$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa File: 10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa (raw, json) Hash identifier: eAWA+tSL5VWRJQOYOiQGc4OPbuLjTQ2OFRa2DAtFSbw= Subject key identifier: F9:64:E5:44:EC:E1:7B:37:DF:19:99:8D:0E:80:5E:84:87:7F:A7:05 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 70D39466FD574F281F879D35695035D34EBE8214 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa Signing time: Wed 04 Jun 2025 00:50:29 +0000 ROA not before: Wed 04 Jun 2025 00:50:29 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d3:94:66:fd:57:4f:28:1f:87:9d:35:69:50:35:d3:4e:be:82:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 4 00:50:29 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=a459d9c87d68479fb9832cfe242f3bf08842f750550e6a9c2447c0bc2b92ae0d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:ca:60:34:63:c9:c8:c9:03:ac:52:93:e1: 63:4c:17:b8:b9:75:65:1a:2f:86:3f:37:2b:9f:a4: cc:7c:79:8a:ce:33:ab:e1:0a:0c:17:86:e3:cd:90: 21:d7:2f:f2:15:43:fb:1d:2d:12:58:e9:f0:68:7d: c1:9a:be:e0:6c:f9:81:64:f9:2f:76:96:49:2f:5d: 06:e5:9f:e8:7f:7b:29:df:44:ae:e0:13:6e:94:9d: 9d:dc:00:1a:8e:91:76:f5:39:b4:93:d9:31:9c:d9: cd:e5:ab:98:5d:4e:75:fe:0b:b9:50:89:62:6e:0e: 09:7e:93:02:02:ce:6c:fd:42:05:16:6b:4f:64:79: 09:c6:d9:4b:b6:68:61:3a:62:be:c0:1e:ba:f9:7b: dc:ea:d4:31:56:15:5a:6b:15:c5:9b:f4:3b:7e:99: ee:ad:4d:e1:12:fd:57:b3:2a:91:e9:1b:d9:fe:e1: 0c:28:80:77:b2:dc:6a:f1:3d:ef:5b:12:7e:b6:f9: 18:c3:9a:37:63:d0:84:16:b8:3b:c5:37:98:ef:40: 34:38:e5:b0:b4:d9:da:fb:81:f5:4c:21:78:9f:9d: ae:eb:d5:ff:86:8d:b7:a3:65:59:c3:b4:43:a0:94: 94:e2:2c:8e:0d:6d:70:9c:cc:3d:56:73:13:86:3e: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:64:E5:44:EC:E1:7B:37:DF:19:99:8D:0E:80:5E:84:87:7F:A7:05 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/10a3548e-3272-43ec-a8e5-8d01cf856fa7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7d:42:97:31:a8:f8:69:6f:38:82:ba:46:67:53:c0:f1:d0:c0: 21:a0:70:9d:2b:c6:fb:d3:a2:cd:df:b5:9e:92:92:16:6e:0c: 50:31:a3:d2:1f:36:b4:87:89:61:48:91:55:ef:45:1d:f5:26: 16:87:a1:53:94:f5:fd:d9:b3:1d:1b:de:3e:e9:83:c8:e7:61: f0:a6:db:8a:38:f8:26:74:d2:00:28:40:c9:85:85:0f:e3:8c: 44:6f:44:a4:21:14:63:e6:16:f0:08:82:57:2b:09:eb:d0:6b: 7e:22:9c:53:22:fe:fb:07:79:1a:78:2c:9b:d7:9c:57:49:b3: 4c:8c:a2:7d:e5:83:88:40:2d:c4:3c:4c:26:8e:b8:e6:6e:92: 90:eb:ec:dc:87:ce:d5:c9:ea:59:2b:29:21:89:e5:d9:02:e4: f1:59:a9:12:2b:71:1a:70:5f:c0:77:b5:f4:f4:67:32:29:fc: 77:73:5c:b2:0b:9c:63:4a:0a:0e:3e:db:86:d8:78:5f:cf:9e: 77:df:29:43:11:c7:7f:40:0f:50:e3:fb:2e:9a:f0:57:3a:7d: ef:a1:b7:37:ab:32:61:63:4a:56:75:6a:ce:2c:cf:4c:64:a4: e9:43:a8:43:1f:d8:4d:90:51:59:1e:83:33:0b:0b:c4:12:7c: 08:c0:64:74 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcNOUZv1XTygfh501aVA1006+ghQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA0MDA1MDI5WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDU5ZDljODdkNjg0NzlmYjk4MzJjZmUyNDJmM2JmMDg4 NDJmNzUwNTUwZTZhOWMyNDQ3YzBiYzJiOTJhZTBkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCejspgNGPJyMkDrFKT4WNMF7i5dWUaL4Y/NyufpMx8eYrO M6vhCgwXhuPNkCHXL/IVQ/sdLRJY6fBofcGavuBs+YFk+S92lkkvXQbln+h/eynf RK7gE26UnZ3cABqOkXb1ObST2TGc2c3lq5hdTnX+C7lQiWJuDgl+kwICzmz9QgUW a09keQnG2Uu2aGE6Yr7AHrr5e9zq1DFWFVprFcWb9Dt+me6tTeES/VezKpHpG9n+ 4QwogHey3GrxPe9bEn62+RjDmjdj0IQWuDvFN5jvQDQ45bC02dr7gfVMIXifna7r 1f+GjbejZVnDtEOglJTiLI4NbXCczD1WcxOGPt/tAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+WTlROzhezffGZmNDoBehId/pwUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzEwYTM1NDhlLTMyNzItNDNlYy1hOGU1LThkMDFjZjg1NmZhNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjYDANBgkqhkiG9w0BAQsFAAOCAQEAfUKXMaj4aW84grpGZ1PA8dDAIaBw nSvG+9Oizd+1npKSFm4MUDGj0h82tIeJYUiRVe9FHfUmFoehU5T1/dmzHRvePumD yOdh8Kbbijj4JnTSAChAyYWFD+OMRG9EpCEUY+YW8AiCVysJ69BrfiKcUyL++wd5 Gngsm9ecV0mzTIyifeWDiEAtxDxMJo645m6SkOvs3IfO1cnqWSspIYnl2QLk8Vmp EitxGnBfwHe19PRnMin8d3NcsgucY0oKDj7bhth4X8+ed98pQxHHf0APUOP7Lprw Vzp976G3N6syYWNKVnVqzizPTGSk6UOoQx/YTZBRWR6DMwsLxBJ8CMBkdA== -----END CERTIFICATE-----Generated at Wed Jun 4 11:09:10 2025 by rpki-client