$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa File: 8b1249ac-b74a-4544-80b2-2b577af731f1.roa (raw, json) Hash identifier: K4pTu9cvxe6VMo381A7AVuG3q2ciI2jVMbTWBpt73Fk= Subject key identifier: 91:6A:F2:8E:E3:20:24:EE:DD:EA:E6:E9:54:7B:D3:8C:F9:FC:91:94 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 62B5E5C5E1F77B6F5572CF927A984ABB4FE0BFF3 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa Signing time: Mon 21 Jul 2025 16:40:15 +0000 ROA not before: Mon 21 Jul 2025 16:40:15 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b5:e5:c5:e1:f7:7b:6f:55:72:cf:92:7a:98:4a:bb:4f:e0:bf:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 21 16:40:15 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=9567aec72e48b89aa7172af78f38f9d66cb29d1198d18d48847e8d5691e8887e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:4f:40:46:19:c5:65:a0:c2:be:d6:23:c3:0d: 0c:38:d2:92:bb:ee:25:2e:6d:ba:0a:ac:23:78:b1: 4b:90:6e:ac:68:53:cd:c3:1b:c4:a6:d0:8e:e8:00: f9:60:17:e4:2a:5f:ae:7c:a8:38:7c:1b:c6:70:8c: 04:f5:4a:58:30:93:97:ee:ec:a0:f5:81:13:c4:7d: 6c:86:97:2a:ec:23:1a:5d:04:5d:dc:f0:f2:cd:97: 1c:90:f2:dd:92:6a:87:48:f5:7c:e5:18:75:86:3a: 6a:0d:a7:48:b6:6e:cb:4a:93:ac:f9:27:16:b7:68: 68:32:be:ed:b8:ff:e4:d5:41:a7:ff:b6:8b:08:36: 89:06:06:b0:73:fb:a1:94:ff:2c:b5:3f:1b:a3:70: 6d:61:d9:58:74:cb:c8:39:e7:d1:17:10:9b:81:e4: 32:02:4c:60:98:e4:a4:cc:71:c8:0d:b2:fc:50:61: e1:f7:4d:ba:14:22:5b:a0:24:be:58:0b:8c:50:1d: 05:8b:e4:11:19:ba:12:08:7c:4d:b6:2b:04:09:15: 93:62:45:fe:5c:2c:ca:48:df:24:6c:f0:fb:22:19: c3:73:bb:c0:ef:89:45:3a:c5:a5:41:52:30:80:af: d7:ae:da:1a:80:82:78:48:d5:1f:41:10:70:04:5e: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6A:F2:8E:E3:20:24:EE:DD:EA:E6:E9:54:7B:D3:8C:F9:FC:91:94 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8b1249ac-b74a-4544-80b2-2b577af731f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 67:04:63:51:72:8f:44:23:95:d6:f7:61:a5:56:0c:de:dd:00: 71:57:4f:4a:7c:3b:13:29:85:14:3b:bc:aa:62:7e:1f:38:43: 99:cb:0a:be:61:82:dd:47:e7:fa:13:26:f2:bc:7b:57:84:bc: e1:0b:27:15:81:25:8c:84:89:47:c5:b0:32:b2:cd:49:22:17: b0:d8:be:40:a8:c8:10:26:3c:6b:95:2d:fc:2b:9c:e8:23:80: 26:51:fa:4c:51:db:be:0e:79:a0:75:bf:c7:29:89:0d:8a:40: c2:6f:b0:d5:76:52:55:3e:81:fc:fb:9f:f9:8b:6d:94:d9:41: e0:14:cc:d9:a8:c1:5b:9a:4f:76:69:41:d2:58:df:d2:94:39: b6:10:c6:83:38:24:80:94:4d:35:fd:b2:89:1c:b4:d0:25:1f: 49:85:f9:9f:b4:2f:d3:93:e5:3d:fd:99:67:38:3a:30:83:0a: f4:13:19:ce:a5:f1:93:54:43:7e:8a:f6:83:76:a5:de:f3:8a: 5c:76:ea:67:c6:9f:8a:2b:ea:e9:7d:8f:08:fa:4c:ba:fe:1f: 88:ed:30:73:4d:c1:2d:fb:0b:7a:66:09:8f:1b:a0:45:ed:f8: 43:6d:f8:69:0e:c4:5a:39:05:21:73:55:3f:8f:14:bc:69:f7: f0:a7:39:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYrXlxeH3e29Vcs+SephKu0/gv/MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzIxMTY0MDE1WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTY3YWVjNzJlNDhiODlhYTcxNzJhZjc4ZjM4ZjlkNjZj YjI5ZDExOThkMThkNDg4NDdlOGQ1NjkxZTg4ODdlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD5T0BGGcVloMK+1iPDDQw40pK77iUubboKrCN4sUuQbqxo U83DG8Sm0I7oAPlgF+QqX658qDh8G8ZwjAT1Slgwk5fu7KD1gRPEfWyGlyrsIxpd BF3c8PLNlxyQ8t2SaodI9XzlGHWGOmoNp0i2bstKk6z5Jxa3aGgyvu24/+TVQaf/ tosINokGBrBz+6GU/yy1PxujcG1h2Vh0y8g559EXEJuB5DICTGCY5KTMccgNsvxQ YeH3TboUIlugJL5YC4xQHQWL5BEZuhIIfE22KwQJFZNiRf5cLMpI3yRs8PsiGcNz u8DviUU6xaVBUjCAr9eu2hqAgnhI1R9BEHAEXmRTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkWryjuMgJO7d6ubpVHvTjPn8kZQwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhiMTI0OWFjLWI3NGEtNDU0NC04MGIyLTJiNTc3YWY3MzFmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBAGcEY1Fyj0Qjldb3YaVWDN7dAHFX T0p8OxMphRQ7vKpifh84Q5nLCr5hgt1H5/oTJvK8e1eEvOELJxWBJYyEiUfFsDKy zUkiF7DYvkCoyBAmPGuVLfwrnOgjgCZR+kxR274OeaB1v8cpiQ2KQMJvsNV2UlU+ gfz7n/mLbZTZQeAUzNmowVuaT3ZpQdJY39KUObYQxoM4JICUTTX9sokctNAlH0mF +Z+0L9OT5T39mWc4OjCDCvQTGc6l8ZNUQ36K9oN2pd7zilx26mfGn4or6ul9jwj6 TLr+H4jtMHNNwS37C3pmCY8boEXt+ENt+GkOxFo5BSFzVT+PFLxp9/CnOTc= -----END CERTIFICATE-----Generated at Fri Jul 25 17:26:22 2025 by rpki-client