$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa File: 26530834-4a85-45f4-8600-310dadf4036d.roa (raw, json) Hash identifier: m7tGuUyKWpi7BTnSDvBivGyt8v3swFZcmNMqUNDGUDs= Subject key identifier: 3A:2D:A6:61:5E:88:40:4F:97:63:DE:F1:1B:C5:FE:CB:E7:DF:15:0C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3BCF3A7EA05692852EB4A647C75138624384BEA7 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa Signing time: Mon 21 Apr 2025 18:30:19 +0000 ROA not before: Mon 21 Apr 2025 18:30:19 +0000 ROA not after: Mon 26 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cf:3a:7e:a0:56:92:85:2e:b4:a6:47:c7:51:38:62:43:84:be:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 21 18:30:19 2025 GMT Not After : May 26 23:59:59 2025 GMT Subject: serialNumber=243fd7f25b4b6410282de9165df4734ae4cffa7d275f58b2936c41ce69061604, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:fa:dc:8d:d7:e2:89:4c:e6:22:bd:5d:5b: 7f:8f:7b:d0:fb:2e:d6:0e:6e:ac:93:b9:6f:0b:7d: 0f:5f:08:07:21:50:7c:21:e1:17:1e:48:6f:50:59: 64:66:bc:7d:49:75:25:46:cf:58:5e:eb:67:79:50: bf:0e:36:43:b5:c2:02:79:34:b4:55:18:f6:1e:ec: be:1c:aa:4d:fa:91:45:20:2d:79:63:44:4d:a8:1f: a7:09:08:39:94:76:6c:13:08:75:90:f5:20:f9:ce: 5f:f5:ec:09:9b:11:01:d2:7a:26:6c:dd:f6:d3:c9: a7:bd:2f:dc:9b:22:eb:61:e6:bf:c4:12:3a:05:06: dd:71:9e:56:19:55:d9:7a:3d:38:c7:02:e6:c8:cd: c2:aa:a6:52:53:55:4d:22:b9:f2:81:d8:de:3e:c5: 81:3f:5a:41:38:2e:88:2d:b5:29:b5:51:3b:78:c4: 15:a1:02:84:9a:48:70:68:b7:3b:9c:18:86:52:58: 4f:7e:a3:af:eb:00:a4:e6:32:7d:d5:41:09:5f:d6: 7d:9b:d9:87:c5:83:1a:5e:05:0e:84:33:db:0c:c9: 73:eb:1d:1d:10:fd:06:0f:85:a7:c9:55:8e:6d:b0: f6:13:a4:2a:7d:48:e7:e4:59:f3:1d:e5:bb:58:e7: 3c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2D:A6:61:5E:88:40:4F:97:63:DE:F1:1B:C5:FE:CB:E7:DF:15:0C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/26530834-4a85-45f4-8600-310dadf4036d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.240.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:56:a9:4a:72:04:f8:81:df:78:0f:c3:7c:d1:91:6c:b5:1f: 38:b7:cc:13:28:57:a9:7e:0f:2b:fd:34:fa:1d:02:18:22:61: 5b:ad:66:b6:28:96:60:66:89:28:19:05:48:71:df:c7:c6:81: 1d:aa:96:6e:89:a0:f6:62:d4:15:db:2d:bb:c4:95:cf:a7:16: 2c:9d:7f:df:30:2b:5f:a4:7a:71:c0:c1:5e:cc:89:0d:00:e3: 89:1b:38:da:64:86:13:ec:2d:87:57:f3:79:4c:e0:ca:07:6b: 0b:3c:10:0b:dd:bd:19:4a:9f:49:04:f0:bc:a1:70:06:6b:a1: 62:81:08:2f:bb:ec:e8:b6:91:7d:15:e5:e5:ff:2b:d8:05:bd: 3b:47:7c:d5:74:fb:70:bf:29:1d:b9:99:6d:2a:99:d5:db:d5: dc:a0:dd:50:05:ad:7f:82:78:72:f7:9c:df:d2:c5:cb:ec:40: cf:4c:73:c0:c5:c5:d0:54:ad:68:1b:bb:dc:59:70:36:19:af: 96:f4:58:1f:05:96:46:ed:d3:e0:77:2f:3b:59:a5:e5:01:ac: da:a3:81:c3:d1:bb:e3:4e:50:b6:09:dd:af:63:7e:92:95:52: 68:c7:cf:79:f2:b6:3d:98:de:07:6b:79:57:6f:88:07:39:80: bd:18:81:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO886fqBWkoUutKZHx1E4YkOEvqcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDIxMTgzMDE5WhcNMjUwNTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNDNmZDdmMjViNGI2NDEwMjgyZGU5MTY1ZGY0NzM0YWU0 Y2ZmYTdkMjc1ZjU4YjI5MzZjNDFjZTY5MDYxNjA0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrRfrcjdfiiUzmIr1dW3+Pe9D7LtYObqyTuW8LfQ9fCAch UHwh4RceSG9QWWRmvH1JdSVGz1he62d5UL8ONkO1wgJ5NLRVGPYe7L4cqk36kUUg LXljRE2oH6cJCDmUdmwTCHWQ9SD5zl/17AmbEQHSeiZs3fbTyae9L9ybIuth5r/E EjoFBt1xnlYZVdl6PTjHAubIzcKqplJTVU0iufKB2N4+xYE/WkE4LogttSm1UTt4 xBWhAoSaSHBotzucGIZSWE9+o6/rAKTmMn3VQQlf1n2b2YfFgxpeBQ6EM9sMyXPr HR0Q/QYPhafJVY5tsPYTpCp9SOfkWfMd5btY5zznAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOi2mYV6IQE+XY97xG8X+y+ffFQwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzI2NTMwODM0LTRhODUtNDVmNC04NjAwLTMxMGRhZGY0MDM2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYPAwDQYJKoZIhvcNAQELBQADggEBAJ5WqUpyBPiB33gPw3zRkWy1Hzi3 zBMoV6l+Dyv9NPodAhgiYVutZrYolmBmiSgZBUhx38fGgR2qlm6JoPZi1BXbLbvE lc+nFiydf98wK1+kenHAwV7MiQ0A44kbONpkhhPsLYdX83lM4MoHaws8EAvdvRlK n0kE8LyhcAZroWKBCC+77Oi2kX0V5eX/K9gFvTtHfNV0+3C/KR25mW0qmdXb1dyg 3VAFrX+CeHL3nN/SxcvsQM9Mc8DFxdBUrWgbu9xZcDYZr5b0WB8Flkbt0+B3LztZ peUBrNqjgcPRu+NOULYJ3a9jfpKVUmjHz3nytj2Y3gdreVdviAc5gL0YgSo= -----END CERTIFICATE-----Generated at Sat Apr 26 12:37:54 2025 by rpki-client