$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa File: 11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa (raw, json) Hash identifier: IzMa4WUdzyEjhQlqJ8BlCOAUb/MYMk7HDcnArPRQrnU= Subject key identifier: B9:4E:EC:6C:35:2B:23:54:89:84:FB:71:13:83:A3:8D:68:0D:C0:18 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 52993DD222EE397A4F8B27EC5292899EB4A82C0D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa Signing time: Tue 15 Apr 2025 00:50:28 +0000 ROA not before: Tue 15 Apr 2025 00:50:28 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:99:3d:d2:22:ee:39:7a:4f:8b:27:ec:52:92:89:9e:b4:a8:2c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 15 00:50:28 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=8ac24a892b08c3ce3c5a927b5c175993a214f9fc5cc3d360df79b0edc85f04b1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ea:b2:24:9b:07:d5:7a:76:34:a5:c5:b5:cf: c3:39:7e:12:13:5d:69:a9:69:15:63:dd:64:f1:7f: e0:29:2d:99:9a:55:d5:dd:de:44:17:16:fb:eb:d5: 15:61:d0:cc:03:9e:0e:f7:d9:b4:f5:84:bb:a3:8f: c8:fd:85:dd:89:ed:e2:dd:b8:21:c0:da:45:d3:28: 11:b0:3f:d6:8c:79:9c:fe:30:79:e1:4d:cb:7c:b1: 69:2f:0c:d9:50:4d:36:f6:5b:bb:84:9b:72:9f:b4: ff:bc:b3:35:49:7d:c9:40:a1:7d:97:79:3f:52:fa: d2:56:5b:55:ea:f4:de:f2:b0:6f:86:a3:48:c8:20: e8:d5:34:a2:7a:53:52:e7:06:90:30:a8:db:69:c2: e8:ee:d4:99:8c:48:ce:dc:79:24:b7:47:cc:5b:7b: 45:46:d5:1d:c5:ff:b9:38:3d:4a:b8:c9:38:53:14: ae:a7:e7:90:f1:92:8d:81:a8:14:a9:39:be:9c:c4: c7:bd:d6:e2:29:16:4a:d4:1e:76:df:eb:8b:a0:78: 34:d9:a5:e8:fd:45:10:94:bc:bb:60:a1:5e:c6:03: 19:60:40:e8:27:6c:51:68:19:df:d2:ea:9d:a0:ca: 41:fe:39:ab:d2:c6:a8:40:a3:9b:7c:3d:cf:28:13: 38:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4E:EC:6C:35:2B:23:54:89:84:FB:71:13:83:A3:8D:68:0D:C0:18 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11b08533-7e4f-4dde-8f78-bb8fa0cbe278.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.244.0/24 Signature Algorithm: sha256WithRSAEncryption 10:ce:ee:34:7b:b4:e1:7e:17:9d:eb:df:e0:4b:91:a6:9c:aa: 2f:9f:5d:6d:3d:36:91:04:10:cf:7d:94:34:fc:e5:00:8d:a2: fd:73:c9:82:7b:d5:8f:64:66:c1:9a:ee:04:b6:7a:f0:92:05: 4f:ad:a9:e4:25:fd:0e:f3:27:f9:d5:12:78:a2:30:38:21:57: 99:bf:14:2a:74:c6:31:2b:99:40:88:48:2c:6f:4a:09:24:cc: a5:aa:5e:32:38:81:26:ac:e2:34:f2:89:ce:f6:a5:64:d9:21: 11:c8:c1:5f:8c:03:96:eb:35:bd:32:79:eb:6e:ed:ac:a8:0f: 44:8c:50:d6:0d:c5:56:8e:0a:a6:d5:10:60:47:45:6a:c6:fc: 39:3d:15:3b:8e:30:ad:96:46:3e:2a:73:22:55:6a:8f:ec:ca: 6c:fd:c1:7f:c0:6a:04:88:c2:45:aa:12:77:3b:c4:6e:8a:67: 28:2a:a6:94:b0:3b:81:49:86:17:cc:66:48:78:4f:26:f1:4a: 46:ae:7d:00:f2:ad:07:63:ba:af:07:cf:21:ab:c4:10:b7:6e: 97:9b:e7:3d:e5:13:82:31:8c:fa:fa:91:8b:a3:24:d6:9a:f4: 2e:b0:fc:10:b8:61:29:33:03:ad:a5:9c:69:96:7f:19:25:98: b0:5b:b4:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUpk90iLuOXpPiyfsUpKJnrSoLA0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDE1MDA1MDI4WhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWMyNGE4OTJiMDhjM2NlM2M1YTkyN2I1YzE3NTk5M2Ey MTRmOWZjNWNjM2QzNjBkZjc5YjBlZGM4NWYwNGIxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx6rIkmwfVenY0pcW1z8M5fhITXWmpaRVj3WTxf+ApLZma VdXd3kQXFvvr1RVh0MwDng732bT1hLujj8j9hd2J7eLduCHA2kXTKBGwP9aMeZz+ MHnhTct8sWkvDNlQTTb2W7uEm3KftP+8szVJfclAoX2XeT9S+tJWW1Xq9N7ysG+G o0jIIOjVNKJ6U1LnBpAwqNtpwuju1JmMSM7ceSS3R8xbe0VG1R3F/7k4PUq4yThT FK6n55Dxko2BqBSpOb6cxMe91uIpFkrUHnbf64ugeDTZpej9RRCUvLtgoV7GAxlg QOgnbFFoGd/S6p2gykH+OavSxqhAo5t8Pc8oEzhNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuU7sbDUrI1SJhPtxE4OjjWgNwBgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzExYjA4NTMzLTdlNGYtNGRkZS04Zjc4LWJiOGZhMGNiZTI3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPQwDQYJKoZIhvcNAQELBQADggEBABDO7jR7tOF+F53r3+BLkaacqi+f XW09NpEEEM99lDT85QCNov1zyYJ71Y9kZsGa7gS2evCSBU+tqeQl/Q7zJ/nVEnii MDghV5m/FCp0xjErmUCISCxvSgkkzKWqXjI4gSas4jTyic72pWTZIRHIwV+MA5br Nb0yeetu7ayoD0SMUNYNxVaOCqbVEGBHRWrG/Dk9FTuOMK2WRj4qcyJVao/symz9 wX/AagSIwkWqEnc7xG6KZygqppSwO4FJhhfMZkh4TybxSkaufQDyrQdjuq8HzyGr xBC3bpeb5z3lE4IxjPr6kYujJNaa9C6w/BC4YSkzA62lnGmWfxklmLBbtOw= -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:56 2025 by rpki-client