$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2bb58cb8-f5b5-4d0a-aa61-da95798b3b27.roa File: 2bb58cb8-f5b5-4d0a-aa61-da95798b3b27.roa (raw, json) Hash identifier: 7NiUMm5jUBluBFOISe/ItJO3YGKec70QEpDeGZEgtS0= Subject key identifier: 69:AC:F1:04:9B:D8:6A:90:1F:C0:2F:22:23:2B:92:FF:E6:0D:87:49 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0507C7FAF69B0CC705C4172B4AA3028562E228E0 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2bb58cb8-f5b5-4d0a-aa61-da95798b3b27.roa Signing time: Tue 19 Aug 2025 16:41:01 +0000 ROA not before: Tue 19 Aug 2025 16:41:01 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:07:c7:fa:f6:9b:0c:c7:05:c4:17:2b:4a:a3:02:85:62:e2:28:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 19 16:41:01 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=baae6679c1f4f89179a837521e55c78a9029f73a3a5f6619102bebb3655c69e0, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5f:6f:74:8d:f7:ae:65:ae:e5:ac:cb:e8:2c: 85:1a:22:07:5c:d6:a7:52:e3:35:96:24:60:13:ee: 9f:5c:0b:3f:64:13:ab:57:2d:14:b3:f7:d6:b1:31: fc:7c:ee:e5:3e:5a:84:19:39:3b:7d:08:14:49:97: 6b:19:18:65:e1:c1:3a:96:bf:3b:31:cf:58:9d:6c: 34:dd:8d:cd:c5:ce:9e:70:85:c2:db:36:a3:34:d4: a3:e8:ac:ff:f5:a9:2f:ce:ea:30:86:33:07:ad:14: 91:b4:f0:90:0e:c7:f3:f4:02:33:75:e9:a3:f7:14: 90:27:fd:ad:b7:17:5f:47:11:72:3a:c9:9d:df:e2: 1d:ed:5b:37:3b:86:a9:22:6e:7f:0f:7e:92:f3:4d: 85:48:b6:f5:cd:e6:85:5f:f5:48:0a:2a:28:16:81: 33:68:9e:44:38:7c:eb:56:b6:2e:36:9b:e8:15:d6: ae:e9:fa:2c:20:bc:6c:46:b0:13:00:d8:b4:bc:eb: 92:00:ac:ff:57:b4:ac:84:e8:8e:d6:27:7d:ef:3c: eb:29:43:ed:8d:ec:cb:08:32:ea:05:ff:8c:db:4a: a6:ab:94:b4:44:40:40:35:59:63:a6:a6:40:ad:d7: a7:60:7c:a0:40:c3:08:8f:a2:e7:8a:fe:e2:62:7c: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AC:F1:04:9B:D8:6A:90:1F:C0:2F:22:23:2B:92:FF:E6:0D:87:49 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2bb58cb8-f5b5-4d0a-aa61-da95798b3b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.242.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:28:9b:f6:1b:d5:16:1f:55:f6:68:7c:f0:fe:1f:ff:23:34: 9c:86:a5:9a:17:9a:58:2e:69:34:1f:b7:56:e9:3f:63:bf:82: 55:13:f8:24:a6:c6:67:07:fb:db:ee:cc:89:40:7c:c1:3c:26: dc:53:fa:b9:86:ab:9d:fc:17:1f:00:c6:1c:da:11:9a:8a:20: a1:49:0a:d3:a2:23:01:d7:a6:0a:f8:32:0c:4a:a4:6f:68:67: 67:a3:f0:21:ba:7c:84:1e:cc:2a:8f:9e:d7:eb:a3:5d:24:15: f7:5f:2f:2d:a6:e1:ea:d8:f6:20:60:cd:fc:bc:10:0f:30:5c: c9:2e:7e:aa:0a:24:e5:7f:4b:51:30:1a:3f:c5:05:9b:d3:a2: 61:3d:dd:d7:1c:dc:62:fa:fe:24:7f:b2:ba:61:5b:54:d9:ae: 40:50:f9:02:cb:52:54:90:47:65:64:e0:c4:8a:c8:3e:62:a5: c5:18:5e:97:f3:12:5c:92:ed:e2:53:98:25:08:7e:db:36:b6: 99:21:a7:34:86:3c:50:2d:c9:28:9d:0e:e5:fb:5c:32:f6:c4: a2:40:54:82:f0:1f:08:6e:20:bc:92:c8:97:39:22:94:ad:2d: 84:ec:b0:de:64:a4:5c:5e:1a:a9:dc:20:7d:c6:b1:8c:f6:bd: d2:4d:6f:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBQfH+vabDMcFxBcrSqMChWLiKOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE5MTY0MTAxWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYWFlNjY3OWMxZjRmODkxNzlhODM3NTIxZTU1Yzc4YTkw MjlmNzNhM2E1ZjY2MTkxMDJiZWJiMzY1NWM2OWUwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChX290jfeuZa7lrMvoLIUaIgdc1qdS4zWWJGAT7p9cCz9k E6tXLRSz99axMfx87uU+WoQZOTt9CBRJl2sZGGXhwTqWvzsxz1idbDTdjc3Fzp5w hcLbNqM01KPorP/1qS/O6jCGMwetFJG08JAOx/P0AjN16aP3FJAn/a23F19HEXI6 yZ3f4h3tWzc7hqkibn8PfpLzTYVItvXN5oVf9UgKKigWgTNonkQ4fOtWti42m+gV 1q7p+iwgvGxGsBMA2LS865IArP9XtKyE6I7WJ33vPOspQ+2N7MsIMuoF/4zbSqar lLREQEA1WWOmpkCt16dgfKBAwwiPoueK/uJifNKxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaazxBJvYapAfwC8iIyuS/+YNh0kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJiYjU4Y2I4LWY1YjUtNGQwYS1hYTYxLWRhOTU3OThiM2IyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPIwDQYJKoZIhvcNAQELBQADggEBAG8om/Yb1RYfVfZofPD+H/8jNJyG pZoXmlguaTQft1bpP2O/glUT+CSmxmcH+9vuzIlAfME8JtxT+rmGq538Fx8Axhza EZqKIKFJCtOiIwHXpgr4MgxKpG9oZ2ej8CG6fIQezCqPntfro10kFfdfLy2m4erY 9iBgzfy8EA8wXMkufqoKJOV/S1EwGj/FBZvTomE93dcc3GL6/iR/srphW1TZrkBQ +QLLUlSQR2Vk4MSKyD5ipcUYXpfzElyS7eJTmCUIfts2tpkhpzSGPFAtySidDuX7 XDL2xKJAVILwHwhuILySyJc5IpStLYTssN5kpFxeGqncIH3GsYz2vdJNb+U= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:40 2025 by rpki-client