$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa File: 98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa (raw, json) Hash identifier: fv4M6UU6W4kZTCfvhyu9MTd21Rt4PydtST4HwEfkbYk= Subject key identifier: 5B:38:63:E4:D9:66:FA:F3:93:E2:DE:AF:64:4E:0F:CA:1E:B3:D1:DE Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0746AAE18B8D5290E4D0F1A52B3C77EB8FE587EB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa Signing time: Sat 31 May 2025 00:40:01 +0000 ROA not before: Sat 31 May 2025 00:40:01 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:46:aa:e1:8b:8d:52:90:e4:d0:f1:a5:2b:3c:77:eb:8f:e5:87:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 31 00:40:01 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=88ff286446779424669654d034c8575e0ec2e608ce5496d101458f06388322e1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:52:b2:a9:b3:f6:e4:bb:b0:fa:25:2c:38: 25:5a:cd:71:1c:5f:39:74:d0:4d:31:6b:e9:2c:50: 48:3c:86:5a:6e:bc:42:7f:78:8d:1b:1d:a2:9c:ab: 29:66:34:47:1b:9a:42:51:76:04:b5:78:86:a0:48: aa:b2:eb:89:65:39:df:df:2c:bd:15:50:32:e4:52: e6:61:32:4c:4d:68:a3:da:7b:2d:e8:de:28:74:fe: 62:4a:4c:b3:65:4a:05:d5:73:88:03:ba:98:4d:d9: d7:8a:99:09:db:d0:c4:54:aa:b1:78:ea:8c:26:28: 2e:0f:84:3f:1d:0f:10:1f:40:9e:25:7b:45:ec:b3: f8:77:0e:8a:1b:c1:cb:9e:66:26:e5:5d:05:31:ce: 5c:74:7d:8b:ec:9b:a5:75:b0:17:e6:fe:52:d1:4a: 9a:6c:ff:af:6e:d1:5b:cf:02:dc:05:da:ab:16:b0: f9:af:d0:04:60:08:86:c7:c1:ba:1b:2b:49:0b:07: 33:b3:ee:64:16:ad:0a:85:0b:ff:c3:fd:f6:98:21: 1f:51:b7:46:95:63:68:0f:a3:a9:73:9c:b9:08:ac: 99:56:96:24:0d:7b:f1:9b:f2:ae:3b:3c:39:eb:44: 9c:c9:cf:1e:11:73:d2:4b:f9:b9:76:8d:56:2e:91: 34:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:38:63:E4:D9:66:FA:F3:93:E2:DE:AF:64:4E:0F:CA:1E:B3:D1:DE X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/98b5c890-47f1-4f7f-a9dd-32289554f1d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 19:90:22:fd:2a:1d:25:17:29:c7:28:82:1e:57:d4:e2:00:ef: 1c:84:dd:90:94:61:be:67:3d:b7:48:44:ea:c7:d6:e6:46:1c: de:1f:54:8c:2c:60:fe:c4:48:5d:99:24:3b:bc:64:c0:47:f6: b5:e3:fd:9e:78:1e:21:be:bc:e5:5c:e5:e9:78:3d:5a:1b:1c: c4:f4:1b:83:eb:48:8b:c1:fd:38:c1:00:80:44:13:26:f4:16: c3:a4:7b:90:6b:ba:c7:d0:2b:5c:ad:e7:fc:f6:98:69:ec:9b: 43:44:ed:0d:48:98:a4:59:37:4b:9a:9a:e4:ae:12:3a:00:e4: 19:e0:ef:1c:bb:50:23:96:1f:20:3a:7e:e2:45:b4:3e:82:98: cc:96:4f:34:25:9b:34:45:fc:b1:d0:22:cb:b7:f2:1c:d2:c1: b1:90:75:41:9c:92:e4:4c:64:76:d0:47:9a:ee:36:4d:8a:de: bf:99:a5:9d:dd:9f:bc:85:46:11:c9:74:8c:e7:71:0b:5a:09: f7:22:7d:29:86:3a:93:76:58:11:a4:57:4f:4b:26:4a:12:6a: c0:ab:fd:27:79:4c:d5:65:c2:99:b8:5f:40:a8:6c:c2:e9:1f: e4:3c:83:63:60:7d:f6:b9:61:d4:56:9c:e1:f3:ba:37:31:d0: a2:46:73:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB0aq4YuNUpDk0PGlKzx364/lh+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTMxMDA0MDAxWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4OGZmMjg2NDQ2Nzc5NDI0NjY5NjU0ZDAzNGM4NTc1ZTBl YzJlNjA4Y2U1NDk2ZDEwMTQ1OGYwNjM4ODMyMmUxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMSFKyqbP25Luw+iUsOCVazXEcXzl00E0xa+ksUEg8hlpu vEJ/eI0bHaKcqylmNEcbmkJRdgS1eIagSKqy64llOd/fLL0VUDLkUuZhMkxNaKPa ey3o3ih0/mJKTLNlSgXVc4gDuphN2deKmQnb0MRUqrF46owmKC4PhD8dDxAfQJ4l e0Xss/h3DoobwcueZiblXQUxzlx0fYvsm6V1sBfm/lLRSpps/69u0VvPAtwF2qsW sPmv0ARgCIbHwbobK0kLBzOz7mQWrQqFC//D/faYIR9Rt0aVY2gPo6lznLkIrJlW liQNe/Gb8q47PDnrRJzJzx4Rc9JL+bl2jVYukTQhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWzhj5Nlm+vOT4t6vZE4Pyh6z0d4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzk4YjVjODkwLTQ3ZjEtNGY3Zi1hOWRkLTMyMjg5NTU0ZjFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBABmQIv0qHSUXKccogh5X1OIA7xyE 3ZCUYb5nPbdIROrH1uZGHN4fVIwsYP7ESF2ZJDu8ZMBH9rXj/Z54HiG+vOVc5el4 PVobHMT0G4PrSIvB/TjBAIBEEyb0FsOke5BrusfQK1yt5/z2mGnsm0NE7Q1ImKRZ N0uamuSuEjoA5Bng7xy7UCOWHyA6fuJFtD6CmMyWTzQlmzRF/LHQIsu38hzSwbGQ dUGckuRMZHbQR5ruNk2K3r+ZpZ3dn7yFRhHJdIzncQtaCfcifSmGOpN2WBGkV09L JkoSasCr/Sd5TNVlwpm4X0CobMLpH+Q8g2Ngffa5YdRWnOHzujcx0KJGcxY= -----END CERTIFICATE-----Generated at Sat Jun 7 17:28:21 2025 by rpki-client