$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa File: 0be6e662-afc9-4903-9919-894f035a475c.roa (raw, json) Hash identifier: D+ZUFqrZzlJGfsZDH+YYsA8KcEl7Boj+g0YEuQ8Led0= Subject key identifier: 31:6E:EE:A1:F7:BD:78:7C:E3:BC:6C:E8:86:15:49:60:A8:C0:FC:E0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4AFFB40FE23CA73FAA1F84D954E47D5EE6E92632 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa Signing time: Mon 16 Jun 2025 20:22:11 +0000 ROA not before: Mon 16 Jun 2025 20:22:11 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ff:b4:0f:e2:3c:a7:3f:aa:1f:84:d9:54:e4:7d:5e:e6:e9:26:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 16 20:22:11 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=535d4ed509c6549d2f4623c84a4ad2b483eac4c8f7f3f752835b516db6e9b2cc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:29:86:2b:7f:47:d9:32:7b:4d:79:5f:97:2b: 15:ec:2f:e6:bd:80:f5:e6:b7:c8:5b:f4:99:2e:47: d1:82:ba:4e:de:a2:1f:47:2d:16:d7:62:09:2e:fa: 96:e2:c9:67:c6:ac:db:5a:52:b4:44:3c:d9:e4:c6: 6a:85:39:0a:dd:cd:a9:d3:7c:be:6e:f1:81:3e:1b: b0:d1:99:71:09:d8:0b:9d:14:ee:18:be:d0:1e:4d: 3b:3e:71:d5:10:ca:f7:28:8d:96:8a:5d:02:e2:e8: 38:0d:06:2d:75:2d:96:f2:c3:f8:5e:eb:ff:76:0b: 82:e8:87:56:68:d7:64:39:a5:02:7a:17:0a:16:d3: d5:4d:04:59:7c:0d:c1:9a:8b:4b:55:da:ab:bc:e4: ae:4e:05:ec:3b:b4:e0:7c:2d:4b:0e:5e:6a:28:e3: ff:7a:6d:e0:e8:5a:7b:eb:c4:0b:7f:9c:f1:80:ad: d7:dc:7b:38:93:37:fa:be:d9:3e:d6:7d:3b:23:c2: 03:46:3e:2f:cf:05:8c:2a:72:6b:35:96:77:9b:51: dd:f8:b4:5c:44:50:92:67:50:6e:f7:27:e7:4e:32: 1c:7e:ca:97:1c:c7:ca:0b:6e:94:72:96:53:39:bb: 48:af:05:8b:22:2d:04:bb:7c:2a:38:e7:ad:6e:c0: 15:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:6E:EE:A1:F7:BD:78:7C:E3:BC:6C:E8:86:15:49:60:A8:C0:FC:E0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 88:2e:31:8e:ff:8c:bd:bb:73:cd:63:2c:6c:45:34:06:01:b8: 7c:42:d9:fd:8d:a1:a9:c8:8d:fa:63:39:d4:21:b4:81:73:01: f8:77:57:f9:64:7f:ba:15:cb:18:68:e5:e6:58:09:9c:b8:94: 02:7c:a2:78:a8:60:aa:bc:47:19:ba:4a:36:45:bc:58:da:d5: 1e:a8:90:c9:6f:fa:99:10:35:7d:81:cd:a4:c6:67:46:88:dd: 32:67:7b:13:6f:31:f0:11:8e:52:93:de:02:a4:46:fc:ac:70: b8:ee:e5:64:d3:26:e1:61:2f:e6:28:16:27:ca:2a:af:92:cb: 60:8e:8e:21:d2:89:a6:8f:90:76:02:96:7f:ed:1d:0c:30:d7: 7d:66:76:0b:0b:85:92:83:d2:2d:d1:a4:e9:e2:e5:f4:a5:fd: ad:4a:b5:60:99:0a:0e:d8:cb:e6:6b:c1:88:45:ad:29:3f:ca: 1a:97:6a:9a:2c:1b:b5:91:33:09:6d:a2:a9:da:d1:1c:41:3d: 45:e7:7d:af:61:19:91:35:cd:c6:a2:b0:fa:97:33:33:69:f3: e9:1e:24:96:5f:86:0a:d7:67:f1:b4:cf:35:32:91:62:bb:e9: 52:db:98:31:15:5b:ae:68:2e:68:56:bd:08:04:1f:c3:80:e0: 21:e4:d9:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSv+0D+I8pz+qH4TZVOR9XubpJjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjE2MjAyMjExWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzVkNGVkNTA5YzY1NDlkMmY0NjIzYzg0YTRhZDJiNDgz ZWFjNGM4ZjdmM2Y3NTI4MzViNTE2ZGI2ZTliMmNjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpKYYrf0fZMntNeV+XKxXsL+a9gPXmt8hb9JkuR9GCuk7e oh9HLRbXYgku+pbiyWfGrNtaUrREPNnkxmqFOQrdzanTfL5u8YE+G7DRmXEJ2Aud FO4YvtAeTTs+cdUQyvcojZaKXQLi6DgNBi11LZbyw/he6/92C4Loh1Zo12Q5pQJ6 FwoW09VNBFl8DcGai0tV2qu85K5OBew7tOB8LUsOXmoo4/96beDoWnvrxAt/nPGA rdfceziTN/q+2T7WfTsjwgNGPi/PBYwqcms1lnebUd34tFxEUJJnUG73J+dOMhx+ ypccx8oLbpRyllM5u0ivBYsiLQS7fCo4561uwBUzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMW7uofe9eHzjvGzohhVJYKjA/OAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBiZTZlNjYyLWFmYzktNDkwMy05OTE5LTg5NGYwMzVhNDc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAIguMY7/jL27c81jLGxFNAYBuHxC 2f2NoanIjfpjOdQhtIFzAfh3V/lkf7oVyxho5eZYCZy4lAJ8onioYKq8Rxm6SjZF vFja1R6okMlv+pkQNX2BzaTGZ0aI3TJnexNvMfARjlKT3gKkRvyscLju5WTTJuFh L+YoFifKKq+Sy2COjiHSiaaPkHYCln/tHQww131mdgsLhZKD0i3RpOni5fSl/a1K tWCZCg7Yy+ZrwYhFrSk/yhqXaposG7WRMwltoqna0RxBPUXnfa9hGZE1zcaisPqX MzNp8+keJJZfhgrXZ/G0zzUykWK76VLbmDEVW65oLmhWvQgEH8OA4CHk2RQ= -----END CERTIFICATE-----Generated at Fri Jul 4 18:18:17 2025 by rpki-client