$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa File: 10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa (raw, json) Hash identifier: iiDjfUVb4Hzcp5jMmgWA7HXXo0azAyq1yTOZZLTfJTs= Subject key identifier: D7:F1:9B:FF:BE:B4:62:77:38:FB:74:7A:5B:85:B5:DE:CB:2C:7A:47 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3504ECEF40392F7D164E07BCD0A92210DCEA22F6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa Signing time: Sat 10 May 2025 00:50:23 +0000 ROA not before: Sat 10 May 2025 00:50:23 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:04:ec:ef:40:39:2f:7d:16:4e:07:bc:d0:a9:22:10:dc:ea:22:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 10 00:50:23 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=d4daa18ef97a148d98cf8d3e94e52219c7d0c8e1431a104abbe61ca1c9d43c0b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:1a:bf:7e:a2:d6:66:24:d3:d5:ad:a0:03: b8:51:12:f9:85:7e:f2:be:69:0f:bf:68:30:48:28: 7e:60:61:fe:14:13:d8:2e:e2:33:00:91:87:35:b9: af:d8:bf:77:71:76:e1:34:c0:52:95:a5:ed:c4:d0: d7:a9:eb:14:6d:d4:f7:1a:e9:c6:44:39:38:69:53: 3a:2c:92:8b:e6:9f:67:95:0f:80:91:88:de:95:fe: 01:74:ed:f4:a4:78:8f:68:b9:d9:c7:ef:e5:68:a9: 7f:47:b4:72:56:c4:e8:01:dc:b4:c9:99:cf:4a:d7: 71:ec:f9:98:53:cf:0c:4b:2e:e4:5a:f3:13:f4:1e: 87:dd:8d:a6:48:ae:5f:04:18:1b:ff:a3:52:b2:66: 26:d9:80:1d:af:94:61:36:4e:8b:f9:f8:b7:46:17: 97:3b:9f:be:b5:5d:97:ad:f0:3e:c4:fb:61:f6:df: f2:da:82:f2:81:15:5b:40:54:2d:90:92:35:39:2a: e9:e1:31:70:bd:f2:90:f7:bd:38:5c:ef:55:a5:8a: 35:f5:07:be:25:9a:97:a0:f5:6b:87:6f:22:ef:39: 4b:42:36:d7:5e:27:0c:cd:94:0c:7d:8b:20:d8:27: ed:92:90:f9:34:6e:49:f4:b6:6c:26:27:d0:dc:fb: a6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F1:9B:FF:BE:B4:62:77:38:FB:74:7A:5B:85:B5:DE:CB:2C:7A:47 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8d:29:e9:c9:f2:2b:97:a1:de:c8:e7:16:9c:74:ff:e8:e1:b1: 95:43:b4:3b:5a:59:01:e4:53:28:32:09:a5:2e:67:af:80:1e: 36:fa:d5:a3:9e:bf:e5:b0:20:00:3d:bb:f9:7b:6e:91:ee:d0: 6e:20:cf:c5:cc:e9:0f:5c:eb:23:d3:f4:a5:15:db:47:8d:dc: 1b:bb:8c:57:e2:06:94:c6:2f:f1:ef:cc:8f:d9:5d:7d:f0:fd: 13:84:0a:d6:a4:b5:fa:5e:9b:5d:4d:ff:e1:cc:48:2d:35:43: 1e:d2:45:29:a0:66:15:91:9d:4d:87:29:0d:4a:48:0d:8c:32: 18:d0:a8:63:84:2f:83:bc:4c:6f:61:d4:ad:5b:32:dd:76:2a: 82:3e:f8:b6:73:a6:7e:a9:2b:f8:1f:fa:9f:66:46:ee:d5:e0: 35:d5:ea:1e:cd:0c:13:29:1f:4e:8f:78:76:3c:6b:1b:e3:24: fd:ca:8f:3f:2e:11:94:6e:de:c6:71:84:f4:d2:c7:0e:b4:6b: 6c:9a:63:ff:51:f6:08:8a:f2:72:8c:b7:0e:ea:f7:22:a0:da: 95:59:87:23:54:c1:8d:2e:50:27:d2:c8:35:aa:0f:b3:12:fb: 62:aa:de:6d:61:bf:ca:df:c6:f4:e9:57:7c:f5:24:5c:bc:3d: 7b:17:af:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNQTs70A5L30WTge80KkiENzqIvYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTEwMDA1MDIzWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGRhYTE4ZWY5N2ExNDhkOThjZjhkM2U5NGU1MjIxOWM3 ZDBjOGUxNDMxYTEwNGFiYmU2MWNhMWM5ZDQzYzBiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyMxq/fqLWZiTT1a2gA7hREvmFfvK+aQ+/aDBIKH5gYf4U E9gu4jMAkYc1ua/Yv3dxduE0wFKVpe3E0Nep6xRt1Pca6cZEOThpUzoskovmn2eV D4CRiN6V/gF07fSkeI9oudnH7+VoqX9HtHJWxOgB3LTJmc9K13Hs+ZhTzwxLLuRa 8xP0HofdjaZIrl8EGBv/o1KyZibZgB2vlGE2Tov5+LdGF5c7n761XZet8D7E+2H2 3/LagvKBFVtAVC2QkjU5KunhMXC98pD3vThc71WlijX1B74lmpeg9WuHbyLvOUtC NtdeJwzNlAx9iyDYJ+2SkPk0bkn0tmwmJ9Dc+6b9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU1/Gb/760Ync4+3R6W4W13sssekcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzEwYTM1NDhlLTMyNzItNDNlYy1hOGU1LThkMDFjZjg1NmZhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjYDANBgkqhkiG9w0BAQsFAAOCAQEAjSnpyfIrl6HeyOcWnHT/6OGxlUO0 O1pZAeRTKDIJpS5nr4AeNvrVo56/5bAgAD27+Xtuke7QbiDPxczpD1zrI9P0pRXb R43cG7uMV+IGlMYv8e/Mj9ldffD9E4QK1qS1+l6bXU3/4cxILTVDHtJFKaBmFZGd TYcpDUpIDYwyGNCoY4Qvg7xMb2HUrVsy3XYqgj74tnOmfqkr+B/6n2ZG7tXgNdXq Hs0MEykfTo94djxrG+Mk/cqPPy4RlG7exnGE9NLHDrRrbJpj/1H2CIrycoy3Dur3 IqDalVmHI1TBjS5QJ9LINaoPsxL7YqrebWG/yt/G9OlXfPUkXLw9exevFA== -----END CERTIFICATE-----Generated at Sun May 11 01:39:06 2025 by rpki-client