$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa File: 9820da12-0a89-4f05-a638-5ca08cc892e3.roa (raw, json) Hash identifier: BK5UAPTFkSuQfjgHPl54oSMVy4IfnUS1ewLr/qapEJk= Subject key identifier: EE:21:71:D6:A5:CF:9E:40:3C:6B:91:97:A2:44:4F:52:F9:A2:1B:54 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 05D0825080713A667EDD82AFBC81B0F4E7BF39F5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa Signing time: Tue 24 Jun 2025 15:00:02 +0000 ROA not before: Tue 24 Jun 2025 15:00:02 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d0:82:50:80:71:3a:66:7e:dd:82:af:bc:81:b0:f4:e7:bf:39:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 24 15:00:02 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=daf55f994b5beb462cc70a8784b3c7cedaf04f97cb83117df2a872d8f054bd32, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ee:4a:69:ed:b7:00:84:f4:82:1e:28:fe:72: e9:fd:e9:3d:3b:36:d3:2a:7a:a7:1d:34:fa:47:54: 4f:35:4c:c7:5f:1d:97:08:cc:e8:1e:73:76:e5:31: 56:13:8d:27:42:24:f7:3a:45:95:23:72:cc:ce:2b: 76:a2:b6:ed:5a:31:62:46:e6:c8:69:6f:a5:b9:27: ba:5f:7c:7e:fb:03:ca:4a:db:05:6d:35:e4:e2:37: 93:81:80:26:3c:23:0c:e1:20:89:6f:af:a3:78:13: 72:cf:50:92:3d:55:d6:63:74:d9:f0:01:23:bb:5c: 42:8a:5c:fe:cc:25:fb:56:d8:3a:e0:a6:48:d6:7f: c2:b6:d7:f2:1d:27:59:05:1c:77:83:57:8e:b8:57: 72:db:80:6a:b1:bf:6c:4f:31:1f:a0:63:b2:e0:5a: ac:02:5d:53:08:08:72:05:09:15:9a:f1:e2:ad:e7: 64:4a:c6:d1:73:55:a2:0a:2e:cd:f1:85:8a:44:c4: 7f:50:f8:be:4d:c5:4c:72:a4:23:9c:df:82:10:3e: 94:94:0a:f3:c3:6b:84:3c:31:cd:b8:b2:48:b7:c0: e1:2a:01:09:59:cf:20:e8:a0:11:dc:cc:11:69:fb: 90:6c:78:4a:2b:3a:83:cb:c7:d3:c7:51:90:77:00: 44:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:71:D6:A5:CF:9E:40:3C:6B:91:97:A2:44:4F:52:F9:A2:1B:54 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9820da12-0a89-4f05-a638-5ca08cc892e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.253.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:f0:b3:f8:37:b8:2a:b5:1a:12:2e:4e:df:ff:54:51:17:d0: fe:bd:a0:08:29:80:34:72:71:15:2c:4e:fc:b5:4e:74:2a:5e: 37:50:a9:15:a0:9f:ae:c0:d9:bc:ac:4e:c9:00:4b:7c:f8:66: 1b:db:9b:e4:e9:e7:26:06:48:ab:b8:67:5c:f8:91:a6:47:fd: 96:73:3d:b1:b8:6e:8e:76:d2:d3:31:88:77:b4:4f:aa:46:f4: 5a:da:8b:65:38:84:04:48:63:d2:28:c9:51:57:3a:13:c2:af: 95:be:7c:84:92:60:6f:e6:86:4f:5c:e4:c9:26:5a:0b:94:e5: f8:ea:1f:30:cf:63:21:9d:73:e2:b1:4f:60:eb:15:5a:b3:de: 53:cd:4e:c0:f6:17:76:08:20:17:e8:f6:1d:f9:c1:2f:48:63: 12:61:67:4c:75:53:bf:43:de:d7:5c:86:9b:40:f5:6b:5e:61: 5d:1c:f9:52:d1:d5:cb:43:5f:84:4f:ff:01:2d:b9:04:91:a6: 30:b3:f3:73:2f:51:87:f4:7c:64:4c:d1:64:e0:f7:dd:0f:6b: e6:dc:17:fd:f3:be:f3:ce:01:eb:a3:7d:b3:77:0c:c3:2c:80: d8:b5:12:4c:f7:41:bb:b3:0a:15:db:18:53:f9:64:e8:2a:ea: b4:3a:70:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBdCCUIBxOmZ+3YKvvIGw9Oe/OfUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjI0MTUwMDAyWhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWY1NWY5OTRiNWJlYjQ2MmNjNzBhODc4NGIzYzdjZWRh ZjA0Zjk3Y2I4MzExN2RmMmE4NzJkOGYwNTRiZDMyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCa7kpp7bcAhPSCHij+cun96T07NtMqeqcdNPpHVE81TMdf HZcIzOgec3blMVYTjSdCJPc6RZUjcszOK3aitu1aMWJG5shpb6W5J7pffH77A8pK 2wVtNeTiN5OBgCY8IwzhIIlvr6N4E3LPUJI9VdZjdNnwASO7XEKKXP7MJftW2Drg pkjWf8K21/IdJ1kFHHeDV464V3LbgGqxv2xPMR+gY7LgWqwCXVMICHIFCRWa8eKt 52RKxtFzVaIKLs3xhYpExH9Q+L5NxUxypCOc34IQPpSUCvPDa4Q8Mc24ski3wOEq AQlZzyDooBHczBFp+5BseEorOoPLx9PHUZB3AESVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7iFx1qXPnkA8a5GXokRPUvmiG1QwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4MjBkYTEyLTBhODktNGYwNS1hNjM4LTVjYTA4Y2M4OTJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYP0wDQYJKoZIhvcNAQELBQADggEBADzws/g3uCq1GhIuTt//VFEX0P69 oAgpgDRycRUsTvy1TnQqXjdQqRWgn67A2bysTskAS3z4Zhvbm+Tp5yYGSKu4Z1z4 kaZH/ZZzPbG4bo520tMxiHe0T6pG9Frai2U4hARIY9IoyVFXOhPCr5W+fISSYG/m hk9c5MkmWguU5fjqHzDPYyGdc+KxT2DrFVqz3lPNTsD2F3YIIBfo9h35wS9IYxJh Z0x1U79D3tdchptA9WteYV0c+VLR1ctDX4RP/wEtuQSRpjCz83MvUYf0fGRM0WTg 990Pa+bcF/3zvvPOAeujfbN3DMMsgNi1Ekz3QbuzChXbGFP5ZOgq6rQ6cAY= -----END CERTIFICATE-----Generated at Tue Jul 1 13:12:47 2025 by rpki-client