$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa File: e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa (raw, json) Hash identifier: FeAA8TC5IrANdNlukrBvoZqHKlf5OXFXRZkDA1faZ5w= Subject key identifier: 92:2F:72:15:4C:5F:1B:4E:D5:30:88:ED:FD:2F:0D:FD:42:98:3C:91 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7923EB68C42C564ED562A2C8A177CAF3FA917E42 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa Signing time: Mon 28 Apr 2025 15:30:27 +0000 ROA not before: Mon 28 Apr 2025 15:30:27 +0000 ROA not after: Mon 02 Jun 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:23:eb:68:c4:2c:56:4e:d5:62:a2:c8:a1:77:ca:f3:fa:91:7e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 28 15:30:27 2025 GMT Not After : Jun 2 23:59:59 2025 GMT Subject: serialNumber=ad0e94fe1905b7963289865707cbb19492034b4e7146513016e14281e9b9d4bc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:f6:ca:09:f8:8e:36:92:e5:0c:79:07:86: a6:ee:5e:bb:f5:32:0c:6b:5b:e8:2a:59:7d:f1:34: d1:87:ee:4b:b9:a1:fb:a0:ce:95:be:60:79:b1:5f: 18:53:00:87:f0:95:8a:2d:38:3c:9a:77:1b:1e:63: e4:5f:6b:b5:02:d2:8c:8b:7e:7e:47:e4:17:c3:6e: 50:49:2c:46:6c:2c:67:99:2b:10:f0:0b:68:5f:c2: 41:94:02:75:7b:8b:50:c1:28:19:54:10:27:a4:78: 7f:e6:27:97:e3:7c:08:e1:18:1b:8a:d9:27:d5:8c: f3:4a:d1:df:24:fb:16:d9:d8:a5:f3:22:57:0f:b1: bf:cb:b2:33:8e:a5:b1:49:eb:95:4d:88:ad:dd:ed: 09:c1:5f:56:c3:9e:71:03:36:e0:ef:9f:c5:0f:84: 1f:f3:3d:27:86:c6:ef:07:aa:bb:1a:21:38:ec:97: 7e:a9:d0:e3:60:98:ee:d7:59:ee:6f:32:90:7a:8d: 1d:d3:2f:e9:7c:0b:8b:52:1d:3f:e8:2f:9a:65:24: 23:f1:72:c8:8a:ff:80:6f:4d:d8:8f:09:57:ad:44: 8d:a7:fa:f4:fe:c7:11:d4:1e:61:47:3d:4a:73:99: af:1b:6e:95:b2:ac:c4:1d:1f:56:66:6a:ef:33:29: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2F:72:15:4C:5F:1B:4E:D5:30:88:ED:FD:2F:0D:FD:42:98:3C:91 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5c1b9b8-97f0-44e0-a4b5-2f6c2a2531c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.4.0/24 Signature Algorithm: sha256WithRSAEncryption 19:08:23:fb:29:e3:6f:d1:4f:9f:7b:59:8d:c7:58:52:36:22: be:48:fd:27:5c:72:a5:f6:9e:42:54:88:e9:23:13:ec:f9:60: 32:1b:7e:94:e7:b1:16:e1:b2:82:d2:ee:4f:ce:4a:29:75:65: e6:46:52:a1:98:38:e2:f4:d9:0e:84:76:d5:a5:e2:22:52:cc: 9a:a4:82:a5:98:63:ab:20:a7:f4:40:70:b2:a7:46:37:d6:7c: 54:61:ce:05:6b:c8:6b:11:06:5a:05:b4:2d:92:d4:44:6a:b1: 7d:a1:5f:9f:7d:14:25:e6:96:b3:93:f6:bc:66:f5:35:71:c9: a5:74:4c:dc:68:d7:88:08:8a:8a:97:e8:7b:a3:b0:5f:5d:10: a7:4d:a1:5f:2f:d6:e3:7f:b0:6b:b2:5d:34:33:81:cf:4f:b1: 37:4d:04:d0:41:57:c8:4a:53:99:a8:2a:4f:d9:53:f3:34:e4: 6d:83:83:69:e6:84:e8:43:b4:a1:62:c2:20:fe:31:6e:c8:34: 20:d6:53:33:75:11:b5:3b:f0:93:33:fc:c7:c1:8f:ef:89:13: c9:eb:92:ba:22:d2:d5:a0:7e:a5:87:9c:c2:06:39:ce:74:2c: e6:16:f4:9a:8e:04:d1:b8:cd:80:0a:9b:03:00:f2:77:9e:6b: a7:02:0a:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeSPraMQsVk7VYqLIoXfK8/qRfkIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI4MTUzMDI3WhcNMjUwNjAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDBlOTRmZTE5MDViNzk2MzI4OTg2NTcwN2NiYjE5NDky MDM0YjRlNzE0NjUxMzAxNmUxNDI4MWU5YjlkNGJjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZJvbKCfiONpLlDHkHhqbuXrv1MgxrW+gqWX3xNNGH7ku5 ofugzpW+YHmxXxhTAIfwlYotODyadxseY+Rfa7UC0oyLfn5H5BfDblBJLEZsLGeZ KxDwC2hfwkGUAnV7i1DBKBlUECekeH/mJ5fjfAjhGBuK2SfVjPNK0d8k+xbZ2KXz IlcPsb/LsjOOpbFJ65VNiK3d7QnBX1bDnnEDNuDvn8UPhB/zPSeGxu8HqrsaITjs l36p0ONgmO7XWe5vMpB6jR3TL+l8C4tSHT/oL5plJCPxcsiK/4BvTdiPCVetRI2n +vT+xxHUHmFHPUpzma8bbpWyrMQdH1Zmau8zKfu1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUki9yFUxfG07VMIjt/S8N/UKYPJEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U1YzFiOWI4LTk3ZjAtNDRlMC1hNGI1LTJmNmMyYTI1MzFjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAQwDQYJKoZIhvcNAQELBQADggEBABkII/sp42/RT597WY3HWFI2Ir5I /SdccqX2nkJUiOkjE+z5YDIbfpTnsRbhsoLS7k/OSil1ZeZGUqGYOOL02Q6EdtWl 4iJSzJqkgqWYY6sgp/RAcLKnRjfWfFRhzgVryGsRBloFtC2S1ERqsX2hX599FCXm lrOT9rxm9TVxyaV0TNxo14gIioqX6HujsF9dEKdNoV8v1uN/sGuyXTQzgc9PsTdN BNBBV8hKU5moKk/ZU/M05G2Dg2nmhOhDtKFiwiD+MW7INCDWUzN1EbU78JMz/MfB j++JE8nrkroi0tWgfqWHnMIGOc50LOYW9JqOBNG4zYAKmwMA8neea6cCCl4= -----END CERTIFICATE-----Generated at Mon May 12 02:32:08 2025 by rpki-client