$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/906a4434-ef79-4be5-917c-827859a9939a.roa File: 906a4434-ef79-4be5-917c-827859a9939a.roa (raw, json) Hash identifier: YgBIUL73cXpPGU5a3q26doUJqsM8O8bgji939F+/ZRU= Subject key identifier: A5:C4:28:0E:7E:D9:A4:B1:FA:DD:86:E5:EF:DB:3F:80:76:6B:42:7C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7CFE6377266B9C29A926A2DDDBA307F39E75ED8C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/906a4434-ef79-4be5-917c-827859a9939a.roa Signing time: Wed 25 Jun 2025 00:40:11 +0000 ROA not before: Wed 25 Jun 2025 00:40:11 +0000 ROA not after: Wed 30 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fe:63:77:26:6b:9c:29:a9:26:a2:dd:db:a3:07:f3:9e:75:ed:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 25 00:40:11 2025 GMT Not After : Jul 30 23:59:59 2025 GMT Subject: serialNumber=3c88a5802025d2b0bfc8d0fe9203bfb4c90994b123ae6605450d5313e73e8612, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:93:56:50:6c:46:9f:70:30:66:21:2a:b9: 1a:fd:2c:cd:73:fd:1b:7a:09:40:13:59:2d:8a:2c: e9:9d:59:4c:69:21:10:ca:a3:42:82:d9:88:40:0d: c9:64:81:da:37:26:81:07:52:71:47:e8:e6:e6:d0: 2d:a0:2a:87:51:c0:6f:fd:39:c7:94:2d:44:1c:a3: fb:48:a1:bc:33:f5:5d:e4:05:1b:58:a1:89:7c:53: 7c:64:bc:8f:cf:d9:6b:15:71:41:99:e2:77:ea:fc: 83:f0:e4:fd:4f:d6:32:67:19:a3:9a:53:54:e9:74: 31:ff:35:a9:cd:e1:5a:72:5e:09:91:8b:55:c7:69: 9f:2e:eb:2d:24:0c:da:2e:04:cd:cd:6a:a0:36:ca: a8:55:9f:57:bd:e6:62:56:03:b9:00:2c:23:7f:3d: 9c:95:a2:07:ee:7d:0e:79:be:74:6b:f6:90:1d:6c: 29:0f:aa:b4:f4:84:8b:10:6a:5f:64:20:64:84:b9: 48:b8:69:fd:45:ea:e7:9f:89:5e:d3:f6:bf:fd:a2: 94:19:a5:fc:b0:3a:e7:5a:6a:bf:34:ba:50:65:34: 48:6a:ce:29:75:e3:42:ad:b6:8f:f4:bd:73:ee:30: 9c:5d:33:05:20:12:25:91:98:6e:7d:1b:27:fd:17: 25:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:C4:28:0E:7E:D9:A4:B1:FA:DD:86:E5:EF:DB:3F:80:76:6B:42:7C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/906a4434-ef79-4be5-917c-827859a9939a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 17:3c:11:5e:9b:b7:39:54:f8:69:95:21:f4:e7:e5:c7:bc:65: 67:10:69:5f:0f:fa:21:30:3b:92:ba:d0:55:c8:74:97:d1:29: c3:4c:1d:f3:32:2a:6f:54:86:02:5a:65:dc:3a:b2:54:36:e1: ac:3e:c8:a8:57:52:b5:e1:cf:d6:eb:cb:fa:db:2e:89:f5:ad: e9:1a:29:dc:0f:8c:60:ad:f9:53:08:48:88:2b:5f:30:6f:9e: 22:a4:7a:02:b7:d7:03:67:b1:d9:28:3f:92:d0:e6:01:34:5a: 7b:6b:a4:c1:ee:9a:14:95:8b:d4:7b:ee:09:80:16:a0:79:30: 74:e7:eb:37:03:aa:72:58:c0:b1:32:f2:da:c7:e3:f8:87:5c: 0a:98:9c:d4:84:38:ac:87:c5:a7:de:83:29:c9:c6:9e:85:3d: 14:f6:2c:35:3d:f4:d0:86:5a:a9:59:4a:9a:2d:8c:c8:de:1f: d1:df:c6:38:eb:4b:92:13:75:70:65:64:1b:84:ba:28:17:43: 3c:5a:f6:1b:b6:dd:95:cf:c4:65:63:6a:50:fe:3b:48:9c:91: 8e:a0:a6:8f:5b:1d:d5:cc:8b:39:be:ea:29:ae:a1:84:a1:32: 43:81:d2:87:90:a2:f1:de:4a:28:38:fa:14:ef:39:9a:fa:a9: ea:0c:ff:11 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfP5jdyZrnCmpJqLd26MH85517YwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjI1MDA0MDExWhcNMjUwNzMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzg4YTU4MDIwMjVkMmIwYmZjOGQwZmU5MjAzYmZiNGM5 MDk5NGIxMjNhZTY2MDU0NTBkNTMxM2U3M2U4NjEyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCag5NWUGxGn3AwZiEquRr9LM1z/Rt6CUATWS2KLOmdWUxp IRDKo0KC2YhADclkgdo3JoEHUnFH6Obm0C2gKodRwG/9OceULUQco/tIobwz9V3k BRtYoYl8U3xkvI/P2WsVcUGZ4nfq/IPw5P1P1jJnGaOaU1TpdDH/NanN4VpyXgmR i1XHaZ8u6y0kDNouBM3NaqA2yqhVn1e95mJWA7kALCN/PZyVogfufQ55vnRr9pAd bCkPqrT0hIsQal9kIGSEuUi4af1F6uefiV7T9r/9opQZpfywOudaar80ulBlNEhq zil140Ktto/0vXPuMJxdMwUgEiWRmG59Gyf9FyVJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpcQoDn7ZpLH63Ybl79s/gHZrQnwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwNmE0NDM0LWVmNzktNGJlNS05MTdjLTgyNzg1OWE5OTM5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBABc8EV6btzlU+GmVIfTn5ce8ZWcQ aV8P+iEwO5K60FXIdJfRKcNMHfMyKm9UhgJaZdw6slQ24aw+yKhXUrXhz9bry/rb Lon1rekaKdwPjGCt+VMISIgrXzBvniKkegK31wNnsdkoP5LQ5gE0WntrpMHumhSV i9R77gmAFqB5MHTn6zcDqnJYwLEy8trH4/iHXAqYnNSEOKyHxafegynJxp6FPRT2 LDU99NCGWqlZSpotjMjeH9HfxjjrS5ITdXBlZBuEuigXQzxa9hu23ZXPxGVjalD+ O0ickY6gpo9bHdXMizm+6imuoYShMkOB0oeQovHeSig4+hTvOZr6qeoM/xE= -----END CERTIFICATE-----Generated at Wed Jul 2 13:43:47 2025 by rpki-client