$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa File: 6b90b1f9-6b22-4e82-af32-2981da75246a.roa (raw, json) Hash identifier: 4Hhpwpo4JwzKNE+a/6RSoFZ3PnKyNIXGoun+LNni7Yc= Subject key identifier: 6E:FA:BC:54:38:58:05:DA:06:B2:D4:F3:07:D6:13:B2:A0:83:7D:9C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 63AE4C057CA72FC40951704C51B53A569FD13188 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa Signing time: Thu 05 Jun 2025 14:37:13 +0000 ROA not before: Thu 05 Jun 2025 14:37:13 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ae:4c:05:7c:a7:2f:c4:09:51:70:4c:51:b5:3a:56:9f:d1:31:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:37:13 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=d9341b848506e1c6c2b880fd5104e480db2e7a30411e58ac4057065b44551f65, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ee:5b:13:f3:4a:c7:b9:d4:11:82:34:a6:4b: fd:b7:61:e8:e1:4c:3d:6c:ea:f5:f1:10:79:44:77: 74:15:bc:36:c8:e6:b7:57:27:b6:85:6a:98:26:d1: 6b:d7:5a:87:d0:54:f5:ca:00:43:f8:f1:77:fd:14: 28:b9:36:b1:35:5e:6c:92:2e:44:4e:f2:96:f0:17: 9d:71:60:55:2a:71:a6:e6:93:08:95:68:83:27:e8: d4:d2:ca:91:57:3b:e6:34:d5:f4:e1:be:11:60:a7: 94:92:94:8f:e2:76:d9:f0:a7:4f:eb:e7:34:32:98: cf:6b:02:79:64:38:b7:fd:19:1c:da:d6:d0:19:66: 67:24:51:a8:f3:17:12:21:98:3b:85:18:18:7e:bc: da:ee:d2:f9:df:f2:d9:1e:c5:98:73:46:4c:ac:72: 73:0d:70:01:2e:87:44:d3:ea:93:63:fa:19:af:05: c6:43:ea:95:0c:51:26:c4:a7:32:40:15:ac:61:65: 6a:fa:1b:ea:e9:b2:a8:2a:64:b9:5f:73:9f:82:f1: 12:d9:0a:e6:1b:33:ac:7b:3f:9e:67:b8:5f:03:b7: bb:56:ef:7f:35:fc:3d:bf:f5:74:5a:98:a0:32:35: 65:60:34:d6:56:5c:a6:a1:5b:6b:f9:aa:d7:5b:f2: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FA:BC:54:38:58:05:DA:06:B2:D4:F3:07:D6:13:B2:A0:83:7D:9C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 46:df:26:8d:52:2c:83:c2:d0:cc:5e:a7:bd:f7:ce:bf:39:24: 18:fc:bf:e9:d3:f4:70:c8:c1:a3:b4:4f:00:14:cd:2b:a0:94: fc:db:63:4c:9f:9d:22:49:fe:1b:09:71:04:be:6a:0f:ad:a1: 2b:f1:4b:2a:e4:21:58:92:9a:ac:66:e6:53:9a:e1:6b:8b:24: a4:81:14:9d:ab:24:62:0f:d4:13:37:07:46:15:7d:9f:b5:af: e8:b7:66:d9:59:be:26:54:6f:f9:9f:b5:a1:bb:23:84:05:af: 1d:57:dd:73:e0:88:08:14:db:dc:a9:1e:77:98:e5:62:3d:b4: d9:73:02:ca:59:e6:2e:9a:24:0c:0c:06:94:b7:23:94:fc:b5: 40:54:8d:64:05:ce:9c:be:5e:14:dd:4a:b1:01:3c:dd:59:05: 5d:80:cf:8e:ef:7e:2b:70:54:4c:bb:42:a2:f5:60:a1:cd:82: 34:c4:ce:bb:bb:51:a2:84:66:a4:59:96:e8:bd:97:3f:ca:69: 3c:19:ca:23:03:aa:02:05:34:e0:10:87:a3:fb:50:a5:24:62: 98:2e:11:e5:ee:9f:13:f1:f7:76:48:6e:da:8e:55:dd:cd:04: b6:a6:29:8d:2d:ea:8d:68:8d:1a:29:a5:e6:e2:2c:6d:5a:95: 5c:5c:65:fa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY65MBXynL8QJUXBMUbU6Vp/RMYgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzNzEzWhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOTM0MWI4NDg1MDZlMWM2YzJiODgwZmQ1MTA0ZTQ4MGRi MmU3YTMwNDExZTU4YWM0MDU3MDY1YjQ0NTUxZjY1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC97lsT80rHudQRgjSmS/23YejhTD1s6vXxEHlEd3QVvDbI 5rdXJ7aFapgm0WvXWofQVPXKAEP48Xf9FCi5NrE1XmySLkRO8pbwF51xYFUqcabm kwiVaIMn6NTSypFXO+Y01fThvhFgp5SSlI/idtnwp0/r5zQymM9rAnlkOLf9GRza 1tAZZmckUajzFxIhmDuFGBh+vNru0vnf8tkexZhzRkyscnMNcAEuh0TT6pNj+hmv BcZD6pUMUSbEpzJAFaxhZWr6G+rpsqgqZLlfc5+C8RLZCuYbM6x7P55nuF8Dt7tW 7381/D2/9XRamKAyNWVgNNZWXKahW2v5qtdb8pQLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbvq8VDhYBdoGstTzB9YTsqCDfZwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzZiOTBiMWY5LTZiMjItNGU4Mi1hZjMyLTI5ODFkYTc1MjQ2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBAEbfJo1SLIPC0Mxep733zr85JBj8 v+nT9HDIwaO0TwAUzSuglPzbY0yfnSJJ/hsJcQS+ag+toSvxSyrkIViSmqxm5lOa 4WuLJKSBFJ2rJGIP1BM3B0YVfZ+1r+i3ZtlZviZUb/mftaG7I4QFrx1X3XPgiAgU 29ypHneY5WI9tNlzAspZ5i6aJAwMBpS3I5T8tUBUjWQFzpy+XhTdSrEBPN1ZBV2A z47vfitwVEy7QqL1YKHNgjTEzru7UaKEZqRZlui9lz/KaTwZyiMDqgIFNOAQh6P7 UKUkYpguEeXunxPx93ZIbtqOVd3NBLamKY0t6o1ojRoppebiLG1alVxcZfo= -----END CERTIFICATE-----Generated at Sun Jun 8 17:15:25 2025 by rpki-client