$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b7f51c8-2141-46fa-9e5c-3cc85fbe6b3e.roa File: 8b7f51c8-2141-46fa-9e5c-3cc85fbe6b3e.roa (raw, json) Hash identifier: IvfCcQnvoFLvl+f2oi+X09oQ2UbPj3HZsHtFN6/9aUU= Subject key identifier: 8A:2B:F0:EB:6E:CD:32:5E:2B:0F:33:89:A6:EF:BE:37:A6:27:D1:92 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 643E3E7D46D9DE916A0FC664347E3F60F1B34745 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b7f51c8-2141-46fa-9e5c-3cc85fbe6b3e.roa Signing time: Fri 15 Aug 2025 15:30:52 +0000 ROA not before: Fri 15 Aug 2025 15:30:52 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:3e:3e:7d:46:d9:de:91:6a:0f:c6:64:34:7e:3f:60:f1:b3:47:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 15 15:30:52 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=66fa3a2faf54eb2d6476c75c29cda39f3ae76081eb298f5aef572356ec26e80f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:0c:21:bf:e4:6a:60:1a:37:22:07:2c:b2: 39:d7:a8:14:ee:c3:b2:9f:24:bf:e4:07:0b:8b:fe: 28:76:5a:65:dd:dd:fd:67:c4:4d:ce:ff:dd:8b:84: c7:db:c8:0f:d1:f0:78:20:9e:74:12:c8:89:01:a1: 0a:71:8c:73:dc:c3:fe:dd:6d:0b:b6:54:dd:62:5c: 74:0d:b3:b8:3a:e2:3a:f3:91:98:a9:8e:a3:ea:49: 06:86:6c:24:7c:7d:88:fb:b7:7a:7b:af:a5:b0:b2: 51:82:e7:cf:6f:4a:1e:3e:16:b0:a1:46:a4:c0:65: d5:46:07:42:82:8d:46:6d:98:c3:88:80:e6:f6:cb: e8:73:97:28:7c:dd:a9:b9:b6:44:5c:b6:77:fb:75: b9:65:a9:69:52:8b:c8:e4:dc:23:ca:cd:50:47:6d: 9d:b5:b1:e6:fc:e6:5e:1e:ab:16:0a:bd:61:09:5b: 4c:32:0a:ec:96:8a:77:98:f9:f6:ef:88:6f:88:93: bc:53:51:14:a7:d5:22:a4:83:39:4d:54:89:d8:88: 9f:b8:13:62:a1:58:2f:3a:b0:7f:3e:13:13:4b:8c: 84:50:fa:7f:7e:78:d7:49:dc:5c:ff:c0:d7:38:0e: d2:a2:7c:93:27:ff:dd:51:eb:29:c4:0e:26:83:d3: fa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2B:F0:EB:6E:CD:32:5E:2B:0F:33:89:A6:EF:BE:37:A6:27:D1:92 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b7f51c8-2141-46fa-9e5c-3cc85fbe6b3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/23 Signature Algorithm: sha256WithRSAEncryption 25:7c:4a:d4:48:68:ab:3d:ab:97:3c:ec:36:37:d9:42:4c:4e: 7f:74:95:ab:d2:41:ee:5f:3d:98:6d:61:c3:33:85:76:b0:d4: 49:f0:d4:8f:fa:ff:ff:a3:ab:6c:86:6f:84:ca:ba:58:7a:a1: 77:1e:e2:a3:a5:39:f8:69:fc:01:23:10:aa:c1:5a:20:41:e0: f7:a1:d7:f2:08:79:e3:9e:92:f5:44:d0:33:cf:4f:0a:73:3a: 0d:04:dd:9c:53:a7:6f:bf:9f:89:90:12:3e:f0:26:1b:1c:6e: 34:56:dc:d6:41:ee:6f:3d:67:35:9b:1c:c0:8b:10:b1:93:67: 9c:e4:61:5c:87:22:59:c5:88:29:f3:39:18:44:cb:c5:9a:32: f7:ec:d8:e2:85:50:50:2b:7a:6b:dd:be:87:60:86:1c:56:45: 24:f8:37:b4:e0:66:ea:99:55:5e:f3:3c:16:ad:6b:5f:41:2d: 90:20:ec:37:4a:c8:ca:c0:f0:e7:7b:93:a0:ef:b2:4c:52:12: 14:a0:b3:7a:bf:04:4f:43:85:ab:da:3a:6b:93:a1:c2:c5:55: f8:5b:3a:3a:6c:26:12:a1:b6:61:d5:dc:a6:97:3b:2e:ba:c9: 4a:b7:21:08:68:7a:91:ed:61:ce:05:38:6b:d5:cc:d7:97:c5: 3c:98:de:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZD4+fUbZ3pFqD8ZkNH4/YPGzR0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE1MTUzMDUyWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NmZhM2EyZmFmNTRlYjJkNjQ3NmM3NWMyOWNkYTM5ZjNh ZTc2MDgxZWIyOThmNWFlZjU3MjM1NmVjMjZlODBmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCX9gwhv+RqYBo3IgcssjnXqBTuw7KfJL/kBwuL/ih2WmXd 3f1nxE3O/92LhMfbyA/R8HggnnQSyIkBoQpxjHPcw/7dbQu2VN1iXHQNs7g64jrz kZipjqPqSQaGbCR8fYj7t3p7r6WwslGC589vSh4+FrChRqTAZdVGB0KCjUZtmMOI gOb2y+hzlyh83am5tkRctnf7dbllqWlSi8jk3CPKzVBHbZ21seb85l4eqxYKvWEJ W0wyCuyWineY+fbviG+Ik7xTURSn1SKkgzlNVInYiJ+4E2KhWC86sH8+ExNLjIRQ +n9+eNdJ3Fz/wNc4DtKifJMn/91R6ynEDiaD0/rJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiivw627NMl4rDzOJpu++N6Yn0ZIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhiN2Y1MWM4LTIxNDEtNDZmYS05ZTVjLTNjYzg1ZmJlNmIzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBAwDQYJKoZIhvcNAQELBQADggEBACV8StRIaKs9q5c87DY32UJMTn90 lavSQe5fPZhtYcMzhXaw1Enw1I/6//+jq2yGb4TKulh6oXce4qOlOfhp/AEjEKrB WiBB4Peh1/IIeeOekvVE0DPPTwpzOg0E3ZxTp2+/n4mQEj7wJhscbjRW3NZB7m89 ZzWbHMCLELGTZ5zkYVyHIlnFiCnzORhEy8WaMvfs2OKFUFAremvdvodghhxWRST4 N7TgZuqZVV7zPBata19BLZAg7DdKyMrA8Od7k6DvskxSEhSgs3q/BE9DhavaOmuT ocLFVfhbOjpsJhKhtmHV3KaXOy66yUq3IQhoepHtYc4FOGvVzNeXxTyY3ug= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:54 2025 by rpki-client