXBx9sF6/0VG7bp2VhTD2m0iR15 aNlKOsyO60aMOgT8waD15D+eMsjULLr0mnCaLvxJ43dXYA+UwofWtpxEh4zW3p09 voDe9FpTX97fn41+f3spwJXIpKW4RvZ69AkAidlt3WzPxz762MC+DbFPrDzTpNzy tNfPDDqvJHK4RGY5DJT+r5GgfjNEGf9Djio0EuS5KOCru9IFVCg2M7yJb1tVKf6J aZkDVtTKVq9j/KyH08zffN8cNR+ggSGI1KvDsf38M1v0iNdcBJzVDcvk38k= -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:08 2025 by rpki-client