$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fca6d788-8e6d-42aa-9c3e-b71d843f1602.roa File: fca6d788-8e6d-42aa-9c3e-b71d843f1602.roa (raw, json) Hash identifier: fKvbw8o84pa23aMYoFZFTDAp9TEJQ9ke/78lbVzQfgs= Subject key identifier: 13:FC:3E:B9:E6:DE:57:58:E5:92:AC:35:56:18:46:E2:E9:B3:2B:D6 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0FADDE5614DA3710BB1D4E3BE1367301F8447C1B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fca6d788-8e6d-42aa-9c3e-b71d843f1602.roa Signing time: Fri 16 May 2025 17:30:14 +0000 ROA not before: Fri 16 May 2025 17:30:14 +0000 ROA not after: Fri 20 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ad:de:56:14:da:37:10:bb:1d:4e:3b:e1:36:73:01:f8:44:7c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 16 17:30:14 2025 GMT Not After : Jun 20 23:59:59 2025 GMT Subject: serialNumber=54f08c7e8e0649a320a9d32a95955a257cd6411ced78286732af32bb4302ba7b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:23:94:db:18:3e:7f:9a:68:e0:16:75:d3:f4: b5:01:99:bc:8f:e5:55:61:5e:a7:54:b7:df:06:7e: 76:c3:85:3e:ed:8e:ac:1e:d9:68:98:fa:55:22:e6: ad:a0:34:39:fb:03:57:a2:f9:f3:ef:a5:15:0a:30: be:22:d3:22:e8:98:a8:94:ca:f8:36:57:81:cc:a3: 0c:1c:d8:dd:4c:60:9f:c3:80:f3:05:ad:e5:90:6c: c6:43:01:45:99:cd:f9:c4:97:1d:e8:bb:07:9f:dc: 5d:a8:68:43:b1:df:2a:4e:85:a8:e2:fb:3e:0e:c9: 3d:84:5a:2a:11:b8:e3:19:86:32:e0:30:de:bc:98: a1:52:7d:22:d1:a3:d6:65:9a:4a:d2:e4:6d:da:53: aa:b6:8b:00:21:38:a0:f9:ab:b0:eb:46:1a:b8:94: ac:64:76:ac:9a:1f:d4:ae:2e:51:40:5b:9c:d4:38: e3:a4:47:4d:7f:8b:bf:6f:92:7a:55:8d:ce:cd:5e: fb:b7:36:84:cb:f2:df:e7:10:bf:92:85:0d:03:80: d6:a3:0b:50:56:7f:c6:a1:60:db:3e:6b:69:43:e5: 0b:db:e6:c6:0e:fd:c0:12:26:e7:33:d3:54:a3:d1: ee:74:08:18:5d:61:34:c3:fb:05:21:0d:e1:2b:df: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FC:3E:B9:E6:DE:57:58:E5:92:AC:35:56:18:46:E2:E9:B3:2B:D6 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fca6d788-8e6d-42aa-9c3e-b71d843f1602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.245.0/24 Signature Algorithm: sha256WithRSAEncryption 94:6c:93:6f:b9:6d:dc:fb:c1:cd:7d:b4:92:84:b4:e4:3c:6c: 90:d2:b3:55:89:e6:76:0f:d6:94:f7:fc:11:66:ff:dd:e6:b0: 31:28:ae:66:62:6a:fa:65:b3:4a:42:9f:2f:59:fb:f1:b4:23: 90:02:bd:ab:7b:15:51:fe:d6:96:c7:bd:c5:3e:0d:fc:c5:3c: 1e:a2:31:b3:da:63:df:c3:11:67:c3:7a:dd:a9:87:69:74:3e: cd:8e:43:b1:dc:c7:e5:8c:aa:0b:36:64:13:5b:16:bb:75:3e: b0:25:a2:be:60:2c:7c:eb:c8:17:8b:9a:09:95:dc:09:a6:9d: b1:72:9e:34:af:bf:1f:26:8d:78:96:6e:79:71:37:69:fe:de: b5:26:49:17:5d:9d:5f:69:ae:35:c7:bd:2f:30:68:a0:16:15: f0:f0:84:50:05:b4:9c:b2:30:22:5c:46:11:a9:b4:1f:e8:dd: fd:13:02:fa:4d:25:61:b7:2b:c5:6a:ad:2e:e2:3f:2c:e7:2b: 50:5e:2e:52:34:5d:dd:a1:41:e8:eb:b6:1b:58:a1:5b:65:1c: 82:85:2b:06:9a:61:e1:6e:63:54:69:6b:4d:80:93:0f:74:18: e8:90:8e:e6:fc:35:43:de:18:3d:93:62:6b:f8:ad:e7:fa:4a: b1:56:ae:6d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD63eVhTaNxC7HU474TZzAfhEfBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTE2MTczMDE0WhcNMjUwNjIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NGYwOGM3ZThlMDY0OWEzMjBhOWQzMmE5NTk1NWEyNTdj ZDY0MTFjZWQ3ODI4NjczMmFmMzJiYjQzMDJiYTdiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTI5TbGD5/mmjgFnXT9LUBmbyP5VVhXqdUt98GfnbDhT7t jqwe2WiY+lUi5q2gNDn7A1ei+fPvpRUKML4i0yLomKiUyvg2V4HMowwc2N1MYJ/D gPMFreWQbMZDAUWZzfnElx3ouwef3F2oaEOx3ypOhaji+z4OyT2EWioRuOMZhjLg MN68mKFSfSLRo9ZlmkrS5G3aU6q2iwAhOKD5q7DrRhq4lKxkdqyaH9SuLlFAW5zU OOOkR01/i79vknpVjc7NXvu3NoTL8t/nEL+ShQ0DgNajC1BWf8ahYNs+a2lD5Qvb 5sYO/cASJucz01Sj0e50CBhdYTTD+wUhDeEr362RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE/w+uebeV1jlkqw1VhhG4umzK9YwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2ZjYTZkNzg4LThlNmQtNDJhYS05YzNlLWI3MWQ4NDNmMTYwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPUwDQYJKoZIhvcNAQELBQADggEBAJRsk2+5bdz7wc19tJKEtOQ8bJDS s1WJ5nYP1pT3/BFm/93msDEormZiavpls0pCny9Z+/G0I5ACvat7FVH+1pbHvcU+ DfzFPB6iMbPaY9/DEWfDet2ph2l0Ps2OQ7Hcx+WMqgs2ZBNbFrt1PrAlor5gLHzr yBeLmgmV3AmmnbFynjSvvx8mjXiWbnlxN2n+3rUmSRddnV9prjXHvS8waKAWFfDw hFAFtJyyMCJcRhGptB/o3f0TAvpNJWG3K8VqrS7iPyznK1BeLlI0Xd2hQejrthtY oVtlHIKFKwaaYeFuY1Rpa02Akw90GOiQjub8NUPeGD2TYmv4ref6SrFWrm0= -----END CERTIFICATE-----Generated at Wed Jun 4 11:11:27 2025 by rpki-client