$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa File: ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa (raw, json) Hash identifier: i1CIxYpdPIFsCiv1ucDWEJUCE1CiHMAKnoBsS4smkxo= Subject key identifier: 1C:E5:F3:25:DE:9E:60:F4:33:A9:F0:56:A9:7A:2A:76:5C:B4:93:29 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 503FC8A8B6CBE11FB8A3EDE08C84605CE06CBD19 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa Signing time: Tue 04 Nov 2025 00:30:13 +0000 ROA not before: Tue 04 Nov 2025 00:30:13 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3f:c8:a8:b6:cb:e1:1f:b8:a3:ed:e0:8c:84:60:5c:e0:6c:bd:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 4 00:30:13 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=0bbe07b2914af2b9cefc478a6e6a04f62ede97030c4e4263a59f051be3481023, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6e:22:32:3f:87:74:85:3f:4a:a7:f3:7b:b7: 71:90:f6:7e:51:59:76:47:99:7b:cb:b9:22:5f:51: 5a:0a:62:95:24:89:03:36:a0:74:f5:c7:9f:80:3e: da:e4:85:5f:a4:69:d4:35:da:e7:c9:5c:4c:84:1b: 70:74:2d:4b:73:10:c6:6e:8e:f7:53:54:a5:99:e9: bf:2a:9a:6c:a9:6c:1b:27:25:f8:ec:9a:ac:c0:bd: 9a:f5:a5:15:0d:cc:22:fa:8b:7b:5d:e0:ad:f8:b0: d5:5d:71:b1:71:1f:f2:9c:b8:17:a8:cf:f5:ee:24: 66:7e:54:72:ee:8d:ed:47:80:46:4e:0e:a3:f5:aa: 7f:6b:64:31:c8:25:cf:1a:d6:77:a8:d7:50:42:0b: f3:14:dc:11:a9:13:76:8b:7e:d4:5d:c7:d6:5a:27: 11:c4:f0:6c:5f:a5:7f:57:ee:c9:c5:b3:ce:69:c9: 46:06:80:a7:de:1c:e6:cc:f4:c3:e0:de:d9:36:18: 3c:da:88:27:66:41:d9:49:5c:92:8c:8d:98:86:55: 24:6f:93:04:8f:59:f0:66:8d:6a:11:a9:13:55:c4: 88:a5:ca:43:19:f1:46:9c:a4:00:5a:6c:4d:62:0d: 08:86:bc:d8:5f:0d:b7:51:0c:8e:b4:1e:cd:99:67: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E5:F3:25:DE:9E:60:F4:33:A9:F0:56:A9:7A:2A:76:5C:B4:93:29 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ac33c88d-a652-46f7-aa80-9d63bbacc82a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/24 Signature Algorithm: sha256WithRSAEncryption 62:a5:8b:68:6d:7d:dc:59:87:64:f9:3a:cd:2e:4f:d8:1d:9e: ab:23:df:f5:6f:08:57:17:00:ad:f2:18:9e:c2:41:03:90:e1: a4:f0:40:43:0b:de:95:0a:d1:91:0c:2a:57:11:3c:df:1b:9f: a4:6c:1a:f1:fb:b0:7f:ff:96:f1:d8:25:bf:6c:03:50:d4:ef: 27:03:85:ca:61:74:79:eb:ee:2b:8f:6f:1c:76:26:5f:36:16: 42:60:26:7e:17:a6:9b:5a:0b:5b:32:77:ea:5a:eb:1f:25:83: d7:11:60:76:41:ce:5d:bb:22:c3:23:39:31:f5:09:bc:a2:c5: fe:ae:86:d4:38:47:1e:44:98:56:ed:7f:1b:b3:ae:57:1d:54: e1:48:0f:de:d2:ec:62:c2:09:a3:a6:cb:81:e5:eb:15:10:ad: 78:60:7e:e8:4b:17:63:4b:a2:a2:b7:f6:0b:a7:2b:32:22:19: 14:c6:16:0a:d5:6c:ef:8d:9d:25:69:87:a7:c8:eb:bd:71:fd: 3c:03:3a:33:27:f9:05:dc:2e:6d:f3:e5:e5:51:dc:99:f7:26: 74:2c:2d:75:38:b6:a1:00:73:3c:c6:17:a5:81:e7:b7:26:af: 50:5f:13:d4:d0:06:95:e1:81:e1:56:82:f3:a0:f0:e6:e5:fc: 34:c7:24:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUD/IqLbL4R+4o+3gjIRgXOBsvRkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTA0MDAzMDEzWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmJlMDdiMjkxNGFmMmI5Y2VmYzQ3OGE2ZTZhMDRmNjJl ZGU5NzAzMGM0ZTQyNjNhNTlmMDUxYmUzNDgxMDIzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRbiIyP4d0hT9Kp/N7t3GQ9n5RWXZHmXvLuSJfUVoKYpUk iQM2oHT1x5+APtrkhV+kadQ12ufJXEyEG3B0LUtzEMZujvdTVKWZ6b8qmmypbBsn JfjsmqzAvZr1pRUNzCL6i3td4K34sNVdcbFxH/KcuBeoz/XuJGZ+VHLuje1HgEZO DqP1qn9rZDHIJc8a1neo11BCC/MU3BGpE3aLftRdx9ZaJxHE8GxfpX9X7snFs85p yUYGgKfeHObM9MPg3tk2GDzaiCdmQdlJXJKMjZiGVSRvkwSPWfBmjWoRqRNVxIil ykMZ8UacpABabE1iDQiGvNhfDbdRDI60Hs2ZZ4Y9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHOXzJd6eYPQzqfBWqXoqdly0kykwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FjMzNjODhkLWE2NTItNDZmNy1hYTgwLTlkNjNiYmFjYzgyYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCAwDQYJKoZIhvcNAQELBQADggEBAGKli2htfdxZh2T5Os0uT9gdnqsj 3/VvCFcXAK3yGJ7CQQOQ4aTwQEML3pUK0ZEMKlcRPN8bn6RsGvH7sH//lvHYJb9s A1DU7ycDhcphdHnr7iuPbxx2Jl82FkJgJn4XpptaC1syd+pa6x8lg9cRYHZBzl27 IsMjOTH1Cbyixf6uhtQ4Rx5EmFbtfxuzrlcdVOFID97S7GLCCaOmy4Hl6xUQrXhg fuhLF2NLoqK39gunKzIiGRTGFgrVbO+NnSVph6fI671x/TwDOjMn+QXcLm3z5eVR 3Jn3JnQsLXU4tqEAczzGF6WB57cmr1BfE9TQBpXhgeFWgvOg8Obl/DTHJNk= -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:33 2025 by rpki-client