$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa File: b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa (raw, json) Hash identifier: ZgCR820UqnEuHNrG5bcxsoIZlYAnNRxGvf53AM8SuDQ= Subject key identifier: C3:8A:3A:A3:C7:57:24:DE:0D:AA:D8:30:83:C2:CE:65:63:1C:55:55 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2E6853C26ABB563EF8687FF386CA37A8E0CC38B2 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa Signing time: Mon 28 Apr 2025 15:30:34 +0000 ROA not before: Mon 28 Apr 2025 15:30:34 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.97.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:68:53:c2:6a:bb:56:3e:f8:68:7f:f3:86:ca:37:a8:e0:cc:38:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 28 15:30:34 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=dadc5b6470655e4eb5cf4b45017f61732ac3f2d2425c2380d25243063486b8e4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:e5:03:fc:99:9f:41:74:21:62:97:81:40: bf:62:4b:66:7a:7d:de:fc:fa:25:bd:1c:61:d3:8d: 99:41:c0:00:7b:80:4e:c2:af:75:84:c2:0f:00:e8: ad:80:33:a1:a8:d8:2f:2a:91:0d:d0:76:ed:8b:45: bc:6a:ad:58:31:06:c8:76:53:79:e2:a6:da:d5:21: ec:cc:9c:96:7a:56:99:16:2c:a9:ab:85:aa:3c:f9: ae:e1:39:e2:f5:63:37:df:b8:dc:c0:a3:3d:4e:55: 1e:88:11:df:46:66:9d:31:48:5a:17:9f:97:d0:40: 19:d4:d4:8d:2b:1c:57:e4:c6:5b:66:12:d2:c3:a8: d0:d8:35:c4:1f:ac:52:60:b0:a4:8f:d1:31:c4:95: 57:e9:8e:cb:16:1f:02:11:29:73:b7:5c:6b:2c:49: 6f:3e:3e:29:d9:c9:ef:21:92:63:55:d2:18:cf:aa: c6:d7:b4:90:dc:da:06:65:30:3f:93:d9:e5:03:5c: 02:4a:88:3b:5e:92:ad:00:6f:6f:f0:51:33:0a:d9: 78:9c:8f:74:32:2d:4b:e5:a4:1c:8b:55:4d:1a:a8: dd:a5:8f:f3:db:d4:a5:4b:e1:12:52:dc:c7:1f:d7: f6:b9:48:64:d6:10:03:31:a8:cc:91:3c:c9:2d:26: e1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8A:3A:A3:C7:57:24:DE:0D:AA:D8:30:83:C2:CE:65:63:1C:55:55 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b99b6bff-0f0d-4cfe-b052-73b7537e87b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:08:14:df:8c:22:3e:97:37:4e:27:f9:d6:6d:28:cc:42:c1: 39:65:94:34:a5:e6:cb:91:b8:f4:3f:55:04:ae:2e:6a:c3:66: 86:9b:ee:9a:44:ec:36:05:5e:82:25:20:2f:38:83:51:3c:d0: 7c:af:2a:93:d2:2d:ec:ae:44:dd:9e:1e:51:8c:7c:a6:00:54: 40:de:b3:7a:21:f9:b3:64:91:a0:34:12:c0:b6:67:ce:e0:ac: 9e:51:cd:87:30:c9:81:8d:62:99:ca:c5:1e:74:03:87:bb:aa: c9:eb:5f:f3:2b:e0:db:fb:6d:e7:3c:97:90:08:cd:a9:4c:cd: 12:12:2a:e8:a2:22:e6:b4:c2:9a:63:d5:b0:ef:b2:78:58:66: 57:dc:b4:fd:b3:28:9e:b0:39:44:35:a2:45:71:74:71:ec:d3: c6:4c:61:88:37:93:f1:9c:e8:80:67:ae:2b:7a:08:9c:fa:5b: 02:8b:ec:cd:75:2b:3c:11:34:2f:37:9a:d5:e8:ba:0f:90:fb: f0:b0:1a:8f:eb:b4:0b:08:0b:ea:6e:79:85:f4:9d:29:67:17: eb:17:e2:36:1c:38:40:e8:2c:35:77:00:69:ba:ee:19:e0:f5: eb:4e:81:c9:76:c8:cc:db:25:13:76:d7:eb:61:83:61:12:6c: 84:70:f1:eb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULmhTwmq7Vj74aH/zhso3qODMOLIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI4MTUzMDM0WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYWRjNWI2NDcwNjU1ZTRlYjVjZjRiNDUwMTdmNjE3MzJh YzNmMmQyNDI1YzIzODBkMjUyNDMwNjM0ODZiOGU0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0ZOUD/JmfQXQhYpeBQL9iS2Z6fd78+iW9HGHTjZlBwAB7 gE7Cr3WEwg8A6K2AM6Go2C8qkQ3Qdu2LRbxqrVgxBsh2U3niptrVIezMnJZ6VpkW LKmrhao8+a7hOeL1YzffuNzAoz1OVR6IEd9GZp0xSFoXn5fQQBnU1I0rHFfkxltm EtLDqNDYNcQfrFJgsKSP0THElVfpjssWHwIRKXO3XGssSW8+PinZye8hkmNV0hjP qsbXtJDc2gZlMD+T2eUDXAJKiDtekq0Ab2/wUTMK2Xicj3QyLUvlpByLVU0aqN2l j/Pb1KVL4RJS3Mcf1/a5SGTWEAMxqMyRPMktJuHNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUw4o6o8dXJN4Nqtgwg8LOZWMcVVUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2I5OWI2YmZmLTBmMGQtNGNmZS1iMDUyLTczYjc1MzdlODdiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjYTANBgkqhkiG9w0BAQsFAAOCAQEAXggU34wiPpc3Tif51m0ozELBOWWU NKXmy5G49D9VBK4uasNmhpvumkTsNgVegiUgLziDUTzQfK8qk9It7K5E3Z4eUYx8 pgBUQN6zeiH5s2SRoDQSwLZnzuCsnlHNhzDJgY1imcrFHnQDh7uqyetf8yvg2/tt 5zyXkAjNqUzNEhIq6KIi5rTCmmPVsO+yeFhmV9y0/bMonrA5RDWiRXF0cezTxkxh iDeT8ZzogGeuK3oInPpbAovszXUrPBE0Lzea1ei6D5D78LAaj+u0CwgL6m55hfSd KWcX6xfiNhw4QOgsNXcAabruGeD1606ByXbIzNslE3bX62GDYRJshHDx6w== -----END CERTIFICATE-----Generated at Thu May 8 12:32:58 2025 by rpki-client