$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa File: c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa (raw, json) Hash identifier: h4DjH+PXjP4T41paMUgHRCH0ncHO4vYCMCfQdMI5nGw= Subject key identifier: DB:86:8B:18:FB:D7:5C:1C:B4:A2:92:E4:39:16:B7:22:0D:3D:D2:06 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1390C587DD10C06EAF804EC1A46CBC799E5A19A8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa Signing time: Sat 10 May 2025 00:50:26 +0000 ROA not before: Sat 10 May 2025 00:50:26 +0000 ROA not after: Sat 14 Jun 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:90:c5:87:dd:10:c0:6e:af:80:4e:c1:a4:6c:bc:79:9e:5a:19:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 10 00:50:26 2025 GMT Not After : Jun 14 23:59:59 2025 GMT Subject: serialNumber=08200e016f539cba6b690ede30d215307509832a0f1890c21d06576638262457, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:97:b0:db:e8:f1:17:96:9a:02:bc:0f:f5:fb: c1:11:69:d2:eb:d6:68:45:b4:87:2a:12:b5:0d:d7: b4:54:1e:93:01:b1:d5:50:01:1a:68:e4:cd:29:a0: 52:ed:94:06:71:43:43:7d:57:66:2f:14:be:b9:32: ad:94:9e:0e:93:6f:2e:b7:fc:09:fd:b1:d7:33:28: 40:1a:45:37:01:44:98:72:bd:bf:18:f3:8f:3d:1f: 02:de:f8:f2:73:6e:3b:8c:3e:db:5b:97:a4:b5:86: 3d:f7:bc:9e:5d:aa:2c:bc:43:8a:47:25:4c:8a:3a: 15:6a:2e:03:aa:df:bc:cc:51:97:d5:e8:12:61:b5: 08:43:72:82:43:e1:98:81:37:40:9f:5c:d1:b0:d7: 6d:0c:6b:3b:97:4a:78:0a:d1:37:fe:fe:9c:1b:ac: 29:dc:aa:33:72:7b:bc:48:6d:1b:80:ed:df:c0:cc: 57:ab:8c:ba:37:bf:d6:a8:6e:14:bc:51:56:ff:4d: 62:d8:7f:2d:6a:a7:88:a5:bc:0d:59:2c:58:02:0d: 63:2f:b4:20:6a:5c:ca:f6:1b:27:2d:7b:d8:56:8c: cb:0e:ea:f2:67:53:3c:f6:26:a0:92:0d:a9:03:a7: 4e:bc:a7:39:0b:0d:69:b3:7f:da:b6:b5:26:8a:00: 3e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:86:8B:18:FB:D7:5C:1C:B4:A2:92:E4:39:16:B7:22:0D:3D:D2:06 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c0c4f654-a3ea-490f-9436-182e0eee0c4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.3.0/24 Signature Algorithm: sha256WithRSAEncryption 70:00:d5:f2:6d:04:1b:e5:e5:bc:64:1e:77:42:ea:f7:4d:c3: eb:c8:7d:49:21:5d:d0:2c:b7:e3:86:d5:1e:68:39:a4:16:5a: ca:b1:45:b2:bb:0c:43:51:35:fa:48:a8:ef:e3:98:6c:18:32: 44:cb:63:43:27:d2:19:fb:a8:4b:0d:e2:c3:40:3c:ae:5d:bf: 25:c0:71:cd:8e:50:07:93:d7:ec:d0:5e:91:20:0b:69:26:3d: be:c9:6f:bb:78:68:4b:bb:fc:ec:ac:b7:52:e2:c6:d0:42:a3: 8d:a5:b7:06:6b:26:79:1a:94:9b:9e:95:fa:f8:8a:ef:c1:92: 54:7d:9c:08:45:d4:98:ec:1e:94:07:95:ab:4b:97:cf:e9:ba: b8:e4:b0:6a:0b:d3:dd:4d:48:ed:46:35:7c:a7:37:0d:0b:40: 7f:d5:5c:27:ce:dc:1c:c1:15:89:f8:6a:04:8c:7e:b6:73:0e: 81:b8:35:1f:f1:c9:3b:68:86:14:0e:93:30:b2:e9:39:af:cd: 06:dd:d6:93:a2:c4:19:6a:7b:d1:a3:14:08:82:2c:c7:ec:13: a4:31:06:7c:ad:15:86:df:e3:80:0a:09:8e:3f:69:48:70:ae: 80:e2:c4:e5:a4:32:fe:6d:a0:c8:c2:f8:8f:ec:00:f8:f6:42: 19:71:5e:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE5DFh90QwG6vgE7BpGy8eZ5aGagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTEwMDA1MDI2WhcNMjUwNjE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODIwMGUwMTZmNTM5Y2JhNmI2OTBlZGUzMGQyMTUzMDc1 MDk4MzJhMGYxODkwYzIxZDA2NTc2NjM4MjYyNDU3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQl7Db6PEXlpoCvA/1+8ERadLr1mhFtIcqErUN17RUHpMB sdVQARpo5M0poFLtlAZxQ0N9V2YvFL65Mq2Ung6Tby63/An9sdczKEAaRTcBRJhy vb8Y8489HwLe+PJzbjuMPttbl6S1hj33vJ5dqiy8Q4pHJUyKOhVqLgOq37zMUZfV 6BJhtQhDcoJD4ZiBN0CfXNGw120MazuXSngK0Tf+/pwbrCncqjNye7xIbRuA7d/A zFerjLo3v9aobhS8UVb/TWLYfy1qp4ilvA1ZLFgCDWMvtCBqXMr2Gycte9hWjMsO 6vJnUzz2JqCSDakDp068pzkLDWmzf9q2tSaKAD4bAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU24aLGPvXXBy0opLkORa3Ig090gYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2MwYzRmNjU0LWEzZWEtNDkwZi05NDM2LTE4MmUwZWVlMGM0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAMwDQYJKoZIhvcNAQELBQADggEBAHAA1fJtBBvl5bxkHndC6vdNw+vI fUkhXdAst+OG1R5oOaQWWsqxRbK7DENRNfpIqO/jmGwYMkTLY0Mn0hn7qEsN4sNA PK5dvyXAcc2OUAeT1+zQXpEgC2kmPb7Jb7t4aEu7/Oyst1LixtBCo42ltwZrJnka lJuelfr4iu/BklR9nAhF1JjsHpQHlatLl8/purjksGoL091NSO1GNXynNw0LQH/V XCfO3BzBFYn4agSMfrZzDoG4NR/xyTtohhQOkzCy6TmvzQbd1pOixBlqe9GjFAiC LMfsE6QxBnytFYbf44AKCY4/aUhwroDixOWkMv5toMjC+I/sAPj2QhlxXoo= -----END CERTIFICATE-----Generated at Mon May 12 05:40:30 2025 by rpki-client