$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa File: decfa8a2-ad50-432e-96a7-cba83d9032f9.roa (raw, json) Hash identifier: OshDTqn/soTq7vxu53ta80yQikDy+ZGgH1k5DLp2j6U= Subject key identifier: BF:A3:8F:00:19:42:3E:B1:0F:B4:25:A8:57:48:6D:EB:D6:A8:E5:1E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6197850801FBD8A702EB20BA96933E11D29ED0F6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa Signing time: Fri 25 Apr 2025 17:40:03 +0000 ROA not before: Fri 25 Apr 2025 17:40:03 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:97:85:08:01:fb:d8:a7:02:eb:20:ba:96:93:3e:11:d2:9e:d0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 25 17:40:03 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f267cd77e311f27c1829819178e75e36d764c4a68328c0ac4f00d203e2d0c27c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:58:42:71:3c:6a:2c:18:78:83:32:78:73:96: 63:99:84:c4:f7:d2:c2:a8:f9:e0:06:3d:83:eb:a3: 41:83:32:97:49:26:ca:0e:b7:e4:5f:fe:81:7d:8d: f5:e7:21:3e:f6:49:56:ba:e5:f9:34:6d:6b:b9:6a: 7c:70:af:eb:5a:b1:6c:23:1e:18:53:86:65:9f:97: 32:38:1b:6c:98:81:22:9e:3c:c6:08:63:2f:f6:92: df:5c:ce:f6:17:11:e0:b7:d9:8d:29:89:56:95:11: 30:f4:f9:e7:23:bc:e4:9b:db:2b:b8:13:12:8f:a2: 15:83:24:99:05:32:aa:5f:ae:4c:ed:63:0e:a3:a4: a0:3a:b9:5d:7d:63:1c:a9:d1:d0:58:7e:e9:1a:55: a4:e0:b5:a1:9c:ba:8f:21:56:01:86:8c:91:53:53: 33:dc:4c:78:12:49:08:08:ed:5b:d5:0f:43:59:a0: d7:86:f6:9f:2c:54:dd:66:4d:be:12:b6:fb:38:3f: 5f:c7:9a:c3:c8:aa:cc:f3:40:f3:83:3b:77:ee:d7: 26:63:0f:5f:33:96:37:dd:d0:6c:a2:40:4c:32:d4: 7d:67:fb:48:2f:ff:1a:7f:a5:eb:99:c9:30:2e:d8: d1:cb:6f:e5:b9:f4:66:80:a2:58:5b:66:99:e5:52: 68:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A3:8F:00:19:42:3E:B1:0F:B4:25:A8:57:48:6D:EB:D6:A8:E5:1E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.9.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:0b:64:59:6a:43:7d:61:b7:47:a0:11:a6:05:28:95:bf:15: b4:5c:3e:01:0b:9d:e3:e7:d5:01:72:f8:0e:27:4d:d3:f8:97: 7f:1d:af:62:32:6b:42:6c:03:e0:25:39:9c:ac:5d:de:78:47: 09:b5:ec:5c:e1:ba:df:15:bc:89:09:07:da:af:ee:20:74:b8: 3c:b3:70:73:a2:69:18:13:82:41:75:e7:6b:fc:ae:d7:51:53: 10:fa:b4:2a:fe:80:72:70:16:e4:14:55:c2:d0:a4:8a:be:d7: 81:6d:d6:d2:5f:6a:5b:6d:85:cb:bb:3a:92:36:6d:73:c9:d9: 05:0a:b9:65:5b:aa:a3:9d:2a:a0:95:02:79:c1:4d:4b:43:25: 5b:47:bc:4f:4c:3e:ef:b6:dc:fb:3c:d9:53:81:f9:61:7d:39: a8:3c:07:46:b2:9c:ba:bf:f9:b5:16:06:d6:8d:c5:52:d3:d2: e9:f9:50:b8:ed:f1:c8:bb:cd:62:70:4e:1f:ee:aa:c0:b9:2d: 78:63:7f:ba:9b:be:e5:f6:69:93:c8:01:67:28:6a:c0:3c:fb: 91:8f:16:18:1c:3f:3d:fb:82:aa:fe:3e:99:35:cc:c4:58:9e: f8:5f:8e:79:af:b6:85:e0:95:f0:0f:b7:b7:13:06:66:ed:39: c3:70:11:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYZeFCAH72KcC6yC6lpM+EdKe0PYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI1MTc0MDAzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMjY3Y2Q3N2UzMTFmMjdjMTgyOTgxOTE3OGU3NWUzNmQ3 NjRjNGE2ODMyOGMwYWM0ZjAwZDIwM2UyZDBjMjdjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbWEJxPGosGHiDMnhzlmOZhMT30sKo+eAGPYPro0GDMpdJ JsoOt+Rf/oF9jfXnIT72SVa65fk0bWu5anxwr+tasWwjHhhThmWflzI4G2yYgSKe PMYIYy/2kt9czvYXEeC32Y0piVaVETD0+ecjvOSb2yu4ExKPohWDJJkFMqpfrkzt Yw6jpKA6uV19Yxyp0dBYfukaVaTgtaGcuo8hVgGGjJFTUzPcTHgSSQgI7VvVD0NZ oNeG9p8sVN1mTb4Stvs4P1/HmsPIqszzQPODO3fu1yZjD18zljfd0GyiQEwy1H1n +0gv/xp/peuZyTAu2NHLb+W59GaAolhbZpnlUmhnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv6OPABlCPrEPtCWoV0ht69ao5R4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RlY2ZhOGEyLWFkNTAtNDMyZS05NmE3LWNiYTgzZDkwMzJmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAkwDQYJKoZIhvcNAQELBQADggEBAAwLZFlqQ31ht0egEaYFKJW/FbRc PgELnePn1QFy+A4nTdP4l38dr2Iya0JsA+AlOZysXd54Rwm17Fzhut8VvIkJB9qv 7iB0uDyzcHOiaRgTgkF152v8rtdRUxD6tCr+gHJwFuQUVcLQpIq+14Ft1tJfaltt hcu7OpI2bXPJ2QUKuWVbqqOdKqCVAnnBTUtDJVtHvE9MPu+23Ps82VOB+WF9Oag8 B0aynLq/+bUWBtaNxVLT0un5ULjt8ci7zWJwTh/uqsC5LXhjf7qbvuX2aZPIAWco asA8+5GPFhgcPz37gqr+Ppk1zMRYnvhfjnmvtoXglfAPt7cTBmbtOcNwEXE= -----END CERTIFICATE-----Generated at Sat May 10 20:44:25 2025 by rpki-client