$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa File: 5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa (raw, json) Hash identifier: RNf8sYe44Du7JMpDEhzXdotSlZTw9dU0PY2px3i/Mgs= Subject key identifier: 32:53:59:44:FA:D9:74:15:CE:D5:83:B6:B8:5C:53:20:C6:DA:24:66 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 30E7CB3BB8BC24EFEB3088CE59EBCAF543A13AE8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa Signing time: Mon 16 Jun 2025 19:10:10 +0000 ROA not before: Mon 16 Jun 2025 19:10:10 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e7:cb:3b:b8:bc:24:ef:eb:30:88:ce:59:eb:ca:f5:43:a1:3a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 16 19:10:10 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=308a6218b4ecdc18eb3f70ab60ae396f14f7b24efcc727c2d137e6bbfb27c068, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:87:7d:1c:e9:7d:e2:29:1f:fc:03:82:b5: 5f:24:89:7f:4a:6e:8f:fc:8a:0b:69:48:2f:71:a2: aa:f4:4f:2a:18:76:d9:97:f9:25:44:1f:79:14:2b: 72:81:72:35:84:58:7b:0e:55:13:d8:e2:a5:d9:b3: 4c:73:60:63:0a:ad:37:98:ec:e0:b9:08:0c:70:5c: 26:32:5b:56:70:40:b1:07:37:b3:a8:5e:63:49:bf: 74:8c:0e:01:92:d5:20:b8:10:26:fb:69:1c:93:a5: 78:c0:30:d6:08:b0:a8:be:ba:a5:1e:41:5f:eb:f2: bf:3a:fd:8b:c0:2b:6a:42:c7:8c:42:84:60:bb:b0: e0:21:78:ef:ae:8d:36:33:df:f3:3b:61:1d:bb:2d: 69:8e:5f:99:11:3d:a3:69:c9:dd:48:5f:44:4b:b9: 7f:df:28:4e:34:30:fb:88:49:32:a6:c6:2a:7b:91: e0:fe:9a:8d:1e:bc:12:dc:32:ff:64:2e:d6:b6:25: 46:9f:3a:66:3c:12:74:5c:54:d1:59:bb:ef:11:1e: 61:d2:27:51:f8:0c:2a:e1:38:19:34:36:a6:12:34: 4e:23:4a:ba:3d:e4:76:46:0d:34:a7:48:d8:7f:95: 55:9e:3f:91:d5:5c:37:a0:1c:eb:97:1c:63:ee:02: 66:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:53:59:44:FA:D9:74:15:CE:D5:83:B6:B8:5C:53:20:C6:DA:24:66 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.2.0/24 Signature Algorithm: sha256WithRSAEncryption 46:29:c9:c0:f5:8f:5d:60:ca:bb:2f:62:cf:00:d8:47:17:e2: 75:96:cb:ff:d2:a8:4b:f9:9b:af:31:65:18:c5:18:d6:41:61: e2:38:3a:31:2e:6b:3f:9c:aa:4f:be:9f:09:3d:c9:a8:83:3a: bc:98:c4:e7:1e:96:5d:1b:70:50:9a:9c:7f:67:ce:cb:b4:29: 65:c1:30:06:2f:52:31:f7:59:16:9a:f6:32:01:b4:95:b7:6a: 4b:17:cd:af:4a:67:02:6f:3a:8b:d6:ce:93:79:95:11:40:a1: 41:28:eb:fc:6e:ca:cd:5e:05:fa:6c:03:59:ff:66:61:0a:9c: 43:34:4a:ed:62:c4:ee:e8:47:c3:23:91:a8:77:cc:5f:79:88: f6:b3:82:c8:16:05:be:a2:f0:18:f0:8c:f9:e6:e0:4d:1d:96: b3:04:a0:27:43:5d:d8:0b:4c:d8:21:23:dd:7c:58:42:46:da: 2b:97:19:85:61:12:a0:a1:9f:64:04:e5:fa:12:f8:17:c7:61: 48:a3:8e:01:de:fc:4a:ac:5c:eb:b6:a2:0d:97:6a:f4:11:60: 5c:1d:ba:33:12:3d:51:7a:1e:16:96:5b:3d:3c:da:1f:d0:35: f3:31:35:0d:d8:e0:29:70:31:43:5f:5e:5d:fe:f9:12:de:8f: 90:f5:6a:d9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMOfLO7i8JO/rMIjOWevK9UOhOugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjE2MTkxMDEwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzMDhhNjIxOGI0ZWNkYzE4ZWIzZjcwYWI2MGFlMzk2ZjE0 ZjdiMjRlZmNjNzI3YzJkMTM3ZTZiYmZiMjdjMDY4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNSYd9HOl94ikf/AOCtV8kiX9Kbo/8igtpSC9xoqr0TyoY dtmX+SVEH3kUK3KBcjWEWHsOVRPY4qXZs0xzYGMKrTeY7OC5CAxwXCYyW1ZwQLEH N7OoXmNJv3SMDgGS1SC4ECb7aRyTpXjAMNYIsKi+uqUeQV/r8r86/YvAK2pCx4xC hGC7sOAheO+ujTYz3/M7YR27LWmOX5kRPaNpyd1IX0RLuX/fKE40MPuISTKmxip7 keD+mo0evBLcMv9kLta2JUafOmY8EnRcVNFZu+8RHmHSJ1H4DCrhOBk0NqYSNE4j Sro95HZGDTSnSNh/lVWeP5HVXDegHOuXHGPuAmbPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMlNZRPrZdBXO1YO2uFxTIMbaJGYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVmZmFlYjZmLTIwNTYtNDJhZS1iMGRlLWQxZmZmMDUzYTY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAIwDQYJKoZIhvcNAQELBQADggEBAEYpycD1j11gyrsvYs8A2EcX4nWW y//SqEv5m68xZRjFGNZBYeI4OjEuaz+cqk++nwk9yaiDOryYxOcell0bcFCanH9n zsu0KWXBMAYvUjH3WRaa9jIBtJW3aksXza9KZwJvOovWzpN5lRFAoUEo6/xuys1e BfpsA1n/ZmEKnEM0Su1ixO7oR8Mjkah3zF95iPazgsgWBb6i8BjwjPnm4E0dlrME oCdDXdgLTNghI918WEJG2iuXGYVhEqChn2QE5foS+BfHYUijjgHe/EqsXOu2og2X avQRYFwdujMSPVF6HhaWWz082h/QNfMxNQ3Y4ClwMUNfXl3++RLej5D1atk= -----END CERTIFICATE-----Generated at Wed Jul 2 22:43:57 2025 by rpki-client