$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa File: 724c8337-ea3c-48d0-aa37-5e55be799b4e.roa (raw, json) Hash identifier: dhaA7khomMXlctvwXbFtVNPMvBIqFRzTJcANjYzBgsA= Subject key identifier: 8C:3F:D0:3A:30:B1:9B:37:30:AB:1C:8E:1C:DA:33:20:01:E1:A4:50 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 27EEB88C403CE0F16DD26C71D006239776E2F0DE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa Signing time: Sat 31 May 2025 00:40:02 +0000 ROA not before: Sat 31 May 2025 00:40:02 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:ee:b8:8c:40:3c:e0:f1:6d:d2:6c:71:d0:06:23:97:76:e2:f0:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 31 00:40:02 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=41b983a7992b2ed5bfda83e6a1130e06a8008253a90b76252882316a23edc782, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:2a:33:00:59:40:23:1e:f5:d6:cc:a2:ee: 9e:e4:46:82:3b:34:0c:b1:4c:db:4d:e8:4b:58:bd: 22:16:f9:9d:f5:ad:ea:7a:3a:32:4c:58:e1:62:ba: a8:ea:d1:8e:3e:42:17:97:69:6a:61:2c:c6:4b:70: 08:a0:9d:ad:7c:48:8b:c3:43:df:9e:15:3f:fd:a0: 57:52:7c:b5:cb:36:57:72:ba:55:58:95:8d:7a:35: 38:35:aa:5e:67:73:d0:c4:b0:f9:64:ad:25:31:ff: ac:9a:7d:a0:2c:37:91:0e:c7:80:4b:9d:41:87:a0: d7:70:ce:95:c4:6b:9e:f0:07:5a:75:6a:9c:5f:9c: 84:7a:c8:db:71:6b:ec:da:a4:af:c5:89:c3:5f:1a: bd:fd:9d:b0:ff:cc:02:92:72:ab:d7:47:7c:78:5e: 86:1c:c3:41:f4:0c:09:71:29:75:db:49:29:8b:12: 5f:b3:8c:9b:76:8b:77:43:8f:44:f0:6f:aa:41:69: fc:e0:77:5c:7f:4e:d2:ef:07:84:85:f4:a0:49:34: ed:a7:89:f8:d1:e7:d9:5a:75:5b:dc:f1:12:8e:30: 50:a0:df:61:c2:cf:52:d5:8d:7e:2d:35:1b:9c:23: 9b:14:13:03:18:5d:1b:1b:74:d5:8f:0a:c6:61:a0: 8d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3F:D0:3A:30:B1:9B:37:30:AB:1C:8E:1C:DA:33:20:01:E1:A4:50 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 56:5d:e3:07:8d:d8:64:92:20:04:c5:29:74:dc:89:89:fb:50: 14:bb:3d:eb:91:c3:ba:af:87:9a:0e:bc:18:7c:f0:90:de:1d: ff:d3:3a:a7:89:bd:57:f5:6a:fe:39:1e:41:9a:61:d8:e5:45: 36:01:50:2d:f3:4e:af:e4:f8:20:b0:f4:81:09:2c:13:d9:08: 0c:a0:dd:0c:cc:75:b8:18:ac:6f:7e:10:70:74:ab:ea:bb:36: bf:0a:fc:4b:09:f4:eb:bc:6c:f3:ce:d2:01:42:ae:1c:c7:b8: 08:87:f3:10:62:9c:0e:76:75:bf:8d:7e:09:84:92:8b:25:c8: b6:d9:66:7a:56:8e:85:82:22:4e:6c:b6:49:98:fe:71:1c:b2: 9f:74:8c:0f:dd:6f:bf:33:3e:07:bf:e9:89:bb:55:27:c8:4d: 0b:dd:ed:91:b4:1a:80:72:d3:24:b5:dd:1b:1e:92:52:1c:9a: 22:4d:0e:27:ec:4d:59:02:bc:1e:86:b7:8f:61:36:61:e9:94: af:13:0e:cb:85:3c:8f:20:84:f7:2e:43:3c:7c:a6:4a:9d:db: af:80:f6:2b:6c:f2:e7:d3:36:7c:8d:f7:e4:f9:f4:d9:4d:60: 66:0c:13:a3:bc:ae:85:ab:48:25:df:93:2c:c7:89:63:ac:89: 68:44:ed:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ+64jEA84PFt0mxx0AYjl3bi8N4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTMxMDA0MDAyWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWI5ODNhNzk5MmIyZWQ1YmZkYTgzZTZhMTEzMGUwNmE4 MDA4MjUzYTkwYjc2MjUyODgyMzE2YTIzZWRjNzgyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzYSozAFlAIx711syi7p7kRoI7NAyxTNtN6EtYvSIW+Z31 rep6OjJMWOFiuqjq0Y4+QheXaWphLMZLcAigna18SIvDQ9+eFT/9oFdSfLXLNldy ulVYlY16NTg1ql5nc9DEsPlkrSUx/6yafaAsN5EOx4BLnUGHoNdwzpXEa57wB1p1 apxfnIR6yNtxa+zapK/FicNfGr39nbD/zAKScqvXR3x4XoYcw0H0DAlxKXXbSSmL El+zjJt2i3dDj0Twb6pBafzgd1x/TtLvB4SF9KBJNO2nifjR59ladVvc8RKOMFCg 32HCz1LVjX4tNRucI5sUEwMYXRsbdNWPCsZhoI2vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjD/QOjCxmzcwqxyOHNozIAHhpFAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcyNGM4MzM3LWVhM2MtNDhkMC1hYTM3LTVlNTViZTc5OWI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBAFZd4weN2GSSIATFKXTciYn7UBS7 PeuRw7qvh5oOvBh88JDeHf/TOqeJvVf1av45HkGaYdjlRTYBUC3zTq/k+CCw9IEJ LBPZCAyg3QzMdbgYrG9+EHB0q+q7Nr8K/EsJ9Ou8bPPO0gFCrhzHuAiH8xBinA52 db+NfgmEkoslyLbZZnpWjoWCIk5stkmY/nEcsp90jA/db78zPge/6Ym7VSfITQvd 7ZG0GoBy0yS13RseklIcmiJNDifsTVkCvB6Gt49hNmHplK8TDsuFPI8ghPcuQzx8 pkqd26+A9its8ufTNnyN9+T59NlNYGYME6O8roWrSCXfkyzHiWOsiWhE7Zs= -----END CERTIFICATE-----Generated at Fri Jun 6 18:20:08 2025 by rpki-client