$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f17eae4-e9ea-4cfe-9230-7f128323bbd4.roa File: 4f17eae4-e9ea-4cfe-9230-7f128323bbd4.roa (raw, json) Hash identifier: jQH9agMzPTN9QRLyraLAKJa3E38lJjcOUIcoETQ6eXk= Subject key identifier: AA:B4:66:6D:BC:7F:63:00:D0:11:39:C2:80:4B:BB:A6:C6:66:68:56 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5C904F3CAEF2E93E5F3A3BE2B8E76D5CA083EABA Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f17eae4-e9ea-4cfe-9230-7f128323bbd4.roa Signing time: Tue 19 Aug 2025 16:50:33 +0000 ROA not before: Tue 19 Aug 2025 16:50:33 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:90:4f:3c:ae:f2:e9:3e:5f:3a:3b:e2:b8:e7:6d:5c:a0:83:ea:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 19 16:50:33 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=19a88ef6809a679fd8b631569535d3a5eb6336ab87f0e3e6e544c211f2c2ca81, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3c:53:94:96:7a:63:8a:ce:3e:a6:1d:6a:7b: ca:e2:5d:58:3d:42:bf:c6:0d:e9:f6:d2:62:63:bb: 12:f7:74:d7:dc:46:64:76:de:44:ec:39:17:66:cd: 5c:33:52:70:df:ff:47:78:97:eb:84:18:23:54:5a: d3:8a:2d:79:92:7e:ee:c7:7a:71:9d:6d:90:a2:9f: d3:03:d6:9c:b8:fb:3f:9a:ea:7d:a9:ee:37:8b:e0: a8:2e:ff:12:de:1b:8f:cb:b9:65:b3:4b:43:b1:d0: 4b:01:2e:1b:55:98:94:6f:b0:d4:d9:23:28:e0:b4: c0:0a:25:76:8a:67:23:e1:91:76:ed:d5:03:d9:e9: ab:45:67:e8:ec:fb:90:5d:46:0e:36:c7:c9:e5:c5: 35:8c:bb:8b:45:af:50:e7:4b:02:74:b1:9f:f7:e5: 63:cd:c5:8c:16:80:4d:f3:f8:f2:a9:8d:83:d4:57: ec:ea:4a:3e:08:09:75:24:20:37:55:4b:39:4b:93: ba:62:64:d0:5a:80:aa:71:6c:41:c6:73:52:ce:8f: 0f:8d:33:13:42:3b:d5:37:78:c7:55:10:5f:75:f7: 73:fe:ae:75:35:ea:c6:40:e5:b2:76:ae:2a:51:ca: 55:1d:50:79:7d:e9:1c:91:a0:2d:6c:8b:f4:9a:c0: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B4:66:6D:BC:7F:63:00:D0:11:39:C2:80:4B:BB:A6:C6:66:68:56 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/4f17eae4-e9ea-4cfe-9230-7f128323bbd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.132.0/22 Signature Algorithm: sha256WithRSAEncryption 71:1e:bb:a0:07:5a:e5:5e:63:40:8f:5c:6b:ed:ff:f2:7e:9d: bb:90:1b:38:fe:f6:4f:86:77:db:0c:a1:c9:61:2e:b5:aa:da: 9e:5e:56:4c:46:9e:4e:01:d1:dc:7a:b6:dc:9d:49:ad:b7:39: ce:a3:6a:f4:79:7e:22:67:ff:22:bd:55:84:6f:cf:17:5d:b1: ce:65:72:fe:db:ff:80:c7:72:2f:62:3d:e9:24:24:db:8f:53: 16:1c:4d:c3:62:49:77:9c:8f:3b:b5:9c:11:96:f7:4e:90:5b: dd:a6:0f:db:36:15:b5:d1:80:ac:60:67:8c:13:1a:90:f2:04: 31:90:57:f1:9b:a1:06:47:6d:90:b4:5c:6d:c8:35:67:1f:c2: 13:19:e5:4e:fa:5c:10:b0:5c:33:9b:cb:22:5b:33:00:5a:f3: 8e:7d:df:ae:3d:b3:f4:f4:59:84:93:60:16:a7:42:c5:ba:5f: 8a:39:4e:2d:b3:0b:9a:95:df:26:85:ad:fa:ad:7d:62:1f:38: d7:67:42:dd:bf:36:d4:f9:7e:02:6b:60:ad:28:3f:99:a6:4b: 95:f1:58:f0:5c:00:7d:cb:b3:08:b2:d3:1c:5c:94:f1:02:f4: b2:36:4a:81:c5:45:b4:d0:b2:d2:49:e3:0c:2d:4e:e9:61:eb: 90:dc:9d:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXJBPPK7y6T5fOjviuOdtXKCD6rowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE5MTY1MDMzWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOWE4OGVmNjgwOWE2NzlmZDhiNjMxNTY5NTM1ZDNhNWVi NjMzNmFiODdmMGUzZTZlNTQ0YzIxMWYyYzJjYTgxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkPFOUlnpjis4+ph1qe8riXVg9Qr/GDen20mJjuxL3dNfc RmR23kTsORdmzVwzUnDf/0d4l+uEGCNUWtOKLXmSfu7HenGdbZCin9MD1py4+z+a 6n2p7jeL4Kgu/xLeG4/LuWWzS0Ox0EsBLhtVmJRvsNTZIyjgtMAKJXaKZyPhkXbt 1QPZ6atFZ+js+5BdRg42x8nlxTWMu4tFr1DnSwJ0sZ/35WPNxYwWgE3z+PKpjYPU V+zqSj4ICXUkIDdVSzlLk7piZNBagKpxbEHGc1LOjw+NMxNCO9U3eMdVEF9193P+ rnU16sZA5bJ2ripRylUdUHl96RyRoC1si/SawCKpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqrRmbbx/YwDQETnCgEu7psZmaFYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzRmMTdlYWU0LWU5ZWEtNGNmZS05MjMwLTdmMTI4MzIzYmJkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYIQwDQYJKoZIhvcNAQELBQADggEBAHEeu6AHWuVeY0CPXGvt//J+nbuQ Gzj+9k+Gd9sMoclhLrWq2p5eVkxGnk4B0dx6ttydSa23Oc6javR5fiJn/yK9VYRv zxddsc5lcv7b/4DHci9iPekkJNuPUxYcTcNiSXecjzu1nBGW906QW92mD9s2FbXR gKxgZ4wTGpDyBDGQV/GboQZHbZC0XG3INWcfwhMZ5U76XBCwXDObyyJbMwBa8459 3649s/T0WYSTYBanQsW6X4o5Ti2zC5qV3yaFrfqtfWIfONdnQt2/NtT5fgJrYK0o P5mmS5XxWPBcAH3Lswiy0xxclPEC9LI2SoHFRbTQstJJ4wwtTulh65DcnTg= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:40 2025 by rpki-client