$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa File: 2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa (raw, json) Hash identifier: rZq+OGDyplU0QuJFl5PUFMg1SU/88cJl/s9jIH/KzYU= Subject key identifier: 56:2D:57:F5:94:26:1F:04:C6:A4:8A:64:6C:24:7E:36:99:97:DF:64 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 095DC0A2F0145379EC6AEE38CABF063723AF4DFB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa Signing time: Fri 15 Aug 2025 15:30:15 +0000 ROA not before: Fri 15 Aug 2025 15:30:15 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:5d:c0:a2:f0:14:53:79:ec:6a:ee:38:ca:bf:06:37:23:af:4d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 15 15:30:15 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=f12cff95ed7c9be5360ad011cc8ada3f720a80ae3286292883e78e3cd4bbf25b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:d6:06:e3:c4:61:e4:d2:23:e5:98:4f:ea: 0d:28:b6:f3:85:c4:45:13:28:7e:f2:a2:6b:be:05: cb:7c:96:08:53:d6:0e:9c:5f:25:7e:7a:cf:5c:2e: 2f:eb:12:5a:38:e5:4f:60:17:99:53:1b:4d:ed:0d: 6e:a4:0e:43:32:2e:bb:0c:b9:52:bf:b1:2d:0a:de: 4d:94:e5:47:c3:c8:67:88:6c:dd:42:c0:f2:20:7c: b7:47:df:e1:7e:f4:38:df:dd:01:5d:63:ff:2b:2c: c4:47:c9:d3:ed:59:d3:73:1c:cf:c8:d3:57:8b:25: 4b:8a:bb:c5:af:c1:05:16:7e:07:d9:bd:c3:65:2a: ec:89:fc:61:60:e0:5b:64:27:1d:9d:b2:fb:a0:07: 95:a5:8b:cd:2e:22:7b:4d:56:36:d6:29:24:de:2d: ca:6c:f5:4c:f6:e9:f4:5c:3f:53:e8:a5:87:ae:b2: 11:d2:d7:fe:99:d7:95:23:8a:e7:db:8d:c3:06:bf: a2:c1:42:11:1d:90:7b:fd:d3:5e:9a:7a:1f:71:83: a3:33:61:03:96:6d:46:18:7b:60:f6:2c:a1:b9:dd: 09:49:48:63:00:4b:ac:b4:18:e2:0e:39:e1:4e:97: 94:a7:91:79:77:91:98:c8:11:05:5b:41:69:e6:c4: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2D:57:F5:94:26:1F:04:C6:A4:8A:64:6C:24:7E:36:99:97:DF:64 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:71:ec:2f:6a:93:ef:56:72:50:f7:68:3e:1e:e4:cc:b9:58: 32:b5:4d:b0:51:5f:25:5b:fe:0f:23:6d:c0:c9:18:08:22:9f: eb:19:a2:a1:7c:da:76:e4:e2:a6:d7:48:32:b7:57:61:70:1b: 68:0b:6d:de:09:f9:04:ee:25:c7:39:23:8d:15:a8:8c:4a:75: 08:15:6e:db:e9:c7:19:21:08:fb:52:2e:bf:71:12:da:46:95: 67:58:87:eb:0f:56:b4:fb:b1:2e:f1:6a:c0:15:e7:67:79:31: 5d:30:77:91:77:f1:d6:15:dd:38:ef:72:37:43:3b:0d:64:e3: 82:9a:dc:de:ac:04:8b:f5:0e:e9:1c:c1:34:7d:e7:75:fe:7a: 9e:76:ab:31:6c:0e:4f:46:e9:86:20:62:91:bc:38:1e:8b:fd: c1:2f:e7:0f:72:10:c9:be:ab:4f:00:09:f1:66:46:4a:0a:96: 55:02:91:66:24:e3:7a:76:8a:12:df:01:e6:c0:f9:2b:d6:1e: 3c:cc:c6:ae:9f:e0:4e:4f:60:06:db:50:b2:ef:f9:6c:5d:17: 4e:7c:39:b5:5a:2b:66:7c:5d:b9:25:c1:89:df:93:03:be:e3: be:a5:d5:02:16:81:92:04:80:24:fc:b8:dc:aa:63:d9:26:e0: 33:d9:4a:25 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCV3AovAUU3nsau44yr8GNyOvTfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE1MTUzMDE1WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTJjZmY5NWVkN2M5YmU1MzYwYWQwMTFjYzhhZGEzZjcy MGE4MGFlMzI4NjI5Mjg4M2U3OGUzY2Q0YmJmMjViMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBw9YG48Rh5NIj5ZhP6g0otvOFxEUTKH7yomu+Bct8lghT 1g6cXyV+es9cLi/rElo45U9gF5lTG03tDW6kDkMyLrsMuVK/sS0K3k2U5UfDyGeI bN1CwPIgfLdH3+F+9Djf3QFdY/8rLMRHydPtWdNzHM/I01eLJUuKu8WvwQUWfgfZ vcNlKuyJ/GFg4FtkJx2dsvugB5Wli80uIntNVjbWKSTeLcps9Uz26fRcP1PopYeu shHS1/6Z15UjiufbjcMGv6LBQhEdkHv9016aeh9xg6MzYQOWbUYYe2D2LKG53QlJ SGMAS6y0GOIOOeFOl5SnkXl3kZjIEQVbQWnmxEU7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUVi1X9ZQmHwTGpIpkbCR+NpmX32QwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJjM2Q3MjQ3LWUwN2ItNGQxYy1hNmVlLWViYWExM2ZiZDljYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAG1x7C9qk+9WclD3aD4e5My5WDK1 TbBRXyVb/g8jbcDJGAgin+sZoqF82nbk4qbXSDK3V2FwG2gLbd4J+QTuJcc5I40V qIxKdQgVbtvpxxkhCPtSLr9xEtpGlWdYh+sPVrT7sS7xasAV52d5MV0wd5F38dYV 3TjvcjdDOw1k44Ka3N6sBIv1DukcwTR953X+ep52qzFsDk9G6YYgYpG8OB6L/cEv 5w9yEMm+q08ACfFmRkoKllUCkWYk43p2ihLfAebA+SvWHjzMxq6f4E5PYAbbULLv +WxdF058ObVaK2Z8XbklwYnfkwO+476l1QIWgZIEgCT8uNyqY9km4DPZSiU= -----END CERTIFICATE-----Generated at Sat Aug 23 17:30:04 2025 by rpki-client