$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa File: 8467dcd7-366c-4080-b9a9-e85d9f84b167.roa (raw, json) Hash identifier: UtW1Ocir7VtTEoOU7WW2qPF7X31HrMj6X4jll6Zi94I= Subject key identifier: E8:FA:B5:B9:B5:C4:B1:48:CD:E3:CD:E4:1A:42:05:B4:6E:C7:79:06 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7568A17D5AAEFBE856C6C0EB3FDEA8569C025709 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa Signing time: Tue 29 Apr 2025 00:30:26 +0000 ROA not before: Tue 29 Apr 2025 00:30:26 +0000 ROA not after: Tue 03 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:68:a1:7d:5a:ae:fb:e8:56:c6:c0:eb:3f:de:a8:56:9c:02:57:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 29 00:30:26 2025 GMT Not After : Jun 3 23:59:59 2025 GMT Subject: serialNumber=fad3344d55f6db25f4931b8b2e2f8e4421f2cb6d5c15dd5cb2aa01a8aa968caa, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:63:47:cb:fe:27:a4:ab:82:52:5c:46:15: d2:f7:3b:bd:ae:9d:bb:50:d2:ca:dc:73:66:f5:27: be:2d:42:d8:6b:ef:1e:f3:7b:c6:d0:b0:55:c7:62: f4:fc:3c:03:76:8b:e5:78:3a:61:5b:3b:e9:d2:a3: 06:f7:2e:3c:ce:f7:8d:0e:b0:a2:f9:17:da:6b:89: f8:be:ac:5d:70:fc:46:5f:8c:69:c2:eb:e4:9e:c9: 82:f5:59:25:a6:9e:f0:a9:3c:a0:ca:81:78:4e:c4: c2:37:72:fb:85:1d:3d:27:4b:25:e4:fd:44:f5:5c: d9:85:42:1e:d9:26:4d:ab:a0:ea:7d:d1:98:d5:0d: ea:b0:a7:30:c2:4e:3c:07:71:32:f1:92:50:51:70: 86:f5:0b:5d:da:93:37:5c:0e:99:4b:74:6b:ce:42: 9e:e1:88:61:d7:c5:2e:d3:86:40:01:5d:fe:6e:66: 51:1b:fa:f7:77:3c:63:8a:b3:40:4a:45:4b:e8:93: 18:0b:e9:94:c5:d3:7e:5e:ea:2e:24:2b:45:4b:e0: 23:7d:7f:6a:8f:11:dd:f4:d2:cf:f9:f0:52:4f:31: 19:d8:9e:54:e1:79:de:c7:8f:63:cd:c9:1e:43:85: 8d:31:b2:59:2e:90:28:2d:b4:fc:e1:81:5a:5f:54: b4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FA:B5:B9:B5:C4:B1:48:CD:E3:CD:E4:1A:42:05:B4:6E:C7:79:06 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/20 Signature Algorithm: sha256WithRSAEncryption 15:bd:ba:5e:9b:bc:39:e6:59:3a:ac:74:06:61:74:f1:ef:f7: e3:40:87:ab:1e:23:b4:ab:dc:be:ba:cb:35:ae:0f:21:d9:5a: ab:e2:96:91:95:ed:8b:36:67:a3:09:df:18:63:c3:47:b7:0f: e6:71:83:41:57:f4:c6:f2:6b:bf:4f:21:62:bc:15:3f:a3:4f: bc:7e:b8:90:c9:dd:ac:a5:8c:56:c1:e1:cd:75:63:73:1c:3d: 96:fa:64:33:e9:3f:f9:8a:29:b7:ed:db:b9:d8:ff:97:f5:60: ea:5c:30:ea:de:8d:d2:77:51:35:bd:86:fc:56:76:db:56:0f: 27:12:b9:22:db:ed:4b:ae:fb:b3:94:33:eb:d2:ce:3c:7c:7b: dc:29:ca:a3:8a:12:54:b2:62:f4:eb:9e:fe:02:cb:c8:87:12: cd:c6:83:30:4c:04:f2:a6:92:dc:33:b3:58:d3:ed:95:1d:08: e6:6e:7c:f2:4c:42:4a:62:e5:8c:3d:0c:12:47:42:49:14:c2: 25:c6:b9:49:a1:d0:34:d9:cb:9b:b6:5a:3e:8e:45:b0:bc:2c: 69:50:93:c3:da:e7:a7:5e:e7:df:1f:8d:70:10:ba:59:12:ce: c6:ad:e4:69:23:1a:bc:e3:a6:d7:53:6a:a9:a1:a7:35:97:78: 6c:55:e5:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdWihfVqu++hWxsDrP96oVpwCVwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI5MDAzMDI2WhcNMjUwNjAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYWQzMzQ0ZDU1ZjZkYjI1ZjQ5MzFiOGIyZTJmOGU0NDIx ZjJjYjZkNWMxNWRkNWNiMmFhMDFhOGFhOTY4Y2FhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxpWNHy/4npKuCUlxGFdL3O72unbtQ0srcc2b1J74tQthr 7x7ze8bQsFXHYvT8PAN2i+V4OmFbO+nSowb3LjzO940OsKL5F9prifi+rF1w/EZf jGnC6+SeyYL1WSWmnvCpPKDKgXhOxMI3cvuFHT0nSyXk/UT1XNmFQh7ZJk2roOp9 0ZjVDeqwpzDCTjwHcTLxklBRcIb1C13akzdcDplLdGvOQp7hiGHXxS7ThkABXf5u ZlEb+vd3PGOKs0BKRUvokxgL6ZTF035e6i4kK0VL4CN9f2qPEd300s/58FJPMRnY nlThed7Hj2PNyR5DhY0xslkukCgttPzhgVpfVLRbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6Pq1ubXEsUjN483kGkIFtG7HeQYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg0NjdkY2Q3LTM2NmMtNDA4MC1iOWE5LWU4NWQ5Zjg0YjE2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYAAwDQYJKoZIhvcNAQELBQADggEBABW9ul6bvDnmWTqsdAZhdPHv9+NA h6seI7Sr3L66yzWuDyHZWqvilpGV7Ys2Z6MJ3xhjw0e3D+Zxg0FX9Mbya79PIWK8 FT+jT7x+uJDJ3ayljFbB4c11Y3McPZb6ZDPpP/mKKbft27nY/5f1YOpcMOrejdJ3 UTW9hvxWdttWDycSuSLb7Uuu+7OUM+vSzjx8e9wpyqOKElSyYvTrnv4Cy8iHEs3G gzBMBPKmktwzs1jT7ZUdCOZufPJMQkpi5Yw9DBJHQkkUwiXGuUmh0DTZy5u2Wj6O RbC8LGlQk8Pa56de598fjXAQulkSzsat5GkjGrzjptdTaqmhpzWXeGxV5Q4= -----END CERTIFICATE-----Generated at Fri May 9 03:01:15 2025 by rpki-client