$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a831197c-8b82-49b5-9fa5-fb2277e6850c.roa File: a831197c-8b82-49b5-9fa5-fb2277e6850c.roa (raw, json) Hash identifier: U5JT9xFfXZ5+bvxTGZDMGPhxqKq4Aw/xam05bQfaXh4= Subject key identifier: D0:1D:8C:04:FA:EC:0C:6E:FA:B8:C4:A9:1B:46:1B:98:E7:C1:71:E4 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2943CD8E98786202EF20818E138C9A5EE218EFFB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a831197c-8b82-49b5-9fa5-fb2277e6850c.roa Signing time: Fri 04 Jul 2025 18:20:20 +0000 ROA not before: Fri 04 Jul 2025 18:20:20 +0000 ROA not after: Fri 08 Aug 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:43:cd:8e:98:78:62:02:ef:20:81:8e:13:8c:9a:5e:e2:18:ef:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 4 18:20:20 2025 GMT Not After : Aug 8 23:59:59 2025 GMT Subject: serialNumber=501dbca7d7e69e5ebae8770cec351502ad18a526430ade46b4e82075c3599f28, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ba:d3:e2:bb:26:87:37:7e:6b:22:67:36:b5: a0:23:6b:25:a5:30:1d:4f:ff:c0:23:be:41:82:e6: 55:96:21:2e:b3:b5:d8:7a:40:bd:71:4f:f1:54:dd: 63:64:1b:78:72:c0:a9:20:10:31:63:5a:93:0a:2a: 0c:28:c7:42:86:c6:96:e0:0e:21:d1:48:4f:21:e0: 12:60:f3:cf:80:ca:f6:ef:fc:4d:6a:b4:a3:ef:c1: d2:be:08:af:59:95:98:41:71:46:9c:95:1e:71:8d: 67:27:58:dc:ce:de:19:27:2f:ba:fd:67:2b:6a:f9: c3:bb:da:43:07:85:c6:0b:a5:0e:94:42:3f:a9:4e: ae:8c:d3:d8:63:f9:1b:72:13:64:9b:9f:52:f5:f1: 02:1f:cd:9c:e8:95:8b:81:ba:d3:46:8a:1a:a4:23: 89:76:66:1f:33:62:50:02:03:fa:9c:f5:14:2f:3f: fb:bc:87:a3:3f:d6:29:f8:73:65:3b:fc:9f:b1:d9: b1:81:89:b5:4f:97:0e:8f:e4:03:dc:55:3f:80:2f: 1a:fa:0e:fe:81:f3:6e:d3:c3:08:11:1c:25:08:18: ff:b7:cb:70:be:8d:00:8a:38:80:a7:5d:82:12:61: a0:6f:4c:d5:dd:13:2c:3a:bd:23:e5:80:ac:2b:d3: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:1D:8C:04:FA:EC:0C:6E:FA:B8:C4:A9:1B:46:1B:98:E7:C1:71:E4 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a831197c-8b82-49b5-9fa5-fb2277e6850c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.38.0/24 Signature Algorithm: sha256WithRSAEncryption 50:f9:1a:79:7a:33:98:4c:30:a6:1d:76:4a:90:8e:b5:65:9c: 85:b0:ae:f5:ba:f8:26:19:6e:02:fb:cf:2f:7f:10:af:d0:80: c2:74:c8:a1:8b:73:f1:97:47:14:e8:60:5d:50:2f:dd:97:a9: 3f:f8:31:ff:e5:a6:37:3b:e7:6b:2b:e6:cc:3c:f6:f2:ea:83: bb:a3:08:16:71:49:90:b9:fb:12:45:d2:d0:5b:6e:48:c9:48: 0c:06:c3:bf:48:90:57:4e:dc:f3:88:5f:3f:17:3e:44:29:08: 6f:35:b2:55:b6:57:63:e8:89:7c:b2:19:40:10:b2:f4:47:ab: 6c:dd:51:54:c1:c0:8c:9e:3e:2f:44:9e:f5:9c:96:0c:fb:e2: 64:63:43:1f:1c:e4:87:54:39:dd:a9:b9:c4:8c:28:31:e8:a2: 70:a2:53:50:f9:5e:39:d9:24:8b:b8:33:87:a1:24:06:ec:b4: 05:03:f2:d8:d1:b2:10:a7:14:69:70:93:07:c0:74:51:f3:9d: ab:78:99:83:9b:c7:5a:f2:81:f8:2c:dc:eb:54:01:6b:da:57: ec:52:2b:8f:a2:fb:8d:1d:26:7b:4e:99:7f:1d:ff:4e:00:fc: 3f:6a:8e:7b:51:b7:2f:ac:03:bd:f2:76:ea:3f:b9:21:78:c6: ce:0d:79:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKUPNjph4YgLvIIGOE4yaXuIY7/swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzA0MTgyMDIwWhcNMjUwODA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MDFkYmNhN2Q3ZTY5ZTVlYmFlODc3MGNlYzM1MTUwMmFk MThhNTI2NDMwYWRlNDZiNGU4MjA3NWMzNTk5ZjI4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRutPiuyaHN35rImc2taAjayWlMB1P/8AjvkGC5lWWIS6z tdh6QL1xT/FU3WNkG3hywKkgEDFjWpMKKgwox0KGxpbgDiHRSE8h4BJg88+Ayvbv /E1qtKPvwdK+CK9ZlZhBcUaclR5xjWcnWNzO3hknL7r9Zytq+cO72kMHhcYLpQ6U Qj+pTq6M09hj+RtyE2Sbn1L18QIfzZzolYuButNGihqkI4l2Zh8zYlACA/qc9RQv P/u8h6M/1in4c2U7/J+x2bGBibVPlw6P5APcVT+ALxr6Dv6B827TwwgRHCUIGP+3 y3C+jQCKOICnXYISYaBvTNXdEyw6vSPlgKwr02opAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0B2MBPrsDG76uMSpG0YbmOfBceQwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E4MzExOTdjLThiODItNDliNS05ZmE1LWZiMjI3N2U2ODUwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCYwDQYJKoZIhvcNAQELBQADggEBAFD5Gnl6M5hMMKYddkqQjrVlnIWw rvW6+CYZbgL7zy9/EK/QgMJ0yKGLc/GXRxToYF1QL92XqT/4Mf/lpjc752sr5sw8 9vLqg7ujCBZxSZC5+xJF0tBbbkjJSAwGw79IkFdO3POIXz8XPkQpCG81slW2V2Po iXyyGUAQsvRHq2zdUVTBwIyePi9EnvWclgz74mRjQx8c5IdUOd2pucSMKDHoonCi U1D5XjnZJIu4M4ehJAbstAUD8tjRshCnFGlwkwfAdFHznat4mYObx1rygfgs3OtU AWvaV+xSK4+i+40dJntOmX8d/04A/D9qjntRty+sA73yduo/uSF4xs4NeUc= -----END CERTIFICATE-----Generated at Sun Jul 6 08:14:40 2025 by rpki-client