$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa File: 2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa (raw, json) Hash identifier: js66lV94gFWc3iBu0uCvEF3ikH5gehMQ36diSk/nYXw= Subject key identifier: 6F:BA:D3:DA:92:6A:F8:0E:82:54:19:A9:0E:0A:6E:F9:80:22:0F:58 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 727F5719BC6BF139AEE99858568EB928BB34B0F6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa Signing time: Sat 31 May 2025 00:40:06 +0000 ROA not before: Sat 31 May 2025 00:40:06 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7f:57:19:bc:6b:f1:39:ae:e9:98:58:56:8e:b9:28:bb:34:b0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 31 00:40:06 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=0ed08aaaf948e01953d8310bfea4174184b8d742594d7e4151d0da40e77aeb7e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:e8:ff:40:ef:1a:33:e4:ac:54:ee:4d:32: ad:2a:0f:dc:66:bf:c4:84:35:82:63:1b:35:51:0e: 89:33:64:28:5a:eb:d6:b8:09:d6:bf:2d:21:7c:50: 65:94:ca:dc:37:8d:30:25:d9:94:15:92:b7:bf:1c: 56:c6:37:7d:d4:49:d3:b7:1d:4d:10:df:84:1c:f7: a2:2a:3f:c1:96:01:1e:a1:d6:5c:1c:2c:ba:7e:54: 8f:b1:ba:ab:12:4b:af:cd:24:12:62:10:f8:28:6d: e3:8f:74:59:75:59:8c:55:3b:83:c3:0e:81:2f:1f: 52:61:75:7c:98:6c:a1:dc:a9:54:b7:74:9d:aa:35: 46:37:58:07:76:c4:c7:f2:fe:9a:78:94:fa:2f:31: 90:4f:d0:6f:a6:c9:4c:51:40:20:a5:18:21:6b:48: 73:42:72:89:ef:89:90:c4:2e:82:dc:2f:18:ab:ce: dd:95:fd:ff:13:25:35:83:34:b0:d7:21:77:6f:7e: 5d:a4:59:04:59:e5:db:d3:36:c1:53:fa:a3:32:99: 93:92:8e:49:96:13:a8:59:0a:76:93:59:74:5a:30: ab:ee:f3:b4:f6:b2:19:ef:0c:ef:41:9a:eb:c0:91: 0d:a7:53:fa:a0:5a:5f:27:25:c1:15:68:f2:b0:35: 13:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:BA:D3:DA:92:6A:F8:0E:82:54:19:A9:0E:0A:6E:F9:80:22:0F:58 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.246.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:b4:e6:e7:2f:c0:57:cd:2f:5d:e2:0e:fc:56:4d:2d:f7:de: 2d:42:fd:c6:cd:80:fd:32:ed:f6:49:09:0e:f4:6b:2c:2d:04: 5e:32:af:c5:56:85:7c:b0:8f:74:88:74:8e:22:41:70:b4:14: 98:64:9b:99:ad:02:a8:bb:76:63:d4:36:6e:ea:f2:5b:c1:92: 5e:3c:af:31:58:72:66:36:77:fa:6e:61:6e:54:04:e1:85:52: 12:57:f4:74:f2:f7:f6:c7:6c:8f:bf:1d:4d:95:a7:75:e6:0a: 35:ac:08:b8:21:84:52:c9:46:ba:60:46:0a:a3:77:87:0e:38: b3:86:10:71:f1:a1:a5:a3:c7:d6:83:0a:74:e7:7d:4f:aa:7b: 65:bb:1d:aa:8f:5a:39:c8:ca:97:2a:1b:4b:e6:03:cd:f6:46: 85:7c:db:1d:aa:af:93:2b:f2:80:27:0a:7d:5b:fe:69:1d:88: 88:2b:a4:8a:ca:03:0f:8a:34:06:74:e6:1c:e5:9f:23:c3:55: 54:3d:d9:62:6f:6c:e8:f3:72:2b:2e:89:04:8c:71:ae:c0:eb: 1d:4f:ff:6b:be:3b:8c:27:ca:7d:d0:7a:1a:0a:15:82:be:80: 6d:aa:a2:3b:21:37:cb:42:6c:70:2f:b6:e0:df:57:ca:77:36: c0:c1:31:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcn9XGbxr8Tmu6ZhYVo65KLs0sPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTMxMDA0MDA2WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZWQwOGFhYWY5NDhlMDE5NTNkODMxMGJmZWE0MTc0MTg0 YjhkNzQyNTk0ZDdlNDE1MWQwZGE0MGU3N2FlYjdlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHFej/QO8aM+SsVO5NMq0qD9xmv8SENYJjGzVRDokzZCha 69a4Cda/LSF8UGWUytw3jTAl2ZQVkre/HFbGN33USdO3HU0Q34Qc96IqP8GWAR6h 1lwcLLp+VI+xuqsSS6/NJBJiEPgobeOPdFl1WYxVO4PDDoEvH1JhdXyYbKHcqVS3 dJ2qNUY3WAd2xMfy/pp4lPovMZBP0G+myUxRQCClGCFrSHNCconviZDELoLcLxir zt2V/f8TJTWDNLDXIXdvfl2kWQRZ5dvTNsFT+qMymZOSjkmWE6hZCnaTWXRaMKvu 87T2shnvDO9BmuvAkQ2nU/qgWl8nJcEVaPKwNRMfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb7rT2pJq+A6CVBmpDgpu+YAiD1gwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJjM2Q3MjQ3LWUwN2ItNGQxYy1hNmVlLWViYWExM2ZiZDljYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPYwDQYJKoZIhvcNAQELBQADggEBAJ605ucvwFfNL13iDvxWTS333i1C /cbNgP0y7fZJCQ70aywtBF4yr8VWhXywj3SIdI4iQXC0FJhkm5mtAqi7dmPUNm7q 8lvBkl48rzFYcmY2d/puYW5UBOGFUhJX9HTy9/bHbI+/HU2Vp3XmCjWsCLghhFLJ RrpgRgqjd4cOOLOGEHHxoaWjx9aDCnTnfU+qe2W7HaqPWjnIypcqG0vmA832RoV8 2x2qr5Mr8oAnCn1b/mkdiIgrpIrKAw+KNAZ05hzlnyPDVVQ92WJvbOjzcisuiQSM ca7A6x1P/2u+O4wnyn3QehoKFYK+gG2qojshN8tCbHAvtuDfV8p3NsDBMUc= -----END CERTIFICATE-----Generated at Fri Jun 6 19:19:46 2025 by rpki-client