$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2851aa8e-afc0-4fb3-af32-b2a1bbaf1304.roa File: 2851aa8e-afc0-4fb3-af32-b2a1bbaf1304.roa (raw, json) Hash identifier: /fv0V4TJixA0OoIXQaDfqhySxXWoWCkRiu5WTas9928= Subject key identifier: 27:37:F2:11:98:3B:99:CC:F6:AE:02:52:91:B1:15:98:E3:73:82:59 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2A33D696031C8BE1DAEFA91F17CA9CD395D38B4D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2851aa8e-afc0-4fb3-af32-b2a1bbaf1304.roa Signing time: Tue 01 Apr 2025 15:00:16 +0000 ROA not before: Tue 01 Apr 2025 15:00:16 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:33:d6:96:03:1c:8b:e1:da:ef:a9:1f:17:ca:9c:d3:95:d3:8b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 1 15:00:16 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: serialNumber=83c9ad511db5ead6057398762a74e87c897f0da22cf1170dc2325f86e3a83e91, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:b1:d4:2c:df:79:49:5e:53:3d:33:a2:1d: 06:23:d4:e6:cb:28:21:81:38:29:81:33:3a:bf:ab: a3:2b:8c:64:6a:97:47:b9:7e:52:b4:a0:87:26:d8: 53:c0:5a:b5:37:a9:03:08:e6:2c:83:63:72:59:78: 09:f5:b0:ed:73:b7:ce:00:97:44:bf:f5:77:42:3f: 4a:05:31:dc:a5:fb:b0:36:72:28:ef:06:87:51:4e: c3:39:fa:97:9a:1a:54:a8:29:fd:28:49:3c:2a:30: 40:cb:47:c4:d3:a2:6c:70:49:56:4f:e3:eb:a3:9d: 31:e9:c1:78:7f:ed:17:11:a4:45:0d:24:8e:d1:0b: 44:cc:79:d6:43:f5:06:6d:eb:e7:7f:10:33:41:af: 00:89:f4:29:48:a2:7f:0a:e4:24:b9:53:ae:d9:f6: ac:26:7d:16:03:dd:9a:f5:cd:92:58:ee:62:9a:dd: 4d:1b:eb:ae:6c:c1:c6:63:9e:63:ae:ab:4e:5d:22: f7:1d:65:22:43:41:87:fa:8e:e1:06:ba:d3:fc:4e: e1:b9:b0:f1:f4:d5:c7:1a:8d:8a:33:90:ee:b3:85: 5f:a7:24:de:05:cc:1e:90:88:e4:57:ba:a5:e7:fd: 66:19:86:83:33:e4:c7:34:2c:0e:eb:46:aa:e7:19: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:37:F2:11:98:3B:99:CC:F6:AE:02:52:91:B1:15:98:E3:73:82:59 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2851aa8e-afc0-4fb3-af32-b2a1bbaf1304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.5.0/24 Signature Algorithm: sha256WithRSAEncryption 69:4e:d2:c9:b6:5d:64:88:3b:a3:45:3e:1a:4b:c6:f4:5d:bc: 63:fd:76:a7:0d:ac:78:f7:0d:80:4a:72:ba:85:3c:53:52:95: b1:02:bc:a2:f0:26:12:f8:4e:23:14:31:97:c4:c5:12:8c:79: 29:fc:36:05:09:dd:bd:c0:59:23:2f:6a:d9:1c:4e:ec:e7:35: 3b:1f:ed:39:4f:c3:87:f6:9b:34:40:5d:c7:78:91:f7:bb:fa: fb:cd:cd:a0:6e:23:b2:a6:c8:76:29:04:b9:e9:d7:07:e4:d5: cd:b4:94:fa:36:5a:fc:11:ba:d1:e7:db:a8:21:34:f9:64:41: eb:6b:13:46:f6:d2:ba:9a:3a:45:f5:24:1b:05:55:2c:59:47: 8d:da:7b:24:9c:6e:61:1a:46:34:f7:81:81:65:09:60:4e:d2: 45:3e:66:b8:60:68:38:d9:f2:47:70:df:5d:e3:30:ce:64:84: a2:8f:d6:98:2f:5d:dc:9e:9f:4e:41:fb:af:74:68:da:e8:84: 43:1d:28:2d:6e:22:32:0c:f3:77:8f:b4:bc:d6:62:a9:93:f9: 2f:82:70:60:ed:6a:18:d1:52:0e:c5:97:f9:b4:80:b0:1f:3d: 61:5a:93:23:e2:50:c2:fd:7f:ec:1b:4d:20:3f:cc:87:ab:ef: 48:f4:6a:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKjPWlgMci+Ha76kfF8qc05XTi00wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDAxMTUwMDE2WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4M2M5YWQ1MTFkYjVlYWQ2MDU3Mzk4NzYyYTc0ZTg3Yzg5 N2YwZGEyMmNmMTE3MGRjMjMyNWY4NmUzYTgzZTkxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC06LHULN95SV5TPTOiHQYj1ObLKCGBOCmBMzq/q6MrjGRq l0e5flK0oIcm2FPAWrU3qQMI5iyDY3JZeAn1sO1zt84Al0S/9XdCP0oFMdyl+7A2 cijvBodRTsM5+peaGlSoKf0oSTwqMEDLR8TTomxwSVZP4+ujnTHpwXh/7RcRpEUN JI7RC0TMedZD9QZt6+d/EDNBrwCJ9ClIon8K5CS5U67Z9qwmfRYD3Zr1zZJY7mKa 3U0b665swcZjnmOuq05dIvcdZSJDQYf6juEGutP8TuG5sPH01ccajYozkO6zhV+n JN4FzB6QiORXuqXn/WYZhoMz5Mc0LA7rRqrnGWVXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJzfyEZg7mcz2rgJSkbEVmONzglkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzI4NTFhYThlLWFmYzAtNGZiMy1hZjMyLWIyYTFiYmFmMTMwNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAUwDQYJKoZIhvcNAQELBQADggEBAGlO0sm2XWSIO6NFPhpLxvRdvGP9 dqcNrHj3DYBKcrqFPFNSlbECvKLwJhL4TiMUMZfExRKMeSn8NgUJ3b3AWSMvatkc TuznNTsf7TlPw4f2mzRAXcd4kfe7+vvNzaBuI7KmyHYpBLnp1wfk1c20lPo2WvwR utHn26ghNPlkQetrE0b20rqaOkX1JBsFVSxZR43aeyScbmEaRjT3gYFlCWBO0kU+ ZrhgaDjZ8kdw313jMM5khKKP1pgvXdyen05B+690aNrohEMdKC1uIjIM83ePtLzW YqmT+S+CcGDtahjRUg7Fl/m0gLAfPWFakyPiUML9f+wbTSA/zIer70j0ajE= -----END CERTIFICATE-----Generated at Sat Apr 26 13:36:05 2025 by rpki-client