$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa File: decfa8a2-ad50-432e-96a7-cba83d9032f9.roa (raw, json) Hash identifier: cAF65mERRVDv6/zVxlTOjjN/jsQFLlVdXdaLcF4mSIo= Subject key identifier: 1F:9D:0C:38:0E:30:94:16:FA:C3:08:49:24:24:2E:1E:36:CC:B2:22 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 19733014A4A7BC4612073B2792FFD2D2759AC722 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa Signing time: Mon 16 Jun 2025 19:10:04 +0000 ROA not before: Mon 16 Jun 2025 19:10:04 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:73:30:14:a4:a7:bc:46:12:07:3b:27:92:ff:d2:d2:75:9a:c7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 16 19:10:04 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d5fb33798164b8d60417ed97d7174965ae824a9a6c2f448ac0722d5bc7d4170a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:79:96:7d:9a:5a:d4:93:ba:29:59:de:58:e6: 7f:0e:41:f5:2c:db:68:8f:dd:5b:8a:88:27:cb:1f: 39:61:3d:f2:f6:a2:ec:17:92:5f:e7:1e:01:1c:1e: 79:07:6f:1b:8a:ae:8a:25:b2:6a:73:04:b4:46:31: a0:0c:8e:4c:a3:b4:a3:69:9e:ec:eb:bc:95:eb:7a: dc:3b:47:77:81:f9:7d:d9:5e:53:75:2d:30:71:4f: 02:d2:16:fa:df:cc:3b:34:1f:59:c4:3c:ce:34:f7: 2f:cc:f9:d0:5d:77:f3:c0:5e:d0:49:0e:52:e7:be: 25:6c:fe:ec:5f:7a:43:fb:62:8b:db:32:64:6a:da: e7:0b:87:09:73:2f:2a:5c:19:ab:72:6b:21:4d:c7: fe:73:52:76:99:13:20:c2:06:fe:80:a8:df:bd:50: 12:8b:08:94:0f:50:4f:4f:5c:c4:89:86:f1:7d:fe: 15:1d:79:0d:9d:07:63:2a:fe:b1:cf:c0:46:28:6c: 21:d6:4b:dd:98:68:9d:88:2e:8e:20:06:03:af:bc: 50:70:2d:a1:f7:05:ea:2a:67:8e:ad:5d:79:b2:60: dc:c7:63:e7:12:95:68:67:14:03:e5:ba:98:63:b2: 43:46:8b:02:fe:f7:e4:c9:fd:51:c8:6c:bb:3e:ed: ef:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9D:0C:38:0E:30:94:16:FA:C3:08:49:24:24:2E:1E:36:CC:B2:22 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.9.0/24 Signature Algorithm: sha256WithRSAEncryption 45:b0:e5:79:95:79:12:ce:70:87:78:dc:c6:e9:a1:ca:4c:81: da:5b:36:84:39:e4:34:3a:d8:69:9c:97:e0:77:92:8b:ea:6f: 10:5d:a5:b2:95:2a:48:09:1e:49:12:91:28:c1:5d:73:8b:70: 32:9a:54:a1:cc:f5:9d:62:af:e6:f1:70:6e:e4:6b:1f:30:93: 60:9e:df:0d:8b:96:5f:34:c7:13:60:13:70:1c:26:2a:f1:e6: 92:c2:03:3d:fd:3a:47:56:a7:fe:23:d3:9f:60:5a:7a:cc:35: f0:22:ff:3f:25:96:6d:eb:14:70:1a:11:45:38:2c:76:52:5c: 96:bc:78:81:69:d0:98:aa:df:2f:f3:8d:da:c2:9f:75:5c:6e: 6a:88:60:af:f1:18:07:5b:6d:b8:cf:55:2e:f2:b4:d2:a4:11: 56:57:87:f2:86:53:6f:e9:01:79:8d:eb:5f:25:b0:ef:48:01: 34:cf:71:dc:c7:69:b0:09:58:83:56:2b:3c:06:8c:76:02:a4: f5:8d:0c:7a:05:d6:b0:76:38:a4:66:88:61:48:8f:33:72:fd: fe:6d:5c:dc:a3:30:43:44:bb:8d:d1:7b:a3:7d:d0:e3:26:30: b0:65:30:07:43:d3:2a:e0:71:57:dc:34:aa:00:be:16:42:bc: 7b:24:ec:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGXMwFKSnvEYSBzsnkv/S0nWaxyIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjE2MTkxMDA0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNWZiMzM3OTgxNjRiOGQ2MDQxN2VkOTdkNzE3NDk2NWFl ODI0YTlhNmMyZjQ0OGFjMDcyMmQ1YmM3ZDQxNzBhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD6eZZ9mlrUk7opWd5Y5n8OQfUs22iP3VuKiCfLHzlhPfL2 ouwXkl/nHgEcHnkHbxuKroolsmpzBLRGMaAMjkyjtKNpnuzrvJXretw7R3eB+X3Z XlN1LTBxTwLSFvrfzDs0H1nEPM409y/M+dBdd/PAXtBJDlLnviVs/uxfekP7Yovb MmRq2ucLhwlzLypcGatyayFNx/5zUnaZEyDCBv6AqN+9UBKLCJQPUE9PXMSJhvF9 /hUdeQ2dB2Mq/rHPwEYobCHWS92YaJ2ILo4gBgOvvFBwLaH3BeoqZ46tXXmyYNzH Y+cSlWhnFAPluphjskNGiwL+9+TJ/VHIbLs+7e+1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUH50MOA4wlBb6wwhJJCQuHjbMsiIwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RlY2ZhOGEyLWFkNTAtNDMyZS05NmE3LWNiYTgzZDkwMzJmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAkwDQYJKoZIhvcNAQELBQADggEBAEWw5XmVeRLOcId43MbpocpMgdpb NoQ55DQ62Gmcl+B3kovqbxBdpbKVKkgJHkkSkSjBXXOLcDKaVKHM9Z1ir+bxcG7k ax8wk2Ce3w2Lll80xxNgE3AcJirx5pLCAz39OkdWp/4j059gWnrMNfAi/z8llm3r FHAaEUU4LHZSXJa8eIFp0Jiq3y/zjdrCn3VcbmqIYK/xGAdbbbjPVS7ytNKkEVZX h/KGU2/pAXmN618lsO9IATTPcdzHabAJWINWKzwGjHYCpPWNDHoF1rB2OKRmiGFI jzNy/f5tXNyjMENEu43Re6N90OMmMLBlMAdD0yrgcVfcNKoAvhZCvHsk7DU= -----END CERTIFICATE-----Generated at Mon Jun 30 16:08:10 2025 by rpki-client