$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa File: d69bc1d5-8269-497f-a53a-bbb55896ac25.roa (raw, json) Hash identifier: BwtrPdeJmt2j2FK1kOGqmwERQyFXtXWJ9uGml404iZk= Subject key identifier: 16:40:1D:0F:8D:D4:9F:E9:2D:98:08:43:85:49:FC:A3:9F:33:44:E0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3B9DA5E75731BC5BE29BAA425F9C3251D46A5C94 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa Signing time: Fri 04 Jul 2025 18:20:25 +0000 ROA not before: Fri 04 Jul 2025 18:20:25 +0000 ROA not after: Fri 08 Aug 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:9d:a5:e7:57:31:bc:5b:e2:9b:aa:42:5f:9c:32:51:d4:6a:5c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 4 18:20:25 2025 GMT Not After : Aug 8 23:59:59 2025 GMT Subject: serialNumber=a497a4ad2945a0fac9a003fcfdf4d84947ced7e54174d585f52854368df9674a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ee:90:21:0a:49:dd:63:8d:23:45:0d:65:d2: c7:7f:93:19:26:af:a3:58:11:cd:00:4e:38:41:59: e0:fe:c6:8b:a2:ed:ad:25:e5:e5:18:cb:54:ca:e7: 45:54:14:90:4a:19:90:b3:19:e6:ba:0a:8b:59:4a: 87:c3:05:b3:08:87:88:73:59:e0:d1:f8:88:05:66: de:92:0b:e1:84:48:07:18:da:c3:2d:94:ee:54:1e: e4:98:2b:a5:b2:b3:ff:98:be:9b:ac:53:2b:cc:60: b1:06:84:cb:a0:e3:71:40:64:44:7b:13:18:d6:00: 11:54:c6:f0:46:4b:57:56:cc:d8:63:8e:15:4c:fe: f4:16:41:b4:5a:21:c8:d1:de:55:6e:d2:df:5a:a7: 71:b7:60:74:34:74:79:c5:78:92:45:e8:a1:b4:a6: 56:78:7a:68:a2:63:cb:96:1f:e1:2b:25:62:b7:a6: 65:d1:c6:6e:57:24:13:93:48:52:39:9d:6c:28:c9: d2:ec:7d:68:9b:a2:23:42:74:81:98:49:32:c2:f9: ff:0b:55:10:3e:3a:ff:34:c8:37:05:5f:2c:cc:d9: da:9f:8d:d9:29:bc:7a:7f:2b:0a:25:d2:29:ca:05: 9c:22:4a:bf:4e:f8:db:d0:3d:21:56:01:5f:f5:6b: 00:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:1D:0F:8D:D4:9F:E9:2D:98:08:43:85:49:FC:A3:9F:33:44:E0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d69bc1d5-8269-497f-a53a-bbb55896ac25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.44.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:96:4e:13:a5:25:7d:28:f1:31:8b:42:7f:ed:98:ae:0a:a0: 10:91:f4:4a:c2:b1:98:d8:2e:a0:8a:3e:4f:d4:1d:db:e3:da: 12:d3:47:bc:9a:71:3a:13:a7:39:ec:5f:06:ae:e7:98:22:8d: e6:ef:f0:d3:6c:6b:ed:5a:42:db:3e:8a:db:fc:33:6a:91:d3: 09:cc:fb:3c:f4:36:d4:15:2c:75:e1:61:8e:9f:ac:35:ce:d6: fa:0a:94:e9:23:cd:e0:31:48:75:83:ce:5d:df:36:91:c6:65: 87:ae:d5:9c:43:66:da:44:29:df:39:33:08:d9:6d:9a:2f:79: 7e:4d:96:9b:fa:33:7d:2c:d2:39:71:99:34:63:81:41:86:79: 95:00:6e:af:7c:b0:5d:22:d6:20:7b:72:e0:c1:37:e5:d3:98: ea:93:d1:89:7f:1e:c8:9d:d2:81:7b:76:dd:cf:12:73:a9:16: ab:40:19:8d:ee:33:2c:eb:9c:d7:27:1f:c6:b6:21:e0:56:f1: 3e:5b:7c:ab:b5:80:e9:70:71:7b:ee:df:d8:29:82:b5:c6:64: dc:0e:c8:35:62:57:89:02:fc:8a:4b:ea:20:4e:5a:61:ee:be: 60:b1:b3:2d:62:87:95:3b:c1:f9:fc:c5:27:f5:6c:dd:1e:2a: b7:4f:2c:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO52l51cxvFvim6pCX5wyUdRqXJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzA0MTgyMDI1WhcNMjUwODA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNDk3YTRhZDI5NDVhMGZhYzlhMDAzZmNmZGY0ZDg0OTQ3 Y2VkN2U1NDE3NGQ1ODVmNTI4NTQzNjhkZjk2NzRhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR7pAhCkndY40jRQ1l0sd/kxkmr6NYEc0ATjhBWeD+xoui 7a0l5eUYy1TK50VUFJBKGZCzGea6CotZSofDBbMIh4hzWeDR+IgFZt6SC+GESAcY 2sMtlO5UHuSYK6Wys/+YvpusUyvMYLEGhMug43FAZER7ExjWABFUxvBGS1dWzNhj jhVM/vQWQbRaIcjR3lVu0t9ap3G3YHQ0dHnFeJJF6KG0plZ4emiiY8uWH+ErJWK3 pmXRxm5XJBOTSFI5nWwoydLsfWiboiNCdIGYSTLC+f8LVRA+Ov80yDcFXyzM2dqf jdkpvHp/Kwol0inKBZwiSr9O+NvQPSFWAV/1awALAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFkAdD43Un+ktmAhDhUn8o58zROAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q2OWJjMWQ1LTgyNjktNDk3Zi1hNTNhLWJiYjU1ODk2YWMyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCwwDQYJKoZIhvcNAQELBQADggEBAI2WThOlJX0o8TGLQn/tmK4KoBCR 9ErCsZjYLqCKPk/UHdvj2hLTR7yacToTpznsXwau55gijebv8NNsa+1aQts+itv8 M2qR0wnM+zz0NtQVLHXhYY6frDXO1voKlOkjzeAxSHWDzl3fNpHGZYeu1ZxDZtpE Kd85MwjZbZoveX5Nlpv6M30s0jlxmTRjgUGGeZUAbq98sF0i1iB7cuDBN+XTmOqT 0Yl/Hsid0oF7dt3PEnOpFqtAGY3uMyzrnNcnH8a2IeBW8T5bfKu1gOlwcXvu39gp grXGZNwOyDViV4kC/IpL6iBOWmHuvmCxsy1ih5U7wfn8xSf1bN0eKrdPLI4= -----END CERTIFICATE-----Generated at Sun Jul 6 08:50:06 2025 by rpki-client