$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa File: 98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa (raw, json) Hash identifier: jnCVYqo+tHi+ejaJ3yNWTJErby0WNR/4Od2PU6lI1gY= Subject key identifier: 77:B5:BB:6A:E9:DE:FA:89:C0:64:6A:E7:D0:41:EF:A3:B0:D4:A7:98 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1F24FEA080BE4F3B708B8F30DF3B19C2202195FF Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa Signing time: Mon 17 Mar 2025 15:40:04 +0000 ROA not before: Mon 17 Mar 2025 15:40:04 +0000 ROA not after: Mon 21 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:24:fe:a0:80:be:4f:3b:70:8b:8f:30:df:3b:19:c2:20:21:95:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Mar 17 15:40:04 2025 GMT Not After : Apr 21 23:59:59 2025 GMT Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:22:1b:78:7d:4c:8d:b0:29:d5:12:35:c1: e3:df:ec:5b:26:b9:34:c8:a5:6a:02:7a:41:36:cd: 62:76:88:97:48:db:fe:53:7a:78:7b:d7:bd:26:61: 4a:c8:13:ab:12:a5:4a:db:5f:bf:e9:e1:76:e7:6f: dc:76:88:a1:2c:04:7e:e5:31:96:5f:04:29:d0:a9: 4f:a1:1d:2b:1e:39:79:a8:dc:23:66:4e:d0:25:c6: 28:79:45:1f:94:b8:97:82:bf:76:91:26:ab:cb:de: 72:e1:d1:89:3f:4a:3d:8e:79:3b:b5:df:a8:41:eb: 5a:5d:81:f0:ef:82:fa:46:9a:a3:13:1b:cd:52:1c: 61:79:92:a9:fa:e7:d6:4b:2e:ae:9d:98:e7:0c:e5: 1b:c0:f0:79:27:1a:7e:7a:11:13:e3:e7:df:17:5b: 60:b2:90:9c:5d:b6:fb:ee:50:12:78:46:30:50:97: 54:c4:99:09:e7:4b:05:f8:92:25:94:85:36:44:fa: c6:58:53:3f:c3:6a:59:bb:af:1b:8e:bf:df:f3:8a: 77:ec:ad:d8:13:53:2b:ed:4f:f0:3e:87:30:4a:ca: 16:2d:e6:51:4e:74:e5:48:ef:a4:91:4c:cc:97:1e: 96:e1:50:46:b8:ed:3b:ac:11:dd:19:43:c2:40:23: 22:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B5:BB:6A:E9:DE:FA:89:C0:64:6A:E7:D0:41:EF:A3:B0:D4:A7:98 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 03:53:13:15:f1:a5:fb:82:0c:b1:e3:bf:1b:f6:a0:63:58:7e: 07:e3:5f:a8:5b:cd:c4:43:f3:eb:9a:07:4e:4f:3a:f8:c0:e0: 92:9a:89:7a:88:ad:1d:64:6e:62:b8:57:8e:87:e0:a9:b7:d2: 4e:23:61:26:05:17:0b:89:19:b5:4e:33:38:0b:20:fc:a4:b2: ff:6b:9d:a1:6c:3c:87:89:d7:63:53:4d:67:d7:60:3f:e9:bc: 26:bd:ad:1e:eb:4a:20:8d:d8:5a:fd:fe:1b:69:71:77:62:73: 28:ec:19:a6:0c:11:3f:e9:3a:fc:98:0e:97:e1:c6:af:ee:97: 24:32:82:26:c0:68:1e:de:a4:29:e4:89:e2:9b:0e:58:dc:4b: 07:6e:17:78:dd:8a:85:9f:0c:5d:e2:2a:b6:8e:8f:2c:97:38: 0e:9e:33:62:da:42:06:13:e8:da:ad:d0:0b:d6:ff:95:73:fd: e7:ed:91:70:eb:d9:3e:da:d4:f8:d5:b2:0d:ce:b3:c6:a5:56: 1e:9c:50:6c:20:41:af:2c:19:5a:f8:42:38:3f:f3:b5:c4:cb: c9:2c:d9:6d:60:25:4b:d6:94:31:4a:c1:b8:fc:e0:5a:28:de: 8b:95:9b:c3:3c:35:50:9e:40:22:9f:d0:d8:e3:07:13:9c:97: c2:5b:18:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHyT+oIC+Tztwi48w3zsZwiAhlf8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMzE3MTU0MDA0WhcNMjUwNDIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTc5MjNjNGQzMzYyYzI0MDMxYTA4NDAxMzUzNjU1MjYx NTE3ZmM1YjczOTM0ZmE2NjEwZTZkNmE1ZjJmYjUzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC11yIbeH1MjbAp1RI1wePf7FsmuTTIpWoCekE2zWJ2iJdI 2/5Tenh7170mYUrIE6sSpUrbX7/p4Xbnb9x2iKEsBH7lMZZfBCnQqU+hHSseOXmo 3CNmTtAlxih5RR+UuJeCv3aRJqvL3nLh0Yk/Sj2OeTu136hB61pdgfDvgvpGmqMT G81SHGF5kqn659ZLLq6dmOcM5RvA8HknGn56ERPj598XW2CykJxdtvvuUBJ4RjBQ l1TEmQnnSwX4kiWUhTZE+sZYUz/Dalm7rxuOv9/zinfsrdgTUyvtT/A+hzBKyhYt 5lFOdOVI76SRTMyXHpbhUEa47TusEd0ZQ8JAIyKFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUd7W7aune+onAZGrn0EHvo7DUp5gwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4YjVjODkwLTQ3ZjEtNGY3Zi1hOWRkLTMyMjg5NTU0ZjFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBAANTExXxpfuCDLHjvxv2oGNYfgfj X6hbzcRD8+uaB05POvjA4JKaiXqIrR1kbmK4V46H4Km30k4jYSYFFwuJGbVOMzgL IPyksv9rnaFsPIeJ12NTTWfXYD/pvCa9rR7rSiCN2Fr9/htpcXdicyjsGaYMET/p OvyYDpfhxq/ulyQygibAaB7epCnkieKbDljcSwduF3jdioWfDF3iKraOjyyXOA6e M2LaQgYT6Nqt0AvW/5Vz/eftkXDr2T7a1PjVsg3Os8alVh6cUGwgQa8sGVr4Qjg/ 87XEy8ks2W1gJUvWlDFKwbj84Foo3ouVm8M8NVCeQCKf0NjjBxOcl8JbGHc= -----END CERTIFICATE-----Generated at Sat Apr 5 11:16:56 2025 by rpki-client