$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa File: 8ac8d230-2c50-472b-aaac-384834352fef.roa (raw, json) Hash identifier: 2/C7ih2uEL/2D4mOHacYVJ9Jm1g4NGcgRpetmjsaWEA= Subject key identifier: EE:DF:98:E8:81:4F:50:57:1F:A6:07:C0:EF:F0:03:CD:58:EF:D6:59 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 214FA3C232977BB2D69E845DD99416D15E098E72 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa Signing time: Fri 04 Jul 2025 18:30:19 +0000 ROA not before: Fri 04 Jul 2025 18:30:19 +0000 ROA not after: Fri 08 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4f:a3:c2:32:97:7b:b2:d6:9e:84:5d:d9:94:16:d1:5e:09:8e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 4 18:30:19 2025 GMT Not After : Aug 8 23:59:59 2025 GMT Subject: serialNumber=955354faaf34819f56191ff80f01de06643268edcfc9cf5241f547ace323296e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:3b:29:a2:1b:c8:e8:e3:29:f2:a5:c0:f3: 27:4b:87:21:9c:8d:31:28:0a:ab:3a:8a:59:b7:6a: 17:3d:63:e8:d5:47:72:02:e4:ad:1d:a2:e1:25:42: 21:cc:b9:58:32:af:f5:0a:f1:e1:8d:ff:ea:24:c4: 12:3d:02:61:6c:96:fe:54:e6:c9:bf:23:7a:ff:3e: 5c:99:dd:30:c4:e7:80:08:91:69:4c:72:8a:6b:14: 20:5e:af:c9:1c:20:f6:35:24:be:88:b3:bd:2a:b3: 03:09:06:28:c2:f6:ea:8b:b0:49:bb:bb:15:59:bd: 23:38:b4:09:a0:92:14:d7:be:4f:0b:53:6d:8f:a0: 5c:29:e7:61:34:ab:86:9f:c7:20:84:5c:25:40:4b: bf:46:a7:c9:30:54:f3:85:43:4f:c3:73:b2:49:45: cc:23:e1:79:64:e4:c5:84:5f:d2:27:55:2c:ee:ec: 6f:60:9e:77:24:1d:a4:2b:e7:db:9f:ab:81:ea:22: aa:0e:6d:77:01:b0:79:1f:87:7e:6c:1c:5b:8c:69: a9:46:ff:75:8a:1c:9f:09:42:93:1c:3a:f2:9a:ff: f7:ec:a0:6a:60:26:6a:ea:fa:38:31:d1:58:5c:bf: c9:b7:eb:9d:86:d4:e0:df:24:3b:34:6e:1a:05:98: 37:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DF:98:E8:81:4F:50:57:1F:A6:07:C0:EF:F0:03:CD:58:EF:D6:59 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ef:cf:ce:f4:07:6c:a9:74:79:6f:de:99:f3:ca:5d:ee:58: 4c:4d:68:59:7c:56:cb:a1:b3:fc:75:19:ba:f8:4b:71:66:34: 1e:c6:66:7f:d2:69:24:f6:c3:2d:ef:25:99:bf:1c:53:23:da: ec:6b:6b:e6:5f:7a:33:b3:fb:4e:56:88:7d:20:0e:56:e9:95: 2b:9b:75:2d:92:e2:e2:9d:06:1a:4d:4f:d9:db:1a:1f:7e:eb: dc:18:05:63:a5:30:1d:6c:88:b8:3c:3a:c7:6e:ea:f8:c6:f9: c4:1d:bf:f4:1e:fb:ee:c5:7b:b5:a2:39:9d:0c:9b:df:f3:09: 6b:1d:ad:5e:07:f0:ea:cf:1a:08:9a:63:ce:95:68:3f:0e:7c: 59:a4:06:76:c8:42:f2:ce:30:cd:1e:94:7f:5a:19:71:77:26: 31:de:8a:e1:c0:15:26:c0:00:24:2f:38:ec:16:87:99:f1:6a: 66:31:8b:04:15:e5:27:0d:eb:79:03:fc:c9:0f:1b:f6:e9:83: b8:15:6b:3a:e5:5a:6a:b1:4a:5f:aa:5c:5a:e7:e5:9c:e5:dc: 80:c4:42:4e:bc:54:22:50:d3:8c:81:98:7f:89:7c:5d:4c:e9: 8f:c6:7a:9c:c4:bb:02:1c:f7:a3:b0:c5:47:eb:38:3d:3a:53: 31:d8:a2:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIU+jwjKXe7LWnoRd2ZQW0V4JjnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzA0MTgzMDE5WhcNMjUwODA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NTUzNTRmYWFmMzQ4MTlmNTYxOTFmZjgwZjAxZGUwNjY0 MzI2OGVkY2ZjOWNmNTI0MWY1NDdhY2UzMjMyOTZlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCFjspohvI6OMp8qXA8ydLhyGcjTEoCqs6ilm3ahc9Y+jV R3IC5K0douElQiHMuVgyr/UK8eGN/+okxBI9AmFslv5U5sm/I3r/PlyZ3TDE54AI kWlMcoprFCBer8kcIPY1JL6Is70qswMJBijC9uqLsEm7uxVZvSM4tAmgkhTXvk8L U22PoFwp52E0q4afxyCEXCVAS79Gp8kwVPOFQ0/Dc7JJRcwj4Xlk5MWEX9InVSzu 7G9gnnckHaQr59ufq4HqIqoObXcBsHkfh35sHFuMaalG/3WKHJ8JQpMcOvKa//fs oGpgJmrq+jgx0Vhcv8m3652G1ODfJDs0bhoFmDfPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7t+Y6IFPUFcfpgfA7/ADzVjv1lkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhhYzhkMjMwLTJjNTAtNDcyYi1hYWFjLTM4NDgzNDM1MmZlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBAAzvz870B2ypdHlv3pnzyl3uWExN aFl8Vsuhs/x1Gbr4S3FmNB7GZn/SaST2wy3vJZm/HFMj2uxra+ZfejOz+05WiH0g DlbplSubdS2S4uKdBhpNT9nbGh9+69wYBWOlMB1siLg8Osdu6vjG+cQdv/Qe++7F e7WiOZ0Mm9/zCWsdrV4H8OrPGgiaY86VaD8OfFmkBnbIQvLOMM0elH9aGXF3JjHe iuHAFSbAACQvOOwWh5nxamYxiwQV5ScN63kD/MkPG/bpg7gVazrlWmqxSl+qXFrn 5Zzl3IDEQk68VCJQ04yBmH+JfF1M6Y/GepzEuwIc96OwxUfrOD06UzHYols= -----END CERTIFICATE-----Generated at Sun Jul 6 09:11:53 2025 by rpki-client