$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa File: 2b15c9d1-408d-403d-9973-829e5c92c101.roa (raw, json) Hash identifier: A3s/jNLhczwJREGIIAweEOgbiQ9urC97fpCnML8M054= Subject key identifier: 69:16:D6:4C:43:CC:A1:97:EC:47:BC:27:9E:20:91:0B:9D:DA:B8:77 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1C09637EEC73C026BF744EAB56FEEC822775542B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa Signing time: Sat 31 May 2025 00:40:46 +0000 ROA not before: Sat 31 May 2025 00:40:46 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:09:63:7e:ec:73:c0:26:bf:74:4e:ab:56:fe:ec:82:27:75:54:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 31 00:40:46 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=0abde1a07a164f7ad1320b3c79882fcf217a0ea214948a08b019a5417e97b455, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:23:b6:f6:37:f8:36:37:2e:a4:32:17:14:e3: e7:af:09:27:48:ae:86:30:0c:39:1a:d8:3c:fa:7c: c9:85:80:64:2a:75:15:7f:d3:e8:8c:50:5e:59:45: ea:e9:63:4b:01:c7:85:1d:4a:c7:a0:f9:1b:e7:84: 67:a0:cb:af:2b:a7:8b:e1:56:a5:12:12:d2:19:10: c5:51:fc:fa:24:e0:14:5b:b9:fe:19:4f:50:bb:9f: 47:79:fd:47:13:e5:31:43:97:03:28:89:3f:96:97: 5c:8b:ed:ba:fb:62:13:9e:5d:5e:eb:cb:c2:d4:fb: 09:2e:e7:e4:95:2f:5d:d7:19:77:31:c3:f4:a3:61: e3:53:f5:99:98:b9:7c:e8:95:44:61:c0:a4:1f:20: 54:54:5e:ef:d2:78:82:62:ad:c5:1e:d8:03:b8:72: a8:a8:6d:49:8f:74:e2:6c:58:8b:fd:cb:a8:fa:1e: 12:0f:52:2f:2a:4e:6e:33:39:b0:bb:eb:5b:0a:67: a3:28:a6:66:31:76:82:2e:5a:01:7c:eb:dd:e5:a9: 2c:ff:95:3d:9b:a7:f1:9b:26:18:03:ee:7e:a8:d5: f9:82:4d:a0:b4:69:cc:1e:02:13:f1:f0:81:4d:2f: 3e:cf:54:b9:d7:ed:d4:b6:0d:4a:f5:b1:93:7b:66: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:16:D6:4C:43:CC:A1:97:EC:47:BC:27:9E:20:91:0B:9D:DA:B8:77 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.26.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:87:bc:a2:c8:37:5b:bd:d2:0f:7c:fc:f2:7a:0d:bc:4d:29: 30:58:03:04:1c:da:da:01:3c:96:d5:6b:48:94:15:8d:03:2f: 60:99:25:e6:8a:c7:a3:83:4d:1a:74:d5:50:08:4e:30:ae:8d: ad:5f:e9:0e:14:63:14:e5:e0:ee:18:21:28:b5:1a:54:14:ed: 5a:84:bc:fe:f8:92:6f:d3:60:32:0b:e9:7d:f3:43:1d:e9:1c: a3:db:8b:a5:5e:2e:4f:07:7f:28:b3:74:db:2a:c4:1e:66:d5: 27:29:c2:47:57:4e:a2:11:0a:08:bb:a0:40:6c:fd:01:e0:60: e6:73:b8:36:5b:01:bf:83:eb:ee:8b:63:49:43:20:de:45:5c: 85:5c:5a:83:2d:54:f3:b0:4e:a5:66:75:71:7f:3c:fc:74:74: 33:0e:78:2f:6c:ce:24:0c:d2:59:8c:0a:d8:02:c9:01:81:98: f7:10:8a:5d:9f:93:8d:9c:75:77:1b:7c:ef:b5:81:bd:7b:76: fb:eb:7d:8f:fc:be:56:3c:c6:35:7f:2a:5d:e3:cd:a7:7a:f8: 09:88:82:72:76:ff:d9:78:c4:1e:bd:a9:99:89:e9:05:bc:55: ae:25:90:22:9f:eb:cf:b5:21:b8:51:87:ee:9b:f5:26:09:5f: 19:98:1b:61 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHAljfuxzwCa/dE6rVv7sgid1VCswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTMxMDA0MDQ2WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWJkZTFhMDdhMTY0ZjdhZDEzMjBiM2M3OTg4MmZjZjIx N2EwZWEyMTQ5NDhhMDhiMDE5YTU0MTdlOTdiNDU1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjI7b2N/g2Ny6kMhcU4+evCSdIroYwDDka2Dz6fMmFgGQq dRV/0+iMUF5ZRerpY0sBx4UdSseg+RvnhGegy68rp4vhVqUSEtIZEMVR/Pok4BRb uf4ZT1C7n0d5/UcT5TFDlwMoiT+Wl1yL7br7YhOeXV7ry8LU+wku5+SVL13XGXcx w/SjYeNT9ZmYuXzolURhwKQfIFRUXu/SeIJircUe2AO4cqiobUmPdOJsWIv9y6j6 HhIPUi8qTm4zObC761sKZ6MopmYxdoIuWgF8693lqSz/lT2bp/GbJhgD7n6o1fmC TaC0acweAhPx8IFNLz7PVLnX7dS2DUr1sZN7Zs+zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaRbWTEPMoZfsR7wnniCRC53auHcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJiMTVjOWQxLTQwOGQtNDAzZC05OTczLTgyOWU1YzkyYzEwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBowDQYJKoZIhvcNAQELBQADggEBAC6HvKLIN1u90g98/PJ6DbxNKTBY AwQc2toBPJbVa0iUFY0DL2CZJeaKx6ODTRp01VAITjCuja1f6Q4UYxTl4O4YISi1 GlQU7VqEvP74km/TYDIL6X3zQx3pHKPbi6VeLk8HfyizdNsqxB5m1ScpwkdXTqIR Cgi7oEBs/QHgYOZzuDZbAb+D6+6LY0lDIN5FXIVcWoMtVPOwTqVmdXF/PPx0dDMO eC9sziQM0lmMCtgCyQGBmPcQil2fk42cdXcbfO+1gb17dvvrfY/8vlY8xjV/Kl3j zad6+AmIgnJ2/9l4xB69qZmJ6QW8Va4lkCKf68+1IbhRh+6b9SYJXxmYG2E= -----END CERTIFICATE-----Generated at Fri Jun 6 18:37:46 2025 by rpki-client