$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa File: 8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa (raw, json) Hash identifier: e0vkXcOBFn8CAfC8Em0SiCJX1R0k0hJzFJ+jT6bXfNM= Subject key identifier: 79:92:ED:2D:D8:E2:AB:48:45:DF:06:49:C6:4D:6D:9B:C9:77:8D:A6 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3B375112DC1588887E7F0FA94B2C4885461971D5 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa Signing time: Wed 04 Jun 2025 00:50:33 +0000 ROA not before: Wed 04 Jun 2025 00:50:33 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:37:51:12:dc:15:88:88:7e:7f:0f:a9:4b:2c:48:85:46:19:71:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 4 00:50:33 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=4b41bba54f487b433c77a5529afd99ee1bc708141cd1e7d6ea60cf20942f3543, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e1:33:ec:37:e6:33:bb:e2:cf:06:68:a1:1a: 43:9e:37:9f:7e:ed:28:ff:d5:72:b0:73:96:56:2a: 0e:a9:cd:5d:8b:e9:d2:69:4c:1e:53:39:1f:f6:f9: 93:35:f9:c5:3e:52:dd:df:b1:17:03:d5:44:76:bf: ae:7b:07:8b:c7:b0:31:50:d6:45:dc:53:e6:18:f5: 12:1e:49:49:82:c9:0e:d3:e6:25:13:d0:fa:95:a8: 19:97:99:f7:29:97:f7:f7:60:09:f4:da:f8:5c:96: 10:4c:98:33:78:ca:f2:fa:6d:24:55:e1:1e:b8:8c: b4:00:d1:6b:82:5b:48:de:9c:9f:be:f1:0a:d7:b6: 1a:0b:fe:e1:af:22:81:e5:48:d7:93:6d:19:7e:11: bc:4a:bf:9a:b9:cd:9b:19:9d:52:fc:bf:ac:25:44: 49:60:d6:c3:5e:0a:f8:9b:7d:b4:c4:de:9f:d1:fc: 57:1d:84:93:ef:d0:9c:0f:99:fb:f9:8e:44:6f:30: ef:9f:49:69:9e:96:84:76:f3:25:c7:ac:8b:38:ce: 85:58:f7:0d:4e:2e:2f:5e:74:d9:ef:70:23:15:97: 2c:fb:77:38:1c:72:ad:0e:9a:ab:3a:15:52:1a:e2: b0:e3:d6:66:8c:67:e3:08:46:5f:6a:43:bc:5b:90: 0a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:92:ED:2D:D8:E2:AB:48:45:DF:06:49:C6:4D:6D:9B:C9:77:8D:A6 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8e88398f-80cd-4b06-bbdf-e3fab6e6abe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.8.0/24 Signature Algorithm: sha256WithRSAEncryption 69:f8:25:7b:f4:a1:9e:d2:78:de:62:6b:bc:e4:b7:43:2b:b4: 2c:d1:3a:4e:6a:95:62:df:60:67:38:e5:af:1c:40:37:fd:8a: a4:fe:87:9d:cc:8c:87:32:68:fc:a0:48:4f:3a:d3:68:41:52: a6:36:c5:62:d8:a1:34:2e:fd:da:8b:79:9a:fc:95:00:52:14: ad:6a:cd:8f:2f:75:80:f3:bd:6a:a8:fa:f8:50:57:a5:81:1f: 97:7b:2d:94:a6:9f:9c:45:75:82:86:f9:d7:be:cd:72:29:83: eb:f6:93:cb:c4:1c:f3:b6:4b:fd:0f:bc:22:28:32:7e:ef:41: b7:8c:69:c1:99:59:c7:ac:5a:75:7e:4d:39:bc:c5:e0:cf:d3: c0:be:9b:40:e7:dd:31:80:54:d2:fe:25:d4:c7:92:02:f3:21: e3:52:66:46:40:4e:86:dd:b7:7c:7d:d5:13:76:62:fe:e6:1c: f0:df:ee:6c:93:35:7a:cd:53:69:80:1b:38:68:f8:0d:ab:08: 71:43:37:21:71:c6:25:0b:f1:7a:38:51:76:54:d4:b2:52:7e: b4:9d:0a:0c:9e:b9:9b:6b:20:43:cf:47:19:61:bc:f1:9c:e8: 55:46:d0:56:56:3f:6b:be:1e:4e:04:7a:67:3f:a7:a6:cc:8f: 21:5d:d1:c8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOzdREtwViIh+fw+pSyxIhUYZcdUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA0MDA1MDMzWhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjQxYmJhNTRmNDg3YjQzM2M3N2E1NTI5YWZkOTllZTFi YzcwODE0MWNkMWU3ZDZlYTYwY2YyMDk0MmYzNTQzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK4TPsN+Yzu+LPBmihGkOeN59+7Sj/1XKwc5ZWKg6pzV2L 6dJpTB5TOR/2+ZM1+cU+Ut3fsRcD1UR2v657B4vHsDFQ1kXcU+YY9RIeSUmCyQ7T 5iUT0PqVqBmXmfcpl/f3YAn02vhclhBMmDN4yvL6bSRV4R64jLQA0WuCW0jenJ++ 8QrXthoL/uGvIoHlSNeTbRl+EbxKv5q5zZsZnVL8v6wlRElg1sNeCvibfbTE3p/R /FcdhJPv0JwPmfv5jkRvMO+fSWmeloR28yXHrIs4zoVY9w1OLi9edNnvcCMVlyz7 dzgccq0Omqs6FVIa4rDj1maMZ+MIRl9qQ7xbkAqxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUeZLtLdjiq0hF3wZJxk1tm8l3jaYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzhlODgzOThmLTgwY2QtNGIwNi1iYmRmLWUzZmFiNmU2YWJlMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAgwDQYJKoZIhvcNAQELBQADggEBAGn4JXv0oZ7SeN5ia7zkt0MrtCzR Ok5qlWLfYGc45a8cQDf9iqT+h53MjIcyaPygSE8602hBUqY2xWLYoTQu/dqLeZr8 lQBSFK1qzY8vdYDzvWqo+vhQV6WBH5d7LZSmn5xFdYKG+de+zXIpg+v2k8vEHPO2 S/0PvCIoMn7vQbeMacGZWcesWnV+TTm8xeDP08C+m0Dn3TGAVNL+JdTHkgLzIeNS ZkZATobdt3x91RN2Yv7mHPDf7myTNXrNU2mAGzho+A2rCHFDNyFxxiUL8Xo4UXZU 1LJSfrSdCgyeuZtrIEPPRxlhvPGc6FVG0FZWP2u+Hk4Eemc/p6bMjyFd0cg= -----END CERTIFICATE-----Generated at Fri Jun 6 05:23:25 2025 by rpki-client