$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa File: a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa (raw, json) Hash identifier: J7fnZFrATYzys8x+P3AhNZUlFkDAEPwIlowM0p/ceuI= Subject key identifier: 65:C5:5B:65:58:90:5B:D3:C8:B6:88:64:A9:A8:21:CA:D8:9F:BA:05 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6BE9EC9369E0EBF57724CEFFC588D3A5E6791D14 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa Signing time: Tue 29 Jul 2025 18:20:26 +0000 ROA not before: Tue 29 Jul 2025 18:20:26 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e9:ec:93:69:e0:eb:f5:77:24:ce:ff:c5:88:d3:a5:e6:79:1d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 29 18:20:26 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=5b57d325d3fd9581d0713a4b9c6e13b6caf708907cfb994cdf186b987bab7c5f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a8:b7:4e:5f:4f:91:d5:cf:57:25:96:2d:17: 9f:7f:a0:1e:5c:29:c3:5c:b7:9c:2a:b6:70:9a:1b: bc:2b:37:2c:fd:21:ca:a6:c5:a3:d2:85:53:82:91: 65:cf:1c:b4:20:23:9c:1b:85:96:7e:d7:20:4b:69: 59:29:5f:d3:bc:fb:69:ac:12:f5:65:cd:db:99:26: 48:5b:c8:23:be:5d:c1:c9:85:34:4e:20:23:9f:d2: cd:01:4a:07:c8:a7:7b:d4:74:d2:47:4a:89:e6:55: 19:3c:f7:83:56:09:02:9f:b8:ab:2a:a8:14:b2:9a: ff:26:cf:a4:10:d1:4f:19:14:d9:63:56:50:1e:f9: 01:fb:01:07:93:e3:b9:42:e5:98:b1:1d:01:a5:44: 08:a1:b6:80:a8:92:1b:e3:b1:93:b3:30:0d:c6:06: 5b:40:59:fe:46:1f:f0:5b:14:6e:b7:ad:73:ac:ed: ff:1e:99:ea:57:ae:68:18:0e:ad:56:9b:ad:9a:8a: 56:8e:bb:27:ee:d1:dc:3a:0c:6a:1d:03:ff:59:79: c7:8c:9b:c1:db:db:50:97:04:a9:df:70:d0:5c:f7: 51:ed:65:39:ad:4b:23:50:8a:5f:7a:73:79:bc:44: 8d:7b:1b:60:55:f9:56:aa:79:4d:cb:9f:b6:ad:7c: 09:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C5:5B:65:58:90:5B:D3:C8:B6:88:64:A9:A8:21:CA:D8:9F:BA:05 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a72ebb99-aece-49aa-9f29-1f0286b84f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:d2:46:fe:0c:27:ec:a8:27:7a:70:69:d0:12:c5:14:c3:6c: 9d:cd:97:9b:74:d7:b7:c0:5d:0f:a3:64:b9:65:bf:03:52:89: 90:c0:62:67:97:22:c7:5c:39:47:59:6e:29:9f:71:fd:df:2a: 47:16:68:69:d9:d8:b0:c1:34:4d:8b:64:89:49:26:e0:f1:69: 12:55:2b:83:c6:e3:62:c4:10:b9:62:86:cb:c8:23:79:11:ff: 2e:e0:1a:90:63:fd:ba:ab:b4:e0:59:d7:6a:3a:a4:fa:88:d5: cc:cc:3e:eb:bb:44:77:ce:5c:41:63:29:6d:9d:fc:31:e4:46: 8c:a4:56:bb:ca:42:c8:13:0a:ea:ee:d8:6e:c6:83:25:ad:67: 2e:bb:78:c9:c0:c6:63:24:92:92:0b:9a:7d:47:d8:ac:31:f2: 71:d5:a3:89:b9:c2:4a:be:e6:2d:03:09:5d:1f:84:2d:5a:a8: 19:59:52:94:46:27:4f:6e:8e:e5:48:2a:8b:6a:46:c9:30:97: ee:ba:1d:ba:34:7b:12:ea:4e:62:1f:4f:da:56:7d:6c:ea:ec: 53:6c:70:e9:91:aa:d4:c6:5f:22:98:cc:9c:24:d2:a2:04:25: 93:17:dc:af:40:79:62:68:8c:a3:2c:48:c7:8e:d5:d2:5d:eb: 73:76:5a:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa+nsk2ng6/V3JM7/xYjTpeZ5HRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI5MTgyMDI2WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjU3ZDMyNWQzZmQ5NTgxZDA3MTNhNGI5YzZlMTNiNmNh ZjcwODkwN2NmYjk5NGNkZjE4NmI5ODdiYWI3YzVmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzqLdOX0+R1c9XJZYtF59/oB5cKcNct5wqtnCaG7wrNyz9 IcqmxaPShVOCkWXPHLQgI5wbhZZ+1yBLaVkpX9O8+2msEvVlzduZJkhbyCO+XcHJ hTROICOf0s0BSgfIp3vUdNJHSonmVRk894NWCQKfuKsqqBSymv8mz6QQ0U8ZFNlj VlAe+QH7AQeT47lC5ZixHQGlRAihtoCokhvjsZOzMA3GBltAWf5GH/BbFG63rXOs 7f8emepXrmgYDq1Wm62ailaOuyfu0dw6DGodA/9ZeceMm8Hb21CXBKnfcNBc91Ht ZTmtSyNQil96c3m8RI17G2BV+VaqeU3Ln7atfAl1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZcVbZViQW9PItohkqaghytifugUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E3MmViYjk5LWFlY2UtNDlhYS05ZjI5LTFmMDI4NmI4NGY0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAIrSRv4MJ+yoJ3pwadASxRTDbJ3N l5t017fAXQ+jZLllvwNSiZDAYmeXIsdcOUdZbimfcf3fKkcWaGnZ2LDBNE2LZIlJ JuDxaRJVK4PG42LEELlihsvII3kR/y7gGpBj/bqrtOBZ12o6pPqI1czMPuu7RHfO XEFjKW2d/DHkRoykVrvKQsgTCuru2G7GgyWtZy67eMnAxmMkkpILmn1H2Kwx8nHV o4m5wkq+5i0DCV0fhC1aqBlZUpRGJ09ujuVIKotqRskwl+66Hbo0exLqTmIfT9pW fWzq7FNscOmRqtTGXyKYzJwk0qIEJZMX3K9AeWJojKMsSMeO1dJd63N2Wio= -----END CERTIFICATE-----Generated at Sat Aug 23 08:32:43 2025 by rpki-client