$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa File: decfa8a2-ad50-432e-96a7-cba83d9032f9.roa (raw, json) Hash identifier: WrWouV96p6NEU7S80vhXPN0acq92dNoXHRe6hSMK290= Subject key identifier: 3A:09:3C:67:7D:E0:C1:80:1E:E5:D1:38:FD:A2:17:D2:29:97:27:1D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0A287A10BE64547E75CFB299995F7C6CB6B736EC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa Signing time: Fri 11 Jul 2025 18:20:04 +0000 ROA not before: Fri 11 Jul 2025 18:20:04 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:28:7a:10:be:64:54:7e:75:cf:b2:99:99:5f:7c:6c:b6:b7:36:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 11 18:20:04 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=4a27b2ddb4c16c7e0a88331e363f281d4043ac66c7c6fd20368b6cc580182351, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:93:2f:ea:81:04:6e:a1:82:7d:f7:9e:68:d5: 8a:33:8b:9b:63:e5:c4:c7:26:64:98:20:67:ac:bb: a2:82:f3:87:b8:0b:bc:98:1d:7b:43:a1:8c:6c:e6: 54:e9:84:82:04:07:43:f9:93:0f:84:fc:65:71:49: 35:4d:d8:e6:a7:d4:b9:b3:50:e1:ca:94:ed:98:96: 23:95:27:ee:2b:3a:bf:f8:ec:cf:76:64:56:7f:1b: ea:c2:98:d2:59:db:b9:10:b8:60:2a:3b:40:79:17: b3:0e:ae:73:a0:58:83:4a:04:2d:6d:4c:2d:e9:5b: fb:fd:b4:5c:9c:84:9f:63:64:66:59:3d:7f:30:f4: cd:38:16:17:1b:12:e2:aa:59:7d:58:f7:7b:94:52: 99:1c:89:48:e7:2e:36:7a:0e:bb:49:95:cd:dd:72: 47:d1:77:b8:d6:9a:2a:92:23:97:f5:d2:f2:dd:87: 3d:d6:bd:19:41:ca:ab:98:34:19:26:cc:63:5b:1e: 85:0b:7c:bc:5d:99:fe:8a:a1:b9:d3:e9:08:4d:94: 9f:fa:a6:57:02:26:91:b4:1b:f1:3e:01:e1:53:ba: 8e:57:b2:da:88:15:5b:6f:86:7a:97:95:3e:79:26: 1c:f0:f0:88:a0:bf:f5:5f:70:9a:25:91:3d:c9:d9: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:09:3C:67:7D:E0:C1:80:1E:E5:D1:38:FD:A2:17:D2:29:97:27:1D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/decfa8a2-ad50-432e-96a7-cba83d9032f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.9.0/24 Signature Algorithm: sha256WithRSAEncryption 80:eb:41:5e:97:51:e2:15:d2:a4:b6:c0:ec:1b:60:99:cf:44: 21:e9:62:10:c4:f6:80:66:8c:29:5f:aa:f7:90:17:a2:8e:ff: 83:c4:e4:6c:4f:bb:e1:a4:2c:5f:2b:5c:f1:bc:c2:e5:08:fa: 14:84:90:cb:b7:4c:67:02:48:9d:28:aa:60:0b:7d:c6:e8:6d: 29:3b:ff:1a:37:96:ff:fb:d1:3d:60:1f:c7:83:aa:d0:64:d8: a0:05:ab:4c:02:7d:11:8b:19:c2:71:a1:36:4b:b6:42:bb:1c: 67:93:c4:00:a7:03:66:db:c9:7b:9f:1f:f1:5f:b8:89:13:de: 21:6b:0c:9a:5e:af:72:43:11:5f:05:4a:e9:dd:ba:67:7d:b9: 7a:a1:87:19:0f:19:00:fc:66:97:55:23:07:2e:d2:03:78:a0: 1e:25:25:0b:19:c9:f9:34:36:2e:87:d1:07:0c:28:75:90:f3: 11:63:c0:09:63:b8:e8:1f:ce:71:49:4f:4a:f5:97:7d:a3:c5: 67:5a:c6:67:b5:fc:16:84:79:36:27:7a:7c:f7:d9:fd:22:4a: 57:e2:fc:a8:29:a2:76:ac:9c:bb:48:dd:af:de:6f:90:8a:d7: c7:7c:71:ee:34:76:7f:a4:ee:50:66:6f:05:f3:c2:d5:ae:56: 08:6f:1e:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCih6EL5kVH51z7KZmV98bLa3NuwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzExMTgyMDA0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTI3YjJkZGI0YzE2YzdlMGE4ODMzMWUzNjNmMjgxZDQw NDNhYzY2YzdjNmZkMjAzNjhiNmNjNTgwMTgyMzUxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYky/qgQRuoYJ9955o1Yozi5tj5cTHJmSYIGesu6KC84e4 C7yYHXtDoYxs5lTphIIEB0P5kw+E/GVxSTVN2Oan1LmzUOHKlO2YliOVJ+4rOr/4 7M92ZFZ/G+rCmNJZ27kQuGAqO0B5F7MOrnOgWINKBC1tTC3pW/v9tFychJ9jZGZZ PX8w9M04FhcbEuKqWX1Y93uUUpkciUjnLjZ6DrtJlc3dckfRd7jWmiqSI5f10vLd hz3WvRlByquYNBkmzGNbHoULfLxdmf6KobnT6QhNlJ/6plcCJpG0G/E+AeFTuo5X stqIFVtvhnqXlT55Jhzw8Iigv/VfcJolkT3J2YMXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOgk8Z33gwYAe5dE4/aIX0imXJx0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RlY2ZhOGEyLWFkNTAtNDMyZS05NmE3LWNiYTgzZDkwMzJmOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAkwDQYJKoZIhvcNAQELBQADggEBAIDrQV6XUeIV0qS2wOwbYJnPRCHp YhDE9oBmjClfqveQF6KO/4PE5GxPu+GkLF8rXPG8wuUI+hSEkMu3TGcCSJ0oqmAL fcbobSk7/xo3lv/70T1gH8eDqtBk2KAFq0wCfRGLGcJxoTZLtkK7HGeTxACnA2bb yXufH/FfuIkT3iFrDJper3JDEV8FSundumd9uXqhhxkPGQD8ZpdVIwcu0gN4oB4l JQsZyfk0Ni6H0QcMKHWQ8xFjwAljuOgfznFJT0r1l32jxWdaxme1/BaEeTYnenz3 2f0iSlfi/KgponasnLtI3a/eb5CK18d8ce40dn+k7lBmbwXzwtWuVghvHgg= -----END CERTIFICATE-----Generated at Fri Jul 25 17:24:11 2025 by rpki-client