$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/09e78394-d99d-49c9-87f9-96be1ed5934c.roa File: 09e78394-d99d-49c9-87f9-96be1ed5934c.roa (raw, json) Hash identifier: J5s+9HgrG8K95EKYI07ovGHEmYqGODuNHBdbD+4/kaY= Subject key identifier: D8:98:D1:8C:E9:1F:F8:49:39:77:A7:CC:05:A1:45:04:4F:FA:C3:CB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5BB84698EE8C91454E89C94033D9CB92C8883757 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/09e78394-d99d-49c9-87f9-96be1ed5934c.roa Signing time: Tue 29 Jul 2025 18:30:12 +0000 ROA not before: Tue 29 Jul 2025 18:30:12 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b8:46:98:ee:8c:91:45:4e:89:c9:40:33:d9:cb:92:c8:88:37:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 29 18:30:12 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=6fa884e6206ee4f45c734754792c26247af933722b940a8cd60bd8162e1469e5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:39:68:93:7d:3e:18:df:56:ac:c5:04:62: c2:a2:61:f1:77:72:f0:63:18:9c:f6:94:ee:b1:5d: 20:39:e0:00:58:4b:70:07:9c:d4:1c:e7:ea:6d:57: 95:b9:31:4e:e2:aa:ad:ea:dc:60:c4:42:79:0b:2f: 2c:ff:2e:8f:e1:a0:b5:93:14:90:7d:ce:43:e3:31: 92:9f:80:e8:2b:d8:b9:e8:61:f5:76:8f:dd:c9:a6: fb:38:36:53:dd:eb:0d:85:ef:c1:bb:5c:d5:cb:5e: 50:61:b9:fb:be:82:1b:32:1f:05:d8:f2:5f:04:af: 2b:dc:da:c5:26:33:dd:4e:9b:f4:47:fd:13:c5:52: 90:db:4f:c8:29:7d:c1:00:37:5c:97:ec:00:74:de: 75:52:df:9b:4b:ce:22:34:5c:ae:72:0e:f4:28:30: 24:72:e3:a5:08:d9:0a:f7:74:5a:cc:c4:98:ac:0b: 2e:b0:d5:5f:dd:0e:4c:d6:a9:3e:fd:79:ba:19:5c: b9:01:2f:49:6b:01:93:77:8a:7b:fc:e3:8b:89:19: 61:7b:5f:8c:72:63:28:46:80:21:aa:77:d4:b7:b8: 25:d4:7b:f9:fb:86:60:dc:8e:42:5c:9d:c8:78:22: aa:32:e9:f2:39:9a:0e:08:7b:74:5e:f9:d9:b4:b7: 81:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:98:D1:8C:E9:1F:F8:49:39:77:A7:CC:05:A1:45:04:4F:FA:C3:CB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/09e78394-d99d-49c9-87f9-96be1ed5934c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.42.0/24 Signature Algorithm: sha256WithRSAEncryption 45:66:16:e5:d5:f5:fc:5b:16:65:1b:12:de:38:ca:2e:88:b5: cc:83:25:9d:5d:db:7b:82:a8:8b:98:3a:e7:85:ad:54:ec:90: f7:2e:e0:98:64:5d:21:89:f5:87:28:2e:b0:17:9a:49:fc:1b: 4d:a9:ba:32:d7:2b:36:49:ce:68:2a:38:f6:f1:fc:e7:61:65: 9e:52:30:2f:ff:0a:30:f6:dd:51:6a:1d:96:ba:9f:e1:13:97: bc:82:47:da:da:47:d4:b3:e4:a1:07:f0:3a:0d:12:b9:cf:1a: ec:ee:6f:e8:03:29:f9:ac:19:3e:1f:7e:41:b8:81:d7:13:26: 8e:6c:80:37:46:d9:0e:0d:7b:0f:31:b1:b0:fe:7b:1a:a0:5b: 05:96:85:39:75:7b:e4:82:3a:5b:d2:de:38:2e:28:66:ad:7a: 1d:89:fa:eb:a3:40:cc:87:69:29:71:29:bd:92:ef:0f:da:4d: 31:5a:2d:77:a8:fe:6d:fe:3a:d4:45:58:76:b0:69:ef:7f:48: c6:07:5d:f1:b1:3a:44:a2:75:e9:0b:d9:d0:2c:48:0f:8e:bb: 49:75:00:1a:64:cf:7e:4a:55:e1:fa:9f:dd:34:f4:ca:ba:f8: 55:21:d5:38:f1:c9:3a:dc:6e:3e:c2:89:93:2d:a0:9d:23:02: c3:a8:f4:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW7hGmO6MkUVOiclAM9nLksiIN1cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI5MTgzMDEyWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmE4ODRlNjIwNmVlNGY0NWM3MzQ3NTQ3OTJjMjYyNDdh ZjkzMzcyMmI5NDBhOGNkNjBiZDgxNjJlMTQ2OWU1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFbDlok30+GN9WrMUEYsKiYfF3cvBjGJz2lO6xXSA54ABY S3AHnNQc5+ptV5W5MU7iqq3q3GDEQnkLLyz/Lo/hoLWTFJB9zkPjMZKfgOgr2Lno YfV2j93Jpvs4NlPd6w2F78G7XNXLXlBhufu+ghsyHwXY8l8Eryvc2sUmM91Om/RH /RPFUpDbT8gpfcEAN1yX7AB03nVS35tLziI0XK5yDvQoMCRy46UI2Qr3dFrMxJis Cy6w1V/dDkzWqT79eboZXLkBL0lrAZN3inv844uJGWF7X4xyYyhGgCGqd9S3uCXU e/n7hmDcjkJcnch4Iqoy6fI5mg4Ie3Re+dm0t4GLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2JjRjOkf+Ek5d6fMBaFFBE/6w8swHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzA5ZTc4Mzk0LWQ5OWQtNDljOS04N2Y5LTk2YmUxZWQ1OTM0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCowDQYJKoZIhvcNAQELBQADggEBAEVmFuXV9fxbFmUbEt44yi6ItcyD JZ1d23uCqIuYOueFrVTskPcu4JhkXSGJ9YcoLrAXmkn8G02pujLXKzZJzmgqOPbx /OdhZZ5SMC//CjD23VFqHZa6n+ETl7yCR9raR9Sz5KEH8DoNErnPGuzub+gDKfms GT4ffkG4gdcTJo5sgDdG2Q4New8xsbD+exqgWwWWhTl1e+SCOlvS3jguKGateh2J +uujQMyHaSlxKb2S7w/aTTFaLXeo/m3+OtRFWHawae9/SMYHXfGxOkSidekL2dAs SA+Ou0l1ABpkz35KVeH6n9009Mq6+FUh1TjxyTrcbj7CiZMtoJ0jAsOo9Ck= -----END CERTIFICATE-----Generated at Wed Aug 6 16:13:06 2025 by rpki-client