$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa File: 2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa (raw, json) Hash identifier: 0YXAobIr3YAzaeK0GfMaFgjQVyXWu+AZyq1e+fb1p6M= Subject key identifier: 8C:0D:00:11:B9:02:1A:5D:30:4D:49:5C:0C:B5:26:D1:D6:CF:61:E1 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 301292644C2E85274CC9DE05FDE8932B355C3F50 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa Signing time: Fri 30 May 2025 16:37:02 +0000 ROA not before: Fri 30 May 2025 16:37:02 +0000 ROA not after: Fri 04 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:12:92:64:4c:2e:85:27:4c:c9:de:05:fd:e8:93:2b:35:5c:3f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 30 16:37:02 2025 GMT Not After : Jul 4 23:59:59 2025 GMT Subject: serialNumber=fbe350f4b53c916ba1c2542f9512a8d2cee8ac954088ec487f29d091ff871024, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:f5:91:ce:18:ee:cb:52:11:1f:e8:4a:d4: e1:51:b2:a1:80:72:34:7d:32:49:7a:72:bf:4d:d2: 10:27:29:42:c2:d7:ef:2d:7e:8d:9f:b1:b3:ed:9f: 3b:c3:7d:68:62:f1:d2:35:b2:c9:6d:2b:b7:69:cf: fa:8f:8b:b4:3f:03:2a:f8:b0:d3:33:05:c1:d9:73: 13:e1:dc:4f:ce:03:b6:e3:aa:9c:ba:6b:8e:ec:1b: aa:3c:f9:ef:b2:e2:ef:bd:be:c7:fb:97:cd:39:55: 7d:df:42:cd:a0:82:52:e9:df:99:00:f3:c0:90:54: 18:32:ff:9e:30:57:8a:00:57:ef:75:cd:c7:aa:b7: f0:7a:a7:42:0c:47:c4:2c:f2:43:d2:1c:a9:d6:47: f6:2d:d8:81:b7:84:90:8d:ff:ec:62:bf:b6:82:35: 98:74:d2:b4:7e:9b:10:5e:bb:49:0b:55:47:b4:6b: be:c0:bc:b5:3b:22:fc:d7:bc:22:cd:e4:bf:fc:e3: 8c:6a:17:45:80:3a:3c:ca:70:96:01:b1:16:ac:3c: c1:98:db:8d:de:8d:a2:dc:82:77:af:27:32:2d:d7: 59:87:94:73:b9:12:d2:eb:2f:6a:32:4b:3a:6a:ed: c6:46:27:44:ae:3b:ce:d6:9b:4f:f9:e3:27:00:c7: 51:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0D:00:11:B9:02:1A:5D:30:4D:49:5C:0C:B5:26:D1:D6:CF:61:E1 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ae8dcde-0f4b-4998-ac69-b4c5d8609843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.28.0/23 Signature Algorithm: sha256WithRSAEncryption 92:ce:a1:b9:7f:d4:4b:ee:8f:95:0b:f6:7e:79:4c:ea:3d:88: 01:b5:fa:cb:c5:47:4a:36:30:17:62:63:4f:27:94:36:06:29: 51:13:77:cb:ae:5e:d4:4e:01:b4:c4:20:c9:b9:d5:3b:4d:f9: 34:d9:0a:48:77:19:78:5f:ca:96:23:97:8b:93:ff:dd:49:27: b4:f4:43:8c:25:f3:6a:65:07:16:02:c2:a9:94:ac:a8:b1:9a: 2e:4d:75:73:41:cf:10:c4:cc:25:ef:97:14:29:ec:c4:e6:b6: d6:e4:b5:b6:99:38:95:a9:45:23:fd:2f:1b:c5:11:d5:aa:3f: f1:6c:e2:14:3a:d9:f1:86:fe:d1:3d:f6:09:18:e7:e3:35:b4: 45:42:56:f3:66:c0:7d:c7:9e:61:75:f8:27:c0:34:db:1c:62: 78:fc:e7:25:af:be:65:b6:61:31:ad:cd:90:3a:82:a2:97:ea: 0a:33:6b:b5:0f:16:ed:e6:fb:bf:8f:11:b9:67:b1:42:74:86: f9:2c:23:55:bc:92:22:2e:02:b3:99:4e:91:7b:fc:93:cc:15: 7c:9f:39:b8:00:ba:3f:52:21:a8:55:ca:8c:ce:c7:3e:eb:c8: 66:e6:f7:5e:34:af:03:0f:f5:29:c3:bb:f9:62:77:ad:45:d2: a5:71:4b:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMBKSZEwuhSdMyd4F/eiTKzVcP1AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTMwMTYzNzAyWhcNMjUwNzA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmUzNTBmNGI1M2M5MTZiYTFjMjU0MmY5NTEyYThkMmNl ZThhYzk1NDA4OGVjNDg3ZjI5ZDA5MWZmODcxMDI0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJVfWRzhjuy1IRH+hK1OFRsqGAcjR9Mkl6cr9N0hAnKULC 1+8tfo2fsbPtnzvDfWhi8dI1ssltK7dpz/qPi7Q/Ayr4sNMzBcHZcxPh3E/OA7bj qpy6a47sG6o8+e+y4u+9vsf7l805VX3fQs2gglLp35kA88CQVBgy/54wV4oAV+91 zceqt/B6p0IMR8Qs8kPSHKnWR/Yt2IG3hJCN/+xiv7aCNZh00rR+mxBeu0kLVUe0 a77AvLU7IvzXvCLN5L/844xqF0WAOjzKcJYBsRasPMGY243ejaLcgnevJzIt11mH lHO5EtLrL2oySzpq7cZGJ0SuO87Wm0/54ycAx1FDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjA0AEbkCGl0wTUlcDLUm0dbPYeEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJhZThkY2RlLTBmNGItNDk5OC1hYzY5LWI0YzVkODYwOTg0My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBAJLOobl/1Evuj5UL9n55TOo9iAG1 +svFR0o2MBdiY08nlDYGKVETd8uuXtROAbTEIMm51TtN+TTZCkh3GXhfypYjl4uT /91JJ7T0Q4wl82plBxYCwqmUrKixmi5NdXNBzxDEzCXvlxQp7MTmttbktbaZOJWp RSP9LxvFEdWqP/Fs4hQ62fGG/tE99gkY5+M1tEVCVvNmwH3HnmF1+CfANNscYnj8 5yWvvmW2YTGtzZA6gqKX6goza7UPFu3m+7+PEblnsUJ0hvksI1W8kiIuArOZTpF7 /JPMFXyfObgAuj9SIahVyozOxz7ryGbm9140rwMP9SnDu/lid61F0qVxS8w= -----END CERTIFICATE-----Generated at Mon Jun 2 16:53:17 2025 by rpki-client