$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa File: 0be6e662-afc9-4903-9919-894f035a475c.roa (raw, json) Hash identifier: d2hWz8K7VDvjhmDb3ymK/CZcXw9Xl1Qk6zeNljJiaTA= Subject key identifier: 18:C7:7B:20:BD:E9:2E:44:D6:EA:65:18:8F:55:56:54:EA:0D:82:6D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3DEC7593163A50898A7CE49270600B0CD5BA96FA Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa Signing time: Fri 04 Jul 2025 18:30:26 +0000 ROA not before: Fri 04 Jul 2025 18:30:26 +0000 ROA not after: Fri 08 Aug 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ec:75:93:16:3a:50:89:8a:7c:e4:92:70:60:0b:0c:d5:ba:96:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 4 18:30:26 2025 GMT Not After : Aug 8 23:59:59 2025 GMT Subject: serialNumber=cb3e2bf22e0e5ffbe61bc8f3261b55097d7943778007f4f6626b4f8865f86794, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:c1:c9:4f:f9:47:ad:bc:69:34:8c:6d:0a: 34:cc:34:ee:2f:81:02:66:72:a9:9d:b4:b6:0b:16: 04:bd:42:32:5a:9f:9b:b0:b3:0b:eb:c9:fb:46:8d: fa:95:f7:e3:49:23:0e:c6:35:af:a4:06:ee:58:3c: 6b:fb:32:cf:37:73:9a:61:68:b1:30:f4:b7:f8:04: 43:a2:10:27:bc:2c:c8:f3:8b:06:93:69:d6:e2:3a: bc:84:cc:52:1a:03:ec:08:76:51:9c:93:73:00:1d: 1a:2e:76:ff:02:d4:d7:00:e3:de:26:cc:05:f1:49: ac:6d:d0:a7:08:6c:90:92:9b:98:77:d7:ee:d7:b0: ea:e8:7e:ae:cf:4d:e2:f1:27:60:af:b6:1d:24:1a: 53:19:a8:12:b4:9a:a0:36:7a:26:ed:b6:af:ec:39: 49:ae:98:b7:85:36:84:df:81:80:f7:ca:52:05:3b: 1f:b3:ee:d4:ca:f5:2d:90:f7:1e:08:ef:81:0e:a3: 54:5a:87:b8:38:fd:e9:88:58:d3:99:7b:96:ac:92: ad:5a:ea:6a:fc:cf:ad:ef:93:84:ac:86:30:4f:64: 14:5f:e2:98:6f:1f:98:43:52:c7:3a:67:60:fb:a8: 59:d7:9d:59:84:e0:46:2a:77:a6:c7:60:93:b5:64: fc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C7:7B:20:BD:E9:2E:44:D6:EA:65:18:8F:55:56:54:EA:0D:82:6D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:89:b2:04:44:1d:cb:72:80:49:5f:68:cf:75:1e:8c:cc:20: ad:d7:e4:90:08:40:90:2f:6f:2d:73:c1:f9:a0:d1:0d:74:53: e5:8f:02:31:fa:32:55:46:67:03:bf:e8:c7:20:66:08:0e:48: 18:91:66:c3:8d:19:cf:17:59:c1:38:db:d1:96:ee:d4:7b:39: 07:56:5c:22:59:77:80:6d:83:f8:ea:64:55:21:01:03:21:42: 38:3a:11:6d:45:b3:29:ab:d8:60:41:9c:26:0d:7d:6c:04:9d: dc:c0:63:31:d5:37:32:de:8e:a3:2d:29:9f:7c:09:33:48:c0: 90:a2:40:15:ab:ee:bf:75:c9:1e:74:b0:2c:18:77:89:b1:9f: be:4d:bd:55:39:d8:e8:d8:62:29:a6:37:3c:1c:88:45:bc:4e: 42:80:7c:12:17:ce:c0:2d:9c:ee:5a:5b:ad:91:3a:a9:0c:39: af:75:43:4d:c8:3f:59:48:d8:78:47:01:a6:cb:f1:cb:ca:66: 2e:cc:d8:65:7e:f1:a8:99:39:d1:12:fb:ce:8e:0f:b4:be:a6: ec:74:81:0b:19:2e:58:1a:aa:5c:a0:a5:81:45:0c:6b:c9:e9: 5d:45:a7:27:65:1b:6e:3c:6a:35:c3:e2:3c:a4:26:29:34:d6: 65:73:25:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPex1kxY6UImKfOSScGALDNW6lvowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzA0MTgzMDI2WhcNMjUwODA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjNlMmJmMjJlMGU1ZmZiZTYxYmM4ZjMyNjFiNTUwOTdk Nzk0Mzc3ODAwN2Y0ZjY2MjZiNGY4ODY1Zjg2Nzk0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjAsHJT/lHrbxpNIxtCjTMNO4vgQJmcqmdtLYLFgS9QjJa n5uwswvryftGjfqV9+NJIw7GNa+kBu5YPGv7Ms83c5phaLEw9Lf4BEOiECe8LMjz iwaTadbiOryEzFIaA+wIdlGck3MAHRoudv8C1NcA494mzAXxSaxt0KcIbJCSm5h3 1+7XsOrofq7PTeLxJ2Cvth0kGlMZqBK0mqA2eibttq/sOUmumLeFNoTfgYD3ylIF Ox+z7tTK9S2Q9x4I74EOo1Rah7g4/emIWNOZe5askq1a6mr8z63vk4SshjBPZBRf 4phvH5hDUsc6Z2D7qFnXnVmE4EYqd6bHYJO1ZPydAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGMd7IL3pLkTW6mUYj1VWVOoNgm0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBiZTZlNjYyLWFmYzktNDkwMy05OTE5LTg5NGYwMzVhNDc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBAH2JsgREHctygElfaM91HozMIK3X 5JAIQJAvby1zwfmg0Q10U+WPAjH6MlVGZwO/6McgZggOSBiRZsONGc8XWcE429GW 7tR7OQdWXCJZd4Btg/jqZFUhAQMhQjg6EW1Fsymr2GBBnCYNfWwEndzAYzHVNzLe jqMtKZ98CTNIwJCiQBWr7r91yR50sCwYd4mxn75NvVU52OjYYimmNzwciEW8TkKA fBIXzsAtnO5aW62ROqkMOa91Q03IP1lI2HhHAabL8cvKZi7M2GV+8aiZOdES+86O D7S+pux0gQsZLlgaqlygpYFFDGvJ6V1FpydlG248ajXD4jykJik01mVzJQU= -----END CERTIFICATE-----Generated at Sun Jul 6 09:05:33 2025 by rpki-client