$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa File: 0be6e662-afc9-4903-9919-894f035a475c.roa (raw, json) Hash identifier: /Qm8+rBeyxeadHwRlpa67bz99GL/3seMC1YdY9sb6c8= Subject key identifier: 7E:D3:16:B3:34:6E:FF:E5:64:FE:F2:87:9B:E3:F7:B6:42:E6:2D:AC Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 245A7ACEE33F59B5374F1034942901DDE6D7EB54 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa Signing time: Tue 29 Jul 2025 18:20:28 +0000 ROA not before: Tue 29 Jul 2025 18:20:28 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:5a:7a:ce:e3:3f:59:b5:37:4f:10:34:94:29:01:dd:e6:d7:eb:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 29 18:20:28 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=c72db1aa569c6e7b78dfa8c5ea84b6d75c8685fd8b2f496fe97667c2b00c9bb9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ac:ee:8e:08:d2:0a:0c:30:2a:e8:91:ca:20: 19:52:bc:f7:bf:4e:74:2a:22:21:ee:63:e0:a3:1e: 7d:0c:5f:43:88:65:11:63:88:7f:b7:3d:15:70:61: 04:44:d5:eb:c0:ce:08:be:9d:2c:de:54:32:db:da: fa:31:99:5c:7d:fc:99:73:8c:6c:c9:9c:28:fb:58: b0:3d:35:96:fc:f8:2a:57:48:2f:7d:e2:d5:5c:69: 1e:b5:e2:ad:03:4c:54:dc:70:1f:db:22:72:72:46: 5e:7e:e3:71:fb:e4:d0:7a:7c:23:e8:b7:65:f5:53: 75:be:14:c7:7d:16:87:7b:28:a6:79:40:da:ef:70: c4:b2:0b:54:9d:01:63:c7:a3:22:7e:e4:e8:ff:57: 20:f2:7d:4f:84:89:ca:29:58:a7:ff:cb:eb:e6:8e: c1:27:9c:20:b6:22:45:22:d6:bf:4f:a9:e2:4c:1a: 99:e2:d8:38:28:76:ac:88:21:de:0c:13:ee:5a:05: e9:85:90:e9:cd:3f:c7:e8:58:b0:ce:fa:a5:5d:04: e1:12:e9:ee:3e:01:61:09:ed:5b:46:2a:12:f5:90: 88:c6:88:a1:1a:86:5b:4e:75:1d:09:3b:48:b4:83: 28:b6:29:ab:c8:c9:b0:91:2e:0b:76:23:7e:39:31: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D3:16:B3:34:6E:FF:E5:64:FE:F2:87:9B:E3:F7:B6:42:E6:2D:AC X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0be6e662-afc9-4903-9919-894f035a475c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.40.0/24 Signature Algorithm: sha256WithRSAEncryption 18:df:2d:14:b6:ca:21:86:d5:71:69:5c:66:63:60:f6:08:c2: ed:74:7d:10:7e:c5:a0:e9:4e:13:95:96:67:75:c8:a5:0d:98: 16:58:d5:49:7f:2c:93:15:55:60:32:a6:9d:f8:a5:20:ab:26: e1:04:53:a4:ab:6c:d4:cb:bc:57:4f:1d:09:b9:52:87:d6:da: 67:b9:8d:8b:12:e0:b1:b1:2e:f0:bf:60:f3:c1:da:5b:28:d1: bf:82:9b:9c:fe:0b:1b:9e:26:4d:1a:fa:56:ab:be:12:d0:77: 83:98:e7:ed:f2:fe:6d:b7:c1:66:3a:b2:16:85:ee:ea:1e:37: 35:44:21:83:42:ea:ae:2f:bb:e6:ed:38:aa:49:59:ed:7e:fc: 8c:8c:e7:88:13:df:85:41:01:f3:d9:45:af:89:f9:f9:20:a9: 7c:a6:f6:53:3f:f7:ba:f4:4b:41:5e:cd:f5:23:73:62:61:ac: a2:34:8c:76:1f:d3:98:67:11:97:a8:03:d6:f1:02:b1:20:e8: 1b:a6:56:b0:be:fb:54:a4:60:0a:cf:2a:07:08:f2:51:3c:0b: b6:6f:e9:c5:7a:a6:21:c7:6f:e8:6f:12:b6:7e:52:e7:f3:d9: f5:3d:da:bd:1b:d7:2f:ee:d8:65:80:fa:9e:8e:92:57:88:87: 6f:95:ab:2b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJFp6zuM/WbU3TxA0lCkB3ebX61QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI5MTgyMDI4WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzJkYjFhYTU2OWM2ZTdiNzhkZmE4YzVlYTg0YjZkNzVj ODY4NWZkOGIyZjQ5NmZlOTc2NjdjMmIwMGM5YmI5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPrO6OCNIKDDAq6JHKIBlSvPe/TnQqIiHuY+CjHn0MX0OI ZRFjiH+3PRVwYQRE1evAzgi+nSzeVDLb2voxmVx9/JlzjGzJnCj7WLA9NZb8+CpX SC994tVcaR614q0DTFTccB/bInJyRl5+43H75NB6fCPot2X1U3W+FMd9Fod7KKZ5 QNrvcMSyC1SdAWPHoyJ+5Oj/VyDyfU+EicopWKf/y+vmjsEnnCC2IkUi1r9PqeJM Gpni2DgodqyIId4ME+5aBemFkOnNP8foWLDO+qVdBOES6e4+AWEJ7VtGKhL1kIjG iKEahltOdR0JO0i0gyi2KavIybCRLgt2I345Ma2lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUftMWszRu/+Vk/vKHm+P3tkLmLawwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzBiZTZlNjYyLWFmYzktNDkwMy05OTE5LTg5NGYwMzVhNDc1Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCgwDQYJKoZIhvcNAQELBQADggEBABjfLRS2yiGG1XFpXGZjYPYIwu10 fRB+xaDpThOVlmd1yKUNmBZY1Ul/LJMVVWAypp34pSCrJuEEU6SrbNTLvFdPHQm5 UofW2me5jYsS4LGxLvC/YPPB2lso0b+Cm5z+CxueJk0a+larvhLQd4OY5+3y/m23 wWY6shaF7uoeNzVEIYNC6q4vu+btOKpJWe1+/IyM54gT34VBAfPZRa+J+fkgqXym 9lM/97r0S0FezfUjc2JhrKI0jHYf05hnEZeoA9bxArEg6BumVrC++1SkYArPKgcI 8lE8C7Zv6cV6piHHb+hvErZ+Uufz2fU92r0b1y/u2GWA+p6OkleIh2+Vqys= -----END CERTIFICATE-----Generated at Mon Aug 11 10:06:52 2025 by rpki-client