$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa File: 898b4557-ed43-42cb-99fe-3cd21033edf4.roa (raw, json) Hash identifier: nQrsd5P6Ihzh/Jv82dg40rjrt50NbgjotZqIue8INdc= Subject key identifier: A1:DB:B6:B6:AD:DC:31:81:F9:6C:33:14:CB:C1:B6:9B:98:00:12:81 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 72F86ED1CD4DC3B5DBD0EBE0563D30AE609AB30B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa Signing time: Mon 16 Jun 2025 20:22:06 +0000 ROA not before: Mon 16 Jun 2025 20:22:06 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f8:6e:d1:cd:4d:c3:b5:db:d0:eb:e0:56:3d:30:ae:60:9a:b3:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 16 20:22:06 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=61283ed9d63ef165b6bff263eda34e49b23f3748935c961493cf363feb357a2c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:49:54:00:34:af:7e:ee:9d:a9:7b:07:ca:0f: 7d:54:85:89:67:c9:e7:aa:fc:a4:8e:09:f1:03:87: ef:c5:d5:ea:94:b7:d8:d2:0e:64:a7:0d:7d:b2:48: 47:3d:6e:dc:c2:de:17:34:bc:02:c1:3f:33:f1:81: 5d:ca:c8:48:a0:8a:77:4f:80:eb:f8:34:c3:67:d8: 31:61:35:36:f5:57:46:39:0f:9c:01:d9:f2:41:16: 3b:13:a4:ce:b3:0c:44:c2:a2:7d:a4:c2:c0:00:8c: 3a:2d:ac:78:db:60:d0:84:88:64:f4:2c:23:84:7a: aa:2a:c9:07:c6:b1:01:85:13:90:ec:d2:46:7b:f3: 20:c5:d2:52:09:07:fc:1b:6c:32:f1:50:46:28:e0: 22:0f:45:8e:a0:5d:6e:e6:c4:78:08:39:0f:cf:42: ac:c8:71:04:10:04:0d:b9:c8:53:19:91:9f:06:0c: 5d:c8:61:2f:86:a9:fd:32:c9:8b:d3:8c:61:99:89: f5:c3:53:b4:4c:6b:5e:96:88:7f:f4:a3:6e:62:ca: e3:fb:21:94:96:a5:8f:25:2b:3d:b3:6c:ec:8d:03: 08:ac:bb:b9:83:28:92:9d:93:a1:f1:bf:b9:26:9a: 76:2f:91:11:d0:6f:90:88:a0:87:40:55:a5:a1:49: f1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:DB:B6:B6:AD:DC:31:81:F9:6C:33:14:CB:C1:B6:9B:98:00:12:81 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/898b4557-ed43-42cb-99fe-3cd21033edf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.37.0/24 Signature Algorithm: sha256WithRSAEncryption 07:8a:22:10:82:2e:44:6d:43:27:46:5b:b7:a2:6f:86:7f:04: 57:48:3f:86:25:25:bd:8f:1a:33:8b:b5:1a:fd:41:c8:c7:5b: 2d:56:83:51:89:4b:36:21:10:08:7b:c4:12:9e:67:8d:0e:34: 4a:99:8c:f0:b6:6b:07:f6:44:d3:ba:9d:fe:b5:70:0d:14:a3: 9a:70:c9:09:03:a3:3f:11:0a:12:e7:1d:0c:6c:b1:99:2a:aa: fb:73:c1:ac:1c:79:55:e7:79:3d:48:52:1a:a8:4b:3d:59:00: 9b:40:3e:c0:bb:84:55:d1:c7:4e:18:0b:34:0c:0c:67:f5:5a: 5f:2f:33:e8:e8:ce:da:6f:b0:90:e9:d3:87:7e:71:bf:d5:7b: 1d:dd:9b:01:0a:38:b6:0a:8a:61:e1:65:d9:ac:bb:eb:16:49: fd:32:34:d2:1f:72:13:10:e2:f9:21:0e:d8:db:22:34:37:af: 66:87:98:7a:53:a1:ad:5e:f5:1a:a8:61:e7:dc:8b:cb:98:d2: 27:65:4b:1b:1f:59:e1:27:e1:82:ec:cd:76:a0:ed:42:fe:8c: 19:34:63:f3:2d:d0:90:1d:52:54:26:ab:50:0b:94:01:70:ba: 90:5e:27:c6:cc:69:20:7f:a9:8c:29:89:c5:99:c9:b9:07:84: 59:26:35:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcvhu0c1Nw7Xb0OvgVj0wrmCaswswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjE2MjAyMjA2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTI4M2VkOWQ2M2VmMTY1YjZiZmYyNjNlZGEzNGU0OWIy M2YzNzQ4OTM1Yzk2MTQ5M2NmMzYzZmViMzU3YTJjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCWSVQANK9+7p2pewfKD31UhYlnyeeq/KSOCfEDh+/F1eqU t9jSDmSnDX2ySEc9btzC3hc0vALBPzPxgV3KyEigindPgOv4NMNn2DFhNTb1V0Y5 D5wB2fJBFjsTpM6zDETCon2kwsAAjDotrHjbYNCEiGT0LCOEeqoqyQfGsQGFE5Ds 0kZ78yDF0lIJB/wbbDLxUEYo4CIPRY6gXW7mxHgIOQ/PQqzIcQQQBA25yFMZkZ8G DF3IYS+Gqf0yyYvTjGGZifXDU7RMa16WiH/0o25iyuP7IZSWpY8lKz2zbOyNAwis u7mDKJKdk6Hxv7kmmnYvkRHQb5CIoIdAVaWhSfGDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUodu2tq3cMYH5bDMUy8G2m5gAEoEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg5OGI0NTU3LWVkNDMtNDJjYi05OWZlLTNjZDIxMDMzZWRmNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCUwDQYJKoZIhvcNAQELBQADggEBAAeKIhCCLkRtQydGW7eib4Z/BFdI P4YlJb2PGjOLtRr9QcjHWy1Wg1GJSzYhEAh7xBKeZ40ONEqZjPC2awf2RNO6nf61 cA0Uo5pwyQkDoz8RChLnHQxssZkqqvtzwawceVXneT1IUhqoSz1ZAJtAPsC7hFXR x04YCzQMDGf1Wl8vM+joztpvsJDp04d+cb/Vex3dmwEKOLYKimHhZdmsu+sWSf0y NNIfchMQ4vkhDtjbIjQ3r2aHmHpToa1e9RqoYefci8uY0idlSxsfWeEn4YLszXag 7UL+jBk0Y/Mt0JAdUlQmq1ALlAFwupBeJ8bMaSB/qYwpicWZybkHhFkmNYw= -----END CERTIFICATE-----Generated at Fri Jul 4 17:57:11 2025 by rpki-client