$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2bb990f-fadc-4280-8d1a-b6ae8bb331a5.roa File: e2bb990f-fadc-4280-8d1a-b6ae8bb331a5.roa (raw, json) Hash identifier: VKrbPGiozvKn04/ynS6a6zsu72LLCmgrBTnLM+9/4dw= Subject key identifier: BA:24:84:76:FB:02:B9:23:0F:19:D0:F7:62:83:E8:15:EB:E3:17:52 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3486B21263A2F7BCC3E289757E14EDBE3F857F05 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2bb990f-fadc-4280-8d1a-b6ae8bb331a5.roa Signing time: Mon 30 Jun 2025 17:50:15 +0000 ROA not before: Mon 30 Jun 2025 17:50:15 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:86:b2:12:63:a2:f7:bc:c3:e2:89:75:7e:14:ed:be:3f:85:7f:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 30 17:50:15 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=de624fc898480aa7f53451e7b611343e20cf049c099d48eb9b97c2487e3ed211, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:02:6e:79:05:35:b3:02:66:0e:1a:9a:32:cf: 7c:90:ec:2a:20:a2:2c:85:2d:2d:21:d1:6c:15:f4: 1f:de:9b:4f:1b:88:1b:d3:8d:36:64:c2:28:5a:1e: ad:3c:fd:84:93:65:7b:74:52:92:0b:41:d8:af:20: bd:b3:8b:34:91:78:cd:40:b0:9c:c1:d9:6a:64:ed: a1:21:b7:11:99:81:5a:58:7e:b8:0a:0d:90:98:69: 77:d1:8a:b8:1e:4f:cd:df:83:79:f5:2e:c0:62:89: 20:d6:e6:b7:0b:b2:13:2f:8e:21:88:f0:97:f4:28: 1a:34:e7:01:af:63:6d:04:f4:02:3e:fa:86:a9:85: bf:c8:52:fb:8d:71:52:be:90:80:d0:d8:7e:84:b5: c0:49:ec:3f:64:10:fd:a2:3f:bf:4e:03:b5:14:50: c2:b2:1b:06:26:68:22:20:43:2b:40:7f:dd:4b:0b: 7c:02:9e:34:bc:ad:3f:c0:d2:49:ac:00:4b:cb:41: a2:21:fc:45:fa:13:f7:a1:2b:0c:c2:84:ce:ea:e1: 41:ab:6a:02:c7:1e:a4:a4:49:9f:ed:33:2d:d9:ba: 63:b1:5c:e8:d4:77:8e:06:01:75:3f:bd:b3:db:cf: b0:1c:72:6a:e9:71:27:84:83:e9:d7:c6:48:f6:df: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:24:84:76:FB:02:B9:23:0F:19:D0:F7:62:83:E8:15:EB:E3:17:52 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2bb990f-fadc-4280-8d1a-b6ae8bb331a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.80.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:e8:7d:3d:c7:05:58:c4:7c:b3:75:49:34:6d:d8:42:af:16: ff:30:28:c2:23:3b:f2:43:cd:ef:6c:68:09:6d:3e:35:25:6f: c5:c6:92:c6:2c:f6:41:b9:a4:ad:b5:48:e4:2d:49:dc:44:3c: 27:2e:1b:20:4d:f0:b0:37:15:b8:b0:ae:e7:98:8b:08:2f:aa: 61:42:cf:ea:8b:f2:0b:ed:34:0b:0c:36:33:31:11:56:9a:02: c5:1e:b0:d3:0b:cd:94:f9:21:2c:f2:a6:98:e3:00:97:58:75: 64:8e:03:70:25:25:84:4b:dc:01:34:99:e1:5f:0e:e0:9c:56: 88:46:cf:dd:7e:5c:1f:ca:8c:27:af:08:27:fe:0b:14:6b:4a: 54:c5:22:d1:5a:e1:fc:fb:a1:2d:d2:f8:13:b4:a1:ee:e0:79: 23:8f:fd:69:15:99:7f:84:db:fa:57:cd:b4:27:0f:0b:37:c0: 92:d0:07:05:57:36:6e:d8:1b:a3:7c:3e:36:ae:4e:83:31:56: 03:7e:48:a3:64:b4:e4:76:f6:00:5e:ee:bd:c5:54:5d:e4:83: eb:cf:7a:7e:72:a0:c5:63:b1:28:08:bc:b7:13:b4:9c:dc:52: 4c:64:df:e5:17:f9:64:96:13:fd:a6:f5:11:ae:b7:a7:c9:a5: 6f:42:1d:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNIayEmOi97zD4ol1fhTtvj+FfwUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjMwMTc1MDE1WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTYyNGZjODk4NDgwYWE3ZjUzNDUxZTdiNjExMzQzZTIw Y2YwNDljMDk5ZDQ4ZWI5Yjk3YzI0ODdlM2VkMjExMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqAm55BTWzAmYOGpoyz3yQ7CogoiyFLS0h0WwV9B/em08b iBvTjTZkwihaHq08/YSTZXt0UpILQdivIL2zizSReM1AsJzB2Wpk7aEhtxGZgVpY frgKDZCYaXfRirgeT83fg3n1LsBiiSDW5rcLshMvjiGI8Jf0KBo05wGvY20E9AI+ +oaphb/IUvuNcVK+kIDQ2H6EtcBJ7D9kEP2iP79OA7UUUMKyGwYmaCIgQytAf91L C3wCnjS8rT/A0kmsAEvLQaIh/EX6E/ehKwzChM7q4UGragLHHqSkSZ/tMy3ZumOx XOjUd44GAXU/vbPbz7AccmrpcSeEg+nXxkj237fRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuiSEdvsCuSMPGdD3YoPoFevjF1IwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2UyYmI5OTBmLWZhZGMtNDI4MC04ZDFhLWI2YWU4YmIzMzFhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYFAwDQYJKoZIhvcNAQELBQADggEBAGvofT3HBVjEfLN1STRt2EKvFv8w KMIjO/JDze9saAltPjUlb8XGksYs9kG5pK21SOQtSdxEPCcuGyBN8LA3FbiwrueY iwgvqmFCz+qL8gvtNAsMNjMxEVaaAsUesNMLzZT5ISzyppjjAJdYdWSOA3AlJYRL 3AE0meFfDuCcVohGz91+XB/KjCevCCf+CxRrSlTFItFa4fz7oS3S+BO0oe7geSOP /WkVmX+E2/pXzbQnDws3wJLQBwVXNm7YG6N8PjauToMxVgN+SKNktOR29gBe7r3F VF3kg+vPen5yoMVjsSgIvLcTtJzcUkxk3+UX+WSWE/2m9RGut6fJpW9CHd0= -----END CERTIFICATE-----Generated at Tue Jul 1 00:47:31 2025 by rpki-client