$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a27cd140-1d2b-4e7d-a6c0-7e3c86150c3f.roa File: a27cd140-1d2b-4e7d-a6c0-7e3c86150c3f.roa (raw, json) Hash identifier: K/VexGKyP3fmzdCPODDt6w8f+FzDSMJZaBFFPzYYOUA= Subject key identifier: CF:C3:BB:B7:77:D2:A9:03:C4:60:04:FE:57:F8:40:22:C1:93:97:82 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2E512A625071C77D8BEDCB242BDB3EDA8CC2E281 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a27cd140-1d2b-4e7d-a6c0-7e3c86150c3f.roa Signing time: Fri 31 Oct 2025 01:40:06 +0000 ROA not before: Fri 31 Oct 2025 01:40:06 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:51:2a:62:50:71:c7:7d:8b:ed:cb:24:2b:db:3e:da:8c:c2:e2:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:06 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=0efc9e0c2bec323c6afb85e78357a55ddf5aeb341b8aa2b3e1b7bd75a62c675d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:58:92:ee:42:cf:89:17:f5:bf:17:e8:16:b4: 96:cd:35:71:53:66:d6:b4:83:f1:de:98:26:13:4a: f2:55:5a:8b:6c:cb:24:8f:66:c9:70:dc:a0:e2:e1: d9:17:76:21:c3:e3:de:a7:6c:95:c0:55:5c:f0:d5: 1f:3c:1f:f7:b4:1f:89:b8:47:f5:be:2c:19:f8:97: c5:6d:7b:14:03:a4:c9:c1:dc:22:5b:db:d0:fe:86: a7:aa:b0:dc:9b:a6:0a:36:62:a5:c2:29:8b:2f:ba: d2:0e:c1:6a:88:2c:7c:58:b4:53:38:7b:70:b2:33: 15:0a:a2:31:45:43:9a:86:d8:4a:eb:35:4b:d8:49: e9:06:9e:a7:f5:2e:79:49:d2:e9:a3:04:09:39:c1: 62:ee:6c:01:b4:67:05:bf:10:10:9e:86:93:89:96: 28:2e:3f:ed:57:89:0f:6a:54:cd:f0:1f:f7:b1:09: 0a:54:a1:44:d6:ad:d4:bb:77:e3:5f:c4:ac:e5:02: 5e:4f:9b:b7:ed:c8:9a:1e:5f:3a:21:a2:ea:58:3e: 92:82:c0:bf:d2:84:aa:61:40:4e:58:33:e9:0d:7e: 2b:49:e3:18:8e:83:82:3e:52:11:d1:b6:99:d6:6e: 43:42:af:35:08:6b:73:da:98:5f:20:8c:c4:1d:98: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:BB:B7:77:D2:A9:03:C4:60:04:FE:57:F8:40:22:C1:93:97:82 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a27cd140-1d2b-4e7d-a6c0-7e3c86150c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.22.0/23 Signature Algorithm: sha256WithRSAEncryption 75:c5:c4:63:09:c1:bc:7e:22:da:63:bc:b6:45:31:b2:e7:92: 50:2f:28:44:79:9f:53:65:37:91:0c:23:96:1e:dd:80:3e:d6: 7b:b5:1d:43:d0:97:08:4e:ce:28:b2:75:f1:45:e7:2c:97:1e: 24:1f:fd:04:e5:fe:9a:62:1d:c8:2b:c7:b3:27:fc:a9:ba:d2: 19:6b:3e:88:45:19:29:31:e1:bd:ff:55:88:99:ae:62:16:b3: a7:83:a3:e7:08:8e:44:a6:68:2d:7d:33:ed:00:d0:0f:52:35: 52:07:a5:78:16:50:73:26:9d:04:21:dc:ca:83:2f:f7:21:28: be:75:54:85:6a:da:0c:4a:c1:22:01:4e:12:e8:8b:89:b0:9d: c0:0a:fd:d3:6c:b7:5b:44:5c:20:a2:a3:6b:50:04:4d:35:4d: 43:68:ad:97:74:4e:65:28:d6:4c:0f:14:6f:92:40:a1:92:82: 33:6f:6b:95:34:ef:7c:a3:fd:61:5b:d1:1a:69:db:96:b1:e2: 8f:af:eb:91:7a:76:13:0f:e6:92:98:40:6c:81:fc:c8:ed:89: 67:f2:27:7c:db:17:8a:a7:19:8e:05:ce:f9:6a:40:d9:5e:95: 55:03:84:fa:ca:a3:b1:86:78:47:64:81:fb:8f:cd:ef:2b:4a: c7:9b:8b:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULlEqYlBxx32L7cskK9s+2ozC4oEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDA2WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWZjOWUwYzJiZWMzMjNjNmFmYjg1ZTc4MzU3YTU1ZGRm NWFlYjM0MWI4YWEyYjNlMWI3YmQ3NWE2MmM2NzVkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8WJLuQs+JF/W/F+gWtJbNNXFTZta0g/HemCYTSvJVWots yySPZslw3KDi4dkXdiHD496nbJXAVVzw1R88H/e0H4m4R/W+LBn4l8VtexQDpMnB 3CJb29D+hqeqsNybpgo2YqXCKYsvutIOwWqILHxYtFM4e3CyMxUKojFFQ5qG2Err NUvYSekGnqf1LnlJ0umjBAk5wWLubAG0ZwW/EBCehpOJliguP+1XiQ9qVM3wH/ex CQpUoUTWrdS7d+NfxKzlAl5Pm7ftyJoeXzohoupYPpKCwL/ShKphQE5YM+kNfitJ 4xiOg4I+UhHRtpnWbkNCrzUIa3PamF8gjMQdmGLTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz8O7t3fSqQPEYAT+V/hAIsGTl4IwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2EyN2NkMTQwLTFkMmItNGU3ZC1hNmMwLTdlM2M4NjE1MGMzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBYwDQYJKoZIhvcNAQELBQADggEBAHXFxGMJwbx+ItpjvLZFMbLnklAv KER5n1NlN5EMI5Ye3YA+1nu1HUPQlwhOziiydfFF5yyXHiQf/QTl/ppiHcgrx7Mn /Km60hlrPohFGSkx4b3/VYiZrmIWs6eDo+cIjkSmaC19M+0A0A9SNVIHpXgWUHMm nQQh3MqDL/chKL51VIVq2gxKwSIBThLoi4mwncAK/dNst1tEXCCio2tQBE01TUNo rZd0TmUo1kwPFG+SQKGSgjNva5U073yj/WFb0Rpp25ax4o+v65F6dhMP5pKYQGyB /MjtiWfyJ3zbF4qnGY4FzvlqQNlelVUDhPrKo7GGeEdkgfuPze8rSsebiys= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:23 2025 by rpki-client