$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa File: e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa (raw, json) Hash identifier: ifo48tUV3b9E0PeG+PhoYL8QDpXgy4Zz+RAHvsaooAg= Subject key identifier: F1:4E:27:D6:CE:E5:DE:E0:18:24:12:A6:5E:C7:F0:1B:33:FD:24:5B Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5D9B49391F203AB4388B71A5881C95BDB27D97AE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa Signing time: Sat 31 May 2025 00:40:12 +0000 ROA not before: Sat 31 May 2025 00:40:12 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:9b:49:39:1f:20:3a:b4:38:8b:71:a5:88:1c:95:bd:b2:7d:97:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 31 00:40:12 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=3be798706685751ed64dd0ad3db4539abd40964b88297d277367f81a60294a49, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:40:60:17:48:f0:4c:ba:14:67:68:4b:9d: 6c:06:08:55:8c:8f:14:b7:4b:5b:ed:70:81:74:cc: 52:f1:54:fc:d0:03:8f:41:03:ff:7d:2e:37:90:9b: 22:9d:ba:a8:a2:92:6d:00:99:71:87:53:28:88:05: b0:38:6d:67:f1:2f:1c:c6:9e:ed:b6:e5:3d:6e:c3: 73:1e:a5:ab:ee:de:b8:af:91:0e:f4:87:1d:d3:5c: 75:9a:d9:ac:88:b4:eb:20:56:01:f0:9d:c3:9f:45: 2a:0e:f0:31:8c:5b:ad:91:ce:21:c4:27:42:93:9c: f5:15:91:3a:6f:b6:ef:e1:ff:37:a2:7c:26:61:2c: 89:99:01:57:7a:bd:95:7c:cb:dc:16:8c:18:40:2f: ce:54:03:65:92:b9:5d:5b:ca:33:a1:95:38:f5:1b: 21:3d:dc:cc:c4:43:47:40:5f:22:2e:d7:79:97:18: 5e:35:d5:e4:e7:ec:b0:e9:59:a4:0c:1d:e6:6e:99: 2b:85:0c:fc:33:02:e5:3e:07:d6:77:ae:b0:9f:51: 78:a7:d7:29:30:6b:db:40:4f:a6:cd:08:f9:fd:60: 71:17:65:e5:f0:92:0d:79:87:6c:21:99:e8:dc:4a: db:3a:fc:c5:83:70:b2:87:42:3f:0f:5c:d0:71:e9: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4E:27:D6:CE:E5:DE:E0:18:24:12:A6:5E:C7:F0:1B:33:FD:24:5B X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2b8a763-83e4-408e-854a-a2e9f68ca99e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.22.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:ca:d6:df:d6:0f:d7:31:bf:67:2c:8d:2d:fa:0d:f8:1e:34: 36:c8:37:21:81:95:f6:e6:be:cc:3f:f1:e7:f4:77:47:e3:90: 74:99:be:2d:11:a7:b2:4f:ac:08:16:0c:b0:58:e9:24:ac:0e: 1f:a9:cd:1f:d3:5b:6a:24:bf:9d:02:7e:c5:1c:84:44:2a:df: 90:0f:6e:77:8d:6a:63:75:b7:eb:03:98:e6:6b:58:46:03:69: a2:11:03:0a:b1:f8:02:4a:cd:4f:0a:eb:9b:b0:a0:86:8e:0b: bc:12:03:27:43:d7:16:cb:2a:7f:be:94:10:f2:21:6f:81:eb: e2:b4:4a:c1:6f:92:19:a3:e7:57:74:d4:6e:46:a3:3b:6b:37: 97:36:f4:5b:be:41:30:51:64:ac:90:55:8d:37:b6:41:07:f2: 99:6c:5b:e7:4d:8b:0f:cf:ef:fa:eb:5e:ce:12:4b:78:2f:ff: b0:3c:18:8d:15:cc:09:2f:d4:be:c8:7a:e0:83:de:8a:14:d0: 03:ad:40:46:95:4f:dd:52:8f:9b:c8:55:5a:97:90:ff:bd:6b: 02:7b:62:05:1e:de:b0:81:c8:4c:64:d1:3f:bb:72:c2:2c:9e: bb:67:17:fc:79:9c:80:82:b3:d5:3c:0c:ed:42:c9:42:c3:c7: 75:75:e4:0f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXZtJOR8gOrQ4i3GliByVvbJ9l64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTMxMDA0MDEyWhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYmU3OTg3MDY2ODU3NTFlZDY0ZGQwYWQzZGI0NTM5YWJk NDA5NjRiODgyOTdkMjc3MzY3ZjgxYTYwMjk0YTQ5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFZEBgF0jwTLoUZ2hLnWwGCFWMjxS3S1vtcIF0zFLxVPzQ A49BA/99LjeQmyKduqiikm0AmXGHUyiIBbA4bWfxLxzGnu225T1uw3Mepavu3riv kQ70hx3TXHWa2ayItOsgVgHwncOfRSoO8DGMW62RziHEJ0KTnPUVkTpvtu/h/zei fCZhLImZAVd6vZV8y9wWjBhAL85UA2WSuV1byjOhlTj1GyE93MzEQ0dAXyIu13mX GF411eTn7LDpWaQMHeZumSuFDPwzAuU+B9Z3rrCfUXin1ykwa9tAT6bNCPn9YHEX ZeXwkg15h2whmejcSts6/MWDcLKHQj8PXNBx6RRnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8U4n1s7l3uAYJBKmXsfwGzP9JFswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2UyYjhhNzYzLTgzZTQtNDA4ZS04NTRhLWEyZTlmNjhjYTk5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBYwDQYJKoZIhvcNAQELBQADggEBAC3K1t/WD9cxv2csjS36DfgeNDbI NyGBlfbmvsw/8ef0d0fjkHSZvi0Rp7JPrAgWDLBY6SSsDh+pzR/TW2okv50CfsUc hEQq35APbneNamN1t+sDmOZrWEYDaaIRAwqx+AJKzU8K65uwoIaOC7wSAydD1xbL Kn++lBDyIW+B6+K0SsFvkhmj51d01G5GoztrN5c29Fu+QTBRZKyQVY03tkEH8pls W+dNiw/P7/rrXs4SS3gv/7A8GI0VzAkv1L7IeuCD3ooU0AOtQEaVT91Sj5vIVVqX kP+9awJ7YgUe3rCByExk0T+7csIsnrtnF/x5nICCs9U8DO1CyULDx3V15A8= -----END CERTIFICATE-----Generated at Fri Jun 6 18:32:34 2025 by rpki-client