$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa File: 909e65c8-aef7-492e-84d6-88536c902cda.roa (raw, json) Hash identifier: anNO6+6XwiuUzH3uE8YBvhq05Ca4BH6ogwYzdeo+HKY= Subject key identifier: 2D:5E:3F:7A:6F:DB:2F:AF:91:C2:5D:3C:7F:43:91:71:B6:DC:76:EB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3A34E852004D45995A8D018FA33E671B8C2569D9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa Signing time: Tue 06 May 2025 01:07:22 +0000 ROA not before: Tue 06 May 2025 01:07:22 +0000 ROA not after: Tue 10 Jun 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:34:e8:52:00:4d:45:99:5a:8d:01:8f:a3:3e:67:1b:8c:25:69:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 6 01:07:22 2025 GMT Not After : Jun 10 23:59:59 2025 GMT Subject: serialNumber=4085ceeac042ec557b6169ae631712a1d827abe810e99c359e23aa4bcf52438b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:0a:97:cd:60:ff:be:84:0a:b1:b3:f0:cf: b2:37:62:64:41:da:7b:69:55:b6:86:98:0d:0f:95: 73:78:22:f7:99:cb:26:40:9b:a9:aa:18:11:36:c7: 90:45:88:a2:c0:64:fe:12:80:ea:09:37:44:24:a1: df:8b:54:81:dd:59:de:1c:be:b0:be:10:b3:16:29: 8d:e5:6b:6e:df:fd:d8:b3:15:ea:50:12:8c:20:19: 38:17:76:21:91:3d:67:7a:32:91:09:16:db:10:09: 84:3d:70:e1:2d:6e:30:84:32:fc:59:d5:55:27:09: 36:24:be:87:be:0c:f8:f0:cd:4c:ee:cc:76:1d:b8: df:8d:d5:29:fc:b8:9c:84:5e:c3:80:2c:1d:30:a3: f8:f7:f4:52:46:41:a4:7a:c6:89:ed:d0:eb:64:65: b5:b0:a1:10:15:3f:3b:a5:b0:c0:f2:35:15:ee:3e: 60:06:ba:a8:05:cb:f8:cd:3d:c9:a3:24:44:bd:04: 94:42:6a:24:0e:0f:d0:9a:93:cc:c6:27:e8:e0:59: bc:7f:d7:62:b3:31:78:14:6e:86:1b:1b:fa:c7:e4: bc:67:5b:05:a4:3e:ca:b1:a8:bd:1d:2d:98:13:1c: 8d:32:df:cc:1c:20:83:4d:82:5a:14:ce:7f:4d:ce: 78:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5E:3F:7A:6F:DB:2F:AF:91:C2:5D:3C:7F:43:91:71:B6:DC:76:EB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 34:f6:be:e8:4a:b1:93:b4:db:53:58:35:48:49:b5:f7:1f:46: e1:3d:30:d0:77:b4:4a:56:7d:33:92:4b:09:e6:9a:9f:af:69: eb:94:ad:36:b4:cc:ed:f1:32:81:00:0a:ff:a2:a3:3f:b9:16: 5f:6f:6a:51:78:0e:50:f0:de:2a:ce:6c:20:d5:6e:2a:da:2f: ee:53:2a:2f:57:a8:52:df:e4:66:c0:01:4b:05:16:44:56:10: 4d:d6:e4:24:84:39:46:6d:36:6c:78:8d:cb:77:73:f6:21:e6: 8f:86:09:ad:cd:8a:1b:1c:52:74:00:90:7b:11:a1:07:22:a8: 90:a3:00:b4:08:25:da:00:40:27:4e:16:ff:10:d5:f9:5d:22: 39:37:04:a5:c6:b1:1c:76:77:09:8e:ea:f2:78:3f:fd:10:c9: f8:c4:1b:f5:1e:50:e9:c5:00:0a:db:8e:52:38:17:6f:5d:37: fc:67:45:ba:f3:50:82:75:c0:30:5e:91:c2:a7:01:eb:3c:f2: 95:b9:bc:81:1d:3e:4a:c5:3a:60:f5:35:54:2b:e8:39:4b:f0: c7:df:c4:b2:b6:9e:75:53:bc:e2:b6:69:ec:58:3b:c8:da:da: c1:d6:5b:34:d0:da:d7:e7:65:46:02:1f:78:fa:a6:1a:20:17: e6:bf:0c:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOjToUgBNRZlajQGPoz5nG4wladkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTA2MDEwNzIyWhcNMjUwNjEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDg1Y2VlYWMwNDJlYzU1N2I2MTY5YWU2MzE3MTJhMWQ4 MjdhYmU4MTBlOTljMzU5ZTIzYWE0YmNmNTI0MzhiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8zwqXzWD/voQKsbPwz7I3YmRB2ntpVbaGmA0PlXN4IveZ yyZAm6mqGBE2x5BFiKLAZP4SgOoJN0Qkod+LVIHdWd4cvrC+ELMWKY3la27f/diz FepQEowgGTgXdiGRPWd6MpEJFtsQCYQ9cOEtbjCEMvxZ1VUnCTYkvoe+DPjwzUzu zHYduN+N1Sn8uJyEXsOALB0wo/j39FJGQaR6xont0OtkZbWwoRAVPzulsMDyNRXu PmAGuqgFy/jNPcmjJES9BJRCaiQOD9Cak8zGJ+jgWbx/12KzMXgUboYbG/rH5Lxn WwWkPsqxqL0dLZgTHI0y38wcIINNgloUzn9Nzni7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULV4/em/bL6+Rwl08f0ORcbbcduswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwOWU2NWM4LWFlZjctNDkyZS04NGQ2LTg4NTM2YzkwMmNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBADT2vuhKsZO021NYNUhJtfcfRuE9 MNB3tEpWfTOSSwnmmp+vaeuUrTa0zO3xMoEACv+ioz+5Fl9valF4DlDw3irObCDV biraL+5TKi9XqFLf5GbAAUsFFkRWEE3W5CSEOUZtNmx4jct3c/Yh5o+GCa3Nihsc UnQAkHsRoQciqJCjALQIJdoAQCdOFv8Q1fldIjk3BKXGsRx2dwmO6vJ4P/0QyfjE G/UeUOnFAArbjlI4F29dN/xnRbrzUIJ1wDBekcKnAes88pW5vIEdPkrFOmD1NVQr 6DlL8MffxLK2nnVTvOK2aexYO8ja2sHWWzTQ2tfnZUYCH3j6phogF+a/DK0= -----END CERTIFICATE-----Generated at Mon May 12 00:18:24 2025 by rpki-client