$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/76df0f41-06e4-4221-a069-1b6cbd3c106f.roa File: 76df0f41-06e4-4221-a069-1b6cbd3c106f.roa (raw, json) Hash identifier: NhMsR1eCZZ9J5aAof5YgH6tCEUonZRPI8UZtXsbVSqA= Subject key identifier: 59:A4:DC:4F:BA:37:14:C1:40:FB:2E:47:E6:F6:09:EE:47:11:CD:71 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 275F39DD2D01459CAA64731E02CA273A6E652721 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/76df0f41-06e4-4221-a069-1b6cbd3c106f.roa Signing time: Mon 31 Mar 2025 18:30:24 +0000 ROA not before: Mon 31 Mar 2025 18:30:24 +0000 ROA not after: Mon 05 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5f:39:dd:2d:01:45:9c:aa:64:73:1e:02:ca:27:3a:6e:65:27:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Mar 31 18:30:24 2025 GMT Not After : May 5 23:59:59 2025 GMT Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2d:96:53:ff:82:95:93:57:5f:d7:fe:3f:36: c5:8e:c4:79:cd:f2:0d:26:09:bb:77:cf:fd:d5:e1: 28:b7:71:36:7a:59:58:e9:07:9f:b6:e4:7b:56:f5: 07:2a:af:dd:aa:27:73:88:78:d2:ec:3d:fc:88:02: 5d:81:e3:b4:fa:e2:0f:c1:96:50:41:63:e9:4d:fc: b4:a4:c0:1b:9f:c3:b0:63:52:af:92:80:2e:ad:2a: 64:75:9e:1d:c5:6e:ee:35:a3:98:b4:0c:f9:df:00: 75:5b:16:6e:6d:9f:93:f5:5c:b2:b8:ea:b9:b3:14: b3:c1:8a:fb:77:cd:c9:5c:b4:1c:12:1c:05:31:73: cc:27:da:8d:7a:07:8e:72:dc:e4:04:aa:68:ca:90: cc:2d:d5:a9:9d:cd:fb:a2:87:4e:80:b8:32:d3:33: 37:bc:24:16:01:15:5f:9f:eb:7c:1e:d7:56:cd:8e: 25:51:c7:04:86:a7:df:70:ba:d0:e6:10:3a:4b:83: 97:c3:03:bc:1d:49:c6:e6:4a:3b:ff:8c:71:35:42: 71:ca:49:0f:34:1d:03:b6:b0:9b:ee:76:85:03:37: 33:f5:2c:a0:63:17:0b:42:b8:4d:33:e8:bd:f1:bb: 64:95:ee:7e:b8:34:37:6c:3d:69:17:e6:9b:c2:15: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:A4:DC:4F:BA:37:14:C1:40:FB:2E:47:E6:F6:09:EE:47:11:CD:71 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/76df0f41-06e4-4221-a069-1b6cbd3c106f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:a1:b1:d9:d6:d3:79:33:15:6b:cf:42:d6:d6:f0:24:9b:3e: 8d:f7:ca:c9:1a:1a:9e:44:8e:73:e6:31:29:3a:73:94:e7:4e: 71:f1:90:79:c6:d2:59:55:db:5a:03:9b:26:b6:71:aa:b3:71: 80:27:ff:cc:a1:5e:68:a2:6f:92:85:25:95:32:83:ff:d4:22: 67:1a:bf:c7:52:2a:68:c7:6b:37:85:dd:7b:c6:ea:d9:56:07: 01:3d:21:19:e0:e7:38:02:51:46:1f:57:d0:90:56:74:b4:bd: 3b:87:b0:33:18:4d:ea:f7:7a:f0:dc:c3:38:81:6a:ff:6f:a2: 05:81:b1:57:ef:82:ca:a8:64:71:f2:97:03:9a:86:a3:6b:73: db:bf:d2:28:f7:fa:a7:df:65:ee:67:95:be:90:46:c4:c9:fe: 4c:78:f0:51:31:88:37:54:b8:2e:5b:61:c1:fc:b5:b1:23:6c: bc:8e:83:d1:01:f8:22:23:66:ca:33:29:f8:0f:7e:5a:18:64: aa:3f:3b:f6:04:ab:25:47:ab:bf:4c:f5:ab:45:0f:1d:bd:00: 13:41:14:a6:ae:0e:10:57:43:27:92:fa:06:56:1d:8b:f4:04: 03:ae:72:9d:96:7d:ec:3b:88:c8:19:09:88:db:e0:67:93:4c: a6:8f:cc:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ1853S0BRZyqZHMeAsonOm5lJyEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMzMxMTgzMDI0WhcNMjUwNTA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Mjg3NmRmODE5OTc3MmVlZjU0N2VlMDk1MjZlYjFhYmUy Njc4YjJlOWYyM2QxYjg1MGZkNThlYjk4ZmVlODk1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVLZZT/4KVk1df1/4/NsWOxHnN8g0mCbt3z/3V4Si3cTZ6 WVjpB5+25HtW9Qcqr92qJ3OIeNLsPfyIAl2B47T64g/BllBBY+lN/LSkwBufw7Bj Uq+SgC6tKmR1nh3Fbu41o5i0DPnfAHVbFm5tn5P1XLK46rmzFLPBivt3zclctBwS HAUxc8wn2o16B45y3OQEqmjKkMwt1amdzfuih06AuDLTMze8JBYBFV+f63we11bN jiVRxwSGp99wutDmEDpLg5fDA7wdScbmSjv/jHE1QnHKSQ80HQO2sJvudoUDNzP1 LKBjFwtCuE0z6L3xu2SV7n64NDdsPWkX5pvCFZBLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWaTcT7o3FMFA+y5H5vYJ7kcRzXEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzc2ZGYwZjQxLTA2ZTQtNDIyMS1hMDY5LTFiNmNiZDNjMTA2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYCAwDQYJKoZIhvcNAQELBQADggEBAI6hsdnW03kzFWvPQtbW8CSbPo33 yskaGp5EjnPmMSk6c5TnTnHxkHnG0llV21oDmya2caqzcYAn/8yhXmiib5KFJZUy g//UImcav8dSKmjHazeF3XvG6tlWBwE9IRng5zgCUUYfV9CQVnS0vTuHsDMYTer3 evDcwziBav9vogWBsVfvgsqoZHHylwOahqNrc9u/0ij3+qffZe5nlb6QRsTJ/kx4 8FExiDdUuC5bYcH8tbEjbLyOg9EB+CIjZsozKfgPfloYZKo/O/YEqyVHq79M9atF Dx29ABNBFKauDhBXQyeS+gZWHYv0BAOucp2Wfew7iMgZCYjb4GeTTKaPzFo= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:44 2025 by rpki-client