$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa File: 9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa (raw, json) Hash identifier: dPE8k1wmAq0+N0Hq5mcff0G7ZLN898mnWWkbQDZj3fc= Subject key identifier: B8:6A:F3:1C:91:72:CD:27:20:0B:7B:16:4B:CA:E4:D5:75:87:34:33 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 12F5B2F80D5EC4282B03C92D416B446D0785CE4C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa Signing time: Tue 18 Mar 2025 17:00:12 +0000 ROA not before: Tue 18 Mar 2025 17:00:12 +0000 ROA not after: Tue 22 Apr 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f5:b2:f8:0d:5e:c4:28:2b:03:c9:2d:41:6b:44:6d:07:85:ce:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Mar 18 17:00:12 2025 GMT Not After : Apr 22 23:59:59 2025 GMT Subject: CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:5c:61:ca:50:60:f8:f1:f2:a9:27:b8:25: 27:df:fd:1a:a3:a9:48:c2:aa:d2:38:fc:fd:f7:0e: a6:64:41:67:ab:b8:75:0a:db:78:e1:f3:c3:5f:fa: 1e:44:ec:ec:5a:59:16:78:e7:d3:48:66:cb:66:6f: e5:a1:42:d2:23:be:95:21:9e:ce:04:28:76:56:6f: 4f:94:55:23:17:a0:4a:60:2a:73:b3:49:60:12:fc: a6:82:aa:c9:fb:23:fb:c4:6a:1f:8d:66:68:7f:68: 3b:dc:01:c9:6e:25:d5:d2:5d:11:49:19:cf:53:7e: 76:90:1a:49:c6:4a:53:ae:f2:a7:38:ae:eb:0b:06: ce:45:b7:79:76:93:eb:84:f4:76:a5:c0:01:ce:1d: 58:b8:45:ee:38:ef:15:28:cd:a5:3f:6c:25:f2:0b: f4:b8:b8:dc:e6:67:de:0c:a4:e1:95:ca:c4:6c:48: 10:85:b2:05:fb:71:41:c2:5d:ab:81:8f:95:53:ab: 69:b3:39:c4:95:82:91:f4:3a:63:20:e8:88:cb:f3: 71:a9:d7:04:d0:8c:e3:cf:0e:89:33:c3:62:b2:68: 76:dc:ae:3b:e4:dd:16:e4:57:f0:52:a7:9b:91:76: 81:50:15:2f:f8:02:74:00:a5:64:a7:0c:a5:9f:c6: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6A:F3:1C:91:72:CD:27:20:0B:7B:16:4B:CA:E4:D5:75:87:34:33 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.11.0/24 Signature Algorithm: sha256WithRSAEncryption 95:05:d9:41:6e:9d:e0:06:87:a5:8b:89:86:5c:39:81:17:f4: c9:e8:04:9f:82:9a:e1:19:e5:46:da:61:2e:67:01:9c:2c:f7: 04:e1:6d:7c:69:0a:0e:16:8a:59:b5:a8:0c:3b:82:4a:62:1b: ac:0b:ed:2c:a3:d8:15:e4:22:a7:e4:2a:65:1d:f7:c0:5b:8a: 72:07:9c:49:e7:e0:2a:1e:24:87:79:5d:43:b0:36:00:fa:48: 87:98:e3:22:14:ec:20:78:2b:dd:05:52:70:88:0c:fc:5d:3b: a5:ec:49:dd:7d:72:9a:72:c6:00:b0:2e:48:b4:98:58:6f:1f: 73:91:ad:7d:ca:36:49:7f:80:f5:c3:82:1a:c8:f9:cc:91:76: da:b6:12:51:35:cf:42:14:40:1b:b5:78:fd:ff:ab:85:50:1f: 7b:95:2f:89:eb:f5:d1:4c:7b:3c:b4:b5:39:d4:95:04:15:d4: 7c:ec:e3:26:4f:42:f1:01:7a:67:85:af:c4:fa:94:de:d8:08: a1:e1:ad:b4:39:59:ff:b4:e9:03:7c:2b:40:20:c3:a1:4c:06: e7:0f:85:d2:1c:79:89:d7:00:be:b6:e0:8f:56:99:56:2b:45: 45:f5:c7:c4:61:08:83:bf:73:e8:ce:2c:39:c8:62:36:02:d4: 55:65:dd:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEvWy+A1exCgrA8ktQWtEbQeFzkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwMzE4MTcwMDEyWhcNMjUwNDIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGMyYTJmNmY5YjcwMDdjZWU0MjY1N2Q3ZDZjODQ1Y2Ew ZDRlM2Q0ODQ0ZTAwMzgxNGE2ODk2ZjU4Mjk1ODg3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0O1xhylBg+PHyqSe4JSff/RqjqUjCqtI4/P33DqZkQWer uHUK23jh88Nf+h5E7OxaWRZ459NIZstmb+WhQtIjvpUhns4EKHZWb0+UVSMXoEpg KnOzSWAS/KaCqsn7I/vEah+NZmh/aDvcAcluJdXSXRFJGc9TfnaQGknGSlOu8qc4 rusLBs5Ft3l2k+uE9HalwAHOHVi4Re447xUozaU/bCXyC/S4uNzmZ94MpOGVysRs SBCFsgX7cUHCXauBj5VTq2mzOcSVgpH0OmMg6IjL83Gp1wTQjOPPDokzw2KyaHbc rjvk3RbkV/BSp5uRdoFQFS/4AnQApWSnDKWfxl8LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuGrzHJFyzScgC3sWS8rk1XWHNDMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzliODA0ZmEwLWY3MjctNGZhYi1hNzFhLTljNWY4NDg2ZWE3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAswDQYJKoZIhvcNAQELBQADggEBAJUF2UFuneAGh6WLiYZcOYEX9Mno BJ+CmuEZ5UbaYS5nAZws9wThbXxpCg4Wilm1qAw7gkpiG6wL7Syj2BXkIqfkKmUd 98BbinIHnEnn4CoeJId5XUOwNgD6SIeY4yIU7CB4K90FUnCIDPxdO6XsSd19cppy xgCwLki0mFhvH3ORrX3KNkl/gPXDghrI+cyRdtq2ElE1z0IUQBu1eP3/q4VQH3uV L4nr9dFMezy0tTnUlQQV1Hzs4yZPQvEBemeFr8T6lN7YCKHhrbQ5Wf+06QN8K0Ag w6FMBucPhdIceYnXAL624I9WmVYrRUX1x8RhCIO/c+jOLDnIYjYC1FVl3Q4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:21:35 2025 by rpki-client