$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bfd96660-29cf-4054-a14e-cd48975d08b4.roa File: bfd96660-29cf-4054-a14e-cd48975d08b4.roa (raw, json) Hash identifier: T+bwOp9y6YK9XZnznP8yzC4fkOBrg5039eSygJ1V2DY= Subject key identifier: 7B:E4:B8:1A:71:DB:FB:9D:F7:11:83:DB:C7:3A:94:1D:59:97:52:07 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 04F168C56051469EB32828D5C4197F6DB5E13539 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bfd96660-29cf-4054-a14e-cd48975d08b4.roa Signing time: Mon 21 Jul 2025 16:40:10 +0000 ROA not before: Mon 21 Jul 2025 16:40:10 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.24.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f1:68:c5:60:51:46:9e:b3:28:28:d5:c4:19:7f:6d:b5:e1:35:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 21 16:40:10 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=60e681f42d0a9cb6ebd8ef587132cea2180da12d97dc5a69d21d9d85f0d5c091, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cc:33:f0:c0:69:92:ad:a5:8a:0a:16:88:2d: 6e:46:d1:dc:1b:18:2d:96:36:f6:ed:94:97:56:f7: 66:4a:ab:7a:f2:e8:58:1e:ad:5e:9b:20:c1:09:33: 21:f3:1b:8f:d0:45:c6:7a:2b:42:fa:0c:23:17:dc: fe:81:78:71:0b:16:15:40:55:a4:1c:31:67:d1:41: 83:52:c4:5d:24:87:1b:b9:73:50:3a:67:a7:4b:7e: 87:3e:15:3d:28:87:c6:7a:69:a4:99:f8:73:c5:0a: bc:02:a4:e1:0f:4d:7c:43:58:59:91:64:22:32:71: ea:e9:0a:44:b1:e2:6d:9c:84:1d:71:4b:d9:69:ef: 65:4d:72:8c:83:4d:e6:dd:fc:5d:0e:f0:8d:30:1d: b5:b6:43:3a:a6:ac:72:e6:5b:8c:b8:39:89:79:e5: b9:13:5e:03:63:81:99:2c:8a:87:80:d3:44:01:eb: f6:5c:b9:e2:83:9d:6b:0b:5f:70:21:9b:4f:ff:3b: 1d:96:0d:2b:00:6d:a2:d0:e3:14:80:c7:48:f9:14: 69:bd:a2:f7:1b:81:f2:85:2b:cb:d1:38:fe:0b:f2: 62:be:52:c3:d9:43:04:37:eb:cc:36:ba:b1:bc:b4: 05:b0:08:89:20:33:d7:1a:b9:98:9d:46:d3:b1:1d: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E4:B8:1A:71:DB:FB:9D:F7:11:83:DB:C7:3A:94:1D:59:97:52:07 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bfd96660-29cf-4054-a14e-cd48975d08b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.24.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:24:80:65:5b:ef:54:09:7d:76:16:65:6d:af:f6:94:d8:70: 23:fe:bb:75:40:c6:21:2a:ab:e6:cb:fc:bb:ef:ac:a4:63:bb: 70:05:04:76:1c:f2:98:80:93:3c:0f:3f:4a:70:14:d8:e8:fd: 8e:80:a9:3c:9f:08:42:7b:dd:94:44:a0:2b:82:5f:f3:7f:0f: ee:e9:62:2b:7a:d3:02:29:e6:58:16:16:8f:86:b1:64:5b:c9: df:eb:02:45:dd:95:f1:2d:49:af:16:ed:b1:48:ce:88:5c:d9: 1c:27:d7:2b:3c:2a:da:a1:33:c5:04:33:bd:73:9e:f7:7d:a2: 45:87:3d:ca:db:4a:f0:c0:2b:2d:be:ce:77:6c:18:a6:77:37: 48:88:05:66:aa:42:32:6d:fb:9e:bf:cb:46:cf:76:ac:2b:db: 4d:d1:25:8d:85:03:02:09:3c:1a:e6:99:c6:a8:06:e9:51:6a: 73:c1:50:52:b0:28:18:24:dd:72:11:66:66:19:4c:ad:d1:02: 8b:17:cf:5b:bd:b7:e7:be:cc:f3:6f:e7:8a:f9:6a:7e:8a:5c: be:a9:90:ec:eb:15:49:3e:ac:76:af:46:b4:2c:18:20:77:d0: af:6b:c5:05:7f:b5:d9:54:f1:64:29:fc:68:1c:62:9d:a7:76: c9:77:c5:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBPFoxWBRRp6zKCjVxBl/bbXhNTkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzIxMTY0MDEwWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MGU2ODFmNDJkMGE5Y2I2ZWJkOGVmNTg3MTMyY2VhMjE4 MGRhMTJkOTdkYzVhNjlkMjFkOWQ4NWYwZDVjMDkxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYzDPwwGmSraWKChaILW5G0dwbGC2WNvbtlJdW92ZKq3ry 6FgerV6bIMEJMyHzG4/QRcZ6K0L6DCMX3P6BeHELFhVAVaQcMWfRQYNSxF0khxu5 c1A6Z6dLfoc+FT0oh8Z6aaSZ+HPFCrwCpOEPTXxDWFmRZCIycerpCkSx4m2chB1x S9lp72VNcoyDTebd/F0O8I0wHbW2QzqmrHLmW4y4OYl55bkTXgNjgZksioeA00QB 6/ZcueKDnWsLX3Ahm0//Ox2WDSsAbaLQ4xSAx0j5FGm9ovcbgfKFK8vROP4L8mK+ UsPZQwQ368w2urG8tAWwCIkgM9cauZidRtOxHQi5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUe+S4GnHb+533EYPbxzqUHVmXUgcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2JmZDk2NjYwLTI5Y2YtNDA1NC1hMTRlLWNkNDg5NzVkMDhiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBgwDQYJKoZIhvcNAQELBQADggEBACwkgGVb71QJfXYWZW2v9pTYcCP+ u3VAxiEqq+bL/LvvrKRju3AFBHYc8piAkzwPP0pwFNjo/Y6AqTyfCEJ73ZREoCuC X/N/D+7pYit60wIp5lgWFo+GsWRbyd/rAkXdlfEtSa8W7bFIzohc2Rwn1ys8Ktqh M8UEM71znvd9okWHPcrbSvDAKy2+zndsGKZ3N0iIBWaqQjJt+56/y0bPdqwr203R JY2FAwIJPBrmmcaoBulRanPBUFKwKBgk3XIRZmYZTK3RAosXz1u9t+e+zPNv54r5 an6KXL6pkOzrFUk+rHavRrQsGCB30K9rxQV/tdlU8WQp/GgcYp2ndsl3xRw= -----END CERTIFICATE-----Generated at Fri Jul 25 17:25:48 2025 by rpki-client