$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa File: 040e375f-0cc8-46f8-8435-facc3d4d127e.roa (raw, json) Hash identifier: N/Oj/bhr0/yHUX+tSN2xFB/hoMKAwv9pO5DmuNaNObs= Subject key identifier: E6:0B:20:13:5F:9D:57:5D:BF:0D:02:96:1F:6F:1E:64:3C:51:F6:01 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6B87145A4885DC7EC2D21F3A3EA8C578D2A1E4DD Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa Signing time: Thu 31 Jul 2025 01:51:59 +0000 ROA not before: Thu 31 Jul 2025 01:51:59 +0000 ROA not after: Thu 04 Sep 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:87:14:5a:48:85:dc:7e:c2:d2:1f:3a:3e:a8:c5:78:d2:a1:e4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 31 01:51:59 2025 GMT Not After : Sep 4 23:59:59 2025 GMT Subject: serialNumber=42a8d90a5572b61e043e181514c5ceb4794af5cce76ebbb7742829cc1be978d7, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:91:78:f5:f1:b3:4e:ae:03:e7:eb:8c:74: 78:44:e1:d8:b9:82:75:9a:1e:b1:ea:7d:13:fa:23: ce:e9:82:88:70:99:09:5f:9d:95:50:91:f9:a0:b6: 2a:ff:d5:80:53:ae:82:f0:33:d1:a0:0a:9a:1c:02: 7a:b8:6c:56:2f:60:f5:e0:c4:c1:e2:68:dc:a7:7a: e9:3b:c1:2c:1d:d5:12:86:dc:75:ee:54:06:29:1a: c6:84:0f:66:1b:ef:88:fd:57:d4:4b:de:d9:c3:69: 68:7a:b6:b6:09:f1:60:06:45:20:17:44:92:73:43: b4:91:4c:00:dd:b2:16:fd:61:18:84:58:26:af:a7: 6f:f3:f0:a6:b8:4e:21:e4:a4:c1:73:c0:01:ec:04: 81:24:f1:a0:dd:12:b0:3d:23:ac:58:ff:0c:d5:29: 62:63:d6:ac:1e:80:94:03:1f:a9:34:87:a1:c4:ea: 06:14:c1:c5:a8:8c:f7:f8:d9:c6:d4:b7:89:a2:19: 64:b7:6a:48:4a:ef:48:c0:0e:da:23:e0:67:09:a9: 92:af:7e:84:fd:bb:04:32:dd:6e:9b:c3:d3:00:e2: b7:9c:c8:f5:a9:de:f4:6e:6b:46:2f:60:75:70:07: fd:51:a7:b0:8b:c2:cc:ad:17:e7:d8:43:5b:ec:ba: bd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0B:20:13:5F:9D:57:5D:BF:0D:02:96:1F:6F:1E:64:3C:51:F6:01 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/040e375f-0cc8-46f8-8435-facc3d4d127e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:3e:cc:f8:8b:7c:41:a6:12:c3:31:f8:32:12:4d:ad:96:93: d5:93:1a:c8:04:d5:19:3f:eb:1e:da:d8:b5:ae:b5:f4:e1:6c: 0a:33:80:e4:ea:c5:2c:3e:28:13:f7:c4:8a:2b:ee:8c:c1:0a: ff:21:28:0a:f0:8b:dd:c8:32:66:d2:6a:5d:5e:c8:4a:8a:11: b0:4b:69:7c:af:98:8e:31:65:ce:4f:97:99:4a:83:34:3d:d2: 4a:a2:90:9c:97:67:ed:90:26:c2:39:30:3e:91:3e:16:f3:aa: 2e:cb:2e:58:bb:b5:21:15:0e:3d:e2:5d:67:9e:0a:a4:fb:54: f6:f4:be:28:e9:05:ed:1e:eb:c9:30:a4:5e:a5:d5:88:78:e7: 31:98:a1:9c:f2:19:be:20:a0:9d:e4:d1:f8:ac:27:e6:1c:f5: 32:70:3c:8c:8b:69:74:24:64:0e:d1:99:1f:de:ac:50:8a:6d: a0:26:e7:c1:e4:a9:02:34:0f:4f:68:1f:a4:94:24:bc:b4:a1: 03:3c:7d:84:c2:f4:72:7d:01:e5:8b:3d:d6:af:84:f6:d2:1c: 2e:a7:b3:43:53:bb:66:52:fe:f9:76:59:cb:67:fd:25:fc:96: 18:0b:32:da:5b:e4:a2:1e:b3:6f:68:16:04:74:85:26:46:84: fb:40:20:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa4cUWkiF3H7C0h86PqjFeNKh5N0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzMxMDE1MTU5WhcNMjUwOTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MmE4ZDkwYTU1NzJiNjFlMDQzZTE4MTUxNGM1Y2ViNDc5 NGFmNWNjZTc2ZWJiYjc3NDI4MjljYzFiZTk3OGQ3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCI3ZF49fGzTq4D5+uMdHhE4di5gnWaHrHqfRP6I87pgohw mQlfnZVQkfmgtir/1YBTroLwM9GgCpocAnq4bFYvYPXgxMHiaNyneuk7wSwd1RKG 3HXuVAYpGsaED2Yb74j9V9RL3tnDaWh6trYJ8WAGRSAXRJJzQ7SRTADdshb9YRiE WCavp2/z8Ka4TiHkpMFzwAHsBIEk8aDdErA9I6xY/wzVKWJj1qwegJQDH6k0h6HE 6gYUwcWojPf42cbUt4miGWS3akhK70jADtoj4GcJqZKvfoT9uwQy3W6bw9MA4rec yPWp3vRua0YvYHVwB/1Rp7CLwsytF+fYQ1vsur0xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5gsgE1+dV12/DQKWH28eZDxR9gEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA0MGUzNzVmLTBjYzgtNDZmOC04NDM1LWZhY2MzZDRkMTI3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAI8+zPiLfEGmEsMx+DISTa2Wk9WT GsgE1Rk/6x7a2LWutfThbAozgOTqxSw+KBP3xIor7ozBCv8hKArwi93IMmbSal1e yEqKEbBLaXyvmI4xZc5Pl5lKgzQ90kqikJyXZ+2QJsI5MD6RPhbzqi7LLli7tSEV Dj3iXWeeCqT7VPb0vijpBe0e68kwpF6l1Yh45zGYoZzyGb4goJ3k0fisJ+Yc9TJw PIyLaXQkZA7RmR/erFCKbaAm58HkqQI0D09oH6SUJLy0oQM8fYTC9HJ9AeWLPdav hPbSHC6ns0NTu2ZS/vl2Wctn/SX8lhgLMtpb5KIes29oFgR0hSZGhPtAIGw= -----END CERTIFICATE-----Generated at Mon Aug 11 04:08:49 2025 by rpki-client