$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa File: 0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa (raw, json) Hash identifier: +2YJMy08vdztXD7x9r0CdEof2tUUg+cV6XGTj7QPh+Y= Subject key identifier: C8:E8:3B:28:25:7C:09:F3:3B:5D:BC:C3:BE:B6:25:D3:32:75:1A:A0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 26F86707FF791180E688E72D35144260F6A2E55B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa Signing time: Fri 11 Jul 2025 18:20:10 +0000 ROA not before: Fri 11 Jul 2025 18:20:10 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f8:67:07:ff:79:11:80:e6:88:e7:2d:35:14:42:60:f6:a2:e5:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 11 18:20:10 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=ce969303607379892ca7cf863c6ff35a91e168a6905f387d67bf47d9b0919948, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f9:52:29:45:12:69:82:95:a0:23:a7:66:08: 46:10:6e:e1:79:85:d9:82:1c:26:a8:4d:90:b5:fa: 0a:6d:7a:5c:1e:fe:8a:3b:d6:91:5a:e6:bd:02:eb: 74:be:91:0b:55:c9:e6:4c:c8:6a:d1:17:ac:a7:b1: 6d:9d:90:66:cc:28:7a:b0:65:24:eb:7d:54:64:8c: c9:1e:93:8f:af:f6:f4:36:0b:86:4a:58:64:72:a1: e2:8a:7d:09:e3:69:de:91:a6:a6:4b:08:65:ef:55: 28:95:8a:be:fd:4d:5f:8e:f0:e2:02:81:d9:4b:56: 6f:2a:5d:44:35:70:a6:09:5f:11:94:3d:c9:48:07: 72:6e:96:71:3d:c9:1a:8d:e6:c3:c8:07:5c:8c:b1: 51:38:2f:71:cc:91:3e:d5:0e:80:90:41:8c:2d:24: 10:81:37:3e:fd:04:09:dc:f9:1d:d0:96:79:d9:4c: 32:0a:1c:3f:b9:d6:62:c2:1b:89:7d:a5:a8:b2:1e: 5d:11:c6:27:01:13:98:79:fc:03:50:f9:9d:cf:bb: 36:cb:42:de:06:e3:d8:16:a0:36:01:2e:48:86:bc: 1a:82:45:2c:3a:d1:eb:96:37:82:53:d2:c1:be:b2: b6:0b:91:12:39:0f:6b:12:e8:37:b9:5d:6a:c9:0b: c5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E8:3B:28:25:7C:09:F3:3B:5D:BC:C3:BE:B6:25:D3:32:75:1A:A0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.2.0/24 Signature Algorithm: sha256WithRSAEncryption 43:80:b8:cb:66:d0:d0:b8:27:59:b1:4e:76:5b:c5:fe:9b:8c: 9b:73:45:93:47:1b:79:71:af:f1:ab:48:e0:2d:e7:0d:c6:f9: db:d1:13:50:24:b4:3d:60:97:60:59:46:e5:e8:b3:2d:af:5d: a9:d4:94:66:50:1c:d9:1b:5d:e3:df:d5:d3:27:ba:4c:e9:2d: a4:5d:22:dd:b1:ec:97:73:5f:f1:26:98:4a:fa:c9:09:02:3f: 52:79:b0:b2:61:dc:6c:32:64:03:2b:c8:ee:2b:d3:39:b2:32: 74:98:8f:5e:05:2e:34:65:0d:8f:ba:58:df:25:e8:3b:3a:7b: b3:77:37:93:36:a2:b6:2f:26:69:cd:9d:67:b9:57:d6:66:64: d5:43:83:06:ea:d2:33:35:88:e5:73:ea:f4:df:63:9d:c9:a9: ef:eb:f2:f3:29:4d:1e:36:02:1f:59:dc:7e:f9:a9:2a:2b:5d: d9:7c:a2:70:1a:b2:8f:6a:37:93:a2:e6:5c:01:29:02:fb:68: fd:6e:38:99:f0:ea:1b:31:d7:cd:24:ce:40:8d:ce:6c:8e:eb: 08:66:ee:c3:20:1a:1b:41:74:fe:54:ab:98:c2:05:ce:05:fe: eb:1d:dc:9f:55:71:a4:18:78:de:dd:0f:0c:80:06:fb:7a:bb: ce:a0:7c:14 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJvhnB/95EYDmiOctNRRCYPai5VswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzExMTgyMDEwWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTk2OTMwMzYwNzM3OTg5MmNhN2NmODYzYzZmZjM1YTkx ZTE2OGE2OTA1ZjM4N2Q2N2JmNDdkOWIwOTE5OTQ4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDs+VIpRRJpgpWgI6dmCEYQbuF5hdmCHCaoTZC1+gptelwe /oo71pFa5r0C63S+kQtVyeZMyGrRF6ynsW2dkGbMKHqwZSTrfVRkjMkek4+v9vQ2 C4ZKWGRyoeKKfQnjad6RpqZLCGXvVSiVir79TV+O8OICgdlLVm8qXUQ1cKYJXxGU PclIB3JulnE9yRqN5sPIB1yMsVE4L3HMkT7VDoCQQYwtJBCBNz79BAnc+R3QlnnZ TDIKHD+51mLCG4l9paiyHl0RxicBE5h5/ANQ+Z3PuzbLQt4G49gWoDYBLkiGvBqC RSw60euWN4JT0sG+srYLkRI5D2sS6De5XWrJC8UnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyOg7KCV8CfM7XbzDvrYl0zJ1GqAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBlODE0ZjJjLTYxMDAtNDAzNy05ZGNjLWNkYWYzZTIwZDg1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAIwDQYJKoZIhvcNAQELBQADggEBAEOAuMtm0NC4J1mxTnZbxf6bjJtz RZNHG3lxr/GrSOAt5w3G+dvRE1AktD1gl2BZRuXosy2vXanUlGZQHNkbXePf1dMn ukzpLaRdIt2x7JdzX/EmmEr6yQkCP1J5sLJh3GwyZAMryO4r0zmyMnSYj14FLjRl DY+6WN8l6Ds6e7N3N5M2orYvJmnNnWe5V9ZmZNVDgwbq0jM1iOVz6vTfY53Jqe/r 8vMpTR42Ah9Z3H75qSorXdl8onAaso9qN5Oi5lwBKQL7aP1uOJnw6hsx180kzkCN zmyO6whm7sMgGhtBdP5Uq5jCBc4F/usd3J9VcaQYeN7dDwyABvt6u86gfBQ= -----END CERTIFICATE-----Generated at Fri Jul 25 17:24:08 2025 by rpki-client