$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa File: 2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa (raw, json) Hash identifier: +jAkhnjp6JJR0Jux0jscZml/YaTUaD8YnAbY++wFsoY= Subject key identifier: 96:07:DA:99:4A:0D:03:76:4E:88:74:9B:EF:DD:CA:02:C4:ED:4B:BA Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2232445D4264AEFBEE936D0C9EE5E06FCB588B97 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa Signing time: Fri 15 Aug 2025 15:30:59 +0000 ROA not before: Fri 15 Aug 2025 15:30:59 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:32:44:5d:42:64:ae:fb:ee:93:6d:0c:9e:e5:e0:6f:cb:58:8b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 15 15:30:59 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=3d47ed9622dbcb416cd33ca0191837ed28a2b2ae0901f6ea2d14e10f71853d2f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:85:23:14:a6:9d:7a:b4:69:e6:73:93:84: 48:e9:6b:47:96:83:fd:b6:62:3c:5d:bf:d6:5e:31: e2:74:1a:fb:79:26:c4:da:91:21:00:43:35:56:d4: be:f8:de:67:8a:e2:ad:a8:0f:55:9f:d0:8f:ad:b3: 6c:75:67:53:fd:6b:eb:25:64:36:05:0b:a3:99:43: 85:27:10:50:3d:16:bc:81:9f:52:c2:bd:c1:37:55: 25:37:3b:14:96:06:dc:ba:70:72:49:8b:ec:95:63: 1e:c2:7d:73:cb:e9:cf:35:9a:ae:8b:b9:e2:43:7d: 75:07:5e:1e:39:3b:3a:99:8c:a8:d5:d0:26:63:37: d4:00:ec:66:03:94:95:88:6e:92:62:1b:e1:18:dc: fd:08:e1:3f:9a:7d:d0:d6:9e:ab:54:ef:f5:4c:91: e5:10:1e:94:c5:eb:95:f3:84:8f:0e:ff:d9:06:c5: f4:c9:81:ae:9e:3d:45:23:3b:3f:2e:47:1a:fa:63: df:f6:83:42:0f:2f:30:3e:9c:01:9b:22:9d:6e:41: 1c:ac:32:1e:4b:d4:3f:11:07:75:09:5e:6e:15:08: f8:22:3c:52:f0:8c:f5:1d:b7:69:4f:05:95:82:46: 52:31:aa:fb:74:41:a6:16:36:21:b0:63:1d:1d:44: 8f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:07:DA:99:4A:0D:03:76:4E:88:74:9B:EF:DD:CA:02:C4:ED:4B:BA X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.28.0/23 Signature Algorithm: sha256WithRSAEncryption 66:21:be:75:c3:e9:49:4f:72:f9:18:59:be:32:41:70:9b:b9: b6:83:6b:9c:a6:e4:21:5d:c5:f7:85:3a:62:42:89:17:62:d5: bf:69:32:b9:b2:c5:42:74:a4:eb:c8:f2:9d:69:73:72:a6:03: 01:5b:60:e5:2e:92:f5:1c:c4:65:94:0a:54:e5:aa:20:b0:f8: ce:a7:7b:19:6b:46:f8:21:ac:77:65:ac:2b:7d:4d:a1:65:ad: ec:5f:7a:cb:42:8e:d9:a1:9e:ba:3f:27:af:07:d8:e2:40:8e: 06:9e:3e:4c:76:93:77:81:5e:c3:4d:22:79:29:f5:d6:f1:ad: cf:1d:67:6c:6c:b2:51:16:79:ec:28:68:dd:00:00:b7:b0:ba: 1b:5c:d3:c6:5f:45:4c:f5:e3:04:c2:70:45:7b:db:01:bc:fb: 5b:ae:16:f7:44:55:cd:82:7a:c1:61:54:87:01:55:9f:8f:c6: e8:47:b0:c8:bb:b0:5b:5d:15:d9:62:51:b8:12:92:27:c0:70: 77:7d:61:87:ff:e5:99:e2:8d:de:e0:a9:c6:ad:26:47:f3:83: 0d:00:c4:ec:0f:8d:c9:58:b9:e5:25:2c:1c:15:83:76:c3:09: cb:b9:65:18:27:a4:cd:49:b7:31:10:ad:fa:38:ad:00:85:aa: e7:84:14:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIjJEXUJkrvvuk20MnuXgb8tYi5cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE1MTUzMDU5WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDQ3ZWQ5NjIyZGJjYjQxNmNkMzNjYTAxOTE4MzdlZDI4 YTJiMmFlMDkwMWY2ZWEyZDE0ZTEwZjcxODUzZDJmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3aIUjFKaderRp5nOThEjpa0eWg/22Yjxdv9ZeMeJ0Gvt5 JsTakSEAQzVW1L743meK4q2oD1Wf0I+ts2x1Z1P9a+slZDYFC6OZQ4UnEFA9FryB n1LCvcE3VSU3OxSWBty6cHJJi+yVYx7CfXPL6c81mq6LueJDfXUHXh45OzqZjKjV 0CZjN9QA7GYDlJWIbpJiG+EY3P0I4T+afdDWnqtU7/VMkeUQHpTF65XzhI8O/9kG xfTJga6ePUUjOz8uRxr6Y9/2g0IPLzA+nAGbIp1uQRysMh5L1D8RB3UJXm4VCPgi PFLwjPUdt2lPBZWCRlIxqvt0QaYWNiGwYx0dRI/rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlgfamUoNA3ZOiHSb793KAsTtS7owHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJhZThkY2RlLTBmNGItNDk5OC1hYzY5LWI0YzVkODYwOTg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBAGYhvnXD6UlPcvkYWb4yQXCbubaD a5ym5CFdxfeFOmJCiRdi1b9pMrmyxUJ0pOvI8p1pc3KmAwFbYOUukvUcxGWUClTl qiCw+M6nexlrRvghrHdlrCt9TaFlrexfestCjtmhnro/J68H2OJAjgaePkx2k3eB XsNNInkp9dbxrc8dZ2xsslEWeewoaN0AALewuhtc08ZfRUz14wTCcEV72wG8+1uu FvdEVc2CesFhVIcBVZ+PxuhHsMi7sFtdFdliUbgSkifAcHd9YYf/5Znijd7gqcat Jkfzgw0AxOwPjclYueUlLBwVg3bDCcu5ZRgnpM1JtzEQrfo4rQCFqueEFMc= -----END CERTIFICATE-----Generated at Sat Aug 23 06:55:13 2025 by rpki-client