$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7008dbb8-efa0-4731-b0e1-56c5f8aef999.roa File: 7008dbb8-efa0-4731-b0e1-56c5f8aef999.roa (raw, json) Hash identifier: mDaeA8dviA0hwWJEPqEx2rSRZL8Z9r+om/7HOe7b79g= Subject key identifier: 00:28:A3:D0:92:2F:34:2B:14:07:1F:D5:58:BE:3C:A7:F7:0B:CE:CB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4392D23883382CD5FF16649C783A3D45EBB57E67 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7008dbb8-efa0-4731-b0e1-56c5f8aef999.roa Signing time: Mon 30 Jun 2025 17:41:02 +0000 ROA not before: Mon 30 Jun 2025 17:41:02 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:92:d2:38:83:38:2c:d5:ff:16:64:9c:78:3a:3d:45:eb:b5:7e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 30 17:41:02 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=db9ad9a5e39c4af99554a431efaa11246870002de1fd161be6b474acd58d55c1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:65:9a:a2:1e:85:f4:b5:44:73:b9:ec:a6: de:83:56:a7:31:5b:f4:cb:fc:16:c5:a6:81:42:62: bf:59:12:76:dd:d0:33:c6:5a:68:74:5e:d8:1e:b2: 0f:c8:49:8d:8e:ac:d7:95:ee:87:a2:63:a7:27:e9: 17:31:5d:5b:29:8c:0d:00:9e:fd:5d:cd:1b:27:70: e9:67:ca:ef:9b:57:fb:13:b5:d4:67:d6:77:7b:2d: 4f:c3:8e:f3:ad:48:95:d8:d8:84:c8:99:1b:49:92: df:e0:27:cf:37:f7:bc:93:c5:51:e5:84:19:cf:c6: 68:a5:5f:70:c6:ad:00:90:0b:1c:48:6e:16:76:f9: 9e:ef:cc:ea:29:57:86:85:b1:4d:c7:be:b0:a7:89: c4:fb:86:82:01:30:c0:29:36:33:ce:d5:ba:6a:8f: 5f:1a:6e:8b:e1:b4:fb:19:71:ce:3a:5b:3b:23:ac: fe:8e:e0:ab:91:75:51:1c:72:03:3f:4b:0c:d3:16: 43:94:aa:23:37:b8:c3:5b:0c:88:3d:5c:a7:6a:ac: 80:75:84:0a:85:04:8c:8d:44:df:0c:a3:58:99:76: f3:80:a3:a6:77:a8:f7:87:06:c7:97:40:d2:4e:a1: 17:d6:d6:11:f3:09:cb:cd:a1:76:d8:96:a6:76:41: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:28:A3:D0:92:2F:34:2B:14:07:1F:D5:58:BE:3C:A7:F7:0B:CE:CB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7008dbb8-efa0-4731-b0e1-56c5f8aef999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.144.0/20 Signature Algorithm: sha256WithRSAEncryption 65:86:60:98:af:6c:66:b4:31:41:5c:60:6b:6f:35:b5:b2:e5: 79:b0:fa:fd:58:a4:e3:7c:49:87:03:7d:bf:a1:49:5f:64:d6: 8b:a2:55:f8:bf:34:7b:d3:3b:1c:be:a7:87:45:0f:e9:e8:5b: 6e:f7:6b:11:9d:9f:88:fe:ba:0c:79:13:b9:0c:ff:66:60:8d: 95:8a:60:ee:5d:2e:1d:fa:47:f7:43:e2:8c:7f:d2:2e:14:cd: 3d:1b:0a:8d:da:4e:90:d2:f9:e6:3f:f6:e7:93:ac:11:c1:7a: 23:43:d2:dc:f2:6b:6d:97:52:ce:cb:13:55:8c:d2:e7:f3:f1: c2:73:47:ab:f9:03:9e:46:a0:ae:ab:bf:21:f5:0a:53:cf:62: 5f:83:83:98:51:cf:e3:21:fe:80:ac:b8:8b:3b:35:94:c6:2a: 39:74:7e:47:a0:d7:eb:0c:d4:f6:f2:40:f7:7a:84:0c:ba:66: f5:fc:77:94:e8:b4:87:49:c3:22:11:92:b8:dc:86:31:ab:59: e0:55:cb:8a:6e:e0:2b:2e:d7:54:f9:1c:9e:bb:b3:5f:f6:d6: 61:69:46:48:e6:59:80:61:60:a4:c6:2b:ed:9f:f2:ca:10:5a: 8c:bc:23:b9:9c:dd:9a:59:80:56:f7:b3:74:3d:3b:89:7b:62: 46:78:78:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ5LSOIM4LNX/FmSceDo9Reu1fmcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjMwMTc0MTAyWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjlhZDlhNWUzOWM0YWY5OTU1NGE0MzFlZmFhMTEyNDY4 NzAwMDJkZTFmZDE2MWJlNmI0NzRhY2Q1OGQ1NWMxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYW2Waoh6F9LVEc7nspt6DVqcxW/TL/BbFpoFCYr9ZEnbd 0DPGWmh0Xtgesg/ISY2OrNeV7oeiY6cn6RcxXVspjA0Anv1dzRsncOlnyu+bV/sT tdRn1nd7LU/DjvOtSJXY2ITImRtJkt/gJ88397yTxVHlhBnPxmilX3DGrQCQCxxI bhZ2+Z7vzOopV4aFsU3HvrCnicT7hoIBMMApNjPO1bpqj18abovhtPsZcc46Wzsj rP6O4KuRdVEccgM/SwzTFkOUqiM3uMNbDIg9XKdqrIB1hAqFBIyNRN8Mo1iZdvOA o6Z3qPeHBseXQNJOoRfW1hHzCcvNoXbYlqZ2QbyhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUACij0JIvNCsUBx/VWL48p/cLzsswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcwMDhkYmI4LWVmYTAtNDczMS1iMGUxLTU2YzVmOGFlZjk5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYJAwDQYJKoZIhvcNAQELBQADggEBAGWGYJivbGa0MUFcYGtvNbWy5Xmw +v1YpON8SYcDfb+hSV9k1ouiVfi/NHvTOxy+p4dFD+noW273axGdn4j+ugx5E7kM /2ZgjZWKYO5dLh36R/dD4ox/0i4UzT0bCo3aTpDS+eY/9ueTrBHBeiND0tzya22X Us7LE1WM0ufz8cJzR6v5A55GoK6rvyH1ClPPYl+Dg5hRz+Mh/oCsuIs7NZTGKjl0 fkeg1+sM1PbyQPd6hAy6ZvX8d5TotIdJwyIRkrjchjGrWeBVy4pu4Csu11T5HJ67 s1/21mFpRkjmWYBhYKTGK+2f8soQWoy8I7mc3ZpZgFb3s3Q9O4l7YkZ4eGw= -----END CERTIFICATE-----Generated at Tue Jul 1 01:24:21 2025 by rpki-client