$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e4d62aec-ee54-47ea-ac30-2c49dfa9eb6f.roa File: e4d62aec-ee54-47ea-ac30-2c49dfa9eb6f.roa (raw, json) Hash identifier: Feq8VUTZRbMr7FiOg6p1rqD5+8M6l97b0iXH/kfbd9c= Subject key identifier: A0:B5:6C:CD:6A:9C:C2:9C:CC:B8:4F:59:25:1E:D0:E9:C2:48:A8:78 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3F258AB2EE61DE8A7261D8CFC6FAA0991FC21A32 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e4d62aec-ee54-47ea-ac30-2c49dfa9eb6f.roa Signing time: Tue 03 Jun 2025 16:20:08 +0000 ROA not before: Tue 03 Jun 2025 16:20:08 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:25:8a:b2:ee:61:de:8a:72:61:d8:cf:c6:fa:a0:99:1f:c2:1a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 3 16:20:08 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=08ca13649dd1dd3e67a1301c86fbbc20cdc635bfbcf23ea63cef168fd854c401, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0c:4c:54:ff:3d:4b:bc:d1:48:be:a5:4d:f3: 50:a2:6a:06:9c:72:8f:a7:57:fc:0c:d2:3a:c0:28: 45:8f:e8:19:62:c0:d0:6b:8f:91:05:9a:50:d5:8a: f2:f7:79:4b:c2:b1:28:1a:16:54:db:3e:81:98:99: 9b:fb:c8:47:da:af:b4:5f:51:99:6d:ac:68:9b:b8: e4:76:d6:59:4d:42:12:10:84:ca:ab:1d:82:2b:3b: e3:06:ff:43:65:86:b4:ef:4f:5e:6d:e0:fb:24:d9: b8:48:6d:28:9d:66:7f:56:8c:6a:a9:2e:c9:ba:fc: 13:7e:c9:3c:bb:b4:4d:d9:9b:c5:ce:4c:1a:08:f8: 63:8c:9a:64:1d:4d:26:be:83:93:ac:cb:86:10:87: eb:78:cd:0a:8e:bb:bc:fe:ce:9e:bd:2f:bc:c2:df: c4:2f:be:bf:b8:55:6c:be:25:87:66:73:d9:89:76: af:27:d5:57:21:71:06:5c:20:d9:a9:de:22:2b:15: e0:58:e8:d3:c4:a4:93:02:2b:68:fc:c6:2d:d9:75: 71:05:65:79:5e:1a:d5:48:2e:1b:8c:1e:93:1f:73: 2f:26:d5:e2:cf:c3:42:84:39:14:15:ca:0c:f8:db: 48:75:ab:8a:e0:0d:6e:88:cf:b7:71:26:02:f7:17: 70:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B5:6C:CD:6A:9C:C2:9C:CC:B8:4F:59:25:1E:D0:E9:C2:48:A8:78 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e4d62aec-ee54-47ea-ac30-2c49dfa9eb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.12.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d5:e8:07:56:fb:4d:29:5a:73:67:53:be:2a:67:8a:b5:52: d2:23:14:c3:9f:75:26:c3:e3:47:db:82:e5:4b:80:21:b3:cb: 15:d0:ab:fc:cc:83:5b:9f:ba:8a:14:05:ce:09:bc:36:11:71: e3:0a:bc:73:fb:3b:77:53:78:aa:43:28:8f:1f:e9:fb:6e:98: 9b:46:c2:bd:0a:3c:75:36:93:4f:1c:86:94:2b:ba:93:ca:ad: 04:dd:9e:df:d9:f8:4f:89:1d:5e:6c:f5:d7:68:03:8a:e3:4a: 9c:4e:4f:ef:55:70:c8:d4:07:25:fa:bb:82:b3:5f:5b:71:db: 19:14:b0:76:41:95:ff:c5:dd:a5:20:4a:2f:00:b9:d6:ef:3f: 61:19:fc:7d:5f:95:80:89:91:a9:39:2a:e7:36:bb:f0:b3:e2: 7b:57:d0:6e:10:10:8b:8e:36:b8:8e:c7:af:c5:9c:e7:56:c1: 09:f1:39:8e:0e:ed:da:d4:39:c2:b5:dc:c0:99:ee:52:74:dc: e2:6c:54:da:d9:04:3a:48:0e:0c:bf:80:d9:46:7e:fd:ce:04: 5e:f3:8a:dd:dc:44:86:0b:19:62:b9:3e:7d:d0:fe:0d:88:2e: 27:5e:c4:04:e8:18:97:75:46:7d:a4:a6:eb:80:63:f0:b9:83: 83:7e:f2:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPyWKsu5h3opyYdjPxvqgmR/CGjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjAzMTYyMDA4WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGNhMTM2NDlkZDFkZDNlNjdhMTMwMWM4NmZiYmMyMGNk YzYzNWJmYmNmMjNlYTYzY2VmMTY4ZmQ4NTRjNDAxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWDExU/z1LvNFIvqVN81Ciagacco+nV/wM0jrAKEWP6Bli wNBrj5EFmlDVivL3eUvCsSgaFlTbPoGYmZv7yEfar7RfUZltrGibuOR21llNQhIQ hMqrHYIrO+MG/0NlhrTvT15t4Psk2bhIbSidZn9WjGqpLsm6/BN+yTy7tE3Zm8XO TBoI+GOMmmQdTSa+g5Osy4YQh+t4zQqOu7z+zp69L7zC38Qvvr+4VWy+JYdmc9mJ dq8n1VchcQZcINmp3iIrFeBY6NPEpJMCK2j8xi3ZdXEFZXleGtVILhuMHpMfcy8m 1eLPw0KEORQVygz420h1q4rgDW6Iz7dxJgL3F3DpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoLVszWqcwpzMuE9ZJR7Q6cJIqHgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U0ZDYyYWVjLWVlNTQtNDdlYS1hYzMwLTJjNDlkZmE5ZWI2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAwwDQYJKoZIhvcNAQELBQADggEBAEDV6AdW+00pWnNnU74qZ4q1UtIj FMOfdSbD40fbguVLgCGzyxXQq/zMg1ufuooUBc4JvDYRceMKvHP7O3dTeKpDKI8f 6ftumJtGwr0KPHU2k08chpQrupPKrQTdnt/Z+E+JHV5s9ddoA4rjSpxOT+9VcMjU ByX6u4KzX1tx2xkUsHZBlf/F3aUgSi8AudbvP2EZ/H1flYCJkak5Kuc2u/Cz4ntX 0G4QEIuONriOx6/FnOdWwQnxOY4O7drUOcK13MCZ7lJ03OJsVNrZBDpIDgy/gNlG fv3OBF7zit3cRIYLGWK5Pn3Q/g2ILidexAToGJd1Rn2kpuuAY/C5g4N+8mM= -----END CERTIFICATE-----Generated at Sat Jun 7 12:30:22 2025 by rpki-client