$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa File: 2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa (raw, json) Hash identifier: QfOm6sGHuq/2PDm5fMgD7b3ryZLG5r4MEj58DkV5a3Q= Subject key identifier: 89:8D:0E:A3:40:1D:35:E1:20:F5:F2:9E:25:D8:F7:5E:29:81:7D:FB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 26E8CDAF274020FA07D78C444C0A8DA98DE1D6D4 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa Signing time: Wed 25 Jun 2025 00:40:12 +0000 ROA not before: Wed 25 Jun 2025 00:40:12 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:e8:cd:af:27:40:20:fa:07:d7:8c:44:4c:0a:8d:a9:8d:e1:d6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 25 00:40:12 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=f7ad1c5e5e88071b87ddbab22f8cfd744678e25c97522aae9b89ce380df4ace0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:c3:e4:ff:b1:6e:b2:f0:f2:4e:d0:70:1b: 9c:48:cb:f1:f8:78:19:3e:70:4e:e6:9c:44:c0:f7: 8f:3a:d6:fc:e5:3f:54:7c:ee:12:ee:03:70:8a:58: bf:5f:9d:0e:b4:ea:63:ef:28:47:37:4a:df:32:5b: 16:3b:6b:50:72:ee:eb:30:b4:20:c2:4c:b7:4f:f1: 15:3c:46:52:d8:2f:e7:7e:a0:d5:38:04:1f:a5:2b: 48:54:40:61:81:32:ef:01:5d:54:e8:d0:a8:31:03: 34:d2:2f:8f:82:d4:1d:69:8e:7b:7b:57:d1:bd:0e: 26:25:ac:0c:76:40:5c:0e:00:48:f4:25:aa:94:2f: 85:9f:41:ff:da:45:92:01:e8:8b:b1:75:c6:6b:36: bc:6d:e3:c4:e1:a8:99:e3:3d:09:42:3b:c7:92:17: 1c:cd:21:08:d6:e5:cc:46:57:a7:cb:33:01:e6:92: ce:5f:be:d5:8b:bd:39:7c:6a:17:40:8c:95:69:5d: 9b:ed:b1:43:7d:27:06:a7:89:1e:8c:43:fa:f6:dd: b6:f4:6b:ca:9f:79:75:05:25:9b:76:d6:cc:73:a0: b3:82:5e:93:e6:bb:ea:52:9f:99:a1:fc:9c:2f:ff: 1b:3e:55:85:68:ed:ec:8f:ac:08:18:14:9c:14:f0: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8D:0E:A3:40:1D:35:E1:20:F5:F2:9E:25:D8:F7:5E:29:81:7D:FB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:91:c2:1a:5f:a4:fb:ff:0d:c4:24:1d:18:ca:4d:5f:14:e4: 0f:60:56:04:4f:f6:3e:8a:0e:e8:ae:79:41:9f:b7:e4:37:bd: 0f:cd:d7:f5:fd:ea:75:fb:6d:37:ee:78:d2:35:89:7f:24:17: 2d:20:0b:b9:0a:67:c2:f5:59:da:a3:4c:ac:8c:d0:3a:65:83: 65:88:29:27:68:06:b2:09:d5:ca:2a:4a:18:89:ac:58:ff:29: d6:f7:d2:43:84:18:6a:3e:9b:c7:7a:c5:b3:66:28:c7:bd:0b: 5a:8c:12:a4:9b:49:14:0f:43:6b:39:e8:2c:51:62:b2:0f:58: f0:80:16:75:3a:97:8a:a5:5a:19:b2:94:ca:13:47:34:99:e0: fd:26:e2:68:51:4e:dc:74:1e:26:f2:74:1c:1c:e8:16:9b:47: dd:34:20:fd:8c:71:3b:4f:37:fb:9d:5d:47:81:b3:3f:7c:44: 03:5c:96:63:cf:2c:8d:ae:2d:36:db:b2:ea:b8:bf:e4:1f:a3: 2f:8e:a7:d9:85:80:7f:ba:55:1a:68:93:3b:00:f2:9c:fa:c6: 28:a1:b9:32:78:02:a4:ba:6e:bb:83:12:db:c2:40:85:78:3a: 42:23:9b:2a:64:91:bb:90:fe:14:61:8b:c8:e6:51:dd:69:a0: 10:d9:6e:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJujNrydAIPoH14xETAqNqY3h1tQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjI1MDA0MDEyWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmN2FkMWM1ZTVlODgwNzFiODdkZGJhYjIyZjhjZmQ3NDQ2 NzhlMjVjOTc1MjJhYWU5Yjg5Y2UzODBkZjRhY2UwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC478Pk/7FusvDyTtBwG5xIy/H4eBk+cE7mnETA94861vzl P1R87hLuA3CKWL9fnQ606mPvKEc3St8yWxY7a1By7uswtCDCTLdP8RU8RlLYL+d+ oNU4BB+lK0hUQGGBMu8BXVTo0KgxAzTSL4+C1B1pjnt7V9G9DiYlrAx2QFwOAEj0 JaqUL4WfQf/aRZIB6IuxdcZrNrxt48ThqJnjPQlCO8eSFxzNIQjW5cxGV6fLMwHm ks5fvtWLvTl8ahdAjJVpXZvtsUN9JwaniR6MQ/r23bb0a8qfeXUFJZt21sxzoLOC XpPmu+pSn5mh/Jwv/xs+VYVo7eyPrAgYFJwU8D4tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiY0Oo0AdNeEg9fKeJdj3XimBffswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJjM2Q3MjQ3LWUwN2ItNGQxYy1hNmVlLWViYWExM2ZiZDljYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAH2RwhpfpPv/DcQkHRjKTV8U5A9g VgRP9j6KDuiueUGft+Q3vQ/N1/X96nX7bTfueNI1iX8kFy0gC7kKZ8L1WdqjTKyM 0Dplg2WIKSdoBrIJ1coqShiJrFj/Kdb30kOEGGo+m8d6xbNmKMe9C1qMEqSbSRQP Q2s56CxRYrIPWPCAFnU6l4qlWhmylMoTRzSZ4P0m4mhRTtx0HibydBwc6BabR900 IP2McTtPN/udXUeBsz98RANclmPPLI2uLTbbsuq4v+Qfoy+Op9mFgH+6VRpokzsA 8pz6xiihuTJ4AqS6bruDEtvCQIV4OkIjmypkkbuQ/hRhi8jmUd1poBDZbro= -----END CERTIFICATE-----Generated at Fri Jul 4 13:26:31 2025 by rpki-client