$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7a122c57-3cb4-471c-b579-6f1057edd270.roa File: 7a122c57-3cb4-471c-b579-6f1057edd270.roa (raw, json) Hash identifier: suBIx7yAX/HKdT/ub3rgJscQ94gdJPNO8syIzO+nTz8= Subject key identifier: AB:48:BB:C4:B1:13:33:05:46:40:A3:D1:F5:9C:6E:F0:05:2B:56:39 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0CDA264E49BFFCE5414A428E126650FD9BE54430 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7a122c57-3cb4-471c-b579-6f1057edd270.roa Signing time: Fri 15 Aug 2025 19:52:04 +0000 ROA not before: Fri 15 Aug 2025 19:52:04 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:da:26:4e:49:bf:fc:e5:41:4a:42:8e:12:66:50:fd:9b:e5:44:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 15 19:52:04 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=9d6d58e89e17791d1c0d47e5e425e7745d31a800c0ea32d96a8b8d9eb3944ccc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:76:36:2d:48:2e:3e:df:48:44:2b:6e:a7:98: 06:85:78:55:d8:ae:05:b5:6a:f5:f2:12:e8:cb:0b: 8b:02:75:67:09:bd:35:ba:a0:d0:4b:6e:3b:7a:6b: 4d:1d:6a:25:8b:1e:91:2a:f6:27:29:33:94:be:cb: 95:1f:92:c2:6d:e0:5b:71:ec:a5:9c:b8:bf:c3:cd: 12:d7:d2:20:5f:36:99:7a:53:98:a3:5a:5c:3f:34: 3e:b8:5b:b0:d3:06:6d:5b:7d:0e:1d:10:80:6c:97: 16:37:a8:44:58:83:78:b4:bd:a3:ef:a1:f3:29:3a: d8:0d:a6:8b:ae:a3:84:8c:a5:17:09:71:d2:f5:81: df:0c:c0:b7:9f:f3:99:aa:0e:bc:c4:4b:f1:df:72: 1c:13:67:47:15:dd:fb:ff:f4:41:27:80:72:bb:42: 9d:04:60:cf:81:cd:df:ea:ef:d0:8f:d1:be:b5:9c: d4:60:23:e8:9e:e8:85:1e:6c:b3:82:dc:9f:e4:1e: ab:25:0a:b7:6f:94:f2:19:3d:3c:dd:46:c4:3e:ad: 6c:97:a7:1f:b3:f6:3c:57:68:60:06:86:0a:36:6b: 05:c5:e6:84:52:96:58:11:4c:dd:84:78:36:6d:01: c7:87:63:4b:2e:55:04:c7:dc:f4:1c:36:e2:2a:2a: a1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:48:BB:C4:B1:13:33:05:46:40:A3:D1:F5:9C:6E:F0:05:2B:56:39 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7a122c57-3cb4-471c-b579-6f1057edd270.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.10.0/24 Signature Algorithm: sha256WithRSAEncryption 38:8f:c3:a0:8f:1f:0a:d0:68:25:18:48:95:ee:d2:0d:ac:a1: 34:25:5c:35:ca:53:c0:78:b2:64:ef:ac:76:bc:e9:90:11:82: e1:f2:af:9b:f5:a3:d3:d3:9c:aa:de:b2:31:c9:3b:cf:50:2a: b8:67:2c:09:aa:c1:62:93:8a:8a:cb:41:cc:42:7a:04:3a:31: b1:6c:a6:45:48:37:fe:9d:57:4a:2c:42:00:e6:60:4c:83:43: c1:9b:9e:a4:4e:67:59:27:52:33:fc:d1:fd:8c:28:4f:1a:df: 7d:c2:1f:3a:8c:99:72:77:d6:9f:80:b3:00:a3:6a:1f:77:ab: 66:95:12:39:c6:75:a0:4e:f7:53:07:34:e4:36:1f:2d:4b:91: 2c:3f:2f:cb:0b:bd:8e:0a:df:9b:80:0f:10:5f:61:8d:f1:4d: 2f:74:ff:f2:2e:d6:33:86:e2:d2:1b:61:20:6b:e8:54:90:ed: 5b:a6:95:8c:3b:85:a4:ef:3b:30:40:31:64:7f:42:40:97:5a: 52:3b:c2:37:a0:5d:c0:ea:25:04:eb:34:33:ba:96:5e:ca:f8: 94:12:aa:b5:f8:d8:be:00:a0:33:26:55:20:92:7a:08:1e:14: c9:79:58:fe:45:d0:cc:d1:b6:13:ba:9b:fb:be:e7:80:7b:8f: 8e:23:01:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDNomTkm//OVBSkKOEmZQ/ZvlRDAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE1MTk1MjA0WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDZkNThlODllMTc3OTFkMWMwZDQ3ZTVlNDI1ZTc3NDVk MzFhODAwYzBlYTMyZDk2YThiOGQ5ZWIzOTQ0Y2NjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZdjYtSC4+30hEK26nmAaFeFXYrgW1avXyEujLC4sCdWcJ vTW6oNBLbjt6a00daiWLHpEq9icpM5S+y5UfksJt4Ftx7KWcuL/DzRLX0iBfNpl6 U5ijWlw/ND64W7DTBm1bfQ4dEIBslxY3qERYg3i0vaPvofMpOtgNpouuo4SMpRcJ cdL1gd8MwLef85mqDrzES/HfchwTZ0cV3fv/9EEngHK7Qp0EYM+Bzd/q79CP0b61 nNRgI+ie6IUebLOC3J/kHqslCrdvlPIZPTzdRsQ+rWyXpx+z9jxXaGAGhgo2awXF 5oRSllgRTN2EeDZtAceHY0suVQTH3PQcNuIqKqEZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq0i7xLETMwVGQKPR9Zxu8AUrVjkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzdhMTIyYzU3LTNjYjQtNDcxYy1iNTc5LTZmMTA1N2VkZDI3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAowDQYJKoZIhvcNAQELBQADggEBADiPw6CPHwrQaCUYSJXu0g2soTQl XDXKU8B4smTvrHa86ZARguHyr5v1o9PTnKresjHJO89QKrhnLAmqwWKTiorLQcxC egQ6MbFspkVIN/6dV0osQgDmYEyDQ8GbnqROZ1knUjP80f2MKE8a333CHzqMmXJ3 1p+AswCjah93q2aVEjnGdaBO91MHNOQ2Hy1LkSw/L8sLvY4K35uADxBfYY3xTS90 //Iu1jOG4tIbYSBr6FSQ7VumlYw7haTvOzBAMWR/QkCXWlI7wjegXcDqJQTrNDO6 ll7K+JQSqrX42L4AoDMmVSCSeggeFMl5WP5F0MzRthO6m/u+54B7j44jAa8= -----END CERTIFICATE-----Generated at Wed Aug 20 10:48:41 2025 by rpki-client