$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/536f4aff-33a0-47e2-b52f-feec1c2fc2cb.roa File: 536f4aff-33a0-47e2-b52f-feec1c2fc2cb.roa (raw, json) Hash identifier: G7vTVj5Y7BwGraHq9HotImknMQZL1sYYKsdIZj/2Yw0= Subject key identifier: 6F:5B:93:57:D6:E7:63:81:A1:79:D3:95:6E:49:AE:58:2B:C3:FE:86 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4F617FB4F035B7C1E521235321823AE0DFAB3843 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/536f4aff-33a0-47e2-b52f-feec1c2fc2cb.roa Signing time: Mon 30 Jun 2025 17:40:11 +0000 ROA not before: Mon 30 Jun 2025 17:40:11 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:61:7f:b4:f0:35:b7:c1:e5:21:23:53:21:82:3a:e0:df:ab:38:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 30 17:40:11 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=6c7d97ee7bff700bb1af4b70b7e0c1fb555ab8d3bf62bd34a0c63ef1b387bd24, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a3:c0:8f:d8:ba:a2:71:c0:a2:81:e0:a3:4e: 0e:c1:d2:e6:09:07:57:2a:d2:a8:fb:93:04:90:7c: 38:9c:2e:67:27:e5:59:3a:19:d5:a5:04:e6:ee:63: 20:6f:50:8c:07:48:1c:1f:81:21:fc:de:9c:b2:68: a5:76:ab:c1:70:c5:6b:10:eb:e0:61:bf:23:7e:4d: 56:e4:de:0d:cf:ed:97:85:44:7e:45:b7:d4:67:31: bb:f6:a2:3b:65:6b:ac:d2:7d:58:33:11:cf:f8:cb: fb:6b:18:cc:2a:ad:6b:d0:09:02:db:e4:ea:66:36: 3f:07:f7:63:4a:c8:64:57:31:dc:99:81:4a:46:4b: b7:18:e2:e2:e4:49:62:6c:41:ce:0c:bf:0c:c5:a6: 33:0b:07:cf:44:eb:b7:ce:e6:48:68:e7:0f:27:db: 1b:2d:47:6b:78:8d:71:ce:b2:d3:4b:4f:34:ec:6d: 85:18:ff:92:f6:71:3d:77:b7:dc:73:d9:87:02:1a: 33:e7:1f:b1:03:84:3b:a8:ce:4e:2c:b6:ae:fd:f8: a6:f0:3b:5a:1f:14:3b:66:b0:57:96:af:de:b8:50: 25:77:5a:e1:ab:81:11:b5:50:00:90:6f:da:aa:90: 0b:90:1c:66:b0:d0:5c:a6:8a:59:cb:d6:6c:57:b2: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5B:93:57:D6:E7:63:81:A1:79:D3:95:6E:49:AE:58:2B:C3:FE:86 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/536f4aff-33a0-47e2-b52f-feec1c2fc2cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:2b:d9:e7:a5:14:9a:9f:b4:3c:ad:bb:94:b6:99:d5:5d:2e: 2b:1b:3a:3b:82:48:b5:20:4a:69:79:ad:44:a6:c2:78:9e:8e: 69:c0:f8:a9:15:e2:20:6e:21:4f:6a:86:6b:f1:a2:2e:cc:ce: 33:a7:d5:24:db:d1:5e:7b:97:ea:8c:57:dc:71:1f:37:34:23: bc:c4:17:29:34:4d:b3:19:6c:84:04:60:28:7c:27:b9:2e:7d: 83:1c:e7:78:02:8e:b8:2a:6d:7b:60:ed:0e:4f:38:54:f3:6c: d6:e5:12:73:f1:1c:fe:5b:cb:5f:2a:5c:65:36:18:7b:75:1c: 43:b4:42:4a:6c:2a:83:2c:39:66:a7:04:09:2c:4b:25:f0:d1: a2:60:c8:ed:6f:23:d4:b3:0b:23:7a:25:e3:1e:6b:13:7b:62: 54:74:1a:e5:b0:35:e2:46:7a:e8:ed:df:fe:7e:d6:bb:25:4f: d7:2d:7a:84:b9:49:09:ab:82:58:4a:3a:75:ee:c4:dc:23:a8: a6:83:f9:e6:0f:b7:72:d1:fd:26:90:73:38:ee:58:99:48:35: 3b:d9:52:99:d8:90:69:58:ad:39:c1:cb:89:6f:2d:24:44:a0: 9d:b3:3d:32:17:e9:dc:d7:d2:a8:82:62:c2:52:fb:0e:e7:ef: c2:69:35:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT2F/tPA1t8HlISNTIYI64N+rOEMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjMwMTc0MDExWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YzdkOTdlZTdiZmY3MDBiYjFhZjRiNzBiN2UwYzFmYjU1 NWFiOGQzYmY2MmJkMzRhMGM2M2VmMWIzODdiZDI0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFo8CP2LqiccCigeCjTg7B0uYJB1cq0qj7kwSQfDicLmcn 5Vk6GdWlBObuYyBvUIwHSBwfgSH83pyyaKV2q8FwxWsQ6+BhvyN+TVbk3g3P7ZeF RH5Ft9RnMbv2ojtla6zSfVgzEc/4y/trGMwqrWvQCQLb5OpmNj8H92NKyGRXMdyZ gUpGS7cY4uLkSWJsQc4MvwzFpjMLB89E67fO5kho5w8n2xstR2t4jXHOstNLTzTs bYUY/5L2cT13t9xz2YcCGjPnH7EDhDuozk4stq79+KbwO1ofFDtmsFeWr964UCV3 WuGrgRG1UACQb9qqkAuQHGaw0FymilnL1mxXsugLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUb1uTV9bnY4GhedOVbkmuWCvD/oYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzUzNmY0YWZmLTMzYTAtNDdlMi1iNTJmLWZlZWMxYzJmYzJjYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYAAwDQYJKoZIhvcNAQELBQADggEBAG4r2eelFJqftDytu5S2mdVdLisb OjuCSLUgSml5rUSmwniejmnA+KkV4iBuIU9qhmvxoi7MzjOn1STb0V57l+qMV9xx Hzc0I7zEFyk0TbMZbIQEYCh8J7kufYMc53gCjrgqbXtg7Q5POFTzbNblEnPxHP5b y18qXGU2GHt1HEO0QkpsKoMsOWanBAksSyXw0aJgyO1vI9SzCyN6JeMeaxN7YlR0 GuWwNeJGeujt3/5+1rslT9cteoS5SQmrglhKOnXuxNwjqKaD+eYPt3LR/SaQczju WJlINTvZUpnYkGlYrTnBy4lvLSREoJ2zPTIX6dzX0qiCYsJS+w7n78JpNdU= -----END CERTIFICATE-----Generated at Tue Jul 1 01:22:56 2025 by rpki-client