$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa File: 26530834-4a85-45f4-8600-310dadf4036d.roa (raw, json) Hash identifier: ICoSaFbMKS4p0iofzQ90FAwlYUbBgY+KOcnNrfWCh1w= Subject key identifier: 1C:7F:8D:48:C4:48:75:D1:C8:05:9B:2F:54:44:97:0A:FD:2D:CF:22 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 757943F3F3FB6CDC7A16CA930B0C410C7CB4D458 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa Signing time: Sat 10 May 2025 00:50:23 +0000 ROA not before: Sat 10 May 2025 00:50:23 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 17 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:79:43:f3:f3:fb:6c:dc:7a:16:ca:93:0b:0c:41:0c:7c:b4:d4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 10 00:50:23 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=266f48ac4fb24f839cdc358be39e89f844b63d37fb912594811aa31a32465657, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c8:a5:50:88:f9:5a:bd:c6:0e:f8:9f:41:11: 91:96:89:16:15:ae:6b:d2:d2:b6:1e:bf:de:b6:1e: 9c:71:39:59:90:00:29:5f:b3:22:8f:30:7c:63:03: 23:1d:43:fd:d2:35:11:19:6b:af:3b:e1:1b:83:6e: f1:92:60:25:ef:43:6d:a7:e8:5c:91:d0:e4:b4:dd: 7a:91:77:d2:24:20:fa:a1:72:1f:49:8a:21:22:38: 82:80:19:40:7b:12:82:d6:b8:39:7a:19:40:b8:09: 9c:f2:eb:16:50:fb:03:e4:a5:dd:f9:3a:58:04:34: ad:a2:a5:72:d6:df:f6:b8:67:06:c9:10:8c:22:91: 5d:be:83:b7:b6:8f:ee:9f:a4:db:fe:e9:9c:df:4b: 78:d5:c1:ba:5f:f9:d7:d9:a6:06:f0:1d:39:ca:55: 54:d5:bf:88:61:99:85:79:56:51:55:07:46:35:de: 5c:29:d4:f4:ce:72:9f:da:33:53:c4:e2:b8:33:4d: a3:c3:a1:a9:1f:38:83:6f:d0:de:4c:01:09:69:a1: e6:04:a7:f8:11:d6:74:2b:59:00:2c:a1:c8:da:d4: ac:a4:73:33:1b:97:72:e8:8e:dc:3b:fd:db:9e:a1: 8a:d4:3c:d4:d6:52:b1:5c:e5:ba:0b:97:4a:c3:4b: df:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7F:8D:48:C4:48:75:D1:C8:05:9B:2F:54:44:97:0A:FD:2D:CF:22 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.240.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:63:a2:6c:80:45:de:a9:c0:d4:69:31:2c:d7:a0:69:78:58: a7:b2:2e:54:b1:5e:dd:ff:50:6c:0d:f5:08:1d:c8:08:b7:c9: 5f:a1:dc:c0:fd:55:65:33:46:45:fd:3f:39:ca:e9:1b:8d:f6: 3a:cf:d9:a4:a9:d1:6a:01:38:a6:cf:25:3b:2d:c6:ed:ad:15: 1b:f2:c0:cf:fb:90:c1:99:20:82:36:f1:60:3a:4f:92:76:29: ba:a6:39:35:24:88:ef:79:99:eb:82:55:89:cc:41:45:1f:a3: 70:86:22:67:ba:09:f6:a4:24:3b:ab:0a:84:88:bf:7e:5f:8a: 1c:ec:92:01:6a:06:08:63:a4:23:ce:dc:33:6d:94:6d:de:4a: d3:72:37:43:c0:81:41:cf:fc:51:5d:20:5a:25:b5:87:9c:8a: f3:95:0f:a7:19:90:3d:3f:54:ac:13:43:52:e6:02:e7:b9:5a: b2:ca:06:4f:d4:cf:0c:fd:47:6b:71:e0:e3:13:98:bf:56:34: 8d:5a:51:9b:ba:33:36:19:3f:c4:28:68:c6:66:20:22:05:e4: 73:ef:ee:b6:52:a7:98:5f:f9:72:39:fb:b1:d7:7b:11:59:6d: 75:67:1b:34:8c:3f:90:70:37:b4:e8:73:b2:49:b0:9c:5e:41: 79:0d:e7:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdXlD8/P7bNx6FsqTCwxBDHy01FgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTEwMDA1MDIzWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNjZmNDhhYzRmYjI0ZjgzOWNkYzM1OGJlMzllODlmODQ0 YjYzZDM3ZmI5MTI1OTQ4MTFhYTMxYTMyNDY1NjU3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxyKVQiPlavcYO+J9BEZGWiRYVrmvS0rYev962HpxxOVmQ AClfsyKPMHxjAyMdQ/3SNREZa6874RuDbvGSYCXvQ22n6FyR0OS03XqRd9IkIPqh ch9JiiEiOIKAGUB7EoLWuDl6GUC4CZzy6xZQ+wPkpd35OlgENK2ipXLW3/a4ZwbJ EIwikV2+g7e2j+6fpNv+6ZzfS3jVwbpf+dfZpgbwHTnKVVTVv4hhmYV5VlFVB0Y1 3lwp1PTOcp/aM1PE4rgzTaPDoakfOINv0N5MAQlpoeYEp/gR1nQrWQAsocja1Kyk czMbl3Lojtw7/dueoYrUPNTWUrFc5boLl0rDS9+7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHH+NSMRIddHIBZsvVESXCv0tzyIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzI2NTMwODM0LTRhODUtNDVmNC04NjAwLTMxMGRhZGY0MDM2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYPAwDQYJKoZIhvcNAQELBQADggEBAI5jomyARd6pwNRpMSzXoGl4WKey LlSxXt3/UGwN9QgdyAi3yV+h3MD9VWUzRkX9PznK6RuN9jrP2aSp0WoBOKbPJTst xu2tFRvywM/7kMGZIII28WA6T5J2KbqmOTUkiO95meuCVYnMQUUfo3CGIme6Cfak JDurCoSIv35fihzskgFqBghjpCPO3DNtlG3eStNyN0PAgUHP/FFdIFoltYecivOV D6cZkD0/VKwTQ1LmAue5WrLKBk/Uzwz9R2tx4OMTmL9WNI1aUZu6MzYZP8QoaMZm ICIF5HPv7rZSp5hf+XI5+7HXexFZbXVnGzSMP5BwN7Toc7JJsJxeQXkN54M= -----END CERTIFICATE-----Generated at Fri May 16 09:48:22 2025 by rpki-client