$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa File: c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa (raw, json) Hash identifier: SNRplxMEcZxbGwY9FP9RgSuHJoeQ7bfSWULdA0u1sjo= Subject key identifier: 71:33:B2:81:56:AD:33:31:D8:A9:B8:CD:AD:2D:03:5A:F2:D4:00:7A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5DEE91DC8F427DC9B38F85236A48AE61D530C3BE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa Signing time: Tue 04 Nov 2025 00:30:12 +0000 ROA not before: Tue 04 Nov 2025 00:30:12 +0000 ROA not after: Tue 09 Dec 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ee:91:dc:8f:42:7d:c9:b3:8f:85:23:6a:48:ae:61:d5:30:c3:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Nov 4 00:30:12 2025 GMT Not After : Dec 9 23:59:59 2025 GMT Subject: serialNumber=9e656c8ad98bd0093a7fe01102962e2cb0b147d648bc8454c3d5444b58739e63, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:67:9a:48:15:e7:e7:cf:7c:bb:3a:9a:dc:a9: 0d:70:ec:36:4c:ee:ea:8d:ad:b6:e0:f2:e9:3d:76: 93:82:dd:88:fb:04:96:cc:a9:e7:a6:b9:2b:fb:72: b4:1d:a1:74:9e:ad:bd:2a:9c:ff:c9:e3:9f:57:0a: f9:ee:6a:02:d6:d4:ce:83:cb:c9:4f:ad:fe:a0:26: 3f:e3:81:c7:3c:87:c4:4b:11:cc:c6:6a:17:0a:fc: 4a:28:13:01:0a:85:51:9d:75:dd:5d:c5:48:fd:4f: fc:23:e2:e1:b4:1f:9c:68:89:58:f0:97:44:cc:cc: 14:fa:49:fe:b1:79:14:88:5a:e0:e0:f9:cc:dc:dc: d2:8d:51:d2:92:1a:30:bf:75:8b:5a:fd:9e:ba:3e: 75:04:15:e0:6f:8a:af:cc:df:9d:f6:d1:c7:a1:2f: 2a:90:13:45:84:87:d1:10:bb:7c:c5:af:f7:9d:9a: 2c:04:ff:fa:a7:e1:4e:a4:37:d0:34:84:37:29:05: 47:d8:c0:6c:be:b7:c1:b7:fe:75:a3:46:b0:c5:78: 8a:6a:85:e5:2f:45:9a:90:e5:32:9b:ab:7d:08:56: 2e:9e:08:20:cc:ef:0b:06:dc:f8:a5:42:6b:38:13: c8:0f:62:fe:2d:4f:5c:b2:e2:dc:c4:42:2a:de:f4: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:33:B2:81:56:AD:33:31:D8:A9:B8:CD:AD:2D:03:5A:F2:D4:00:7A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.3.0/24 Signature Algorithm: sha256WithRSAEncryption 27:6e:32:97:33:35:dc:e6:8f:d1:6c:12:79:7e:ad:e7:65:66: cf:45:e8:19:10:1b:ee:03:2d:63:91:11:96:40:08:d6:01:08: 52:6f:6b:aa:1e:c0:18:75:40:79:05:00:75:db:a9:cb:da:59: b6:33:2e:a4:ad:49:7a:ef:69:a3:81:7a:02:d4:38:10:99:c5: 35:58:06:db:22:d8:57:83:d4:e9:0f:55:77:38:fa:bb:39:d9: e1:dc:23:5f:33:63:4f:78:d4:d0:4e:a9:73:2d:24:d8:57:11: 8b:c6:f9:ef:01:24:90:93:4b:56:ca:b6:09:7b:d7:02:4b:9c: 76:dc:a6:45:18:4a:2a:f1:15:3e:96:99:27:84:09:ed:de:4d: a1:5f:49:6e:db:f2:0b:77:75:a6:ed:a3:84:e8:4f:60:ae:b2: 97:32:3b:93:23:a7:62:96:74:a9:c4:88:c7:97:be:81:72:6c: 7d:6e:e3:5b:fe:d6:fd:ae:48:39:91:11:e9:89:d9:34:b5:51: b7:ef:91:ff:66:e3:6c:92:f8:97:6f:89:fd:59:4c:0e:93:4e: cd:69:59:12:7a:e4:9f:c4:eb:26:e8:ab:a6:76:e7:49:dc:e2: ff:52:71:d1:dd:8f:3b:b9:e5:82:b6:b4:f3:ce:66:b6:37:95: 97:53:8d:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXe6R3I9Cfcmzj4UjakiuYdUww74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUxMTA0MDAzMDEyWhcNMjUxMjA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTY1NmM4YWQ5OGJkMDA5M2E3ZmUwMTEwMjk2MmUyY2Iw YjE0N2Q2NDhiYzg0NTRjM2Q1NDQ0YjU4NzM5ZTYzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjZ5pIFefnz3y7OprcqQ1w7DZM7uqNrbbg8uk9dpOC3Yj7 BJbMqeemuSv7crQdoXSerb0qnP/J459XCvnuagLW1M6Dy8lPrf6gJj/jgcc8h8RL EczGahcK/EooEwEKhVGddd1dxUj9T/wj4uG0H5xoiVjwl0TMzBT6Sf6xeRSIWuDg +czc3NKNUdKSGjC/dYta/Z66PnUEFeBviq/M35320cehLyqQE0WEh9EQu3zFr/ed miwE//qn4U6kN9A0hDcpBUfYwGy+t8G3/nWjRrDFeIpqheUvRZqQ5TKbq30IVi6e CCDM7wsG3PilQms4E8gPYv4tT1yy4tzEQire9IChAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcTOygVatMzHYqbjNrS0DWvLUAHowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MwYzRmNjU0LWEzZWEtNDkwZi05NDM2LTE4MmUwZWVlMGM0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAMwDQYJKoZIhvcNAQELBQADggEBACduMpczNdzmj9FsEnl+redlZs9F 6BkQG+4DLWOREZZACNYBCFJva6oewBh1QHkFAHXbqcvaWbYzLqStSXrvaaOBegLU OBCZxTVYBtsi2FeD1OkPVXc4+rs52eHcI18zY0941NBOqXMtJNhXEYvG+e8BJJCT S1bKtgl71wJLnHbcpkUYSirxFT6WmSeECe3eTaFfSW7b8gt3dabto4ToT2Cuspcy O5Mjp2KWdKnEiMeXvoFybH1u41v+1v2uSDmREemJ2TS1Ubfvkf9m42yS+Jdvif1Z TA6TTs1pWRJ65J/E6yboq6Z250nc4v9ScdHdjzu55YK2tPPOZrY3lZdTjT8= -----END CERTIFICATE-----Generated at Wed Nov 5 18:37:31 2025 by rpki-client