$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa File: 7c33d577-2251-4085-bace-8c3b8f2bada2.roa (raw, json) Hash identifier: umYQS6eZWNvS/vkewhIjXGTwN0E9Sip5M8eLDQQ1vr4= Subject key identifier: 08:F9:F6:04:27:AB:36:33:43:73:3D:E4:82:9D:10:40:8B:92:53:C8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3488744B7D6A5788ADFFE1497AFB63BBB9D995FE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa Signing time: Wed 18 Jun 2025 00:30:07 +0000 ROA not before: Wed 18 Jun 2025 00:30:07 +0000 ROA not after: Wed 23 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:88:74:4b:7d:6a:57:88:ad:ff:e1:49:7a:fb:63:bb:b9:d9:95:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 18 00:30:07 2025 GMT Not After : Jul 23 23:59:59 2025 GMT Subject: serialNumber=495a09177ab13f5a6732eae0771fa5489df0b827fa741f70526de2c2393e0efb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:90:43:3c:c4:80:d3:a4:d7:e7:0d:be:f2: ee:48:f8:10:d3:3e:44:73:53:e8:b9:d1:3e:e3:db: 37:72:6f:bb:c8:73:e8:b1:3f:b0:99:3c:dd:46:33: ca:d6:ab:bc:62:cd:58:2a:12:bf:2e:65:20:ed:54: 74:8f:80:bf:cb:32:d0:c2:b5:1c:ca:cf:56:06:33: b3:62:d0:95:bd:0c:c4:6a:79:de:72:ec:ae:02:79: 1d:26:12:b5:72:28:e6:dd:b1:0e:65:90:fe:cb:ec: 0b:44:24:27:27:1a:cc:30:21:c0:3e:ae:d9:27:6d: 35:82:6c:7a:88:ea:a1:02:e4:4d:67:82:8b:03:9d: e2:53:4d:c0:42:59:8a:b3:ab:05:9f:26:e0:d4:77: 2c:4f:09:5c:ff:b9:41:74:0f:01:92:42:a8:b6:a2: 45:27:3c:d5:37:23:b3:c7:2b:e7:4b:c8:4a:ee:7a: 54:78:3e:1e:d1:16:ed:aa:47:f9:85:b6:07:6a:71: 45:0f:42:20:d0:2e:2a:9e:c1:42:a2:d7:53:34:d0: dd:78:cd:4c:4e:07:d1:ac:d9:7d:ad:bb:11:b4:47: 2e:28:ba:f2:e7:60:ff:07:7d:a0:be:89:f9:bf:c9: cc:2d:2c:7c:cf:ef:bc:63:71:a7:70:cd:c1:14:1b: ab:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F9:F6:04:27:AB:36:33:43:73:3D:E4:82:9D:10:40:8B:92:53:C8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7c33d577-2251-4085-bace-8c3b8f2bada2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.1.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d5:a2:c9:36:16:c5:ed:22:ee:4e:a2:eb:18:b4:84:97:9b: 31:a1:55:68:a9:54:8d:e3:46:5a:de:dc:01:c4:f1:d6:f2:45: 74:34:f0:16:3c:04:4c:4c:f8:5e:4d:96:68:11:d8:23:30:b9: 63:4e:9b:ef:8d:a5:e9:4c:bc:58:85:0e:58:3c:db:c6:55:16: 13:54:da:ce:19:ef:f2:52:e6:a3:d2:a7:8b:65:6d:b7:74:a9: bb:db:fc:1d:b6:1c:c7:3d:54:43:b5:7a:be:50:28:c4:31:1b: 88:f8:8c:71:71:9f:b1:90:90:07:90:33:c0:91:f2:ba:10:b4: 35:66:d9:60:39:1d:27:9f:9d:36:dc:7c:73:12:31:ef:14:fd: 1c:5a:70:46:de:23:db:84:2f:9f:5a:64:04:d1:3e:69:16:94: 66:2e:d0:84:3f:57:09:7c:8d:33:37:de:41:27:79:0e:e2:ee: b1:54:69:a2:1d:6f:1a:92:97:d7:72:91:f0:18:3e:74:2a:ea: 21:15:49:6a:77:3e:33:12:38:ca:ff:05:6e:8d:54:1b:c9:c0: a8:fe:2f:b9:5c:82:63:98:7d:5e:96:ed:28:3d:87:e2:b5:15: fe:a0:91:cd:64:30:5d:1d:96:80:bd:0c:cd:f8:e5:6f:dd:f5: 02:6d:dc:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNIh0S31qV4it/+FJevtju7nZlf4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjE4MDAzMDA3WhcNMjUwNzIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OTVhMDkxNzdhYjEzZjVhNjczMmVhZTA3NzFmYTU0ODlk ZjBiODI3ZmE3NDFmNzA1MjZkZTJjMjM5M2UwZWZiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaVZBDPMSA06TX5w2+8u5I+BDTPkRzU+i50T7j2zdyb7vI c+ixP7CZPN1GM8rWq7xizVgqEr8uZSDtVHSPgL/LMtDCtRzKz1YGM7Ni0JW9DMRq ed5y7K4CeR0mErVyKObdsQ5lkP7L7AtEJCcnGswwIcA+rtknbTWCbHqI6qEC5E1n gosDneJTTcBCWYqzqwWfJuDUdyxPCVz/uUF0DwGSQqi2okUnPNU3I7PHK+dLyEru elR4Ph7RFu2qR/mFtgdqcUUPQiDQLiqewUKi11M00N14zUxOB9Gs2X2tuxG0Ry4o uvLnYP8HfaC+ifm/ycwtLHzP77xjcadwzcEUG6shAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCPn2BCerNjNDcz3kgp0QQIuSU8gwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzdjMzNkNTc3LTIyNTEtNDA4NS1iYWNlLThjM2I4ZjJiYWRhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAEwDQYJKoZIhvcNAQELBQADggEBACbVosk2FsXtIu5OousYtISXmzGh VWipVI3jRlre3AHE8dbyRXQ08BY8BExM+F5NlmgR2CMwuWNOm++NpelMvFiFDlg8 28ZVFhNU2s4Z7/JS5qPSp4tlbbd0qbvb/B22HMc9VEO1er5QKMQxG4j4jHFxn7GQ kAeQM8CR8roQtDVm2WA5HSefnTbcfHMSMe8U/RxacEbeI9uEL59aZATRPmkWlGYu 0IQ/Vwl8jTM33kEneQ7i7rFUaaIdbxqSl9dykfAYPnQq6iEVSWp3PjMSOMr/BW6N VBvJwKj+L7lcgmOYfV6W7Sg9h+K1Ff6gkc1kMF0dloC9DM345W/d9QJt3KY= -----END CERTIFICATE-----Generated at Fri Jul 4 17:42:26 2025 by rpki-client