$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa File: adaf9344-781a-48cd-903a-098481f29a96.roa (raw, json) Hash identifier: 5idMizvAfv85PtiCQylfT9Uhk9uy+PG88katoVjv/dU= Subject key identifier: 5A:97:F3:5F:5A:89:28:DE:4F:63:25:7A:F2:DC:E9:73:93:2B:16:51 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4A662F17923D035BFE85E23BA994ACD8FA7B6078 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa Signing time: Fri 15 Aug 2025 15:30:12 +0000 ROA not before: Fri 15 Aug 2025 15:30:12 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:66:2f:17:92:3d:03:5b:fe:85:e2:3b:a9:94:ac:d8:fa:7b:60:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 15 15:30:12 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=41619885cfd851789642b9c8e5e990242c56f799585a54347103a042f487c918, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:cb:ef:c6:8f:83:8b:59:e8:a2:60:52:79: f5:2d:dc:b7:a8:27:2b:02:b5:94:1c:c3:82:4e:48: 5a:0d:86:e3:93:f1:4e:8a:83:37:09:2b:a4:8f:88: 61:b6:43:d3:1b:28:22:72:2e:25:84:ab:da:b1:ae: 46:a3:cb:91:f2:34:84:14:66:f9:1e:38:32:b4:da: 71:63:26:ab:3a:72:52:35:bf:fc:46:34:2f:f1:1d: a8:ae:b6:3a:f0:ed:53:d1:30:b9:b7:7c:d6:a6:8e: 88:3c:77:23:fe:20:a8:0d:05:2b:09:9a:01:a6:ea: f1:f9:4f:a6:ce:0c:01:37:b0:e0:3f:98:1c:53:87: 50:d0:9f:9b:7a:3a:12:be:e6:71:bd:96:d8:c6:4f: 1d:81:c9:b5:d8:66:de:16:2a:b2:45:66:49:9b:04: 0f:db:20:49:9b:d9:d9:19:01:3d:a8:b4:f2:1b:9b: bd:45:53:a2:93:bd:6f:01:2b:fb:be:e5:42:87:82: c3:1f:52:a1:8b:5a:20:4d:6c:45:e6:54:1a:b6:72: 93:af:d9:55:5e:2b:2e:9a:8d:38:13:6d:66:56:c1: 92:7c:f5:32:73:fe:54:28:1e:b5:f8:b7:da:e7:4d: b9:bb:6e:cd:5d:8c:ad:ed:75:97:7e:87:65:e4:59: 68:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:97:F3:5F:5A:89:28:DE:4F:63:25:7A:F2:DC:E9:73:93:2B:16:51 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/adaf9344-781a-48cd-903a-098481f29a96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:28:56:fe:e4:f9:1c:60:f1:b6:86:23:ca:79:a3:93:0f:0a: e3:c5:28:10:16:3c:8b:0e:fd:4c:c0:b7:21:7c:f6:57:a3:0f: 94:d6:87:c5:41:9b:8e:60:ef:3a:09:d9:8c:d3:86:1d:5c:0e: b4:4d:b1:86:6b:3b:92:15:38:2d:02:24:b6:d5:c8:f8:41:fc: e0:2e:4d:4c:4e:bb:03:a8:8c:88:13:cc:4d:07:b8:69:ca:53: 0a:fc:50:44:0b:22:a3:71:b0:b6:e5:d9:e7:57:3b:d8:b9:7d: 5f:e8:8f:7e:f3:03:d3:f3:8a:26:81:1f:c7:22:d4:ba:5a:77: 97:c7:1f:c1:a3:60:d2:75:f4:6b:6a:62:f8:94:19:ed:db:3a: 81:02:5a:c3:79:a2:ea:a5:fe:1f:0f:66:b9:82:c9:b1:c7:49: bd:61:30:d9:35:13:e7:29:e1:d8:d0:dc:0a:70:4e:02:72:b9: 0f:a8:25:98:f2:1c:43:ea:19:a7:44:92:0e:c6:8b:f6:e3:2f: e4:30:cb:ff:24:8a:c3:b1:db:d1:81:38:51:70:67:4c:39:88: 0c:e3:ad:aa:a1:6b:10:4a:99:52:80:37:95:9c:ee:1e:00:96: 15:9e:3a:36:e8:64:fc:31:f6:60:bb:06:aa:fe:1d:e5:7b:c5: 8e:d1:a4:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSmYvF5I9A1v+heI7qZSs2Pp7YHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE1MTUzMDEyWhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MTYxOTg4NWNmZDg1MTc4OTY0MmI5YzhlNWU5OTAyNDJj NTZmNzk5NTg1YTU0MzQ3MTAzYTA0MmY0ODdjOTE4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy2svvxo+Di1noomBSefUt3LeoJysCtZQcw4JOSFoNhuOT 8U6KgzcJK6SPiGG2Q9MbKCJyLiWEq9qxrkajy5HyNIQUZvkeODK02nFjJqs6clI1 v/xGNC/xHaiutjrw7VPRMLm3fNamjog8dyP+IKgNBSsJmgGm6vH5T6bODAE3sOA/ mBxTh1DQn5t6OhK+5nG9ltjGTx2BybXYZt4WKrJFZkmbBA/bIEmb2dkZAT2otPIb m71FU6KTvW8BK/u+5UKHgsMfUqGLWiBNbEXmVBq2cpOv2VVeKy6ajTgTbWZWwZJ8 9TJz/lQoHrX4t9rnTbm7bs1djK3tdZd+h2XkWWj3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWpfzX1qJKN5PYyV68tzpc5MrFlEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FkYWY5MzQ0LTc4MWEtNDhjZC05MDNhLTA5ODQ4MWYyOWE5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAD8oVv7k+Rxg8baGI8p5o5MPCuPF KBAWPIsO/UzAtyF89lejD5TWh8VBm45g7zoJ2YzThh1cDrRNsYZrO5IVOC0CJLbV yPhB/OAuTUxOuwOojIgTzE0HuGnKUwr8UEQLIqNxsLbl2edXO9i5fV/oj37zA9Pz iiaBH8ci1Lpad5fHH8GjYNJ19GtqYviUGe3bOoECWsN5ouql/h8PZrmCybHHSb1h MNk1E+cp4djQ3ApwTgJyuQ+oJZjyHEPqGadEkg7Gi/bjL+Qwy/8kisOx29GBOFFw Z0w5iAzjraqhaxBKmVKAN5Wc7h4AlhWeOjboZPwx9mC7Bqr+HeV7xY7RpPM= -----END CERTIFICATE-----Generated at Sat Aug 23 09:07:03 2025 by rpki-client