$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa File: 9820da12-0a89-4f05-a638-5ca08cc892e3.roa (raw, json) Hash identifier: eNZ5yrl+LZcF3Iw5EcuheODLMa4SxL9trLBLmXnGxz8= Subject key identifier: 58:9D:06:4C:C6:5A:79:04:17:2B:25:10:FA:E7:D2:CC:DC:47:5B:E1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 268784B4FCF70A1E8E4C4FD7AD8782CA6AD19822 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa Signing time: Fri 15 Aug 2025 15:30:16 +0000 ROA not before: Fri 15 Aug 2025 15:30:16 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:87:84:b4:fc:f7:0a:1e:8e:4c:4f:d7:ad:87:82:ca:6a:d1:98:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 15 15:30:16 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=23b2e35c1b19e3537a5debb90040c1a87356d3de1d7ce8e6492585b0f73bfe7d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:62:67:87:ba:8f:dc:c5:6d:2c:05:79:ee: 63:e6:04:9b:c1:6f:67:08:18:a4:64:6b:e3:5c:df: 03:77:f9:5b:a6:a6:9a:e4:cf:99:c6:07:b7:36:d9: a3:57:41:0a:a1:ea:17:7f:83:68:98:93:67:25:0a: e2:ba:45:d4:07:f1:4a:e2:8c:75:b3:e0:3d:c4:f0: d6:81:86:72:7f:d1:1d:06:cf:d7:34:69:4d:01:9e: 53:66:a7:6d:e3:ad:23:6a:a9:a8:ff:bb:bf:fa:49: ac:72:ec:ab:73:8c:e5:64:b3:ee:3c:b1:eb:86:9f: 98:85:9d:43:1d:c7:f1:b7:d8:7a:3b:fa:0f:70:b8: df:20:ba:ef:76:44:d8:2a:ae:c1:7e:17:0f:68:f3: 5d:37:03:b1:74:bb:6e:e4:0b:9d:3d:bc:17:03:ba: dd:3d:29:3f:46:53:bc:c3:03:80:b2:91:2f:20:35: 50:9d:f7:4f:7a:19:fa:ef:8f:db:ad:3f:54:28:26: 2c:a8:a6:01:0f:10:d9:8b:54:a4:f7:9e:69:66:76: da:3f:4d:a7:97:fc:12:76:37:65:a9:af:c1:54:d9: b7:eb:4d:df:93:ac:6b:25:07:27:c3:66:0d:a2:82: 2d:7f:0c:ca:1f:18:8b:29:13:ae:ae:82:9e:6a:85: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9D:06:4C:C6:5A:79:04:17:2B:25:10:FA:E7:D2:CC:DC:47:5B:E1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.253.0/24 Signature Algorithm: sha256WithRSAEncryption 36:2c:59:d7:09:3b:59:96:5a:89:93:03:97:a4:11:be:5f:89: 63:d8:3e:c3:26:7d:b1:61:fe:c5:14:00:db:4e:f6:77:d8:49: 8a:fa:95:4e:c7:9f:cd:bd:4e:cd:ee:b5:75:db:ed:2f:a3:21: 0c:06:dd:30:d3:1b:e9:ae:92:1e:da:54:02:c4:da:7a:96:66: 48:ce:cd:70:b9:e0:e2:91:75:4d:1e:79:57:c2:65:4b:7b:5d: 1c:32:a3:d0:eb:38:77:ad:94:cf:18:b7:61:e7:29:1a:5d:9c: 3b:05:e9:68:2f:59:21:2f:07:6f:32:70:53:2b:8e:35:04:83: e3:15:ae:27:a1:87:6e:01:30:6f:c0:a8:0a:87:d8:fa:43:09: 3f:80:62:b6:34:1c:37:19:fa:5b:3c:e9:a5:78:fa:d4:4f:73: 84:e1:5a:29:ea:b5:2b:a0:b4:58:8a:31:67:64:7e:b3:a1:47: af:8e:70:c7:1f:e8:1d:1a:46:42:4d:90:22:4d:3d:14:f0:0c: 0b:d6:c6:3b:84:78:f2:d4:d6:1d:0d:cc:9a:2a:3d:43:c1:5b: 0a:f4:cc:a2:1a:bc:5b:a8:82:b5:b3:e0:ce:cb:82:1d:42:b0: dd:4d:30:ac:fe:0e:06:5e:80:69:31:b4:a3:e4:49:39:29:99: 66:75:ba:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJoeEtPz3Ch6OTE/XrYeCymrRmCIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE1MTUzMDE2WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2IyZTM1YzFiMTllMzUzN2E1ZGViYjkwMDQwYzFhODcz NTZkM2RlMWQ3Y2U4ZTY0OTI1ODViMGY3M2JmZTdkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxAGJnh7qP3MVtLAV57mPmBJvBb2cIGKRka+Nc3wN3+Vum pprkz5nGB7c22aNXQQqh6hd/g2iYk2clCuK6RdQH8UrijHWz4D3E8NaBhnJ/0R0G z9c0aU0BnlNmp23jrSNqqaj/u7/6Saxy7KtzjOVks+48seuGn5iFnUMdx/G32Ho7 +g9wuN8guu92RNgqrsF+Fw9o8103A7F0u27kC509vBcDut09KT9GU7zDA4CykS8g NVCd9096Gfrvj9utP1QoJiyopgEPENmLVKT3nmlmdto/TaeX/BJ2N2Wpr8FU2bfr Td+TrGslByfDZg2igi1/DMofGIspE66ugp5qhZFxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWJ0GTMZaeQQXKyUQ+ufSzNxHW+EwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4MjBkYTEyLTBhODktNGYwNS1hNjM4LTVjYTA4Y2M4OTJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYP0wDQYJKoZIhvcNAQELBQADggEBADYsWdcJO1mWWomTA5ekEb5fiWPY PsMmfbFh/sUUANtO9nfYSYr6lU7Hn829Ts3utXXb7S+jIQwG3TDTG+mukh7aVALE 2nqWZkjOzXC54OKRdU0eeVfCZUt7XRwyo9DrOHetlM8Yt2HnKRpdnDsF6WgvWSEv B28ycFMrjjUEg+MVriehh24BMG/AqAqH2PpDCT+AYrY0HDcZ+ls86aV4+tRPc4Th WinqtSugtFiKMWdkfrOhR6+OcMcf6B0aRkJNkCJNPRTwDAvWxjuEePLU1h0NzJoq PUPBWwr0zKIavFuogrWz4M7Lgh1CsN1NMKz+DgZegGkxtKPkSTkpmWZ1urU= -----END CERTIFICATE-----Generated at Sat Aug 23 11:11:05 2025 by rpki-client