$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/66fb40d9-76e8-4ce1-9643-8d4c4f968118.roa File: 66fb40d9-76e8-4ce1-9643-8d4c4f968118.roa (raw, json) Hash identifier: JyNqctDD/zluxkWbmG1Ec3ifKYCZxXJuLv4gB6pjYBM= Subject key identifier: 56:62:BA:65:CC:15:6E:76:52:B3:B8:23:FE:49:59:83:60:42:1C:86 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 65AAE94D6FE7090A0A2B3A06800483CDDEEA1402 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/66fb40d9-76e8-4ce1-9643-8d4c4f968118.roa Signing time: Tue 19 Aug 2025 16:50:32 +0000 ROA not before: Tue 19 Aug 2025 16:50:32 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:aa:e9:4d:6f:e7:09:0a:0a:2b:3a:06:80:04:83:cd:de:ea:14:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 19 16:50:32 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=b74d4b9724ed983452158d8a67be1b82ffa4f6b861e500a477224af60fe2e033, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:de:fe:2a:5a:75:9f:84:31:47:53:80:47:ae: 1c:cc:0e:ac:c0:02:37:6b:ec:f9:50:85:b5:f1:b6: 17:06:2b:2a:ea:e9:ec:01:01:70:f8:8a:82:08:4f: 1b:50:57:0a:66:93:24:d8:2b:9a:52:2a:e4:bb:40: 34:d7:f3:84:ce:00:f7:c4:e5:fa:8b:43:4b:3c:9c: eb:71:ab:49:88:68:da:71:1b:4c:ad:83:6a:3a:60: 37:5e:8b:e8:92:9d:22:3d:69:88:42:6c:35:3e:7f: bc:33:8b:7e:cf:bf:9f:f7:5c:45:95:36:08:40:0f: 46:2d:bc:10:34:cd:a7:a1:26:3b:84:fc:e0:78:30: b2:85:ca:1c:0e:2c:78:54:2b:f0:a5:20:6c:71:63: 4d:87:96:9c:96:1c:35:b1:7d:7b:41:06:34:73:59: c9:9b:a9:88:71:84:57:5b:79:46:e5:61:96:b9:5a: de:60:9f:e5:62:35:ad:9e:21:c2:f2:b2:93:63:a6: 95:5a:c3:9a:a2:7d:86:a6:28:8d:4a:2e:8d:5f:51: 6d:80:e9:25:02:9e:3a:79:ab:eb:18:b5:a3:3c:b8: cf:62:d8:83:4c:ed:3a:16:de:b0:5a:e2:bc:90:4c: 72:1b:34:2d:5f:98:e0:77:3f:0b:b8:ba:80:a6:f1: e3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:62:BA:65:CC:15:6E:76:52:B3:B8:23:FE:49:59:83:60:42:1C:86 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/66fb40d9-76e8-4ce1-9643-8d4c4f968118.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/16 Signature Algorithm: sha256WithRSAEncryption 17:64:1f:ba:5c:0d:e4:ba:2d:12:a0:18:52:1a:38:3c:fb:53: bd:07:25:be:dd:c6:0a:93:5d:f4:3e:1d:a3:92:bc:3e:5d:a1: 1d:3a:91:ed:97:ba:45:da:e0:7b:44:2d:62:e7:37:5b:56:22: 66:cd:91:81:40:c2:1d:c2:c1:01:b8:17:4f:3f:5d:0d:ca:f3: 77:04:f8:6e:94:7c:a4:9c:c1:96:a0:8c:d9:a8:39:e2:bd:ae: 3f:ad:c8:98:fa:ad:81:d5:81:b3:45:68:f6:55:7a:ee:e3:94: 0f:82:28:cb:29:f7:62:ed:32:95:48:50:f2:e1:c6:46:c4:bb: d6:d8:fe:fb:e7:1f:81:be:97:89:c3:1d:8b:a6:45:cf:3c:7d: 15:18:d2:b9:88:43:2a:e1:30:2d:7b:d3:6f:44:af:93:2c:18: 4f:e0:95:2d:36:a5:a5:ab:14:e6:3c:d1:f8:df:47:05:1c:c1: ed:84:c5:68:4b:65:0d:c7:01:ce:ff:a1:94:8b:98:a4:db:55: ab:d7:f7:e1:4d:bb:7e:22:57:3b:a7:90:cc:2c:a3:be:b7:a6: f3:48:ba:5f:af:58:ec:86:80:0e:a8:72:37:a5:72:78:76:84: 35:94:cb:fd:70:5a:a6:ef:5d:e1:10:d6:2a:49:93:a4:ce:4c: b0:c3:3b:92 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZarpTW/nCQoKKzoGgASDzd7qFAIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE5MTY1MDMyWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNzRkNGI5NzI0ZWQ5ODM0NTIxNThkOGE2N2JlMWI4MmZm YTRmNmI4NjFlNTAwYTQ3NzIyNGFmNjBmZTJlMDMzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ3v4qWnWfhDFHU4BHrhzMDqzAAjdr7PlQhbXxthcGKyrq 6ewBAXD4ioIITxtQVwpmkyTYK5pSKuS7QDTX84TOAPfE5fqLQ0s8nOtxq0mIaNpx G0ytg2o6YDdei+iSnSI9aYhCbDU+f7wzi37Pv5/3XEWVNghAD0YtvBA0zaehJjuE /OB4MLKFyhwOLHhUK/ClIGxxY02HlpyWHDWxfXtBBjRzWcmbqYhxhFdbeUblYZa5 Wt5gn+ViNa2eIcLyspNjppVaw5qifYamKI1KLo1fUW2A6SUCnjp5q+sYtaM8uM9i 2INM7ToW3rBa4ryQTHIbNC1fmOB3Pwu4uoCm8eMLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUVmK6ZcwVbnZSs7gj/klZg2BCHIYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzY2ZmI0MGQ5LTc2ZTgtNGNlMS05NjQzLThkNGM0Zjk2ODExOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjYDANBgkqhkiG9w0BAQsFAAOCAQEAF2QfulwN5LotEqAYUho4PPtTvQcl vt3GCpNd9D4do5K8Pl2hHTqR7Ze6Rdrge0QtYuc3W1YiZs2RgUDCHcLBAbgXTz9d DcrzdwT4bpR8pJzBlqCM2ag54r2uP63ImPqtgdWBs0Vo9lV67uOUD4Ioyyn3Yu0y lUhQ8uHGRsS71tj+++cfgb6XicMdi6ZFzzx9FRjSuYhDKuEwLXvTb0SvkywYT+CV LTalpasU5jzR+N9HBRzB7YTFaEtlDccBzv+hlIuYpNtVq9f34U27fiJXO6eQzCyj vrem80i6X69Y7IaADqhyN6VyeHaENZTL/XBapu9d4RDWKkmTpM5MsMM7kg== -----END CERTIFICATE-----Generated at Wed Aug 20 10:48:34 2025 by rpki-client