$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/032f5679-c24a-4076-8fcb-bd755c81bb16.roa File: 032f5679-c24a-4076-8fcb-bd755c81bb16.roa (raw, json) Hash identifier: O8mCfMiwir4xuGBAXt6KU0IhBw5in8wJR8mtajfaekk= Subject key identifier: 88:74:51:E5:B7:91:81:74:5E:36:A5:D0:BB:BA:19:CE:55:80:91:98 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 29A352384F140599BCE0C2A6868FB7AEF80449B6 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/032f5679-c24a-4076-8fcb-bd755c81bb16.roa Signing time: Wed 06 Aug 2025 00:40:48 +0000 ROA not before: Wed 06 Aug 2025 00:40:48 +0000 ROA not after: Wed 10 Sep 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a3:52:38:4f:14:05:99:bc:e0:c2:a6:86:8f:b7:ae:f8:04:49:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 6 00:40:48 2025 GMT Not After : Sep 10 23:59:59 2025 GMT Subject: serialNumber=59ce6d9e226b71f0e584424c881b78acbff9d8798cf17cb8975fc2d49c21af71, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:06:29:9f:74:f6:d2:ef:c5:23:63:d2:34:db: 4c:17:85:19:d1:52:71:d0:66:66:a3:8a:81:9e:17: 48:fb:1b:6a:a2:26:93:2e:02:9f:84:3b:c6:fd:67: b5:4f:c4:12:72:2f:04:67:7c:ac:a8:7d:17:35:5c: ec:4a:8e:c9:8a:9b:8d:e5:20:ed:d5:1d:59:5f:79: 06:b3:5b:83:09:b1:e2:f4:41:f4:00:bd:7b:68:10: 6a:23:8b:d1:d7:f0:07:c2:46:0a:0d:12:24:cb:e4: 5d:84:b0:bb:1a:02:5d:a3:ac:28:61:27:3e:4c:a8: a1:6a:54:47:84:2a:c3:3a:44:82:36:34:b6:16:40: 18:b5:30:03:50:0d:af:3e:ab:b6:78:7d:5a:83:d2: 31:c9:91:1b:b2:7b:39:98:c6:7c:e0:74:db:17:b9: 10:a5:90:a3:c5:1e:0a:51:b7:95:de:53:22:ae:be: 34:4a:23:8a:81:c7:93:e7:7f:a2:7d:1d:d0:6d:22: 9f:45:1b:a8:d2:62:e8:e4:07:92:c0:f6:bf:41:d9: 49:09:80:98:44:db:82:e8:ec:d5:2f:ac:b9:77:33: ec:b8:0b:ed:a6:57:cd:d0:e5:9e:a3:d5:ee:b5:fc: a3:b7:b6:ad:9f:af:5e:86:9e:fe:6a:63:86:63:2e: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:74:51:E5:B7:91:81:74:5E:36:A5:D0:BB:BA:19:CE:55:80:91:98 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/032f5679-c24a-4076-8fcb-bd755c81bb16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.6.0/24 Signature Algorithm: sha256WithRSAEncryption 81:a8:ba:22:f8:75:08:21:a6:04:44:36:43:4c:b2:0c:d5:5b: 04:2e:4d:cf:47:23:7f:6b:1f:69:c3:3e:7b:77:67:8f:e2:ca: e7:2f:fb:60:84:9f:6e:7d:30:19:4f:7a:35:0d:0b:38:f9:e6: 0e:19:60:4c:f2:e5:0e:69:4d:9e:ac:2e:37:b2:16:ec:64:57: d3:b3:75:5a:8f:d7:6e:f9:8e:d7:58:57:3e:cf:fa:d8:78:a7: d8:b4:1a:a9:29:01:a9:0c:33:0e:bd:62:75:d5:71:ff:72:8c: 02:23:4a:ab:21:53:68:ec:9d:e9:d3:e7:0c:8c:7b:e5:fc:99: 7a:ce:49:69:b8:47:db:6f:b2:49:89:b3:18:a4:02:52:7b:59: 63:8b:7c:76:6b:a9:a1:cc:ad:c3:f2:2e:68:41:d0:1c:85:10: 6c:93:33:cf:48:aa:b1:18:68:20:f7:99:a0:d5:e8:37:2c:90: 0e:5d:f2:e7:a0:a9:c2:65:38:3d:bf:9b:bb:28:b7:ad:a8:d0: a1:43:85:3c:1a:44:3b:57:d2:38:8d:db:64:6d:05:07:87:f1: cf:a1:d9:14:15:26:80:2a:4b:39:fd:97:2a:a9:c4:45:d1:d9: d9:86:88:40:1c:ab:cb:77:eb:c8:15:9f:36:03:f6:15:bf:da: 41:29:8b:28 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKaNSOE8UBZm84MKmho+3rvgESbYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODA2MDA0MDQ4WhcNMjUwOTEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OWNlNmQ5ZTIyNmI3MWYwZTU4NDQyNGM4ODFiNzhhY2Jm ZjlkODc5OGNmMTdjYjg5NzVmYzJkNDljMjFhZjcxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfBimfdPbS78UjY9I020wXhRnRUnHQZmajioGeF0j7G2qi JpMuAp+EO8b9Z7VPxBJyLwRnfKyofRc1XOxKjsmKm43lIO3VHVlfeQazW4MJseL0 QfQAvXtoEGoji9HX8AfCRgoNEiTL5F2EsLsaAl2jrChhJz5MqKFqVEeEKsM6RII2 NLYWQBi1MANQDa8+q7Z4fVqD0jHJkRuyezmYxnzgdNsXuRClkKPFHgpRt5XeUyKu vjRKI4qBx5Pnf6J9HdBtIp9FG6jSYujkB5LA9r9B2UkJgJhE24Lo7NUvrLl3M+y4 C+2mV83Q5Z6j1e61/KO3tq2fr16Gnv5qY4ZjLjvnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiHRR5beRgXReNqXQu7oZzlWAkZgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzAzMmY1Njc5LWMyNGEtNDA3Ni04ZmNiLWJkNzU1YzgxYmIxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAYwDQYJKoZIhvcNAQELBQADggEBAIGouiL4dQghpgRENkNMsgzVWwQu Tc9HI39rH2nDPnt3Z4/iyucv+2CEn259MBlPejUNCzj55g4ZYEzy5Q5pTZ6sLjey FuxkV9OzdVqP1275jtdYVz7P+th4p9i0GqkpAakMMw69YnXVcf9yjAIjSqshU2js nenT5wyMe+X8mXrOSWm4R9tvskmJsxikAlJ7WWOLfHZrqaHMrcPyLmhB0ByFEGyT M89IqrEYaCD3maDV6DcskA5d8uegqcJlOD2/m7sot62o0KFDhTwaRDtX0jiN22Rt BQeH8c+h2RQVJoAqSzn9lyqpxEXR2dmGiEAcq8t368gVnzYD9hW/2kEpiyg= -----END CERTIFICATE-----Generated at Mon Aug 11 04:09:59 2025 by rpki-client