$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/caa7d407-5b15-4761-9d49-f36ba2078f3c.roa File: caa7d407-5b15-4761-9d49-f36ba2078f3c.roa (raw, json) Hash identifier: ALN0G9kFM9irpJWJmC/yHCsri14M7nVkw01BMGYHhrI= Subject key identifier: 52:50:BC:49:6E:93:6C:06:24:A2:28:F0:EE:30:70:B4:CB:E6:06:00 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 37D7DCB42AAF65851F2925DA97B1BA584CB0A108 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/caa7d407-5b15-4761-9d49-f36ba2078f3c.roa Signing time: Mon 14 Jul 2025 15:30:16 +0000 ROA not before: Mon 14 Jul 2025 15:30:16 +0000 ROA not after: Mon 18 Aug 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d7:dc:b4:2a:af:65:85:1f:29:25:da:97:b1:ba:58:4c:b0:a1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 14 15:30:16 2025 GMT Not After : Aug 18 23:59:59 2025 GMT Subject: serialNumber=6547f1d178053b7f5513721edee9306d7d21f1005d878cf4f50ba95c04b8857c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:9d:1c:af:b6:48:c7:56:8d:4a:ae:53:fd: 6e:b4:c2:13:b2:2a:36:6b:05:91:d7:7b:3b:01:e5: 3f:66:08:58:7e:8d:a4:10:7d:0b:ee:ab:2f:fe:5b: be:36:9e:63:d4:b8:54:37:78:77:60:48:7b:6e:05: 28:a5:bc:57:05:9b:1e:53:fc:ab:5f:9b:8f:c0:ca: fa:6b:ef:c7:f9:ac:9d:9a:23:cd:a6:b3:5b:2c:f7: c3:e7:72:40:15:5a:ef:1b:db:ea:3c:db:51:1d:55: fe:65:02:83:66:39:94:0b:d0:0b:8f:81:f7:cd:38: 45:8f:4c:5b:6b:4d:52:50:e7:f4:ef:fb:19:54:c6: fd:ed:16:50:0d:8e:8c:5f:6a:05:9b:e0:7e:4e:73: 38:5e:72:f1:66:ba:eb:ca:4c:43:db:91:e2:4a:5f: a9:8e:56:9d:07:07:96:57:2c:dc:f7:3d:96:d5:dc: 77:62:44:41:8a:c8:b3:03:19:f1:64:23:56:3d:d0: ea:0e:0b:97:3d:d7:eb:12:cf:45:5f:00:62:a3:c6: 2a:6b:3a:21:fa:fc:45:8e:09:88:89:55:81:0b:d0: 78:77:d7:5b:ac:24:ce:74:b0:73:05:de:5a:d0:36: c6:5a:70:d6:30:2a:b6:49:04:ef:48:14:fe:52:ee: e0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:50:BC:49:6E:93:6C:06:24:A2:28:F0:EE:30:70:B4:CB:E6:06:00 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/caa7d407-5b15-4761-9d49-f36ba2078f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.18.0/23 Signature Algorithm: sha256WithRSAEncryption 48:5e:54:6e:89:9a:ef:78:5b:0d:fa:81:47:b3:36:16:69:6c: c2:a8:c8:44:0b:6f:4a:29:7f:3b:53:c2:dd:93:59:bc:2c:dc: 7e:73:32:b8:93:ed:c1:f9:1c:33:f8:5d:3c:7c:fe:e6:aa:20: 63:5f:f6:6c:e5:a1:dd:94:cd:45:15:27:f9:63:44:42:18:a7: 4b:d5:be:8e:a0:ba:93:62:50:1e:79:21:f2:24:51:13:c4:f9: 5f:c9:de:3c:dd:45:b2:07:2b:d4:69:ec:9e:c8:6e:98:ef:50: 1e:7a:06:56:2a:31:55:87:38:a7:53:11:48:34:2b:12:a5:f1: a1:11:44:db:6f:1a:74:a8:14:b4:79:10:fa:d6:32:70:65:21: 06:2b:a4:73:66:f7:41:b1:7e:74:83:89:a4:a4:33:a6:a6:c9: 7b:ed:9b:b9:7e:e5:d7:2f:e3:00:b7:7d:b3:89:16:46:29:d0: 5f:80:38:2a:a4:f4:43:be:1e:e4:e6:f9:d8:b0:32:53:42:ad: ad:36:e6:58:33:e0:c0:73:05:c9:96:6f:70:0f:25:e6:d3:a7: 3a:7c:e4:70:1d:b4:7f:87:33:d7:9a:29:78:7a:c1:30:db:84: 06:a6:15:ac:15:49:09:f3:e2:fb:bc:a2:df:b0:33:b1:9d:dd: f2:f6:93:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN9fctCqvZYUfKSXal7G6WEywoQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzE0MTUzMDE2WhcNMjUwODE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTQ3ZjFkMTc4MDUzYjdmNTUxMzcyMWVkZWU5MzA2ZDdk MjFmMTAwNWQ4NzhjZjRmNTBiYTk1YzA0Yjg4NTdjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/9p0cr7ZIx1aNSq5T/W60whOyKjZrBZHXezsB5T9mCFh+ jaQQfQvuqy/+W742nmPUuFQ3eHdgSHtuBSilvFcFmx5T/Ktfm4/Ayvpr78f5rJ2a I82ms1ss98PnckAVWu8b2+o821EdVf5lAoNmOZQL0AuPgffNOEWPTFtrTVJQ5/Tv +xlUxv3tFlANjoxfagWb4H5OczhecvFmuuvKTEPbkeJKX6mOVp0HB5ZXLNz3PZbV 3HdiREGKyLMDGfFkI1Y90OoOC5c91+sSz0VfAGKjxiprOiH6/EWOCYiJVYEL0Hh3 11usJM50sHMF3lrQNsZacNYwKrZJBO9IFP5S7uA/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUlC8SW6TbAYkoijw7jBwtMvmBgAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2NhYTdkNDA3LTViMTUtNDc2MS05ZDQ5LWYzNmJhMjA3OGYzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBIwDQYJKoZIhvcNAQELBQADggEBAEheVG6Jmu94Ww36gUezNhZpbMKo yEQLb0opfztTwt2TWbws3H5zMriT7cH5HDP4XTx8/uaqIGNf9mzlod2UzUUVJ/lj REIYp0vVvo6gupNiUB55IfIkURPE+V/J3jzdRbIHK9Rp7J7IbpjvUB56BlYqMVWH OKdTEUg0KxKl8aERRNtvGnSoFLR5EPrWMnBlIQYrpHNm90GxfnSDiaSkM6amyXvt m7l+5dcv4wC3fbOJFkYp0F+AOCqk9EO+HuTm+diwMlNCra025lgz4MBzBcmWb3AP JebTpzp85HAdtH+HM9eaKXh6wTDbhAamFawVSQnz4vu8ot+wM7Gd3fL2kyA= -----END CERTIFICATE-----Generated at Fri Jul 25 17:25:09 2025 by rpki-client