$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa File: 909e65c8-aef7-492e-84d6-88536c902cda.roa (raw, json) Hash identifier: +hibVr7egTEbY7yjumdXDjSs3eHY19Aom7vBr4TRT2s= Subject key identifier: 84:97:0F:ED:B4:9A:EA:E7:68:87:CA:13:18:B7:54:AA:5B:88:B3:E9 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 03EABF9A330B4A65047E8BAE1E2943CDFDA29842 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa Signing time: Sat 31 May 2025 00:40:15 +0000 ROA not before: Sat 31 May 2025 00:40:15 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ea:bf:9a:33:0b:4a:65:04:7e:8b:ae:1e:29:43:cd:fd:a2:98:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 31 00:40:15 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=5860f8bad59c8257f2dca4504884c31e17907884229be5148ca43f2cc4bc0432, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:35:98:45:83:b9:6f:da:56:46:e4:fe:dc: 2d:11:68:5f:bc:69:5f:10:c8:a0:f2:60:27:ac:2f: 07:af:23:81:bf:5d:c7:ab:fe:15:f0:16:52:2b:64: 84:80:2e:6f:73:9d:53:cc:64:52:f5:67:08:63:bc: 77:97:7d:11:18:e8:ca:43:53:03:ef:6b:d9:f2:d3: 59:9e:6d:94:0f:94:36:18:70:1e:89:5b:13:f0:43: 0a:f2:be:b2:30:89:8c:7c:ab:e0:66:71:79:5a:e0: 51:90:97:34:68:f0:58:18:57:0f:ef:51:41:53:b1: 6e:90:dd:fc:1a:a2:48:65:2e:77:68:65:a4:00:8e: 98:5f:7e:75:2c:d5:33:5d:13:af:0e:5c:43:4a:24: d5:87:73:6f:2f:28:9f:cb:50:4b:71:de:cb:bc:fb: 39:6a:54:71:c3:5e:97:92:1a:70:34:a9:fc:00:e0: 7f:74:ba:a3:eb:ad:ac:f0:f7:8f:63:95:f0:6a:45: e6:28:d2:67:ff:34:2a:46:85:e5:6a:68:b3:c5:db: f3:bd:b4:de:1d:91:f4:70:38:1b:ec:86:bc:5e:c0: ec:d5:b4:1d:cb:68:0a:d8:4a:07:33:45:d9:b9:17: cd:2b:49:b5:e2:91:bd:91:e9:ec:6d:3e:a9:17:ba: c1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:97:0F:ED:B4:9A:EA:E7:68:87:CA:13:18:B7:54:AA:5B:88:B3:E9 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/909e65c8-aef7-492e-84d6-88536c902cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.20.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:4e:81:66:db:f4:d3:f5:da:ff:4b:27:a3:fc:0a:82:4d:68: 47:47:a5:4a:ea:c3:63:45:2a:de:eb:80:19:46:07:ed:d2:33: ea:e7:2c:53:7a:52:12:8f:40:3b:b5:77:28:1e:13:57:06:1c: 01:57:b7:cd:24:81:ab:2a:6d:42:7d:f9:5a:2f:5e:ad:9a:ec: 18:40:20:a2:9e:f3:e8:f9:53:52:30:27:9f:70:e8:15:a2:69: 47:9b:62:00:04:35:b9:f4:b7:56:b3:7b:bc:42:a9:31:db:b1: 5e:13:5d:3c:62:0f:b3:9c:32:ec:65:79:da:fe:87:65:29:dc: 34:26:42:d0:95:9d:99:cb:4f:91:fe:29:3f:21:d2:fc:46:03: 49:3c:40:df:c7:56:36:13:85:df:ff:7e:1c:52:c9:41:a7:a7: f0:3e:1d:a8:c6:75:5c:62:5f:bb:b6:45:72:6d:e6:d0:16:6a: b9:09:47:70:f3:2b:ed:95:39:3c:23:11:0b:9a:9b:74:d9:ea: 8e:97:f2:59:3d:30:a9:81:ad:91:05:d0:5f:ac:8e:e3:0a:1c: 93:a4:5c:15:e6:b9:15:d3:d4:e4:33:66:24:ce:8e:d2:c1:66: 68:c5:d2:b6:23:09:f3:bd:4d:23:c9:3b:de:56:95:c4:9d:98: c7:e2:d7:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA+q/mjMLSmUEfouuHilDzf2imEIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTMxMDA0MDE1WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODYwZjhiYWQ1OWM4MjU3ZjJkY2E0NTA0ODg0YzMxZTE3 OTA3ODg0MjI5YmU1MTQ4Y2E0M2YyY2M0YmMwNDMyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC+DWYRYO5b9pWRuT+3C0RaF+8aV8QyKDyYCesLwevI4G/ Xcer/hXwFlIrZISALm9znVPMZFL1ZwhjvHeXfREY6MpDUwPva9ny01mebZQPlDYY cB6JWxPwQwryvrIwiYx8q+BmcXla4FGQlzRo8FgYVw/vUUFTsW6Q3fwaokhlLndo ZaQAjphffnUs1TNdE68OXENKJNWHc28vKJ/LUEtx3su8+zlqVHHDXpeSGnA0qfwA 4H90uqPrrazw949jlfBqReYo0mf/NCpGheVqaLPF2/O9tN4dkfRwOBvshrxewOzV tB3LaArYSgczRdm5F80rSbXikb2R6extPqkXusELAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhJcP7bSa6udoh8oTGLdUqluIs+kwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzkwOWU2NWM4LWFlZjctNDkyZS04NGQ2LTg4NTM2YzkwMmNkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBQwDQYJKoZIhvcNAQELBQADggEBAExOgWbb9NP12v9LJ6P8CoJNaEdH pUrqw2NFKt7rgBlGB+3SM+rnLFN6UhKPQDu1dygeE1cGHAFXt80kgasqbUJ9+Vov Xq2a7BhAIKKe8+j5U1IwJ59w6BWiaUebYgAENbn0t1aze7xCqTHbsV4TXTxiD7Oc Muxledr+h2Up3DQmQtCVnZnLT5H+KT8h0vxGA0k8QN/HVjYThd//fhxSyUGnp/A+ HajGdVxiX7u2RXJt5tAWarkJR3DzK+2VOTwjEQuam3TZ6o6X8lk9MKmBrZEF0F+s juMKHJOkXBXmuRXT1OQzZiTOjtLBZmjF0rYjCfO9TSPJO95WlcSdmMfi15k= -----END CERTIFICATE-----Generated at Fri Jun 6 18:34:13 2025 by rpki-client