$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa File: 3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa (raw, json) Hash identifier: 1xLS5oANmhRirkFUIaALF6Ks4Z7HSjBZDoPs6+Hz5os= Subject key identifier: 53:32:F8:05:67:69:D4:01:0C:15:5F:16:42:2B:EC:BE:45:B4:6F:88 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0264C4369E41A921667DCB2CB64C8841CC5DFEA1 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa Signing time: Sat 10 May 2025 00:50:31 +0000 ROA not before: Sat 10 May 2025 00:50:31 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:64:c4:36:9e:41:a9:21:66:7d:cb:2c:b6:4c:88:41:cc:5d:fe:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 10 00:50:31 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=c5c1231db64fc7bdd58fbd18f517aba1119f82a13a462f4ec6dd5acfbca4d27c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d0:dc:8c:f6:46:d8:af:01:2f:58:20:3d:b9: f6:fe:b9:df:34:03:29:0f:eb:45:6c:11:a1:44:42: 9a:5f:cf:e6:98:ea:0c:c0:33:6e:09:11:95:06:22: f2:b9:db:38:6c:57:fb:05:0f:b9:4e:43:0b:6b:3e: ff:44:a8:f9:47:db:f8:f5:b6:37:e8:cf:df:5b:da: bc:31:bd:9e:d4:6f:5d:d8:e4:cd:6f:73:02:d1:d1: 1a:f9:e3:bd:39:e8:c9:14:8d:48:50:f5:2c:69:fc: 20:b6:2c:d0:e4:87:10:a6:7b:f8:6d:ed:83:ec:04: 57:90:1a:98:2e:d2:82:83:6b:6b:3e:08:cc:b5:e2: 7e:34:9c:b2:e8:b1:ab:14:9e:60:d8:d0:45:59:1d: 99:74:c4:f6:10:64:a3:40:88:cb:31:53:c4:aa:39: 46:f8:a1:3c:32:f0:f0:e1:67:09:4d:64:af:03:0f: b1:af:57:ab:79:54:6d:60:7b:2a:a1:be:3e:f3:f3: 6a:bc:f5:41:c8:ee:87:50:76:ec:4f:3d:c5:f8:48: ef:9f:2e:bb:02:02:84:69:2d:58:63:64:1f:bf:31: 3c:ef:6e:8d:d7:46:f8:b5:36:c2:b8:77:aa:6d:8d: ec:03:af:0c:c3:a5:32:6f:45:31:4d:c1:1b:6d:a2: a1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:32:F8:05:67:69:D4:01:0C:15:5F:16:42:2B:EC:BE:45:B4:6F:88 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.242.0/24 Signature Algorithm: sha256WithRSAEncryption 53:80:d8:39:5f:0c:65:e7:20:0f:97:e6:55:84:64:73:eb:c5: 5f:da:61:6d:a1:94:ac:92:22:59:dd:41:6c:13:fa:1c:ff:34: d2:86:7a:cc:93:ff:ee:ae:39:42:9b:ab:fe:84:d5:59:07:5f: 8f:ff:d0:cc:29:ac:29:0e:33:4d:fb:32:63:32:4b:99:0e:ff: 00:f4:d3:07:20:7f:30:fe:71:7f:89:f5:22:bb:e2:56:9e:6f: 41:ca:e9:cf:f8:51:2c:e2:16:e0:01:83:30:02:a3:ec:7a:73: a1:75:a6:f2:da:dc:75:f5:c0:af:28:a7:40:f4:71:a2:6c:75: 58:2e:5a:c7:23:2c:0a:0c:02:55:4d:6e:2a:26:2a:e6:ce:ab: d5:6d:48:39:40:b7:d5:14:cb:92:a1:c5:9f:d8:6a:e5:6c:2f: e7:e0:a6:30:77:1c:f5:9a:00:db:d6:0f:30:31:e1:59:d4:26: 5e:7a:ba:7f:b4:ad:9b:ab:0c:8d:0f:e2:57:39:9b:5e:21:f1: f6:de:3f:c7:bb:2f:03:2d:91:b5:c3:c7:ed:96:bc:b5:51:c4: 48:dc:cc:e1:cb:89:62:0a:46:f9:2a:b0:1c:1d:e7:da:d1:28: 70:c0:e6:ec:b7:71:d4:3f:f0:1e:5b:8e:e7:cc:c1:12:25:b3: b0:2c:8c:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAmTENp5BqSFmfcsstkyIQcxd/qEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTEwMDA1MDMxWhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNWMxMjMxZGI2NGZjN2JkZDU4ZmJkMThmNTE3YWJhMTEx OWY4MmExM2E0NjJmNGVjNmRkNWFjZmJjYTRkMjdjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC20NyM9kbYrwEvWCA9ufb+ud80AykP60VsEaFEQppfz+aY 6gzAM24JEZUGIvK52zhsV/sFD7lOQwtrPv9EqPlH2/j1tjfoz99b2rwxvZ7Ub13Y 5M1vcwLR0Rr547056MkUjUhQ9Sxp/CC2LNDkhxCme/ht7YPsBFeQGpgu0oKDa2s+ CMy14n40nLLosasUnmDY0EVZHZl0xPYQZKNAiMsxU8SqOUb4oTwy8PDhZwlNZK8D D7GvV6t5VG1geyqhvj7z82q89UHI7odQduxPPcX4SO+fLrsCAoRpLVhjZB+/MTzv bo3XRvi1NsK4d6ptjewDrwzDpTJvRTFNwRttoqFpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUzL4BWdp1AEMFV8WQivsvkW0b4gwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzNkODMwYmI2LTJiYWItNGNjNi1iNzk1LTg0ZjBiMzliZTcwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPIwDQYJKoZIhvcNAQELBQADggEBAFOA2DlfDGXnIA+X5lWEZHPrxV/a YW2hlKySIlndQWwT+hz/NNKGesyT/+6uOUKbq/6E1VkHX4//0MwprCkOM037MmMy S5kO/wD00wcgfzD+cX+J9SK74laeb0HK6c/4USziFuABgzACo+x6c6F1pvLa3HX1 wK8op0D0caJsdVguWscjLAoMAlVNbiomKubOq9VtSDlAt9UUy5KhxZ/YauVsL+fg pjB3HPWaANvWDzAx4VnUJl56un+0rZurDI0P4lc5m14h8fbeP8e7LwMtkbXDx+2W vLVRxEjczOHLiWIKRvkqsBwd59rRKHDA5uy3cdQ/8B5bjufMwRIls7AsjF0= -----END CERTIFICATE-----Generated at Tue May 13 14:14:57 2025 by rpki-client