$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fe10db4e-237b-4b32-b567-e9ebff17bb14.roa File: fe10db4e-237b-4b32-b567-e9ebff17bb14.roa (raw, json) Hash identifier: k/jCXZVv6YRt3+s3s3D8ggCerhXuBJDrPBnUZsf1ghc= Subject key identifier: 53:F3:F3:19:FF:89:85:D0:1B:0E:4E:9E:91:4C:4A:BF:2E:4C:5C:E7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1A9A5DA906E3A43CD6B706B48DADBD34C7D8C563 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fe10db4e-237b-4b32-b567-e9ebff17bb14.roa Signing time: Tue 19 Aug 2025 16:50:30 +0000 ROA not before: Tue 19 Aug 2025 16:50:30 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:9a:5d:a9:06:e3:a4:3c:d6:b7:06:b4:8d:ad:bd:34:c7:d8:c5:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 19 16:50:30 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=d424ffb70703199ed46e73b933808d5c64345aebbbd779e3614a11b82bf6f777, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:df:2e:9c:a6:60:32:d0:76:45:bf:ff:43:37: ec:6d:11:a2:6a:f5:42:c7:74:96:e6:de:a9:8c:ea: ac:1a:f4:ee:e9:08:33:e1:0a:9c:e6:0e:c5:54:78: 88:00:67:c2:42:59:27:87:d7:27:c3:03:55:6c:be: cb:5e:cf:a2:58:09:16:c8:25:40:90:54:d9:94:9f: 42:9e:86:6f:80:58:ca:96:0b:f5:99:45:f0:ec:40: df:f4:6f:81:c0:03:47:30:fb:9d:61:5e:39:74:c6: 42:3c:bb:a0:f6:ff:84:f0:ad:7f:5a:f2:ad:18:93: af:8b:97:91:d3:23:7d:f3:eb:0f:3c:1c:06:a2:ec: 9f:76:0d:b3:08:fb:85:18:a8:51:cf:03:9a:b0:79: c1:e7:85:43:89:cd:85:e9:9e:c8:14:33:33:02:66: 42:10:fd:90:7d:b9:d6:9a:de:89:c9:fb:19:e4:47: 1c:ac:32:b5:bc:0d:0b:26:c1:84:67:10:b7:43:38: 25:a2:cd:0e:77:17:8a:00:ef:cd:bf:e3:1f:2d:02: aa:fc:b3:ce:3b:9d:d5:74:68:35:ae:af:10:e5:c8: f6:2f:e5:53:c5:9b:8d:74:04:ad:11:30:90:4d:99: e7:0a:e4:52:69:f0:50:fb:68:b8:9b:ca:ee:7b:5c: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F3:F3:19:FF:89:85:D0:1B:0E:4E:9E:91:4C:4A:BF:2E:4C:5C:E7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fe10db4e-237b-4b32-b567-e9ebff17bb14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.48.0/22 Signature Algorithm: sha256WithRSAEncryption 04:1b:a6:6a:32:41:ad:28:e6:8f:27:52:c6:23:55:69:ca:c7: e0:45:a4:cf:ee:4f:f5:97:39:89:5a:48:af:ee:5d:e7:a4:5c: 48:37:ba:01:2c:53:ff:ca:9a:aa:1f:a2:04:69:36:35:85:4d: 3f:50:76:d2:a7:9f:19:90:c7:fc:99:78:29:22:ff:9c:b9:69: d5:21:83:3d:5e:02:c4:66:73:67:58:f2:68:d5:3a:31:23:3e: c9:d3:8a:ba:0d:39:1c:a4:6a:68:c7:a8:80:60:9d:36:12:29: a5:6f:44:fb:e5:b1:33:29:d2:50:4c:77:9a:d2:cc:7d:6d:d4: 40:1e:5a:67:fe:69:88:72:4d:44:6d:02:e2:8b:7c:3f:e9:db: 63:b9:1b:c4:dc:07:af:db:9d:b8:b7:64:8f:5b:b5:aa:a8:9d: 50:ca:e4:92:5d:8f:37:44:d2:5e:0a:82:16:b7:99:6d:87:94: 22:82:ad:94:87:6a:a8:b0:f5:c0:f2:47:ad:9e:b2:ef:43:68: 81:0d:38:a7:57:7c:d2:44:b5:72:fe:93:eb:ae:56:64:7e:1a: 5c:ce:ee:93:be:81:fc:9c:fb:b8:c3:c1:3c:3c:13:0b:de:08: 69:c1:b9:85:a6:6d:b4:9f:2a:37:59:67:78:ac:3e:cc:9d:e8: b2:55:ee:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGppdqQbjpDzWtwa0ja29NMfYxWMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODE5MTY1MDMwWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNDI0ZmZiNzA3MDMxOTllZDQ2ZTczYjkzMzgwOGQ1YzY0 MzQ1YWViYmJkNzc5ZTM2MTRhMTFiODJiZjZmNzc3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCb3y6cpmAy0HZFv/9DN+xtEaJq9ULHdJbm3qmM6qwa9O7p CDPhCpzmDsVUeIgAZ8JCWSeH1yfDA1Vsvstez6JYCRbIJUCQVNmUn0Kehm+AWMqW C/WZRfDsQN/0b4HAA0cw+51hXjl0xkI8u6D2/4TwrX9a8q0Yk6+Ll5HTI33z6w88 HAai7J92DbMI+4UYqFHPA5qwecHnhUOJzYXpnsgUMzMCZkIQ/ZB9udaa3onJ+xnk RxysMrW8DQsmwYRnELdDOCWizQ53F4oA782/4x8tAqr8s847ndV0aDWurxDlyPYv 5VPFm410BK0RMJBNmecK5FJp8FD7aLibyu57XMc3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU/PzGf+JhdAbDk6ekUxKvy5MXOcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2ZlMTBkYjRlLTIzN2ItNGIzMi1iNTY3LWU5ZWJmZjE3YmIxNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYDAwDQYJKoZIhvcNAQELBQADggEBAAQbpmoyQa0o5o8nUsYjVWnKx+BF pM/uT/WXOYlaSK/uXeekXEg3ugEsU//KmqofogRpNjWFTT9QdtKnnxmQx/yZeCki /5y5adUhgz1eAsRmc2dY8mjVOjEjPsnTiroNORykamjHqIBgnTYSKaVvRPvlsTMp 0lBMd5rSzH1t1EAeWmf+aYhyTURtAuKLfD/p22O5G8TcB6/bnbi3ZI9btaqonVDK 5JJdjzdE0l4Kgha3mW2HlCKCrZSHaqiw9cDyR62esu9DaIENOKdXfNJEtXL+k+uu VmR+GlzO7pO+gfyc+7jDwTw8EwveCGnBuYWmbbSfKjdZZ3isPsyd6LJV7r4= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:24 2025 by rpki-client