$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/549780f9-870a-404a-8f64-73dec0314022.roa File: 549780f9-870a-404a-8f64-73dec0314022.roa (raw, json) Hash identifier: tUA2M6Vz6QfQ6anprlgNwvrXkSnci6pqYcbT9fp3Rnw= Subject key identifier: C6:59:F5:91:2D:39:6E:68:6D:79:0B:2F:2A:AD:08:11:FC:BA:C6:BE Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3CBD9B23B6CE3B1540315C00FB5FA9EF5D16B7F7 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/549780f9-870a-404a-8f64-73dec0314022.roa Signing time: Tue 20 May 2025 18:00:03 +0000 ROA not before: Tue 20 May 2025 18:00:03 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:bd:9b:23:b6:ce:3b:15:40:31:5c:00:fb:5f:a9:ef:5d:16:b7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 20 18:00:03 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=ef73dbe3bf00eac65cb679d3d8ccfb9c320e8bb0b41f6663201072d62bc35c0e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e9:42:48:4e:ff:95:33:97:c2:13:47:51:4b: b5:6c:e1:22:1b:2f:64:5c:1d:71:42:d5:f1:5c:82: 08:71:e3:45:54:0a:1e:02:e2:67:90:bc:5b:ad:de: 73:ac:10:b3:f5:35:50:b8:17:d7:39:07:b5:9e:e7: 22:86:e0:7d:db:0a:6c:20:6f:4e:cd:ee:a4:5e:d4: 6f:ad:c1:6d:79:6c:a0:8d:b7:4d:1e:81:d6:51:6e: 5b:b9:c4:df:73:77:ef:2e:54:55:96:a8:e8:3d:df: 24:e9:a5:80:c1:98:9a:5a:38:9e:54:56:b7:b4:99: 17:c4:34:53:4e:3d:49:ea:aa:ca:0d:09:42:91:15: c9:3c:43:11:9d:60:86:47:70:bc:b7:8a:c1:27:f4: 9e:1d:00:da:1f:5b:6e:98:81:49:62:dc:cb:44:a4: d5:d3:6f:c6:a8:26:38:16:bd:aa:23:d1:18:62:6a: d8:62:55:c6:84:25:a0:b7:8c:14:31:13:ea:39:f6: 3e:b7:7b:25:5a:87:ce:f7:c6:38:59:39:cb:c6:57: ad:c9:3f:50:4c:ab:29:84:ce:83:7a:7d:64:a6:06: 90:47:02:24:51:4f:c8:96:f3:ef:74:3c:76:bd:bb: 70:3f:64:57:28:9c:ca:dc:6b:77:b4:77:5d:cb:ef: 37:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:59:F5:91:2D:39:6E:68:6D:79:0B:2F:2A:AD:08:11:FC:BA:C6:BE X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/549780f9-870a-404a-8f64-73dec0314022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.56.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:e5:6f:94:bb:40:a2:27:85:3d:ef:3d:3a:63:85:7a:ef:b1: e8:50:0e:3a:ba:cc:70:e1:05:19:01:dd:49:eb:45:46:cd:a5: 21:6b:61:5b:30:5b:31:50:23:ed:a9:4c:9e:e5:e3:6e:cd:82: 28:eb:e7:36:31:fb:3e:c6:35:8b:03:b2:e4:f9:f1:62:5f:dc: e4:6a:b9:14:02:d1:46:d9:fa:0d:34:37:5c:2b:cb:0b:18:bb: 9e:e6:29:83:f5:45:10:e3:1b:c5:b6:e8:25:db:00:bb:a1:90: cc:52:dd:44:46:25:42:81:72:ab:49:c6:2c:c4:6b:a2:5b:bf: 7c:de:a2:da:63:bb:05:ce:3c:fb:a3:5d:28:0e:e5:d2:b9:22: 68:c2:02:f3:14:ab:b3:6f:54:4b:69:3a:6f:23:f9:52:28:a4: 24:7d:e6:ee:60:40:30:c3:f2:bd:cb:aa:ab:4c:cf:c8:89:0c: ae:dc:9f:b4:4b:1a:a8:17:2d:4b:2e:fb:e2:f1:5f:4c:75:85: 54:a9:d1:5b:37:48:b8:7f:39:60:7a:a8:6e:cb:25:d4:55:8d: 20:3a:fa:6b:ca:bc:30:46:48:8f:fe:e3:60:71:3d:9b:08:d5: 9f:2e:62:01:78:39:a8:0f:33:2e:44:d0:fe:6e:b9:53:50:76: 43:32:a7:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPL2bI7bOOxVAMVwA+1+p710Wt/cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTIwMTgwMDAzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjczZGJlM2JmMDBlYWM2NWNiNjc5ZDNkOGNjZmI5YzMy MGU4YmIwYjQxZjY2NjMyMDEwNzJkNjJiYzM1YzBlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx6UJITv+VM5fCE0dRS7Vs4SIbL2RcHXFC1fFcgghx40VU Ch4C4meQvFut3nOsELP1NVC4F9c5B7We5yKG4H3bCmwgb07N7qRe1G+twW15bKCN t00egdZRblu5xN9zd+8uVFWWqOg93yTppYDBmJpaOJ5UVre0mRfENFNOPUnqqsoN CUKRFck8QxGdYIZHcLy3isEn9J4dANofW26YgUli3MtEpNXTb8aoJjgWvaoj0Rhi athiVcaEJaC3jBQxE+o59j63eyVah873xjhZOcvGV63JP1BMqymEzoN6fWSmBpBH AiRRT8iW8+90PHa9u3A/ZFconMrca3e0d13L7zcZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxln1kS05bmhteQsvKq0IEfy6xr4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzU0OTc4MGY5LTg3MGEtNDA0YS04ZjY0LTczZGVjMDMxNDAyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYDgwDQYJKoZIhvcNAQELBQADggEBAB7lb5S7QKInhT3vPTpjhXrvsehQ Djq6zHDhBRkB3UnrRUbNpSFrYVswWzFQI+2pTJ7l427Ngijr5zYx+z7GNYsDsuT5 8WJf3ORquRQC0UbZ+g00N1wrywsYu57mKYP1RRDjG8W26CXbALuhkMxS3URGJUKB cqtJxizEa6Jbv3zeotpjuwXOPPujXSgO5dK5ImjCAvMUq7NvVEtpOm8j+VIopCR9 5u5gQDDD8r3LqqtMz8iJDK7cn7RLGqgXLUsu++LxX0x1hVSp0Vs3SLh/OWB6qG7L JdRVjSA6+mvKvDBGSI/+42BxPZsI1Z8uYgF4OagPMy5E0P5uuVNQdkMyp5Y= -----END CERTIFICATE-----Generated at Mon Jun 2 17:02:39 2025 by rpki-client