$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa File: c5687b2f-b054-4005-abd5-90394ab21e74.roa (raw, json) Hash identifier: U+d5n58O5AbkqpXit6v1rwlU34CfdBnVWHhx8JubLRA= Subject key identifier: 7E:F0:A7:42:69:C4:D2:94:CB:58:87:E8:4B:21:3B:83:4D:51:93:5E Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 76CB2CF529C43AAF4BD118BAF0F8A8960A0386BD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa Signing time: Tue 20 May 2025 18:00:09 +0000 ROA not before: Tue 20 May 2025 18:00:09 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:cb:2c:f5:29:c4:3a:af:4b:d1:18:ba:f0:f8:a8:96:0a:03:86:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 20 18:00:09 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=f8f199e34428866ea79c89ea6ad66e95a1e0346c30e45e14109bb2ccd8054a21, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:84:16:b3:77:b9:55:cf:10:dd:d1:58:00:23: b1:ef:39:cc:69:f0:7d:5a:71:70:ef:7a:14:30:0d: 47:9d:fd:bc:ec:5b:dd:84:fb:0b:38:26:bf:dd:78: 5d:e7:f2:4f:f7:6c:2e:39:d0:d1:32:c4:dc:f0:f5: 2e:2b:b1:cc:56:32:20:2e:6f:63:3e:3c:94:c8:41: 05:63:d9:79:6a:ee:de:ab:e8:21:9d:8c:ce:c9:dc: 08:93:da:00:d6:b0:bd:38:0e:03:df:7e:0b:63:ee: e5:2a:fa:90:8c:27:e1:ea:40:0d:81:3f:f6:bb:1c: 98:cf:4d:29:22:74:fb:fb:5b:4c:14:97:83:df:ea: 70:20:94:7a:14:5a:40:39:19:97:b3:9a:8c:d8:3f: a3:2f:38:60:d6:cf:76:a5:40:90:7f:84:fb:6c:28: 50:0b:8e:74:4a:68:32:1b:5c:ff:18:28:ce:d3:27: 04:75:be:45:02:b4:7e:87:64:fc:03:ce:29:c1:9a: ec:66:00:f2:aa:44:f1:c1:57:a4:83:9f:15:2d:d4: 05:84:9a:fa:3f:2f:53:db:62:d2:35:b0:c2:bc:99: 21:31:6f:6c:8b:70:45:6c:e7:30:29:7f:7a:7f:d8: 2b:8d:38:5a:0f:29:e3:59:58:4a:c5:6e:bf:23:6e: d5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F0:A7:42:69:C4:D2:94:CB:58:87:E8:4B:21:3B:83:4D:51:93:5E X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.64.0/22 Signature Algorithm: sha256WithRSAEncryption 63:f1:8a:c6:97:63:31:79:13:8b:55:e9:89:33:e1:33:88:51: c9:3a:1a:b0:8c:a0:f1:32:19:4e:40:a8:9d:8c:30:4c:f2:a6: 23:5b:cc:6c:df:5f:84:57:93:35:ac:f6:02:11:48:00:e9:e6: ab:ae:d8:0e:96:b3:ab:e2:f9:62:7e:4a:98:d1:7b:45:fc:7b: 85:58:8b:bf:f1:53:f8:7e:26:ee:bf:ff:b4:d3:ee:90:ec:49: 60:06:60:a8:d9:2e:40:b1:11:bf:eb:c1:f1:3a:26:50:89:ff: 1f:45:18:34:e0:90:ab:8a:b0:87:2e:13:f3:cf:ad:b3:49:28: 65:c0:a1:b4:31:3b:72:44:76:46:b9:38:fb:2d:fb:1c:a5:95: 9c:f5:2d:bb:7b:77:62:4e:82:1f:2b:f3:3a:ae:7d:cb:8d:33: c0:49:2f:c9:e7:f2:5d:33:69:d9:f8:c0:79:5d:29:79:72:4b: 0f:13:8e:c7:87:8e:6c:7d:09:e4:a0:3d:47:99:38:83:e8:1f: 44:26:d0:a1:87:0f:17:49:e5:f8:3e:e2:b9:36:df:5d:28:5a: c8:6e:d3:89:bb:14:a7:c3:2c:a1:a8:00:bd:c7:f3:48:1b:f8: 6f:32:e6:42:d4:b2:ad:17:03:51:c8:e1:27:ca:f3:0e:c2:6c: c6:cd:67:da -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdsss9SnEOq9L0Ri68PiolgoDhr0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTIwMTgwMDA5WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGYxOTllMzQ0Mjg4NjZlYTc5Yzg5ZWE2YWQ2NmU5NWEx ZTAzNDZjMzBlNDVlMTQxMDliYjJjY2Q4MDU0YTIxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCThBazd7lVzxDd0VgAI7HvOcxp8H1acXDvehQwDUed/bzs W92E+ws4Jr/deF3n8k/3bC450NEyxNzw9S4rscxWMiAub2M+PJTIQQVj2Xlq7t6r 6CGdjM7J3AiT2gDWsL04DgPffgtj7uUq+pCMJ+HqQA2BP/a7HJjPTSkidPv7W0wU l4Pf6nAglHoUWkA5GZezmozYP6MvOGDWz3alQJB/hPtsKFALjnRKaDIbXP8YKM7T JwR1vkUCtH6HZPwDzinBmuxmAPKqRPHBV6SDnxUt1AWEmvo/L1PbYtI1sMK8mSEx b2yLcEVs5zApf3p/2CuNOFoPKeNZWErFbr8jbtWbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfvCnQmnE0pTLWIfoSyE7g01Rk14wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M1Njg3YjJmLWIwNTQtNDAwNS1hYmQ1LTkwMzk0YWIyMWU3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYEAwDQYJKoZIhvcNAQELBQADggEBAGPxisaXYzF5E4tV6Ykz4TOIUck6 GrCMoPEyGU5AqJ2MMEzypiNbzGzfX4RXkzWs9gIRSADp5quu2A6Ws6vi+WJ+SpjR e0X8e4VYi7/xU/h+Ju6//7TT7pDsSWAGYKjZLkCxEb/rwfE6JlCJ/x9FGDTgkKuK sIcuE/PPrbNJKGXAobQxO3JEdka5OPst+xyllZz1Lbt7d2JOgh8r8zqufcuNM8BJ L8nn8l0zadn4wHldKXlySw8TjseHjmx9CeSgPUeZOIPoH0Qm0KGHDxdJ5fg+4rk2 310oWshu04m7FKfDLKGoAL3H80gb+G8y5kLUsq0XA1HI4SfK8w7CbMbNZ9o= -----END CERTIFICATE-----Generated at Mon Jun 2 16:53:58 2025 by rpki-client