$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d6508ce-47a1-4002-b03b-9ce21b16cf60.roa File: 5d6508ce-47a1-4002-b03b-9ce21b16cf60.roa (raw, json) Hash identifier: zpmBbn9yzbCS7DGJcdd30yhaiK9s/qlocnVPm4aqfQY= Subject key identifier: D4:8D:FE:D9:33:72:5E:7C:A8:BE:A8:66:46:2E:CC:55:47:A7:D5:8A Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7E06D65C43570FEA42F5A655CC6FBAA6670582DC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d6508ce-47a1-4002-b03b-9ce21b16cf60.roa Signing time: Tue 20 May 2025 17:50:15 +0000 ROA not before: Tue 20 May 2025 17:50:15 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:06:d6:5c:43:57:0f:ea:42:f5:a6:55:cc:6f:ba:a6:67:05:82:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 20 17:50:15 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=3b28ecf56dac2ed7aa653ad60a483010d8379304ba6792401ae775454c1b51ae, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:23:80:eb:53:10:77:59:e8:26:81:7b:d4: e0:d8:69:00:e4:97:fb:f8:0e:55:ba:c1:34:14:de: 4b:be:7d:0a:47:fb:d3:89:7a:6e:d1:83:22:9e:f1: 96:70:ab:b6:c0:e4:cf:b7:5b:5b:e5:6a:56:21:5f: f9:e9:f1:76:97:a4:82:ea:aa:3c:01:44:8e:3b:95: 3e:f7:71:e7:b9:0b:3f:95:43:fc:1f:ab:8b:c5:0d: fb:cc:4f:41:33:6b:65:8b:89:76:59:81:a8:4f:5d: ad:26:a9:ce:86:b0:1a:5c:56:a7:1d:cd:c2:28:2e: 31:bb:d2:eb:0d:c2:ca:dd:67:0b:65:82:83:21:4c: 75:c5:99:8d:68:bc:63:3f:bf:e4:70:32:dd:e6:ae: 7e:12:82:66:f8:f8:b2:65:12:a0:e3:5f:95:e8:58: 4c:49:31:6b:8c:19:2b:fb:e7:51:15:49:0d:66:c0: a7:f4:4b:b6:fa:4e:d2:a0:ed:23:ef:b6:db:4a:22: a6:73:ef:34:08:2d:ff:a9:03:4a:a6:ac:95:52:e3: 25:1b:a7:58:45:62:4a:98:26:4a:94:88:73:d5:50: 34:17:2f:66:b1:0a:75:a0:75:c0:0c:e8:76:81:45: 3a:81:ec:89:cb:10:80:23:c4:8f:68:5a:a6:33:45: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:8D:FE:D9:33:72:5E:7C:A8:BE:A8:66:46:2E:CC:55:47:A7:D5:8A X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5d6508ce-47a1-4002-b03b-9ce21b16cf60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.14.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:14:f1:ed:0a:55:a7:ae:e6:cb:a0:bb:d9:55:7e:60:81:ff: 46:1f:e8:59:b6:f2:c7:9b:26:4f:4a:c7:e7:e5:57:19:12:4e: 08:56:34:22:91:59:4b:1c:84:8c:f8:29:0a:80:8a:74:45:f0: 62:7f:a0:c7:72:93:8f:4c:9e:a5:b4:12:c0:05:81:50:ca:1f: 4e:37:fe:69:23:20:2f:34:ac:2e:1d:b1:cd:82:a3:d7:6d:d1: f6:24:99:15:a1:4a:20:7a:24:c8:2c:37:b0:dd:62:99:e0:32: 19:4c:b0:65:33:13:3d:6d:a5:17:ac:8e:fc:84:d9:ff:41:bc: 77:2f:31:eb:6a:37:78:d3:a0:91:ca:6b:3c:1f:30:22:e2:0e: 35:1e:81:7b:06:ac:37:3a:37:cd:cd:51:c3:69:9d:8f:dc:f9: 37:88:44:1e:f1:88:fe:2e:4e:ed:81:c7:3b:6c:41:d3:0d:74: f1:be:4b:a1:37:14:95:68:4f:04:cc:36:4f:30:54:cd:2b:c3: a3:bb:74:eb:51:37:b8:f4:61:83:bb:92:d4:b5:79:18:7b:52: 64:2c:2d:66:5c:e5:95:3d:64:93:73:41:55:e7:ba:2f:45:d9: de:f6:14:f1:b4:e6:98:b8:ec:2f:eb:44:9b:9f:f5:e7:8d:75: 97:8c:0b:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfgbWXENXD+pC9aZVzG+6pmcFgtwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTIwMTc1MDE1WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjI4ZWNmNTZkYWMyZWQ3YWE2NTNhZDYwYTQ4MzAxMGQ4 Mzc5MzA0YmE2NzkyNDAxYWU3NzU0NTRjMWI1MWFlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCgCOA61MQd1noJoF71ODYaQDkl/v4DlW6wTQU3ku+fQpH +9OJem7RgyKe8ZZwq7bA5M+3W1vlalYhX/np8XaXpILqqjwBRI47lT73cee5Cz+V Q/wfq4vFDfvMT0Eza2WLiXZZgahPXa0mqc6GsBpcVqcdzcIoLjG70usNwsrdZwtl goMhTHXFmY1ovGM/v+RwMt3mrn4Sgmb4+LJlEqDjX5XoWExJMWuMGSv751EVSQ1m wKf0S7b6TtKg7SPvtttKIqZz7zQILf+pA0qmrJVS4yUbp1hFYkqYJkqUiHPVUDQX L2axCnWgdcAM6HaBRTqB7InLEIAjxI9oWqYzRcNNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1I3+2TNyXnyovqhmRi7MVUen1YowHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVkNjUwOGNlLTQ3YTEtNDAwMi1iMDNiLTljZTIxYjE2Y2Y2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYA4wDQYJKoZIhvcNAQELBQADggEBABoU8e0KVaeu5sugu9lVfmCB/0Yf 6Fm28sebJk9Kx+flVxkSTghWNCKRWUschIz4KQqAinRF8GJ/oMdyk49MnqW0EsAF gVDKH043/mkjIC80rC4dsc2Co9dt0fYkmRWhSiB6JMgsN7DdYpngMhlMsGUzEz1t pResjvyE2f9BvHcvMetqN3jToJHKazwfMCLiDjUegXsGrDc6N83NUcNpnY/c+TeI RB7xiP4uTu2BxztsQdMNdPG+S6E3FJVoTwTMNk8wVM0rw6O7dOtRN7j0YYO7ktS1 eRh7UmQsLWZc5ZU9ZJNzQVXnui9F2d72FPG05pi47C/rRJuf9eeNdZeMCzQ= -----END CERTIFICATE-----Generated at Mon Jun 2 17:03:56 2025 by rpki-client