$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa File: f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa (raw, json) Hash identifier: S9ANw0txGeSHl45P8YAm/EVJ0IgqGIpo2hr67xPEzMU= Subject key identifier: DA:32:87:14:86:FA:78:75:13:58:C8:BD:57:9E:23:7F:FC:C1:B8:11 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 155A57C449A49523267FC36F6CCAED481DFBABAD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa Signing time: Tue 24 Jun 2025 15:00:11 +0000 ROA not before: Tue 24 Jun 2025 15:00:11 +0000 ROA not after: Tue 29 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:5a:57:c4:49:a4:95:23:26:7f:c3:6f:6c:ca:ed:48:1d:fb:ab:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 24 15:00:11 2025 GMT Not After : Jul 29 23:59:59 2025 GMT Subject: serialNumber=a1773b5e5eb7bbd783a99f2a5747f8195acc2d9ec1dabfd5f95bf8e39cbf2e3a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:fb:91:b6:4f:fe:e3:c6:53:d5:b2:a1:99: 20:31:57:75:9e:64:99:da:03:cc:c9:8c:d2:ad:68: 22:07:a4:a0:b8:1c:d7:7c:f7:97:bb:95:ca:e9:3b: 55:c7:1e:4d:eb:5f:0e:7e:4e:17:20:14:1e:76:d5: 3e:af:2c:18:95:b0:ba:a5:57:0a:e6:cf:e6:3b:8e: 71:6d:61:1c:b2:b0:01:94:14:05:84:9a:75:cc:cc: ae:5b:80:c3:33:8c:49:01:4e:13:fd:9f:1b:9b:1d: 52:b8:1f:fa:bc:61:34:f0:28:da:d8:4a:61:54:b0: 1a:50:dd:b3:e4:31:ce:d0:5d:66:c4:bb:ec:5e:6d: aa:5e:fa:c8:63:df:55:34:7b:c6:0d:e2:77:35:ca: b1:63:3c:de:5b:fc:98:b8:fc:f2:a1:f7:65:8a:25: cd:8b:8a:19:0b:38:42:50:e2:b7:fb:90:36:45:4c: 51:c0:fc:ae:90:78:51:e9:e8:1f:93:24:59:06:53: 3d:0f:34:29:dc:8c:90:4f:c4:6f:43:49:2a:be:21: 7b:79:21:d3:8d:bc:b0:ce:c4:ba:5e:d8:a6:9d:84: 04:53:8a:a2:11:79:0e:04:60:1f:e8:9b:95:23:ef: b1:4d:81:2e:ef:90:d8:c6:2a:d6:de:92:63:1d:de: 29:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:32:87:14:86:FA:78:75:13:58:C8:BD:57:9E:23:7F:FC:C1:B8:11 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.28.0/23 Signature Algorithm: sha256WithRSAEncryption 11:18:5a:fa:aa:01:66:e4:da:09:ca:6f:40:d5:69:47:9b:94: 4c:94:c3:a9:d8:42:e6:20:bc:ba:a6:87:e2:9f:1c:3b:69:b6: 28:2f:67:df:c1:87:4a:d8:51:c6:ff:4c:48:f9:76:4e:e2:ae: 05:91:19:9f:2e:70:0f:48:91:6a:44:4e:e6:0c:af:d6:8e:5f: 11:e5:dc:db:06:cb:82:f7:d5:ce:68:aa:3a:36:75:4a:5f:5a: 62:9d:8c:90:1f:d1:b0:03:1a:f6:70:ba:42:bf:19:ef:97:db: 03:c1:cc:e7:c8:27:01:ad:0c:b0:46:44:91:ca:6f:04:6b:45: cf:27:80:ac:d4:0c:8f:dc:e2:98:db:8d:28:42:b6:42:3b:ca: 6b:05:12:1e:c0:f7:83:3a:4c:e8:f5:bd:a1:65:4a:4a:23:ac: ad:49:22:a1:f3:67:74:e4:30:02:11:75:a8:2b:95:c3:b2:4e: 06:b2:62:64:1c:56:47:8e:54:75:7c:0e:1b:e7:43:ac:a3:2a: 7f:d6:39:d8:27:5a:ee:b5:e0:e3:f4:ff:d6:72:e5:99:24:af: 9c:c8:4f:38:8b:1e:a1:1d:85:93:bf:b1:6e:3c:9e:62:11:7a: ea:b1:dd:25:ff:bd:f9:dd:a8:ef:23:18:51:39:b9:65:1e:43: a7:da:b2:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFVpXxEmklSMmf8NvbMrtSB37q60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjI0MTUwMDExWhcNMjUwNzI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTc3M2I1ZTVlYjdiYmQ3ODNhOTlmMmE1NzQ3ZjgxOTVh Y2MyZDllYzFkYWJmZDVmOTViZjhlMzljYmYyZTNhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFI/uRtk/+48ZT1bKhmSAxV3WeZJnaA8zJjNKtaCIHpKC4 HNd895e7lcrpO1XHHk3rXw5+ThcgFB521T6vLBiVsLqlVwrmz+Y7jnFtYRyysAGU FAWEmnXMzK5bgMMzjEkBThP9nxubHVK4H/q8YTTwKNrYSmFUsBpQ3bPkMc7QXWbE u+xebape+shj31U0e8YN4nc1yrFjPN5b/Ji4/PKh92WKJc2LihkLOEJQ4rf7kDZF TFHA/K6QeFHp6B+TJFkGUz0PNCncjJBPxG9DSSq+IXt5IdONvLDOxLpe2KadhART iqIReQ4EYB/om5Uj77FNgS7vkNjGKtbekmMd3ikFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2jKHFIb6eHUTWMi9V54jf/zBuBEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y3MjM2ZGYxLWQ2YWQtNGZjNy1iNjFjLTViNzBmY2RkOTAyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBABEYWvqqAWbk2gnKb0DVaUeblEyU w6nYQuYgvLqmh+KfHDtptigvZ9/Bh0rYUcb/TEj5dk7irgWRGZ8ucA9IkWpETuYM r9aOXxHl3NsGy4L31c5oqjo2dUpfWmKdjJAf0bADGvZwukK/Ge+X2wPBzOfIJwGt DLBGRJHKbwRrRc8ngKzUDI/c4pjbjShCtkI7ymsFEh7A94M6TOj1vaFlSkojrK1J IqHzZ3TkMAIRdagrlcOyTgayYmQcVkeOVHV8DhvnQ6yjKn/WOdgnWu614OP0/9Zy 5Zkkr5zITziLHqEdhZO/sW48nmIReuqx3SX/vfndqO8jGFE5uWUeQ6fasuw= -----END CERTIFICATE-----Generated at Sun Jun 29 14:31:07 2025 by rpki-client