$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa File: 98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa (raw, json) Hash identifier: Q7TwFKmbEg348A7qrLmIPoEmrx1tqDZSGrMnmJKEjEo= Subject key identifier: 82:15:CA:EF:86:00:B2:D6:21:66:59:30:94:28:68:D9:0C:26:62:58 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0E7C6EB9C7141E96DA54DF867051CB233E2616B8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa Signing time: Mon 21 Jul 2025 16:30:13 +0000 ROA not before: Mon 21 Jul 2025 16:30:13 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:7c:6e:b9:c7:14:1e:96:da:54:df:86:70:51:cb:23:3e:26:16:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 21 16:30:13 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=17471b8ac8c220522bca02eb752c9baf637f65071139d3100bbd45ce79695bba, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:89:2c:cc:34:7c:70:61:4e:82:7c:c1:01: cf:87:1d:26:43:99:71:92:51:ab:20:8b:21:3e:c9: 88:99:ef:89:0c:28:fc:c5:80:b0:9d:87:5d:80:e3: 05:fd:f0:ee:54:46:7e:4e:55:1c:56:0d:dc:92:18: 99:39:20:66:d2:cd:20:de:42:36:b1:cf:4c:ed:78: d0:32:36:61:bb:dc:73:12:29:cb:04:42:1d:2a:df: c1:fe:75:67:c9:bb:cd:8b:12:c5:4a:f6:ec:15:67: 9b:57:44:aa:b3:8e:b4:b0:a4:fa:b3:79:41:7a:c7: 9c:c7:3b:0a:d5:26:c6:d6:47:f2:ab:3b:04:99:72: ba:f4:e7:96:75:c5:d6:10:19:01:d4:7c:dc:11:63: cb:e7:94:d4:8f:72:f6:e5:04:fa:f7:82:1d:55:53: 3c:b8:13:8e:f3:5f:82:fb:d6:91:24:2d:69:5d:31: 8e:7b:cc:8a:f6:ea:f2:3b:8b:49:94:c0:2e:ab:0a: b2:51:a1:9a:bf:dd:05:77:5f:76:d3:70:f6:ab:9f: 4f:f3:f1:64:4b:b9:4e:b4:94:da:f8:e2:d6:f7:22: 42:e8:e2:72:cb:ac:fe:e7:14:09:0d:53:d1:75:79: 57:67:a6:ed:36:fe:96:75:40:90:66:fc:c0:7b:9a: 32:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:15:CA:EF:86:00:B2:D6:21:66:59:30:94:28:68:D9:0C:26:62:58 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 20:96:b8:29:5e:eb:7c:cd:9e:33:38:ec:21:4b:9c:99:80:56: 3e:92:f0:51:cb:5c:47:9b:c0:d9:b7:dd:dd:0d:b0:22:1b:ee: 88:e6:f0:56:c1:28:b2:44:63:d6:89:96:f8:8d:52:1f:1b:5b: 65:7a:49:6d:29:99:64:ab:27:64:c4:44:48:91:62:91:ba:c8: a5:24:01:81:d6:15:86:9a:fe:76:35:4e:b0:22:73:3e:5f:02: 8b:4b:79:92:1b:fa:39:0d:91:a6:09:ac:77:2e:b7:01:be:c7: 00:06:ec:b7:0d:77:8d:97:8b:f8:44:9e:5c:f9:bb:c5:cb:d8: f5:5f:8b:0d:bc:3a:03:c3:7d:eb:4d:87:96:29:7a:1b:4c:d7: 0e:22:17:18:51:2c:40:b5:2f:6c:fd:0f:03:83:1d:c8:7d:2d: 4e:0c:e9:70:0a:38:e7:8b:e5:9e:c3:75:97:b8:88:6f:e2:13: 33:08:38:6d:c9:e6:22:a3:0a:ff:cf:3d:50:ca:75:d1:5b:51: fb:c8:7f:bb:94:fb:e9:96:91:16:a2:a1:27:b8:a2:7d:d9:23: 43:00:7f:4f:a8:02:eb:e7:f1:b8:ef:fe:2f:00:11:9c:4f:d4: e6:01:e5:b5:64:ed:cb:dc:c4:50:3e:6c:5e:4b:84:2b:8a:a5: 30:c8:76:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDnxuuccUHpbaVN+GcFHLIz4mFrgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzIxMTYzMDEzWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNzQ3MWI4YWM4YzIyMDUyMmJjYTAyZWI3NTJjOWJhZjYz N2Y2NTA3MTEzOWQzMTAwYmJkNDVjZTc5Njk1YmJhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi64kszDR8cGFOgnzBAc+HHSZDmXGSUasgiyE+yYiZ74kM KPzFgLCdh12A4wX98O5URn5OVRxWDdySGJk5IGbSzSDeQjaxz0zteNAyNmG73HMS KcsEQh0q38H+dWfJu82LEsVK9uwVZ5tXRKqzjrSwpPqzeUF6x5zHOwrVJsbWR/Kr OwSZcrr055Z1xdYQGQHUfNwRY8vnlNSPcvblBPr3gh1VUzy4E47zX4L71pEkLWld MY57zIr26vI7i0mUwC6rCrJRoZq/3QV3X3bTcParn0/z8WRLuU60lNr44tb3IkLo 4nLLrP7nFAkNU9F1eVdnpu02/pZ1QJBm/MB7mjJ3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUghXK74YAstYhZlkwlCho2QwmYlgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4YjVjODkwLTQ3ZjEtNGY3Zi1hOWRkLTMyMjg5NTU0ZjFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBACCWuCle63zNnjM47CFLnJmAVj6S 8FHLXEebwNm33d0NsCIb7ojm8FbBKLJEY9aJlviNUh8bW2V6SW0pmWSrJ2TEREiR YpG6yKUkAYHWFYaa/nY1TrAicz5fAotLeZIb+jkNkaYJrHcutwG+xwAG7LcNd42X i/hEnlz5u8XL2PVfiw28OgPDfetNh5YpehtM1w4iFxhRLEC1L2z9DwODHch9LU4M 6XAKOOeL5Z7DdZe4iG/iEzMIOG3J5iKjCv/PPVDKddFbUfvIf7uU++mWkRaioSe4 on3ZI0MAf0+oAuvn8bjv/i8AEZxP1OYB5bVk7cvcxFA+bF5LhCuKpTDIdso= -----END CERTIFICATE-----Generated at Fri Jul 25 17:23:44 2025 by rpki-client