$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa File: 07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa (raw, json) Hash identifier: CC7VG2zfmny3wSQGZjtO64/HZN70RpBWEaymv7kH0QM= Subject key identifier: 02:ED:35:68:04:AD:8B:C6:FE:43:AF:BE:AA:EA:6C:D4:6B:F5:25:CE Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0436BDC29D1D0F4726B872EFD231621445906A2D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa Signing time: Tue 29 Jul 2025 18:20:15 +0000 ROA not before: Tue 29 Jul 2025 18:20:15 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:36:bd:c2:9d:1d:0f:47:26:b8:72:ef:d2:31:62:14:45:90:6a:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 29 18:20:15 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=ddf1b5e2b903f7c53d61f27d8a0eef1cf8511dbe26fefc8a0d9686691d57f499, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6e:c9:20:2f:a7:77:f2:bb:d2:5b:9f:84:b2: 3b:c5:d3:17:1a:80:26:0e:5e:eb:9a:8b:ac:11:ad: c8:b9:1e:5e:03:3c:ab:a6:b4:6e:46:41:19:c2:d7: 63:83:b9:a9:8a:36:ba:50:73:26:aa:d0:bd:43:ac: 00:72:b3:dd:6c:5e:d6:98:a9:a4:bc:7d:f0:b1:5d: 74:6f:c2:fe:7f:b3:37:ef:fd:15:92:34:a4:f6:12: 2f:d2:d3:46:21:6c:8a:79:62:04:94:ab:48:31:7d: 50:20:ad:77:c4:ec:59:59:cc:fc:62:ad:aa:5b:7b: a2:6c:cc:18:ec:4c:c8:9d:25:35:34:ae:63:07:85: ff:79:d6:0c:d8:cd:ba:28:79:5d:3b:83:10:e7:76: 32:3d:a0:8a:0c:16:c2:02:8e:ac:57:72:ee:ef:5e: 62:26:e0:6d:de:0f:38:f3:0e:24:9e:73:80:c0:41: 1d:0a:a3:ad:e8:04:23:65:96:86:f0:8f:37:20:b4: e4:f6:19:5e:48:09:29:e9:e5:88:9f:1e:38:50:55: 5e:bc:75:3c:d3:55:95:de:48:81:2e:5a:fc:cf:3e: 08:98:a5:dc:11:7b:ef:91:08:03:17:fd:f3:13:2f: bc:dd:36:8f:7c:6c:8d:dd:4a:1d:d3:d5:66:9e:40: 18:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:ED:35:68:04:AD:8B:C6:FE:43:AF:BE:AA:EA:6C:D4:6B:F5:25:CE X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/07a1de96-5853-4c7c-aa68-5a55ec6b654e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.37.0/24 Signature Algorithm: sha256WithRSAEncryption 86:fd:c8:81:1d:30:1f:14:a3:f2:e1:8e:29:46:f4:98:9f:74: 01:3b:40:2d:d4:94:b2:42:65:b1:b1:41:b4:a1:d4:56:72:7a: b9:90:70:5f:a4:01:09:6c:0d:96:07:47:14:72:89:b0:88:2e: 48:4a:f8:be:c4:31:86:7d:ed:64:81:bf:9b:94:51:02:51:f0: 39:63:db:a0:53:bd:0d:78:1e:30:8a:a3:c0:7c:32:7f:bf:9b: b1:2b:92:14:25:c9:85:5e:77:2b:36:39:c0:4d:76:47:2f:38: f6:2f:84:15:1f:6b:a2:fc:92:7d:71:25:65:67:4f:1d:f7:7d: c4:3d:fa:6c:e5:5f:92:39:66:96:38:8b:4c:72:3b:26:20:27: 30:75:aa:18:96:87:5e:b1:f2:2f:98:47:34:16:b8:40:a1:d1: d0:de:ce:44:9b:3b:d4:56:26:fc:60:31:71:d6:fe:7c:ed:2e: c0:94:e8:76:3b:3d:fd:b4:8f:e5:1d:9c:86:cc:7c:71:f4:a3: 8a:38:68:eb:5d:a8:31:11:94:77:b4:e3:91:f1:c1:94:42:92: 62:f2:47:a5:a7:d5:0c:e3:7b:7f:01:48:c8:7b:08:61:5b:64: c8:85:54:fe:b8:06:53:5b:72:7e:4e:7c:09:f7:1b:43:b2:c7: 81:be:22:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBDa9wp0dD0cmuHLv0jFiFEWQai0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI5MTgyMDE1WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGYxYjVlMmI5MDNmN2M1M2Q2MWYyN2Q4YTBlZWYxY2Y4 NTExZGJlMjZmZWZjOGEwZDk2ODY2OTFkNTdmNDk5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxbskgL6d38rvSW5+EsjvF0xcagCYOXuuai6wRrci5Hl4D PKumtG5GQRnC12ODuamKNrpQcyaq0L1DrABys91sXtaYqaS8ffCxXXRvwv5/szfv /RWSNKT2Ei/S00YhbIp5YgSUq0gxfVAgrXfE7FlZzPxirapbe6JszBjsTMidJTU0 rmMHhf951gzYzbooeV07gxDndjI9oIoMFsICjqxXcu7vXmIm4G3eDzjzDiSec4DA QR0Ko63oBCNllobwjzcgtOT2GV5ICSnp5YifHjhQVV68dTzTVZXeSIEuWvzPPgiY pdwRe++RCAMX/fMTL7zdNo98bI3dSh3T1WaeQBglAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAu01aASti8b+Q6++qups1Gv1Jc4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA3YTFkZTk2LTU4NTMtNGM3Yy1hYTY4LTVhNTVlYzZiNjU0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCUwDQYJKoZIhvcNAQELBQADggEBAIb9yIEdMB8Uo/LhjilG9JifdAE7 QC3UlLJCZbGxQbSh1FZyermQcF+kAQlsDZYHRxRyibCILkhK+L7EMYZ97WSBv5uU UQJR8Dlj26BTvQ14HjCKo8B8Mn+/m7ErkhQlyYVedys2OcBNdkcvOPYvhBUfa6L8 kn1xJWVnTx33fcQ9+mzlX5I5ZpY4i0xyOyYgJzB1qhiWh16x8i+YRzQWuECh0dDe zkSbO9RWJvxgMXHW/nztLsCU6HY7Pf20j+UdnIbMfHH0o4o4aOtdqDERlHe045Hx wZRCkmLyR6Wn1Qzje38BSMh7CGFbZMiFVP64BlNbcn5OfAn3G0Oyx4G+Ikg= -----END CERTIFICATE-----Generated at Thu Aug 7 05:08:53 2025 by rpki-client