$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa File: 070f035c-929a-4988-90b1-3eb5df15552f.roa (raw, json) Hash identifier: eCXrmQ0Btw6WJzTS+CInOFKLXwFKD+O3Pi+Roxzrsew= Subject key identifier: A2:77:50:07:05:8A:83:93:A6:C2:2F:D1:7C:02:2E:06:CD:18:E8:2D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 23EB235A659F37064891D77723F5828215F04737 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa Signing time: Thu 05 Jun 2025 14:37:13 +0000 ROA not before: Thu 05 Jun 2025 14:37:13 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:eb:23:5a:65:9f:37:06:48:91:d7:77:23:f5:82:82:15:f0:47:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:37:13 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=082d895045ccf5f5321b18fc6b18c60f649fa46aaa6f06eade2006313a06a140, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:21:8f:20:4d:21:3c:c4:78:e2:73:c7:35:0e: 19:38:ca:53:9f:68:64:35:36:3a:d5:bd:6b:07:b9: bc:eb:4c:a7:d1:39:2c:f7:c7:c0:a0:3f:20:f2:c9: 8c:43:ba:39:6e:8e:2c:63:02:84:f2:d5:ef:de:11: d6:a3:a9:ad:b3:28:86:cb:71:0d:89:36:ca:7c:d8: fc:50:0a:10:11:c4:88:e4:5b:53:ae:12:46:7b:13: c2:70:3b:15:cf:6d:ab:de:bc:31:bc:92:ca:8d:fa: 1d:69:0a:90:19:85:46:de:48:38:51:5c:53:bf:f9: 54:25:cf:73:c9:68:c2:31:b8:c0:70:c8:0c:af:42: af:1b:ca:23:1b:4e:ed:ef:ea:81:e1:d6:43:57:9a: 60:28:6b:d7:59:9f:bc:20:a9:4e:bd:2e:ad:2a:02: b5:0b:05:bf:5a:82:c6:ab:1b:f9:e5:05:cf:8c:55: b6:50:75:c7:b1:47:af:65:05:0f:02:ff:b1:86:20: a6:c8:3f:d9:26:cb:44:c8:dd:3d:36:95:9e:21:dd: ea:77:03:c7:16:6c:b9:32:34:7d:33:06:6e:6e:f6: c0:07:55:ad:42:3e:b0:73:0b:a2:ac:9a:93:73:7c: 60:f7:22:5f:3b:4e:4c:94:e1:9b:67:ec:8f:39:8a: 73:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:77:50:07:05:8A:83:93:A6:C2:2F:D1:7C:02:2E:06:CD:18:E8:2D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/070f035c-929a-4988-90b1-3eb5df15552f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:33:3c:5f:7f:d3:a0:9a:db:cf:ef:f1:56:8b:c8:bb:8a:8c: 0c:f2:54:f1:4d:17:50:8a:d8:5e:52:e0:0f:96:6a:03:ca:f6: 07:85:bf:7b:98:21:c9:bd:3e:79:20:46:25:03:59:cb:9b:fb: da:df:ec:ee:27:1c:ec:f5:72:d1:93:b0:3b:e3:b1:42:f7:86: 90:e7:50:59:09:3b:5e:d7:8c:4f:0b:37:6f:5f:31:1e:dc:cd: 18:71:7b:92:63:8b:03:1b:26:57:54:61:c2:79:f8:ea:96:67: 9d:d4:21:a2:c7:87:c7:8c:f8:5b:8a:ae:cd:62:0f:b6:72:b2: 1d:86:38:2c:57:1d:4a:7d:df:1c:47:90:87:81:c5:2d:0a:9d: 5a:de:58:67:c2:a8:b2:d5:91:ab:e5:16:72:e5:a5:49:7e:f1: e9:ca:96:e9:6a:d5:a7:16:c6:44:95:79:4a:63:eb:51:aa:23: 8d:8b:ce:8f:4b:bf:36:e3:b0:e3:ea:5b:14:9e:7c:32:82:0d: 23:f7:21:8e:9f:30:1e:be:3c:da:26:34:81:0f:f0:05:3f:f9: 20:5e:3f:29:62:2d:54:f5:4c:7f:cc:0b:b2:3c:8c:93:de:4a: 0f:89:9a:c7:68:4e:3b:bc:fe:79:e5:d8:44:c7:85:27:9e:f3: 9e:c5:73:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI+sjWmWfNwZIkdd3I/WCghXwRzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzNzEzWhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODJkODk1MDQ1Y2NmNWY1MzIxYjE4ZmM2YjE4YzYwZjY0 OWZhNDZhYWE2ZjA2ZWFkZTIwMDYzMTNhMDZhMTQwMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCDIY8gTSE8xHjic8c1Dhk4ylOfaGQ1NjrVvWsHubzrTKfR OSz3x8CgPyDyyYxDujlujixjAoTy1e/eEdajqa2zKIbLcQ2JNsp82PxQChARxIjk W1OuEkZ7E8JwOxXPbavevDG8ksqN+h1pCpAZhUbeSDhRXFO/+VQlz3PJaMIxuMBw yAyvQq8byiMbTu3v6oHh1kNXmmAoa9dZn7wgqU69Lq0qArULBb9agsarG/nlBc+M VbZQdcexR69lBQ8C/7GGIKbIP9kmy0TI3T02lZ4h3ep3A8cWbLkyNH0zBm5u9sAH Va1CPrBzC6KsmpNzfGD3Il87TkyU4Ztn7I85inMrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUondQBwWKg5Omwi/RfAIuBs0Y6C0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3MGYwMzVjLTkyOWEtNDk4OC05MGIxLTNlYjVkZjE1NTUyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBAAozPF9/06Ca28/v8VaLyLuKjAzy VPFNF1CK2F5S4A+WagPK9geFv3uYIcm9PnkgRiUDWcub+9rf7O4nHOz1ctGTsDvj sUL3hpDnUFkJO17XjE8LN29fMR7czRhxe5JjiwMbJldUYcJ5+OqWZ53UIaLHh8eM +FuKrs1iD7Zysh2GOCxXHUp93xxHkIeBxS0KnVreWGfCqLLVkavlFnLlpUl+8enK lulq1acWxkSVeUpj61GqI42Lzo9LvzbjsOPqWxSefDKCDSP3IY6fMB6+PNomNIEP 8AU/+SBePyliLVT1TH/MC7I8jJPeSg+JmsdoTju8/nnl2ETHhSee857Fc6Y= -----END CERTIFICATE-----Generated at Sun Jun 15 08:43:53 2025 by rpki-client