$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11d9eaa3-71e5-49d1-8290-2bbbb6411f83.roa File: 11d9eaa3-71e5-49d1-8290-2bbbb6411f83.roa (raw, json) Hash identifier: WUuAZAAukbjpjZ0baMG/KpLrZtXIViWEO1W6HVN+VVs= Subject key identifier: A0:FE:8C:45:7D:77:D8:70:61:F5:CF:AD:07:7D:B2:FD:62:26:ED:C0 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4D99FBAD2CA47D2620829A02E640C60863D52405 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11d9eaa3-71e5-49d1-8290-2bbbb6411f83.roa Signing time: Mon 21 Jul 2025 16:40:07 +0000 ROA not before: Mon 21 Jul 2025 16:40:07 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:99:fb:ad:2c:a4:7d:26:20:82:9a:02:e6:40:c6:08:63:d5:24:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 21 16:40:07 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=a19edf12f410a76aeb80819a72d842c13837b9703cc4edae04e30a983ef5c5bb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:1c:38:47:d1:a1:a2:e2:a5:8b:e0:74:1e:0d: 3c:83:8e:c5:97:e9:35:db:78:f6:f6:2b:a7:d3:62: 7f:1b:53:20:38:c3:19:8e:81:86:34:57:c2:4b:cb: 3f:54:a6:40:9f:eb:2a:df:87:11:ee:1b:83:f1:14: b4:91:b5:12:ba:eb:5a:d8:a5:19:3b:f1:29:8b:5c: 4f:f8:bc:90:c3:90:00:38:80:a7:c7:30:6c:f5:31: 92:58:d6:29:c0:74:b1:6f:8a:03:be:96:ea:48:0a: 7d:ca:b7:4e:b1:db:7e:b2:01:84:9d:32:b7:7e:66: b7:a3:cf:82:a2:a8:e6:97:3a:39:d4:4d:60:87:ba: e3:dc:18:8f:a5:7e:c0:08:0e:cd:ee:da:4b:9e:1c: f8:78:49:14:1c:fd:ed:62:74:21:fc:9d:79:ed:93: 9a:c3:65:c7:6a:b4:96:be:40:21:24:d6:ef:c8:1d: 64:e4:c2:76:3e:98:17:1c:f4:33:a5:c9:29:3c:83: 8f:48:d2:bc:2d:9f:e9:ef:c0:ab:d6:f4:e6:0b:cc: 34:48:f1:73:a0:af:a2:9a:14:f4:dd:05:b8:f9:c1: e8:84:34:0c:df:78:7c:df:ba:b9:e7:a0:55:3c:d6: a3:c7:93:05:d1:8e:3b:27:f7:d3:6c:45:77:b5:04: f4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FE:8C:45:7D:77:D8:70:61:F5:CF:AD:07:7D:B2:FD:62:26:ED:C0 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/11d9eaa3-71e5-49d1-8290-2bbbb6411f83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.16.0/20 Signature Algorithm: sha256WithRSAEncryption 0a:3e:fc:33:f2:5c:65:95:d4:2c:d3:4d:9e:1c:6a:6d:ba:ca: c1:b8:ce:57:bb:81:2c:37:16:bc:d1:c9:a7:b4:e0:21:6e:85: b5:7b:49:40:4b:d1:dd:f6:2c:89:85:16:cd:59:11:c2:b5:02: de:07:2f:c4:ed:13:e4:49:5d:b3:d6:86:20:7e:f0:c9:bc:36: 2a:37:d1:72:3d:1b:67:91:0e:a1:92:7d:23:02:97:5b:c8:81: 07:71:05:a4:ba:31:0b:f7:62:27:bf:e0:ea:f5:34:37:83:e0: fc:70:bf:2a:47:eb:76:73:ab:19:22:06:8c:6b:51:a0:9f:f6: 7c:9b:14:82:69:6f:39:c2:b9:1d:65:e1:54:3f:f5:bd:44:59: 89:bd:15:03:4f:42:ac:c0:21:db:54:ec:5e:e8:30:50:0d:7b: 4b:7c:98:3d:f0:23:b3:5e:0a:35:f4:54:4a:b1:c8:3a:25:76: 43:7c:a0:0f:f6:20:d9:dc:f4:00:cc:58:31:94:3f:e0:f5:e5: 9f:d7:5b:ed:9f:80:11:09:ff:2d:c8:79:2a:df:94:38:c6:f0: bb:87:02:0a:de:23:7c:16:44:6c:75:43:33:25:3f:48:ee:9a: 2b:e3:62:31:90:38:da:c1:60:a1:be:ff:c3:86:71:64:2c:b0: 2e:6b:d9:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTZn7rSykfSYggpoC5kDGCGPVJAUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzIxMTY0MDA3WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTllZGYxMmY0MTBhNzZhZWI4MDgxOWE3MmQ4NDJjMTM4 MzdiOTcwM2NjNGVkYWUwNGUzMGE5ODNlZjVjNWJiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxHDhH0aGi4qWL4HQeDTyDjsWX6TXbePb2K6fTYn8bUyA4 wxmOgYY0V8JLyz9UpkCf6yrfhxHuG4PxFLSRtRK661rYpRk78SmLXE/4vJDDkAA4 gKfHMGz1MZJY1inAdLFvigO+lupICn3Kt06x236yAYSdMrd+Zrejz4KiqOaXOjnU TWCHuuPcGI+lfsAIDs3u2kueHPh4SRQc/e1idCH8nXntk5rDZcdqtJa+QCEk1u/I HWTkwnY+mBcc9DOlySk8g49I0rwtn+nvwKvW9OYLzDRI8XOgr6KaFPTdBbj5weiE NAzfeHzfurnnoFU81qPHkwXRjjsn99NsRXe1BPT5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoP6MRX132HBh9c+tB32y/WIm7cAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzExZDllYWEzLTcxZTUtNDlkMS04MjkwLTJiYmJiNjQxMWY4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYBAwDQYJKoZIhvcNAQELBQADggEBAAo+/DPyXGWV1CzTTZ4cam26ysG4 zle7gSw3FrzRyae04CFuhbV7SUBL0d32LImFFs1ZEcK1At4HL8TtE+RJXbPWhiB+ 8Mm8Nio30XI9G2eRDqGSfSMCl1vIgQdxBaS6MQv3Yie/4Or1NDeD4PxwvypH63Zz qxkiBoxrUaCf9nybFIJpbznCuR1l4VQ/9b1EWYm9FQNPQqzAIdtU7F7oMFANe0t8 mD3wI7NeCjX0VEqxyDoldkN8oA/2INnc9ADMWDGUP+D15Z/XW+2fgBEJ/y3IeSrf lDjG8LuHAgreI3wWRGx1QzMlP0jumivjYjGQONrBYKG+/8OGcWQssC5r2QE= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:20 2025 by rpki-client