$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa File: 07bd3aac-7c97-429a-9a81-6751e4001f6d.roa (raw, json) Hash identifier: gJeJ/7x7Du3+75r6YD2HXDDhs6An4GAmQBWaiuXWbrI= Subject key identifier: 26:CA:00:9A:8C:AC:38:F9:82:22:3D:61:D7:B5:47:82:90:82:3C:A5 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2E82B1CA2CA457B0D417499DF4E640563A2CEAC7 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa Signing time: Tue 17 Jun 2025 00:30:27 +0000 ROA not before: Tue 17 Jun 2025 00:30:27 +0000 ROA not after: Tue 22 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:82:b1:ca:2c:a4:57:b0:d4:17:49:9d:f4:e6:40:56:3a:2c:ea:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 17 00:30:27 2025 GMT Not After : Jul 22 23:59:59 2025 GMT Subject: serialNumber=7ea8461724327efde0fc9d5742234025b9344a2820312a39d53898193191fe90, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:0a:47:03:bb:ed:47:ce:2f:d0:64:2a:f7: 91:65:c0:cb:34:7e:d7:8c:32:ab:dd:a9:8a:dd:5b: fc:01:b3:aa:93:37:4c:e2:96:ce:4d:92:d0:b3:b7: 15:ec:32:9f:4d:de:4c:ea:b2:0e:c3:9b:49:02:a6: 94:dd:78:4c:04:c8:f0:3c:a5:d5:bf:62:a6:fe:29: fe:08:85:c0:56:16:76:18:43:a7:8f:2c:22:37:e5: 13:1d:cb:fc:2c:80:96:b2:a1:07:eb:3d:0e:7f:02: 8f:72:dc:94:dc:28:bc:0f:ff:95:b6:54:c8:d3:ed: e5:af:12:78:ba:0c:6c:d0:53:28:e4:59:23:17:2c: b3:e0:21:26:63:4c:69:47:bd:29:9a:b7:28:7d:80: e3:9b:ae:92:cf:c9:56:e5:0c:f3:d5:fd:a0:1d:d1: 62:c9:0a:49:41:ac:36:67:21:7b:91:47:e1:18:1e: cd:1a:98:04:e7:20:7f:9d:56:cc:83:1f:1f:1e:2f: 0f:b1:e3:56:8b:0c:39:19:ad:67:05:d1:77:d7:2e: 16:70:0a:2a:57:1b:65:f6:46:b3:58:6f:84:1a:64: b4:ef:02:ee:a8:d4:a9:c1:7b:b5:92:c8:8e:88:cd: 94:16:ee:3e:2e:6b:a3:03:85:e4:f8:0c:ab:04:cb: f5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CA:00:9A:8C:AC:38:F9:82:22:3D:61:D7:B5:47:82:90:82:3C:A5 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07bd3aac-7c97-429a-9a81-6751e4001f6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.6.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:97:8c:c5:73:04:93:bf:0d:c8:a3:d1:3d:bc:8d:96:57:5c: 0b:4c:45:d1:19:a6:1d:d0:24:a1:00:eb:06:97:26:d4:d7:2e: b4:3a:a1:f1:cf:fd:c0:f4:86:b6:13:e6:90:4d:9d:30:fa:aa: a6:25:31:ed:61:dc:1b:11:79:1d:8d:70:a1:26:74:d2:1b:e6: 78:d4:94:1a:76:a4:05:33:e8:5e:24:3f:96:6f:26:47:c2:6b: 56:9c:3c:2f:75:2a:e4:7a:50:e7:0f:36:3b:60:59:28:0d:66: cf:7c:46:36:e6:72:6f:b2:23:f2:5c:34:24:24:d8:fa:cf:07: 82:73:e9:90:62:a4:f6:1a:04:8d:01:2a:f3:c5:f3:29:dc:7c: b9:d4:91:79:8c:78:5d:c7:5f:6b:15:0f:27:3c:05:16:8f:96: ae:19:11:12:52:4a:67:a4:30:0b:89:17:74:70:e6:ec:26:71: d4:73:00:aa:4b:e4:10:16:38:85:e3:02:54:08:90:c8:a1:4c: 5f:8c:96:7f:b8:ba:d0:88:fd:f3:70:9b:2a:1e:a4:fb:b5:da: e5:2a:f3:a6:11:a0:60:19:79:9f:ee:7f:ca:42:ed:86:86:74: d5:85:cf:26:49:14:05:6b:a9:ba:46:6d:84:81:91:fd:81:74: 6d:e6:a5:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULoKxyiykV7DUF0md9OZAVjos6scwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjE3MDAzMDI3WhcNMjUwNzIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWE4NDYxNzI0MzI3ZWZkZTBmYzlkNTc0MjIzNDAyNWI5 MzQ0YTI4MjAzMTJhMzlkNTM4OTgxOTMxOTFmZTkwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvHApHA7vtR84v0GQq95FlwMs0fteMMqvdqYrdW/wBs6qT N0zils5NktCztxXsMp9N3kzqsg7Dm0kCppTdeEwEyPA8pdW/Yqb+Kf4IhcBWFnYY Q6ePLCI35RMdy/wsgJayoQfrPQ5/Ao9y3JTcKLwP/5W2VMjT7eWvEni6DGzQUyjk WSMXLLPgISZjTGlHvSmatyh9gOObrpLPyVblDPPV/aAd0WLJCklBrDZnIXuRR+EY Hs0amATnIH+dVsyDHx8eLw+x41aLDDkZrWcF0XfXLhZwCipXG2X2RrNYb4QaZLTv Au6o1KnBe7WSyI6IzZQW7j4ua6MDheT4DKsEy/XnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJsoAmoysOPmCIj1h17VHgpCCPKUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3YmQzYWFjLTdjOTctNDI5YS05YTgxLTY3NTFlNDAwMWY2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAYwDQYJKoZIhvcNAQELBQADggEBAGqXjMVzBJO/Dcij0T28jZZXXAtM RdEZph3QJKEA6waXJtTXLrQ6ofHP/cD0hrYT5pBNnTD6qqYlMe1h3BsReR2NcKEm dNIb5njUlBp2pAUz6F4kP5ZvJkfCa1acPC91KuR6UOcPNjtgWSgNZs98Rjbmcm+y I/JcNCQk2PrPB4Jz6ZBipPYaBI0BKvPF8yncfLnUkXmMeF3HX2sVDyc8BRaPlq4Z ERJSSmekMAuJF3Rw5uwmcdRzAKpL5BAWOIXjAlQIkMihTF+Mln+4utCI/fNwmyoe pPu12uUq86YRoGAZeZ/uf8pC7YaGdNWFzyZJFAVrqbpGbYSBkf2BdG3mpRU= -----END CERTIFICATE-----Generated at Wed Jul 2 21:04:58 2025 by rpki-client