$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11d9eaa3-71e5-49d1-8290-2bbbb6411f83.roa File: 11d9eaa3-71e5-49d1-8290-2bbbb6411f83.roa (raw, json) Hash identifier: Cuc/2g/OqKBZ+I+NsQL1oWHSTKR/4muLycY2d5BBiGw= Subject key identifier: 0F:A9:F8:B3:65:68:53:3D:B3:18:BA:D5:60:11:EA:B9:5E:51:45:CE Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 520AA9DA299A68407ED3CCE8209594DD4FAE137C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11d9eaa3-71e5-49d1-8290-2bbbb6411f83.roa Signing time: Wed 25 Jun 2025 00:40:54 +0000 ROA not before: Wed 25 Jun 2025 00:40:54 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0a:a9:da:29:9a:68:40:7e:d3:cc:e8:20:95:94:dd:4f:ae:13:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 25 00:40:54 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=83679b8471737217d2c622fb3b68242b1a2d4b0a2e82bce388832c2aaaf99a09, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:56:e2:22:da:67:c7:e7:e2:b4:61:04:de:32: 94:d2:06:61:e6:16:f5:51:6d:1e:93:ba:7d:0d:1a: a6:1e:4c:b9:c2:c6:2f:ef:9f:98:3d:4f:53:09:0a: 05:98:ec:d9:6d:92:3b:f5:8a:c7:7a:ec:81:79:6f: f0:90:fb:89:97:26:85:30:6c:c2:41:bf:df:a6:79: 42:64:09:9c:89:57:56:c2:73:ff:ff:bd:00:ca:7a: 42:2a:4f:e7:5e:bf:05:a3:6a:b5:3e:0e:ca:92:61: 7a:bc:96:8f:c9:05:b4:f7:9d:fd:9f:c4:d3:08:bb: 77:67:b4:39:18:df:4d:6a:2c:93:7f:fc:d5:02:ed: 3f:0e:cc:16:56:38:a7:34:4a:b7:bb:2a:0d:39:43: 85:3b:05:ae:30:eb:7e:da:94:8e:ff:ea:be:d4:79: 0d:8f:ba:18:00:aa:45:88:6a:46:9e:12:1a:e1:45: 80:4b:3d:36:93:50:7b:44:61:bf:1b:54:b3:9d:9a: 14:8e:8b:cf:bf:54:ad:f4:f6:0d:2d:2a:da:ca:36: c6:45:8e:4a:0c:ad:9a:a6:82:f7:65:00:56:4d:d0: 8d:95:8f:e3:58:63:91:cf:60:ed:75:04:e5:7e:66: bc:74:e5:52:55:02:47:1f:44:34:94:5a:fa:4b:ee: 9f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A9:F8:B3:65:68:53:3D:B3:18:BA:D5:60:11:EA:B9:5E:51:45:CE X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11d9eaa3-71e5-49d1-8290-2bbbb6411f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/20 Signature Algorithm: sha256WithRSAEncryption 47:23:7a:8b:28:cf:cf:57:67:8b:37:79:bb:15:01:af:af:14: 25:01:88:2b:39:04:74:47:4d:80:85:ae:39:05:7d:d0:7a:13: d1:b6:4b:73:0a:38:77:52:12:56:ac:0f:9c:35:f3:20:0a:2d: 50:db:87:fa:db:6a:8d:b1:4c:37:66:31:ba:56:88:9c:63:f6: 82:61:25:7a:13:f4:bf:45:54:2e:0d:c2:79:0e:cd:44:a8:1b: ad:d5:52:7b:d8:01:ed:c8:3a:83:ec:c7:c4:69:fa:f7:ad:e5: bf:43:d6:03:d3:b2:a3:bc:e1:4f:0b:9f:28:74:38:f1:8e:ce: 1f:ff:de:69:a2:34:6e:1e:48:d0:60:ca:3d:ac:bd:bd:4a:b2: d8:bb:04:17:3d:2e:15:e6:ed:0b:bd:5f:bf:58:c4:56:82:7c: 39:4a:be:18:18:2f:58:d8:49:65:77:1d:81:19:46:66:d1:a9: b4:7e:48:73:23:4d:b0:0b:7f:c1:8a:4b:99:41:b5:f2:b8:2d: 12:99:11:62:de:3b:16:73:7f:c3:55:27:9e:f8:e0:38:0f:34: d6:f9:62:dd:64:75:f8:cc:b3:bc:5d:64:ce:88:4a:6a:af:4c: 5b:46:c0:4c:c6:80:b4:15:73:e6:27:26:9d:ac:5a:66:26:76: a4:50:47:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUgqp2imaaEB+08zoIJWU3U+uE3wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjI1MDA0MDU0WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzY3OWI4NDcxNzM3MjE3ZDJjNjIyZmIzYjY4MjQyYjFh MmQ0YjBhMmU4MmJjZTM4ODgzMmMyYWFhZjk5YTA5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqVuIi2mfH5+K0YQTeMpTSBmHmFvVRbR6Tun0NGqYeTLnC xi/vn5g9T1MJCgWY7Nltkjv1isd67IF5b/CQ+4mXJoUwbMJBv9+meUJkCZyJV1bC c///vQDKekIqT+devwWjarU+DsqSYXq8lo/JBbT3nf2fxNMIu3dntDkY301qLJN/ /NUC7T8OzBZWOKc0Sre7Kg05Q4U7Ba4w637alI7/6r7UeQ2PuhgAqkWIakaeEhrh RYBLPTaTUHtEYb8bVLOdmhSOi8+/VK309g0tKtrKNsZFjkoMrZqmgvdlAFZN0I2V j+NYY5HPYO11BOV+Zrx05VJVAkcfRDSUWvpL7p8tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD6n4s2VoUz2zGLrVYBHquV5RRc4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzExZDllYWEzLTcxZTUtNDlkMS04MjkwLTJiYmJiNjQxMWY4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYBAwDQYJKoZIhvcNAQELBQADggEBAEcjeosoz89XZ4s3ebsVAa+vFCUB iCs5BHRHTYCFrjkFfdB6E9G2S3MKOHdSElasD5w18yAKLVDbh/rbao2xTDdmMbpW iJxj9oJhJXoT9L9FVC4NwnkOzUSoG63VUnvYAe3IOoPsx8Rp+vet5b9D1gPTsqO8 4U8Lnyh0OPGOzh//3mmiNG4eSNBgyj2svb1Ksti7BBc9LhXm7Qu9X79YxFaCfDlK vhgYL1jYSWV3HYEZRmbRqbR+SHMjTbALf8GKS5lBtfK4LRKZEWLeOxZzf8NVJ574 4DgPNNb5Yt1kdfjMs7xdZM6ISmqvTFtGwEzGgLQVc+YnJp2sWmYmdqRQR0s= -----END CERTIFICATE-----Generated at Sun Jun 29 09:18:49 2025 by rpki-client