$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/363b7fd5-bc16-4c3e-a390-ff62d952ac87.roa File: 363b7fd5-bc16-4c3e-a390-ff62d952ac87.roa (raw, json) Hash identifier: mpfuM9Q6G+EB6zwxim5c9o/TrNhJWBPh1MwbG/NU2jk= Subject key identifier: 01:B7:A7:AF:DC:65:0E:C6:29:C7:58:A7:21:B9:EA:EF:C5:30:22:6E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 67AC0A04B46AF33BFD5AB484CF64A57C41AF89ED Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/363b7fd5-bc16-4c3e-a390-ff62d952ac87.roa Signing time: Wed 25 Jun 2025 00:40:17 +0000 ROA not before: Wed 25 Jun 2025 00:40:17 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ac:0a:04:b4:6a:f3:3b:fd:5a:b4:84:cf:64:a5:7c:41:af:89:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 25 00:40:17 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=f4489e8455759b7c6094e702bc1236a267187e8b32d08e042dc47b0e0b4553a7, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d8:c0:f2:8d:64:26:9d:2f:9c:9f:7a:48:5a: ac:34:49:e5:bd:08:7d:92:28:ae:5f:32:2b:c0:d9: 66:e9:aa:d9:90:1a:c4:72:88:81:93:44:d9:d8:43: c3:e8:ba:93:4b:3b:b1:31:57:5f:82:e5:5e:74:17: 59:6c:76:e3:9d:3a:08:20:96:22:60:28:4c:40:c1: b4:7b:8b:f4:09:26:5f:b0:f5:3a:1a:0e:73:ea:82: 25:fa:b2:f4:d9:60:2a:ad:0f:81:89:27:96:ae:ea: ab:c6:7b:27:69:27:bd:f3:ae:de:eb:a8:a0:8d:4e: 16:dc:c3:31:8b:bb:13:aa:85:01:db:e0:ea:29:8f: 50:5e:04:73:2d:8b:2d:b2:b5:bf:83:3c:68:e1:b7: cd:29:b2:07:cb:ff:77:06:7b:77:d8:c8:3c:75:0c: c6:b5:24:28:ae:98:2e:ce:02:f7:2b:c9:bd:79:50: 88:3a:1c:89:cf:bb:12:ba:e2:22:ae:65:d5:44:22: c7:65:0d:e1:e4:70:b8:de:73:da:f6:ba:80:8c:0a: 07:09:13:46:bb:81:57:21:0e:3e:ae:6b:d7:ab:1c: 44:1d:42:cf:e1:95:90:c2:ce:fb:c0:b8:3f:2c:70: 63:95:26:9d:ce:50:44:7d:98:32:80:45:d1:78:9d: ea:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B7:A7:AF:DC:65:0E:C6:29:C7:58:A7:21:B9:EA:EF:C5:30:22:6E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/363b7fd5-bc16-4c3e-a390-ff62d952ac87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.24.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:dd:5d:1e:e2:5e:7b:3b:41:3e:76:7b:66:0b:8a:ef:f6:90: bc:2a:42:ea:8b:44:57:2e:5b:56:db:6b:18:8d:f8:e0:6b:db: cb:3f:65:c7:83:ae:25:16:c8:67:b4:d8:7b:5e:db:75:68:21: 15:7e:ba:13:d0:36:94:d4:5d:38:d3:54:1c:65:e0:32:42:59: 1c:4a:33:ee:a5:77:61:0e:ee:44:87:ce:84:93:8c:16:75:f0: 4a:c4:39:0f:50:2c:15:b5:df:fa:2c:d5:ed:6b:7f:f6:31:f6: c6:ba:02:78:f5:e7:30:6c:9d:56:2a:de:01:4d:bc:4c:c1:42: 52:b1:f2:15:30:b9:b6:54:46:48:89:67:56:06:b3:68:84:76: 42:26:9e:fb:b6:93:cb:66:06:80:2c:c4:81:72:b6:ad:76:af: ba:ef:2d:47:6a:05:f6:43:ec:2a:32:74:c6:ae:c6:79:8a:47: 77:e7:ba:42:ba:ad:25:30:c4:f2:cb:68:02:64:81:43:fd:fb: 33:9b:a4:7a:f8:7d:45:81:da:4b:ce:e5:bf:68:5c:cd:a7:5a: a7:f6:ce:3f:5a:65:68:11:a3:c3:6d:6e:fa:fd:de:46:b4:3e: 30:16:48:0b:83:ff:3d:bb:73:3f:0b:6f:1d:c0:fc:29:3a:da: 7b:05:cf:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ6wKBLRq8zv9WrSEz2SlfEGvie0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjI1MDA0MDE3WhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNDQ4OWU4NDU1NzU5YjdjNjA5NGU3MDJiYzEyMzZhMjY3 MTg3ZThiMzJkMDhlMDQyZGM0N2IwZTBiNDU1M2E3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDi2MDyjWQmnS+cn3pIWqw0SeW9CH2SKK5fMivA2WbpqtmQ GsRyiIGTRNnYQ8PoupNLO7ExV1+C5V50F1lsduOdOgggliJgKExAwbR7i/QJJl+w 9ToaDnPqgiX6svTZYCqtD4GJJ5au6qvGeydpJ73zrt7rqKCNThbcwzGLuxOqhQHb 4Oopj1BeBHMtiy2ytb+DPGjht80psgfL/3cGe3fYyDx1DMa1JCiumC7OAvcryb15 UIg6HInPuxK64iKuZdVEIsdlDeHkcLjec9r2uoCMCgcJE0a7gVchDj6ua9erHEQd Qs/hlZDCzvvAuD8scGOVJp3OUER9mDKARdF4neojAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAbenr9xlDsYpx1inIbnq78UwIm4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM2M2I3ZmQ1LWJjMTYtNGMzZS1hMzkwLWZmNjJkOTUyYWM4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBgwDQYJKoZIhvcNAQELBQADggEBAFrdXR7iXns7QT52e2YLiu/2kLwq QuqLRFcuW1bbaxiN+OBr28s/ZceDriUWyGe02Hte23VoIRV+uhPQNpTUXTjTVBxl 4DJCWRxKM+6ld2EO7kSHzoSTjBZ18ErEOQ9QLBW13/os1e1rf/Yx9sa6Anj15zBs nVYq3gFNvEzBQlKx8hUwubZURkiJZ1YGs2iEdkImnvu2k8tmBoAsxIFytq12r7rv LUdqBfZD7CoydMauxnmKR3fnukK6rSUwxPLLaAJkgUP9+zObpHr4fUWB2kvO5b9o XM2nWqf2zj9aZWgRo8Ntbvr93ka0PjAWSAuD/z27cz8Lbx3A/Ck62nsFz5s= -----END CERTIFICATE-----Generated at Fri Jul 4 13:33:46 2025 by rpki-client