$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f4eb4db-a0e0-4435-906c-dd0adf5c7803.roa File: 4f4eb4db-a0e0-4435-906c-dd0adf5c7803.roa (raw, json) Hash identifier: yPHUAuOLapI6iN8wVt5OLf5FCLNOk+IULjhyhxgGfmo= Subject key identifier: C5:54:9F:2E:9E:2C:B5:B6:17:29:75:E5:E8:EB:A4:90:E5:E7:3B:BC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 14A7CD82D32B6993724CD51925390BCF25631A5E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f4eb4db-a0e0-4435-906c-dd0adf5c7803.roa Signing time: Tue 29 Apr 2025 00:30:24 +0000 ROA not before: Tue 29 Apr 2025 00:30:24 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:a7:cd:82:d3:2b:69:93:72:4c:d5:19:25:39:0b:cf:25:63:1a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 29 00:30:24 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=cbcff10ad0e2448f3f858b8878fe3b3cc30fd6effdbb14f831c632ff0dab336d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:69:c3:be:08:f8:51:ab:af:c2:2a:c9:4e: ba:12:2b:56:a2:f8:6e:0a:08:2a:49:dd:d1:73:09: d8:bb:0c:79:d4:07:22:7d:cc:4b:1c:9e:c1:26:45: 6b:05:7a:82:97:4c:03:f2:6e:a0:e5:47:86:67:e9: 95:be:c0:49:a6:ec:6e:be:23:08:10:d1:ad:68:47: b0:5e:b0:e8:b0:e2:4d:98:06:5c:82:d4:27:8c:d5: 1c:e0:7b:4e:6a:50:07:5d:ad:9f:4c:e2:79:8c:96: 23:aa:aa:fa:24:83:08:51:15:c6:3c:0f:ec:16:75: 6e:ec:b5:0f:a8:af:9a:18:49:2e:13:69:e4:7a:d1: 10:de:a3:74:d9:3c:66:c9:dc:98:e5:dc:6c:6a:c5: a1:db:a6:f7:95:25:1d:82:8c:e2:b7:47:71:3e:ce: b1:ca:62:90:18:55:17:32:0e:88:7e:ad:0f:31:7f: 56:97:b6:c6:93:b2:e1:12:ac:17:46:62:3d:e9:5c: 31:08:53:42:e6:dc:b2:e7:81:95:0e:10:e1:91:ed: 5d:52:18:ce:f2:47:1c:17:6b:4e:e0:e9:2b:cc:be: 62:9c:a5:b8:c1:0d:2e:ad:92:72:fc:b8:4c:47:a9: ed:03:c7:08:ca:5e:30:dc:66:47:d5:a5:cc:b7:13: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:54:9F:2E:9E:2C:B5:B6:17:29:75:E5:E8:EB:A4:90:E5:E7:3B:BC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f4eb4db-a0e0-4435-906c-dd0adf5c7803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/12 Signature Algorithm: sha256WithRSAEncryption 39:7b:f1:b0:a0:a0:fc:5d:3b:ca:fb:c8:09:2a:a8:fe:a0:27: e9:07:db:ac:a5:a6:a5:ab:fb:c9:78:38:80:67:25:ee:bd:48: 98:86:b8:f4:d6:c7:52:1a:b4:46:63:00:75:8f:6e:6e:5f:3c: 44:44:1d:e7:07:d0:bd:39:a4:61:6a:68:fe:8b:64:8e:18:18: 57:3a:b0:c9:cd:ed:c3:f6:7b:d9:ed:2f:40:13:7f:c3:69:07: 8b:25:b7:aa:c1:90:0e:7e:60:7a:86:9a:7b:08:1e:0e:c3:56: 5e:1c:74:6b:b7:b4:b5:90:ba:2c:a4:2d:b4:8e:58:9b:5b:cd: 31:c4:e9:4c:95:63:1a:dd:63:e1:3b:ba:0c:5f:4e:ba:03:b2: c5:37:45:04:c5:76:7f:d0:07:e8:40:2f:69:26:50:47:a9:41: 27:d7:a7:76:3a:06:11:39:3a:a0:38:de:b3:0b:10:c8:99:ee: 74:ac:79:d9:23:76:5d:a2:fb:fa:d9:f0:66:2f:66:da:8b:e8: 02:42:da:05:ef:cf:9e:71:54:fe:99:ea:91:2e:ee:f3:66:fe: 03:41:66:9f:3f:6a:26:2c:55:09:a0:8e:0b:a0:c8:1f:12:35: ea:63:82:90:c7:a6:84:3b:9f:c6:ed:6b:cd:83:0f:85:a0:d5: 75:51:e7:21 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFKfNgtMraZNyTNUZJTkLzyVjGl4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI5MDAzMDI0WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmNmZjEwYWQwZTI0NDhmM2Y4NThiODg3OGZlM2IzY2Mz MGZkNmVmZmRiYjE0ZjgzMWM2MzJmZjBkYWIzMzZkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjiGnDvgj4UauvwirJTroSK1ai+G4KCCpJ3dFzCdi7DHnU ByJ9zEscnsEmRWsFeoKXTAPybqDlR4Zn6ZW+wEmm7G6+IwgQ0a1oR7BesOiw4k2Y BlyC1CeM1Rzge05qUAddrZ9M4nmMliOqqvokgwhRFcY8D+wWdW7stQ+or5oYSS4T aeR60RDeo3TZPGbJ3Jjl3GxqxaHbpveVJR2CjOK3R3E+zrHKYpAYVRcyDoh+rQ8x f1aXtsaTsuESrBdGYj3pXDEIU0Lm3LLngZUOEOGR7V1SGM7yRxwXa07g6SvMvmKc pbjBDS6tknL8uExHqe0DxwjKXjDcZkfVpcy3E08PAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxVSfLp4stbYXKXXl6OukkOXnO7wwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzRmNGViNGRiLWEwZTAtNDQzNS05MDZjLWRkMGFkZjVjNzgwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQjYDANBgkqhkiG9w0BAQsFAAOCAQEAOXvxsKCg/F07yvvICSqo/qAn6Qfb rKWmpav7yXg4gGcl7r1ImIa49NbHUhq0RmMAdY9ubl88REQd5wfQvTmkYWpo/otk jhgYVzqwyc3tw/Z72e0vQBN/w2kHiyW3qsGQDn5geoaaewgeDsNWXhx0a7e0tZC6 LKQttI5Ym1vNMcTpTJVjGt1j4Tu6DF9OugOyxTdFBMV2f9AH6EAvaSZQR6lBJ9en djoGETk6oDjeswsQyJnudKx52SN2XaL7+tnwZi9m2ovoAkLaBe/PnnFU/pnqkS7u 82b+A0Fmnz9qJixVCaCOC6DIHxI16mOCkMemhDufxu1rzYMPhaDVdVHnIQ== -----END CERTIFICATE-----Generated at Mon May 5 18:11:44 2025 by rpki-client