$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa File: 3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa (raw, json) Hash identifier: +KZYU97YZurdtnagblyoxrKXtdQ3/d+O+qAquAJ8nk8= Subject key identifier: 01:15:3F:A3:0A:F6:3B:64:2D:AD:81:14:DA:B9:5C:A1:CC:9F:9D:E7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 45236A347538D4278D962F637EDDD4AAB3B3ECE9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa Signing time: Wed 04 Jun 2025 00:50:35 +0000 ROA not before: Wed 04 Jun 2025 00:50:35 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:23:6a:34:75:38:d4:27:8d:96:2f:63:7e:dd:d4:aa:b3:b3:ec:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 4 00:50:35 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=7fc73d5a95986608668a22c8aff967dc1e1a658dd664860b0fb0a54918698db4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:98:33:d3:47:fb:81:da:3b:fa:3d:43:ff: 45:1e:69:03:14:56:a5:7d:88:a9:1a:59:64:ac:84: 09:69:aa:a3:5f:6d:51:47:e1:89:67:00:27:52:41: 0f:f3:8a:d7:b0:de:a7:0c:b2:31:ee:97:e0:be:5a: bf:52:ea:b9:a0:a5:38:0c:14:e2:bb:ad:60:09:78: 1b:de:a2:8b:4c:61:e7:e9:18:2b:89:92:96:b2:20: 39:14:70:41:d2:f5:14:92:12:ca:99:4c:88:c6:40: a3:55:95:5f:17:8d:b3:8a:d1:36:bc:66:c2:1b:6f: c8:c3:27:cf:e5:c9:e6:bf:18:38:e1:63:5d:e3:57: b0:84:0d:73:00:84:cf:12:df:05:dc:0a:99:be:ac: 54:7c:31:94:26:67:5f:47:de:a6:b7:88:b0:68:0b: 78:ac:19:e9:da:bb:56:d7:9a:97:f9:5d:94:75:1a: 6d:09:9f:40:59:00:57:32:21:47:ca:be:a1:ea:aa: 70:46:52:ba:f2:f3:b2:25:07:67:52:ab:16:f0:97: af:08:8d:de:57:63:59:13:2e:c4:4b:14:c9:e9:59: d0:c9:c1:73:be:0f:02:68:0d:8c:bf:92:63:b1:7a: 67:59:e7:e7:f0:de:f0:d4:44:3c:e5:7f:53:d9:e8: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:15:3F:A3:0A:F6:3B:64:2D:AD:81:14:DA:B9:5C:A1:CC:9F:9D:E7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.242.0/24 Signature Algorithm: sha256WithRSAEncryption 33:ae:5d:b8:90:42:bb:66:65:77:fc:3b:64:48:92:bb:ae:28: 39:7c:4e:6e:8f:93:62:4d:77:c6:37:4d:69:43:16:ff:a8:33: 39:42:07:8a:34:05:8b:a8:2e:48:e0:46:8f:73:00:3d:fb:7d: fe:52:a4:91:2e:8a:d8:90:f1:1b:04:e7:6b:e6:cc:57:88:5b: 7d:f3:e0:d9:9b:16:9e:38:4d:0b:4c:61:98:c0:cf:2b:2e:f7: 2e:60:3a:e4:e4:98:df:e9:f5:44:82:bf:58:e9:8b:14:27:39: 75:8e:87:9a:d9:03:b9:93:08:64:f8:73:e8:bd:a4:86:dd:37: f6:88:6d:e8:68:e5:9a:5c:e4:d0:a6:5d:37:bd:95:29:40:d5: ae:59:1f:4d:59:97:a5:cb:26:bc:c6:7d:35:9f:50:2d:79:d5: d0:b9:ac:ee:81:c6:d6:b0:8e:b7:77:85:2c:87:19:29:b8:cd: ed:bc:aa:c3:e8:8e:f9:83:e7:10:ad:0b:5b:9b:c5:62:7a:26: d4:8f:52:17:b2:d2:3a:32:57:4e:fb:6f:a4:73:f0:b1:fa:b2: 6f:14:cd:3a:e2:ab:da:0e:97:eb:e7:7e:5a:6d:fd:6c:32:18: 03:9f:94:e3:35:f9:09:05:24:a9:84:75:b5:59:77:65:a6:cd: e0:c2:d5:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURSNqNHU41CeNli9jft3UqrOz7OkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA0MDA1MDM1WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZmM3M2Q1YTk1OTg2NjA4NjY4YTIyYzhhZmY5NjdkYzFl MWE2NThkZDY2NDg2MGIwZmIwYTU0OTE4Njk4ZGI0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8S5gz00f7gdo7+j1D/0UeaQMUVqV9iKkaWWSshAlpqqNf bVFH4YlnACdSQQ/zitew3qcMsjHul+C+Wr9S6rmgpTgMFOK7rWAJeBveootMYefp GCuJkpayIDkUcEHS9RSSEsqZTIjGQKNVlV8XjbOK0Ta8ZsIbb8jDJ8/lyea/GDjh Y13jV7CEDXMAhM8S3wXcCpm+rFR8MZQmZ19H3qa3iLBoC3isGenau1bXmpf5XZR1 Gm0Jn0BZAFcyIUfKvqHqqnBGUrry87IlB2dSqxbwl68Ijd5XY1kTLsRLFMnpWdDJ wXO+DwJoDYy/kmOxemdZ5+fw3vDURDzlf1PZ6ICJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUARU/owr2O2QtrYEU2rlcocyfnecwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzNkODMwYmI2LTJiYWItNGNjNi1iNzk1LTg0ZjBiMzliZTcwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPIwDQYJKoZIhvcNAQELBQADggEBADOuXbiQQrtmZXf8O2RIkruuKDl8 Tm6Pk2JNd8Y3TWlDFv+oMzlCB4o0BYuoLkjgRo9zAD37ff5SpJEuitiQ8RsE52vm zFeIW33z4NmbFp44TQtMYZjAzysu9y5gOuTkmN/p9USCv1jpixQnOXWOh5rZA7mT CGT4c+i9pIbdN/aIbeho5Zpc5NCmXTe9lSlA1a5ZH01Zl6XLJrzGfTWfUC151dC5 rO6Bxtawjrd3hSyHGSm4ze28qsPojvmD5xCtC1ubxWJ6JtSPUhey0joyV077b6Rz 8LH6sm8UzTriq9oOl+vnflpt/WwyGAOflOM1+QkFJKmEdbVZd2WmzeDC1So= -----END CERTIFICATE-----Generated at Wed Jun 4 11:27:44 2025 by rpki-client