$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bfd96660-29cf-4054-a14e-cd48975d08b4.roa File: bfd96660-29cf-4054-a14e-cd48975d08b4.roa (raw, json) Hash identifier: IVQOMwwHGijhUZQpnODgY8gQr938s9jkuOk9GEnDrkI= Subject key identifier: C8:1B:B0:E0:34:87:50:EE:20:95:97:DA:5C:9D:8F:76:8D:79:5C:5B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 702FAD41839918856C36B1821386E9C965D7EDC1 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bfd96660-29cf-4054-a14e-cd48975d08b4.roa Signing time: Fri 31 Oct 2025 01:40:08 +0000 ROA not before: Fri 31 Oct 2025 01:40:08 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2f:ad:41:83:99:18:85:6c:36:b1:82:13:86:e9:c9:65:d7:ed:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 31 01:40:08 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=ee3ac0cbefa660bb7e3af0c8f32b51d838853e9f55e2411d76eeb3c72b6ce361, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:95:be:91:ad:5f:11:d7:01:24:39:18:27: b5:1f:32:ad:78:94:d0:5e:f6:c2:61:a5:5e:ec:2d: 5a:ca:2d:b5:97:07:a4:90:c4:de:df:21:87:e0:06: b7:79:82:a0:cd:5e:e0:63:3d:6c:f3:f8:b4:c4:7f: e3:3d:40:27:8c:d8:d9:63:47:22:91:44:b7:a6:c5: 8d:cd:47:11:f7:c4:b6:20:0d:9a:92:9a:55:ce:f5: 58:a6:4e:98:6e:2b:ed:ef:45:56:04:d4:40:59:46: 85:7c:34:e2:a9:0e:1e:d8:db:46:03:f5:57:c4:e6: 6b:bd:5a:5e:25:1f:9f:5f:15:5b:55:92:28:95:e6: e2:67:f5:02:31:8a:fc:52:1e:35:e6:21:47:cc:2c: 0c:1f:86:62:75:be:3d:25:7a:a0:d1:f6:18:c5:d4: 55:a4:a8:88:9f:b8:23:ce:04:fd:f9:00:88:ac:a5: 42:6c:4f:f2:38:9c:a7:6c:c3:18:70:6b:2c:84:45: 3c:45:37:69:fa:07:40:2e:57:8b:8a:f2:b8:76:98: 68:a6:fb:2d:4f:2c:fe:1d:eb:58:24:ca:0f:c5:f7: db:63:2f:6c:e4:66:18:af:63:cb:7b:89:c6:b8:56: ee:2f:bb:f4:1f:06:49:6c:27:22:ff:92:96:39:13: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1B:B0:E0:34:87:50:EE:20:95:97:DA:5C:9D:8F:76:8D:79:5C:5B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bfd96660-29cf-4054-a14e-cd48975d08b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.24.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:94:39:85:77:29:0d:26:ba:2e:09:70:24:28:ec:79:e1:d7: 25:c9:91:81:d2:31:8d:da:f3:0f:04:97:ac:63:05:a8:8a:02: 32:21:51:08:04:ba:43:1e:49:b0:a5:57:8d:f9:24:84:75:12: 79:6c:ba:d5:ef:e3:c0:ee:1d:57:e2:40:8d:7c:de:52:9e:91: a1:56:fd:38:02:a2:c9:0d:20:92:9d:7b:b9:82:12:67:28:27: 8f:6a:11:8e:81:09:ff:3d:a6:f6:3c:da:fd:7d:70:ff:ef:a3: 6f:15:57:7f:a4:74:91:b6:7c:1c:0a:5e:9a:2e:29:01:e5:80: da:06:c3:aa:81:48:ce:40:ae:2b:8f:af:01:55:e3:fc:ba:78: d0:4a:ef:82:61:2a:52:eb:39:1b:a0:31:d6:c9:c2:3e:a5:ca: f9:2c:bb:81:c9:e4:00:ee:78:45:48:a8:13:03:1d:a8:12:8b: 93:a4:b8:f9:17:5c:7f:b4:3d:dd:f7:67:d1:bf:7b:8d:a6:8b: 75:1e:cc:73:4a:64:94:10:83:85:8d:87:b0:69:4b:c2:5d:23: 8b:a6:dd:50:f4:68:59:da:cf:c8:37:7b:8b:1f:ef:c6:19:a2: ca:ae:bd:d7:36:3f:41:f2:53:fc:4c:49:ec:8d:83:06:71:b3: fb:03:00:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcC+tQYOZGIVsNrGCE4bpyWXX7cEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMDMxMDE0MDA4WhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTNhYzBjYmVmYTY2MGJiN2UzYWYwYzhmMzJiNTFkODM4 ODUzZTlmNTVlMjQxMWQ3NmVlYjNjNzJiNmNlMzYxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDB/JW+ka1fEdcBJDkYJ7UfMq14lNBe9sJhpV7sLVrKLbWX B6SQxN7fIYfgBrd5gqDNXuBjPWzz+LTEf+M9QCeM2NljRyKRRLemxY3NRxH3xLYg DZqSmlXO9VimTphuK+3vRVYE1EBZRoV8NOKpDh7Y20YD9VfE5mu9Wl4lH59fFVtV kiiV5uJn9QIxivxSHjXmIUfMLAwfhmJ1vj0leqDR9hjF1FWkqIifuCPOBP35AIis pUJsT/I4nKdswxhwayyERTxFN2n6B0AuV4uK8rh2mGim+y1PLP4d61gkyg/F99tj L2zkZhivY8t7ica4Vu4vu/QfBklsJyL/kpY5E661AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyBuw4DSHUO4glZfaXJ2Pdo15XFswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2JmZDk2NjYwLTI5Y2YtNDA1NC1hMTRlLWNkNDg5NzVkMDhiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBgwDQYJKoZIhvcNAQELBQADggEBAC+UOYV3KQ0mui4JcCQo7Hnh1yXJ kYHSMY3a8w8El6xjBaiKAjIhUQgEukMeSbClV435JIR1EnlsutXv48DuHVfiQI18 3lKekaFW/TgCoskNIJKde7mCEmcoJ49qEY6BCf89pvY82v19cP/vo28VV3+kdJG2 fBwKXpouKQHlgNoGw6qBSM5AriuPrwFV4/y6eNBK74JhKlLrORugMdbJwj6lyvks u4HJ5ADueEVIqBMDHagSi5OkuPkXXH+0Pd33Z9G/e42mi3UezHNKZJQQg4WNh7Bp S8JdI4um3VD0aFnaz8g3e4sf78YZosquvdc2P0HyU/xMSeyNgwZxs/sDAGs= -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:42 2025 by rpki-client