$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa File: 2ac091c5-8143-4a71-81c4-f34c33d996aa.roa (raw, json) Hash identifier: OifR1iOV7EulcqhlU+dvg66FurKKEwbq2aff/08M7VQ= Subject key identifier: 49:0A:05:D5:63:79:D4:C7:3F:68:E2:10:FD:1F:38:E2:ED:CC:D6:DF Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 30986792C2E1270ECB4939BD2E4AD4BF4DAD54BE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa Signing time: Tue 29 Jul 2025 18:20:24 +0000 ROA not before: Tue 29 Jul 2025 18:20:24 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:98:67:92:c2:e1:27:0e:cb:49:39:bd:2e:4a:d4:bf:4d:ad:54:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 29 18:20:24 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=c1957c54fb79dfabb73c3fd50f9cc229a1a83dca489f5f67ce3f179a0d94e3ea, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:32:2a:43:c1:43:4b:31:e7:5f:61:31:bb: c2:ed:81:0f:9f:cf:8f:ad:70:3a:c8:23:c3:bb:2e: 6e:14:ff:d4:c2:38:00:ca:71:86:cd:3f:ad:a8:a2: 76:ab:e3:15:0f:06:00:19:fb:7d:92:62:8a:60:3b: c0:1a:97:41:24:3b:ab:8b:f3:be:e4:74:f1:33:ed: b9:95:26:68:ec:f8:f9:e2:c6:1e:d1:dc:5c:e4:fb: 53:47:35:ae:c2:bf:17:a1:6e:b7:41:ec:a2:bb:9e: a1:a2:43:d0:a8:13:4f:ac:f7:bd:d4:90:c2:7d:2d: 3e:c1:29:67:c1:bb:e0:21:ce:1c:c4:77:54:fb:53: f7:6c:7b:13:7c:e4:2e:e2:2a:71:2a:da:3d:34:4d: 1b:03:fe:8a:9d:e2:f2:f3:8e:af:29:2b:7f:cc:88: 05:41:88:47:b0:b3:85:14:11:a1:c3:aa:f9:7f:4e: 2d:42:ee:26:e8:c5:42:ef:f3:60:6c:69:dd:af:43: 11:fb:a2:0a:67:17:db:17:5a:b8:fe:74:64:17:09: ce:fb:19:b6:3a:7b:fc:44:1a:43:be:7e:8e:c0:08: 3d:2b:38:92:54:93:e1:27:9d:c0:05:29:c6:77:cd: f2:7b:4c:55:3f:bc:04:6f:e0:cf:e2:d6:f2:53:f3: a1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0A:05:D5:63:79:D4:C7:3F:68:E2:10:FD:1F:38:E2:ED:CC:D6:DF X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.38.0/24 Signature Algorithm: sha256WithRSAEncryption 28:12:fc:3c:31:d4:50:43:ca:69:2a:74:54:b4:0b:d2:c2:66: 50:67:96:d4:9a:b9:97:3f:c9:12:0d:cc:c8:72:19:29:9d:45: c2:3a:1b:51:92:ac:bd:0d:7d:8b:90:5e:ba:a2:e3:bd:f6:2b: 77:23:a3:c4:9e:69:ca:c5:9f:a1:21:1f:f3:2d:2b:54:9c:30: e1:2d:8e:f3:13:80:65:b0:1b:7f:fa:3b:f3:7b:f7:e9:4b:02: ba:7e:21:f2:9c:54:a7:ec:d4:5b:b0:7a:ee:19:e2:eb:8d:c6: d3:5c:68:dc:e6:30:c3:48:a5:54:be:f5:38:1b:f9:22:01:e2: c7:ba:49:13:f1:4e:13:82:ca:02:45:79:2a:2b:60:f4:09:fd: ad:6e:47:36:17:33:df:6e:c3:92:5a:15:af:5e:58:8e:18:ab: 89:fd:c1:6f:2b:07:f9:fc:0a:2a:33:90:c5:d6:83:b7:ad:64: 56:7c:e8:28:f8:bb:43:6a:e2:c4:19:29:d1:41:e3:a7:4d:f0: ae:19:35:df:6b:e0:19:17:a8:24:9f:0c:f1:a4:4d:5c:cb:6f: 66:ed:62:50:d3:e3:60:1d:7a:48:e0:15:fc:e0:b1:04:4b:d2: 20:2c:fc:61:c5:64:6d:97:6a:d7:51:b0:1a:bd:25:f6:d2:b7: 4c:5f:ad:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMJhnksLhJw7LSTm9LkrUv02tVL4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI5MTgyMDI0WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTk1N2M1NGZiNzlkZmFiYjczYzNmZDUwZjljYzIyOWEx YTgzZGNhNDg5ZjVmNjdjZTNmMTc5YTBkOTRlM2VhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwkzIqQ8FDSzHnX2Exu8LtgQ+fz4+tcDrII8O7Lm4U/9TC OADKcYbNP62oonar4xUPBgAZ+32SYopgO8Aal0EkO6uL877kdPEz7bmVJmjs+Pni xh7R3Fzk+1NHNa7CvxehbrdB7KK7nqGiQ9CoE0+s973UkMJ9LT7BKWfBu+AhzhzE d1T7U/dsexN85C7iKnEq2j00TRsD/oqd4vLzjq8pK3/MiAVBiEews4UUEaHDqvl/ Ti1C7iboxULv82Bsad2vQxH7ogpnF9sXWrj+dGQXCc77GbY6e/xEGkO+fo7ACD0r OJJUk+EnncAFKcZ3zfJ7TFU/vARv4M/i1vJT86FtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSQoF1WN51Mc/aOIQ/R844u3M1t8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJhYzA5MWM1LTgxNDMtNGE3MS04MWM0LWYzNGMzM2Q5OTZhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCYwDQYJKoZIhvcNAQELBQADggEBACgS/Dwx1FBDymkqdFS0C9LCZlBn ltSauZc/yRINzMhyGSmdRcI6G1GSrL0NfYuQXrqi4732K3cjo8SeacrFn6EhH/Mt K1ScMOEtjvMTgGWwG3/6O/N79+lLArp+IfKcVKfs1Fuweu4Z4uuNxtNcaNzmMMNI pVS+9Tgb+SIB4se6SRPxThOCygJFeSorYPQJ/a1uRzYXM99uw5JaFa9eWI4Yq4n9 wW8rB/n8CiozkMXWg7etZFZ86Cj4u0Nq4sQZKdFB46dN8K4ZNd9r4BkXqCSfDPGk TVzLb2btYlDT42AdekjgFfzgsQRL0iAs/GHFZG2XatdRsBq9JfbSt0xfres= -----END CERTIFICATE-----Generated at Wed Aug 20 13:19:26 2025 by rpki-client