$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/85ce620d-a483-4984-985b-c3d0f9506e58.roa File: 85ce620d-a483-4984-985b-c3d0f9506e58.roa (raw, json) Hash identifier: ZnMdtR92UzeALO+vQDVckJIcpoNS6q0fa8G4wos9PbQ= Subject key identifier: DE:A9:F3:13:9B:08:B9:11:38:2E:46:31:93:90:0C:AC:51:CA:FC:80 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0726230C54B16A62087AE23C07F5B18729195331 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/85ce620d-a483-4984-985b-c3d0f9506e58.roa Signing time: Sat 31 May 2025 00:40:15 +0000 ROA not before: Sat 31 May 2025 00:40:15 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:26:23:0c:54:b1:6a:62:08:7a:e2:3c:07:f5:b1:87:29:19:53:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 31 00:40:15 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=52c2cc500102969d7a3e2126a0a9e1f65a5bc0c5db4f63112c7e09297f3cc396, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:72:70:ed:3b:50:06:85:47:20:b5:50:14: 03:7d:69:cb:b2:b7:23:27:59:07:a0:d4:f5:8e:fc: 1a:16:b0:bf:af:99:20:9e:a5:d3:df:e7:ba:b0:ea: 99:56:99:9c:a3:8f:4b:82:b8:66:f3:b2:36:27:3c: 5e:b3:59:ea:54:95:26:81:63:cf:d5:6f:08:ed:ca: ec:ff:58:95:e6:63:6b:e7:d2:d2:70:40:13:4b:4b: fa:bc:39:d9:86:aa:32:03:07:bb:57:08:19:fd:26: 09:41:ce:ce:0d:e9:2c:14:9c:11:94:a2:78:6f:d1: 6b:de:ee:2f:d8:d0:09:25:bc:39:17:fa:97:00:9f: c5:49:3e:2f:4e:79:91:07:7b:7f:61:fd:c0:df:4d: 8f:33:09:c4:00:b1:21:1c:b7:4b:3b:c3:cc:9e:e2: a4:9d:43:3f:02:d8:49:8e:37:c0:d5:23:73:31:bc: 7c:b0:5f:2d:0a:02:fc:eb:74:5f:79:71:c2:e0:e6: 0f:82:b8:d4:0e:bf:df:a5:89:89:c2:82:5d:3e:3e: e5:e2:cf:25:1f:1e:92:d8:c3:93:81:f4:98:66:6d: 02:26:9f:4a:87:1a:b1:9b:cc:b1:c8:e2:ed:be:ab: ed:20:f8:3e:9c:af:ef:52:d6:f6:38:42:b7:11:03: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A9:F3:13:9B:08:B9:11:38:2E:46:31:93:90:0C:AC:51:CA:FC:80 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/85ce620d-a483-4984-985b-c3d0f9506e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 68:dd:b7:1f:49:9e:e2:24:ce:58:7d:a5:c9:dd:b1:59:24:e8: 26:ae:c0:25:23:48:2c:0c:32:28:4d:43:ba:27:13:f3:40:b1: c5:a8:4d:47:d1:8b:f5:cc:64:8d:8a:44:92:ef:52:5e:d2:88: ed:c0:ac:c8:99:8c:b2:3e:fe:7d:84:8d:24:d1:65:ef:a3:2e: 31:d1:d4:e4:38:21:a4:dc:ac:34:9b:d9:59:41:a5:2e:25:04: bb:b2:a2:27:e6:19:11:94:12:50:38:ee:7a:f9:44:fa:e9:49: e9:e7:d0:89:bf:dd:1b:ac:26:c8:24:51:76:e1:73:16:e8:24: 98:5a:28:b7:ea:de:57:c5:36:67:24:3c:6d:4c:2c:02:32:83: 52:2d:7a:45:ff:15:cd:13:e7:3e:ed:8f:94:65:a6:2a:88:f1: 84:49:1d:21:00:31:93:0f:08:2b:fb:ab:b0:d7:f0:96:62:87: a5:00:18:bd:e8:42:c4:c0:34:ab:33:f9:fc:6b:6d:b9:ee:25: db:32:cb:f2:e7:99:f8:8f:26:93:15:61:69:a6:f7:dd:01:48: e8:38:d7:af:48:5b:e7:e9:10:e9:9c:49:cf:a8:65:96:a0:a1: 7f:16:d6:e5:20:bc:ed:2c:a4:be:5d:08:30:bc:ec:fe:92:f8: 57:d1:f5:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUByYjDFSxamIIeuI8B/WxhykZUzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTMxMDA0MDE1WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmMyY2M1MDAxMDI5NjlkN2EzZTIxMjZhMGE5ZTFmNjVh NWJjMGM1ZGI0ZjYzMTEyYzdlMDkyOTdmM2NjMzk2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCix3Jw7TtQBoVHILVQFAN9acuytyMnWQeg1PWO/BoWsL+v mSCepdPf57qw6plWmZyjj0uCuGbzsjYnPF6zWepUlSaBY8/Vbwjtyuz/WJXmY2vn 0tJwQBNLS/q8OdmGqjIDB7tXCBn9JglBzs4N6SwUnBGUonhv0Wve7i/Y0AklvDkX +pcAn8VJPi9OeZEHe39h/cDfTY8zCcQAsSEct0s7w8ye4qSdQz8C2EmON8DVI3Mx vHywXy0KAvzrdF95ccLg5g+CuNQOv9+liYnCgl0+PuXizyUfHpLYw5OB9JhmbQIm n0qHGrGbzLHI4u2+q+0g+D6cr+9S1vY4QrcRA3k7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3qnzE5sIuRE4LkYxk5AMrFHK/IAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg1Y2U2MjBkLWE0ODMtNDk4NC05ODViLWMzZDBmOTUwNmU1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBAGjdtx9JnuIkzlh9pcndsVkk6Cau wCUjSCwMMihNQ7onE/NAscWoTUfRi/XMZI2KRJLvUl7SiO3ArMiZjLI+/n2EjSTR Ze+jLjHR1OQ4IaTcrDSb2VlBpS4lBLuyoifmGRGUElA47nr5RPrpSenn0Im/3Rus JsgkUXbhcxboJJhaKLfq3lfFNmckPG1MLAIyg1ItekX/Fc0T5z7tj5RlpiqI8YRJ HSEAMZMPCCv7q7DX8JZih6UAGL3oQsTANKsz+fxrbbnuJdsyy/LnmfiPJpMVYWmm 990BSOg4169IW+fpEOmcSc+oZZagoX8W1uUgvO0spL5dCDC87P6S+FfR9e8= -----END CERTIFICATE-----Generated at Fri Jun 6 05:30:51 2025 by rpki-client