$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d6b05e37-7003-4a52-bdba-55defc5294de.roa File: d6b05e37-7003-4a52-bdba-55defc5294de.roa (raw, json) Hash identifier: oubKm6rVpdY589dSReDuq35d4TonVcO3tfqgk3Dfv2w= Subject key identifier: 6D:AB:69:96:2E:A4:CC:4C:AC:1F:B7:93:9F:0E:49:71:75:4F:11:4F Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4DD80095D81D213DA98E7B5007FAC6D9D562EED0 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d6b05e37-7003-4a52-bdba-55defc5294de.roa Signing time: Tue 03 Jun 2025 16:20:14 +0000 ROA not before: Tue 03 Jun 2025 16:20:14 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d8:00:95:d8:1d:21:3d:a9:8e:7b:50:07:fa:c6:d9:d5:62:ee:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 3 16:20:14 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=3d7db0f58146be03c85693f1ed8fb414a77dbdfef6a31fdf106d7d590d23a63c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e3:8e:8c:9b:c1:d8:a5:ef:ec:e1:3a:8b:18: ab:63:55:6b:f0:b5:fa:30:dc:71:59:f2:d7:5f:81: 44:05:7d:6f:38:73:63:55:65:2f:2d:1f:e1:c5:12: 2b:b5:ef:ff:d5:df:1a:47:ef:dd:e9:8d:9e:79:d7: 0d:b7:3b:18:3d:6c:d9:b9:c8:14:a6:d7:eb:2e:cd: 31:3a:e3:46:23:39:61:06:1d:9c:c5:78:b4:e8:6e: 27:41:7f:48:ff:7f:33:d2:ff:d4:13:12:f3:42:87: 2b:d8:48:e4:1b:f6:ac:d8:c3:28:57:9b:42:66:71: 68:a6:32:ed:b2:9e:0f:36:6c:04:a9:8e:45:0b:4d: b2:09:e8:be:00:1a:99:12:39:69:f2:db:df:16:28: 07:8d:b4:90:3c:ca:62:55:50:28:b9:56:9e:72:d1: db:16:7d:69:90:b9:8a:80:71:a1:bb:c1:8c:f6:b4: 15:d8:94:52:db:b8:13:65:88:5f:2d:78:95:8f:78: e2:9a:da:3f:f6:0f:81:10:b4:eb:a9:db:63:9e:d1: e2:88:8c:5c:52:31:dd:3f:e3:ec:58:d2:0b:9c:37: b5:23:33:90:48:b7:05:6d:15:05:3d:50:47:72:38: 75:1e:53:15:5d:ce:91:2e:54:98:bc:51:18:55:bc: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:AB:69:96:2E:A4:CC:4C:AC:1F:B7:93:9F:0E:49:71:75:4F:11:4F X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d6b05e37-7003-4a52-bdba-55defc5294de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.249.0/24 Signature Algorithm: sha256WithRSAEncryption 61:56:b7:97:79:31:4c:fd:66:5e:d2:0b:05:d3:47:72:5e:6e: 6e:f2:59:60:76:e6:36:39:ec:fc:8d:f7:bb:c1:af:1e:c9:d6: 79:76:fa:cf:52:b4:c6:88:19:25:50:b3:81:f1:de:37:26:08: 53:09:d2:b1:32:ad:bd:64:61:ee:1a:dc:1f:33:cc:bb:d5:2d: a8:ee:08:99:67:ea:7e:a8:5b:67:1a:87:ee:8e:6e:0b:76:75: ef:96:5e:68:3e:03:bf:6b:6b:ef:dc:6e:b0:b0:19:56:b7:a8: d5:f9:b7:19:ea:6c:29:c1:24:9a:54:b9:c4:0e:ec:d5:6d:08: f4:2f:46:02:a0:a5:8f:54:44:06:7f:b2:bc:1e:b5:d4:b1:26: db:46:63:9b:07:21:9c:0c:af:6e:03:f2:b1:66:c8:34:4a:db: d1:b2:5a:7b:d2:de:65:8b:1e:b7:e4:60:ed:40:6f:c9:82:55: ca:c4:2d:06:4f:1a:22:3a:fb:42:43:87:27:a8:28:d1:15:8a: dd:a0:b4:8b:69:1f:ba:da:29:42:13:bd:1e:0b:2d:92:64:f3: 5a:b6:7a:03:84:76:81:4a:d9:e9:dc:19:ea:1a:d5:58:51:13: 93:a8:40:c3:e2:cd:b4:21:cc:6f:8c:ad:e5:5d:96:53:a7:4a: 96:56:4b:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTdgAldgdIT2pjntQB/rG2dVi7tAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjAzMTYyMDE0WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZDdkYjBmNTgxNDZiZTAzYzg1NjkzZjFlZDhmYjQxNGE3 N2RiZGZlZjZhMzFmZGYxMDZkN2Q1OTBkMjNhNjNjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0446Mm8HYpe/s4TqLGKtjVWvwtfow3HFZ8tdfgUQFfW84 c2NVZS8tH+HFEiu17//V3xpH793pjZ551w23Oxg9bNm5yBSm1+suzTE640YjOWEG HZzFeLTobidBf0j/fzPS/9QTEvNChyvYSOQb9qzYwyhXm0JmcWimMu2yng82bASp jkULTbIJ6L4AGpkSOWny298WKAeNtJA8ymJVUCi5Vp5y0dsWfWmQuYqAcaG7wYz2 tBXYlFLbuBNliF8teJWPeOKa2j/2D4EQtOup22Oe0eKIjFxSMd0/4+xY0gucN7Uj M5BItwVtFQU9UEdyOHUeUxVdzpEuVJi8URhVvF1pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbatpli6kzEysH7eTnw5JcXVPEU8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q2YjA1ZTM3LTcwMDMtNGE1Mi1iZGJhLTU1ZGVmYzUyOTRkZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPkwDQYJKoZIhvcNAQELBQADggEBAGFWt5d5MUz9Zl7SCwXTR3Jebm7y WWB25jY57PyN97vBrx7J1nl2+s9StMaIGSVQs4Hx3jcmCFMJ0rEyrb1kYe4a3B8z zLvVLajuCJln6n6oW2cah+6Obgt2de+WXmg+A79ra+/cbrCwGVa3qNX5txnqbCnB JJpUucQO7NVtCPQvRgKgpY9URAZ/srwetdSxJttGY5sHIZwMr24D8rFmyDRK29Gy WnvS3mWLHrfkYO1Ab8mCVcrELQZPGiI6+0JDhyeoKNEVit2gtItpH7raKUITvR4L LZJk81q2egOEdoFK2encGeoa1VhRE5OoQMPizbQhzG+MreVdllOnSpZWSzA= -----END CERTIFICATE-----Generated at Wed Jun 4 11:26:55 2025 by rpki-client