$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa File: 95808009-fbc3-494a-8fba-ce3cf5711341.roa (raw, json) Hash identifier: dzxP+vzw9IzY/9pmZHan6ta3LHwn9czqi5ONAEzItkw= Subject key identifier: 13:AE:C6:82:6B:DA:C2:4A:BB:DD:97:DE:9D:01:35:8A:69:84:18:C1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 47251893B9DF5BAF46299B06EE605A0BAC1F776E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa Signing time: Mon 21 Jul 2025 16:40:13 +0000 ROA not before: Mon 21 Jul 2025 16:40:13 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:25:18:93:b9:df:5b:af:46:29:9b:06:ee:60:5a:0b:ac:1f:77:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 21 16:40:13 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=906aa48270e42c8c3bbde3c461a5c8fd9b74bfc19d8409286f1f6c504ecdbd41, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5b:ad:93:64:5c:24:ec:af:f2:7f:2f:53:be: 29:e4:00:46:e7:8f:46:8a:47:2a:d8:bb:63:55:de: 15:9f:15:37:77:4c:27:60:10:65:73:c3:6a:d1:30: ef:77:07:88:2a:b8:4c:93:8d:95:21:39:28:12:67: 48:b1:d7:a6:d1:16:76:80:e9:77:c6:23:57:4e:d2: 27:dc:5e:87:05:df:39:58:79:27:93:bf:9d:31:de: 57:41:34:f0:7d:2f:f9:f2:78:8a:b8:21:d4:8b:0d: cc:31:25:02:64:2d:f1:00:70:66:c3:ab:3d:6c:54: 3e:17:7d:21:59:1e:ec:d4:a7:76:a3:d9:41:20:b7: 7a:86:a1:e0:95:77:9e:1f:96:e6:24:d8:8f:70:07: 53:fb:e4:76:41:92:43:14:63:01:56:b4:e7:c1:dd: 2e:5a:c2:3f:0a:3a:4d:c6:8f:42:77:81:e6:81:62: a3:34:a9:ed:e8:93:af:aa:3f:29:f2:58:97:3a:fc: fb:ae:ff:fe:12:d5:d9:c6:d7:0d:b2:d9:61:35:d9: 26:83:c2:53:93:42:04:5b:d5:35:e9:a8:dc:05:9e: cd:64:79:80:28:6c:dc:7a:1f:af:04:1d:e2:db:b1: e3:44:26:4e:98:4d:34:db:fd:09:46:98:16:cf:42: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AE:C6:82:6B:DA:C2:4A:BB:DD:97:DE:9D:01:35:8A:69:84:18:C1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.22.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:17:c3:16:2d:cc:a5:7f:b5:fe:4e:47:e1:32:53:20:f4:c6: a8:85:3f:f4:a7:19:87:bb:44:60:cf:bb:39:2e:d0:1b:b8:e6: 5d:d7:ed:05:97:2d:05:ab:de:86:38:8a:dd:9b:03:d5:b0:9b: 6c:48:d8:01:5e:f1:2a:8f:35:9c:37:96:31:b7:17:26:75:b8: c9:6b:e3:78:a5:73:b6:b8:03:2e:08:09:4e:48:61:5c:58:4b: 29:a6:76:5c:6b:a9:e8:13:a0:89:64:64:6b:fd:28:5c:33:bc: 3a:87:23:06:6b:83:c7:76:53:98:54:47:bf:0f:99:c5:b0:5b: cb:98:90:b3:af:f0:cc:42:87:84:e5:2c:33:f8:6a:75:70:38: a0:d6:75:fa:67:59:59:b7:d6:be:74:f9:e0:4d:72:06:ed:41: f6:f7:a9:53:a1:a9:db:23:9d:ca:c1:e2:5c:15:29:76:69:f2: 4a:41:b7:2b:c7:92:fc:31:49:eb:87:4b:04:a4:4a:eb:52:3f: 9b:3f:3e:09:a5:16:68:7a:d5:32:6c:ab:19:20:87:68:90:10: f0:04:de:1f:99:9b:35:94:0f:35:13:17:b7:54:46:b0:a8:5a: d9:b8:02:ae:c4:fb:49:33:0e:f4:76:97:46:9b:ec:82:04:26: ed:93:ea:62 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURyUYk7nfW69GKZsG7mBaC6wfd24wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzIxMTY0MDEzWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDZhYTQ4MjcwZTQyYzhjM2JiZGUzYzQ2MWE1YzhmZDli NzRiZmMxOWQ4NDA5Mjg2ZjFmNmM1MDRlY2RiZDQxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMW62TZFwk7K/yfy9TvinkAEbnj0aKRyrYu2NV3hWfFTd3 TCdgEGVzw2rRMO93B4gquEyTjZUhOSgSZ0ix16bRFnaA6XfGI1dO0ifcXocF3zlY eSeTv50x3ldBNPB9L/nyeIq4IdSLDcwxJQJkLfEAcGbDqz1sVD4XfSFZHuzUp3aj 2UEgt3qGoeCVd54fluYk2I9wB1P75HZBkkMUYwFWtOfB3S5awj8KOk3Gj0J3geaB YqM0qe3ok6+qPynyWJc6/Puu//4S1dnG1w2y2WE12SaDwlOTQgRb1TXpqNwFns1k eYAobNx6H68EHeLbseNEJk6YTTTb/QlGmBbPQtL3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE67Ggmvawkq73ZfenQE1immEGMEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk1ODA4MDA5LWZiYzMtNDk0YS04ZmJhLWNlM2NmNTcxMTM0MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBYwDQYJKoZIhvcNAQELBQADggEBAC0XwxYtzKV/tf5OR+EyUyD0xqiF P/SnGYe7RGDPuzku0Bu45l3X7QWXLQWr3oY4it2bA9Wwm2xI2AFe8SqPNZw3ljG3 FyZ1uMlr43ilc7a4Ay4ICU5IYVxYSymmdlxrqegToIlkZGv9KFwzvDqHIwZrg8d2 U5hUR78PmcWwW8uYkLOv8MxCh4TlLDP4anVwOKDWdfpnWVm31r50+eBNcgbtQfb3 qVOhqdsjncrB4lwVKXZp8kpBtyvHkvwxSeuHSwSkSutSP5s/PgmlFmh61TJsqxkg h2iQEPAE3h+ZmzWUDzUTF7dURrCoWtm4Aq7E+0kzDvR2l0ab7IIEJu2T6mI= -----END CERTIFICATE-----Generated at Fri Jul 25 17:26:16 2025 by rpki-client