$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa File: c7aad382-ae61-40b8-a77c-d9297773c96b.roa (raw, json) Hash identifier: 8oQwO/fCIhG8n8z+6CENs+yLpONJgYej1D/jh86+mSw= Subject key identifier: C5:0F:12:AC:8C:1A:18:26:36:FE:3D:F0:2F:C8:F4:01:C7:D1:3A:3F Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 687534B0F62458F84E96287C04458F663C9FAD3E Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa Signing time: Fri 04 Jul 2025 18:30:21 +0000 ROA not before: Fri 04 Jul 2025 18:30:21 +0000 ROA not after: Fri 08 Aug 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:75:34:b0:f6:24:58:f8:4e:96:28:7c:04:45:8f:66:3c:9f:ad:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 4 18:30:21 2025 GMT Not After : Aug 8 23:59:59 2025 GMT Subject: serialNumber=4bf781376cc2ebd77d754a028a11d818e02c7acc1b0aed9e45aa8655b8e96d8d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:60:86:c2:b1:95:57:16:39:79:0c:ac:e7:75: 3a:60:f9:c5:2c:f4:72:2a:aa:40:35:fe:1f:da:fb: 24:04:14:af:4e:16:bd:37:62:20:35:7a:70:c4:c6: 39:85:f1:a6:c6:c3:96:f5:80:37:dd:f9:93:d4:9e: e4:3a:e3:f9:14:86:d9:e3:75:f3:66:20:92:f5:f7: a8:af:d7:3a:ba:59:49:3d:2a:d4:fb:19:2f:6d:86: b3:56:d8:55:65:84:b5:c5:3b:25:5a:6a:46:82:ab: 4b:23:9d:dc:13:b9:14:41:0b:49:d7:1e:26:1f:c5: 75:2a:63:7a:e2:80:f6:99:34:37:88:ba:05:68:92: 91:38:eb:19:b7:92:4e:69:b1:02:5e:33:3a:d6:8d: 97:8f:a6:46:b6:7d:aa:71:ee:f8:df:6a:64:49:a6: b7:ec:69:02:67:46:7b:2b:e1:43:f6:25:d9:3b:a3: 88:b0:18:9a:36:81:09:69:cd:3b:6b:03:ae:4a:7e: e6:cf:d6:1a:52:02:d6:c6:51:9c:8f:f7:e9:15:42: f4:74:9c:26:b0:05:f9:8d:6a:6a:26:5b:52:7b:8c: cb:60:93:45:71:cf:6b:9a:b4:0f:22:9f:63:46:27: ca:10:df:45:36:54:11:1a:73:25:4f:04:45:c2:51: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0F:12:AC:8C:1A:18:26:36:FE:3D:F0:2F:C8:F4:01:C7:D1:3A:3F X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 42:6a:01:ad:55:08:70:12:df:2c:1d:be:22:b8:cd:91:df:ce: 6a:9a:de:ff:93:4c:9b:f7:7d:98:f8:fd:22:72:4f:4b:d6:52: ff:ee:c2:1d:c8:c4:9d:00:7c:65:0a:6b:a0:c3:53:52:e9:0f: 1b:d9:e6:70:ec:1d:3d:75:aa:16:91:9d:e5:96:db:a5:66:b6: bb:52:a1:e0:5d:07:c5:47:d5:ed:c1:cd:d9:0b:5c:6f:aa:d1: b3:52:2b:2a:0b:76:ee:0e:00:d8:b5:84:40:bd:b5:b0:6f:5c: 64:4b:4a:81:bb:f3:79:3f:44:fa:97:02:0f:98:d0:9e:81:90: 38:58:91:05:fd:c2:b1:db:f9:d3:d4:39:55:bd:98:a1:00:25: cd:e3:16:86:ae:cf:e9:d7:81:77:d9:80:eb:8c:d3:71:5a:85: b3:65:68:72:34:2b:0c:c9:18:04:d6:23:75:1a:d8:4b:5b:3d: 63:34:a1:d6:8e:f5:f5:fe:43:ef:5d:6c:b9:97:7c:b4:d9:4e: cb:ff:61:e1:31:7b:4a:01:6b:22:db:a7:f9:8e:17:64:45:d6: e4:0b:a2:0c:66:f4:aa:a0:3b:61:a1:58:dd:4d:ec:1b:3b:39: 6d:9b:06:e5:26:df:19:bf:7e:8d:1f:94:9a:a0:2e:32:ae:9e: a9:c8:e4:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaHU0sPYkWPhOlih8BEWPZjyfrT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzA0MTgzMDIxWhcNMjUwODA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YmY3ODEzNzZjYzJlYmQ3N2Q3NTRhMDI4YTExZDgxOGUw MmM3YWNjMWIwYWVkOWU0NWFhODY1NWI4ZTk2ZDhkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsYIbCsZVXFjl5DKzndTpg+cUs9HIqqkA1/h/a+yQEFK9O Fr03YiA1enDExjmF8abGw5b1gDfd+ZPUnuQ64/kUhtnjdfNmIJL196iv1zq6WUk9 KtT7GS9thrNW2FVlhLXFOyVaakaCq0sjndwTuRRBC0nXHiYfxXUqY3rigPaZNDeI ugVokpE46xm3kk5psQJeMzrWjZePpka2fapx7vjfamRJprfsaQJnRnsr4UP2Jdk7 o4iwGJo2gQlpzTtrA65KfubP1hpSAtbGUZyP9+kVQvR0nCawBfmNamomW1J7jMtg k0Vxz2uatA8in2NGJ8oQ30U2VBEacyVPBEXCUaZHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxQ8SrIwaGCY2/j3wL8j0AcfROj8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M3YWFkMzgyLWFlNjEtNDBiOC1hNzdjLWQ5Mjk3NzczYzk2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBAEJqAa1VCHAS3ywdviK4zZHfzmqa 3v+TTJv3fZj4/SJyT0vWUv/uwh3IxJ0AfGUKa6DDU1LpDxvZ5nDsHT11qhaRneWW 26VmtrtSoeBdB8VH1e3BzdkLXG+q0bNSKyoLdu4OANi1hEC9tbBvXGRLSoG783k/ RPqXAg+Y0J6BkDhYkQX9wrHb+dPUOVW9mKEAJc3jFoauz+nXgXfZgOuM03FahbNl aHI0KwzJGATWI3Ua2EtbPWM0odaO9fX+Q+9dbLmXfLTZTsv/YeExe0oBayLbp/mO F2RF1uQLogxm9KqgO2GhWN1N7Bs7OW2bBuUm3xm/fo0flJqgLjKunqnI5Lw= -----END CERTIFICATE-----Generated at Sun Jul 6 07:56:37 2025 by rpki-client