$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd1d17be-044e-426e-9cb1-98a65edc2799.roa File: dd1d17be-044e-426e-9cb1-98a65edc2799.roa (raw, json) Hash identifier: NZORlQ+5t8NzRJ9tnRZRr8IAqd896q3tsqjhUBX+i8E= Subject key identifier: B2:3F:8F:C0:99:62:EC:FF:8E:A4:A0:CB:4A:EA:6E:54:87:4A:DB:33 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 754068E78680C23AA8C96DFAEAD89911348AFBBA Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd1d17be-044e-426e-9cb1-98a65edc2799.roa Signing time: Tue 19 Aug 2025 16:50:33 +0000 ROA not before: Tue 19 Aug 2025 16:50:33 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:40:68:e7:86:80:c2:3a:a8:c9:6d:fa:ea:d8:99:11:34:8a:fb:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 19 16:50:33 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=3ef7a387b84cc2b64a66df69bbb0e6de35b08b20445d49fcb689d98ac92cd90d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:57:b7:26:b4:fa:4d:2f:de:cb:f0:e9:7f:cc: ee:38:5e:4e:13:04:f7:96:7f:0c:3e:d3:8d:04:09: 22:05:42:4d:93:fe:05:6b:3e:fa:3b:02:a5:04:98: 5e:cc:05:f5:32:fb:4b:63:b0:2a:b5:85:22:9f:9a: 55:63:81:5e:fc:35:3a:47:07:3f:86:3b:af:17:7f: e5:d1:52:fc:01:25:5d:38:f6:2f:6a:14:e9:dd:b2: a4:f5:be:e5:27:a3:ac:01:62:47:8c:1e:d8:4c:4c: 3e:f2:fa:c5:dc:d0:7a:2c:27:23:a0:32:1b:26:5e: 21:00:a5:8f:70:ab:98:45:b3:81:19:10:a4:2d:73: d3:c7:df:26:bd:26:64:d3:63:9d:ea:8c:66:14:16: 2e:c8:1f:a4:41:99:6f:8f:57:60:27:ce:33:b7:de: 2e:92:fd:26:81:a8:72:a5:94:5b:d3:7c:83:00:24: 08:74:3f:49:8e:1c:be:d0:32:7a:b0:35:da:a8:1d: 14:3b:bf:91:ab:e2:e3:e6:95:82:fc:77:c4:b3:58: 56:ca:59:6e:42:26:62:34:4f:18:c0:b3:7b:4d:89: 07:7f:58:32:26:0c:ae:c3:75:3f:e1:a0:46:7b:b7: d1:a9:8d:94:f6:7e:c4:95:84:d1:03:6f:0c:d3:d7: d6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3F:8F:C0:99:62:EC:FF:8E:A4:A0:CB:4A:EA:6E:54:87:4A:DB:33 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd1d17be-044e-426e-9cb1-98a65edc2799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.56.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:28:d3:b7:c1:b3:66:b4:56:b4:36:e1:07:05:fc:63:3b:25: 07:e3:c9:e2:31:61:41:cd:12:8e:14:b5:8e:e0:40:da:dd:16: a1:27:e0:f6:ac:f9:b6:0e:cb:87:77:ea:90:58:5f:54:30:67: 31:0d:1b:62:6c:f8:78:4a:97:a3:fd:2c:5e:84:ff:5e:bc:e1: fa:28:da:84:e7:c7:a8:71:d2:66:16:fd:30:e7:d0:7b:4b:51: cf:3b:20:42:01:32:0b:ba:4c:38:d1:dd:65:20:d0:21:b3:7f: 40:46:40:8f:a7:97:79:67:88:90:57:ae:06:56:db:f5:bd:10: f5:e3:18:ad:be:da:b7:0a:b2:0b:ac:79:1a:01:f7:13:ec:ba: aa:eb:39:84:e0:3a:66:36:55:b2:24:a2:48:ff:6f:0b:40:35: 15:75:4a:da:cf:58:82:63:0f:63:13:c2:36:7a:70:3c:89:4c: 4f:68:45:43:c7:df:72:94:4d:e9:36:2a:e3:d5:b5:4f:ac:a5: 68:c3:53:a4:fe:b0:d8:ea:0a:50:e2:68:36:9d:cb:39:04:73: 1b:19:61:4c:21:4e:39:1b:68:f8:bb:50:d8:ad:fa:74:e6:71: ed:52:6d:0a:03:17:6d:30:11:02:8d:59:40:de:df:e1:5d:53: 04:b1:59:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdUBo54aAwjqoyW366tiZETSK+7owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE5MTY1MDMzWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWY3YTM4N2I4NGNjMmI2NGE2NmRmNjliYmIwZTZkZTM1 YjA4YjIwNDQ1ZDQ5ZmNiNjg5ZDk4YWM5MmNkOTBkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkV7cmtPpNL97L8Ol/zO44Xk4TBPeWfww+040ECSIFQk2T /gVrPvo7AqUEmF7MBfUy+0tjsCq1hSKfmlVjgV78NTpHBz+GO68Xf+XRUvwBJV04 9i9qFOndsqT1vuUno6wBYkeMHthMTD7y+sXc0HosJyOgMhsmXiEApY9wq5hFs4EZ EKQtc9PH3ya9JmTTY53qjGYUFi7IH6RBmW+PV2AnzjO33i6S/SaBqHKllFvTfIMA JAh0P0mOHL7QMnqwNdqoHRQ7v5Gr4uPmlYL8d8SzWFbKWW5CJmI0TxjAs3tNiQd/ WDImDK7DdT/hoEZ7t9GpjZT2fsSVhNEDbwzT19bXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsj+PwJli7P+OpKDLSupuVIdK2zMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RkMWQxN2JlLTA0NGUtNDI2ZS05Y2IxLTk4YTY1ZWRjMjc5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYDgwDQYJKoZIhvcNAQELBQADggEBAJwo07fBs2a0VrQ24QcF/GM7JQfj yeIxYUHNEo4UtY7gQNrdFqEn4Pas+bYOy4d36pBYX1QwZzENG2Js+HhKl6P9LF6E /1684foo2oTnx6hx0mYW/TDn0HtLUc87IEIBMgu6TDjR3WUg0CGzf0BGQI+nl3ln iJBXrgZW2/W9EPXjGK2+2rcKsguseRoB9xPsuqrrOYTgOmY2VbIkokj/bwtANRV1 StrPWIJjD2MTwjZ6cDyJTE9oRUPH33KUTek2KuPVtU+spWjDU6T+sNjqClDiaDad yzkEcxsZYUwhTjkbaPi7UNit+nTmce1SbQoDF20wEQKNWUDe3+FdUwSxWQY= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:03 2025 by rpki-client