$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa File: 2ac091c5-8143-4a71-81c4-f34c33d996aa.roa (raw, json) Hash identifier: S7tgJe1wql66sDVv4wbr2mkR8HMcNAN4gXS2cu1mZMk= Subject key identifier: 8F:AB:1D:48:54:26:B4:E5:A6:FF:01:C7:5F:C8:47:8A:4C:88:D6:10 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4F3851EB136452C89500E02BC89E3D6886E56442 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa Signing time: Mon 09 Jun 2025 19:37:03 +0000 ROA not before: Mon 09 Jun 2025 19:37:03 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:38:51:eb:13:64:52:c8:95:00:e0:2b:c8:9e:3d:68:86:e5:64:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 9 19:37:03 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=5884d370aca7963f43958778bb74d3ced7a264c8db4352d8b50e3e328280e9ff, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:6e:ff:a0:5b:58:d6:b4:06:82:e8:54:ac: a3:61:eb:37:62:bc:80:a2:b2:5b:01:4f:a0:e1:b9: 36:a1:1a:26:c9:9a:f2:a9:08:e5:f2:18:7c:31:77: 4d:d2:0e:f5:c6:b5:69:b8:e6:66:3b:70:5d:54:27: e4:5a:89:72:56:bf:59:c4:21:ff:4e:65:0d:4e:94: a9:df:b2:e6:2a:ec:cc:17:c5:65:52:5f:4e:1f:ad: e1:6a:57:e6:46:a9:59:50:82:d4:d1:be:22:33:2b: bd:72:3b:35:d7:d0:55:98:7c:bc:f6:2c:a0:f6:7b: dd:04:0d:39:83:7c:af:64:13:ed:7d:5c:d3:67:3a: c9:7f:b5:d1:a3:8a:5d:a1:7b:99:10:33:4a:e8:75: 22:45:19:6f:7f:4c:d7:d4:3e:4e:70:36:a9:4b:16: 10:29:73:b3:ae:39:53:c9:8a:b2:ea:09:c3:a9:ac: 56:67:ee:b4:62:20:e7:6e:07:43:f5:94:d8:36:39: b6:b2:94:56:55:e7:ef:5e:d9:d8:07:f9:6c:46:6d: 17:62:d8:d9:36:2b:d5:09:df:d4:85:ea:4e:9e:2b: f3:8e:94:9b:ee:a5:2e:a5:40:11:5e:ca:04:e4:78: 19:ac:6b:a6:47:57:f3:30:fe:08:34:9c:c8:6e:9a: a1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:1D:48:54:26:B4:E5:A6:FF:01:C7:5F:C8:47:8A:4C:88:D6:10 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ac091c5-8143-4a71-81c4-f34c33d996aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.38.0/24 Signature Algorithm: sha256WithRSAEncryption 10:33:d5:45:2b:b6:2b:81:57:83:21:63:98:9c:3c:96:f7:1b: 7f:73:64:b0:8f:f9:c7:6c:7a:d7:23:55:f8:1b:2e:5a:f2:61: 38:5b:d5:f4:10:5d:4c:bb:bf:26:4b:84:cb:c6:da:c1:5c:35: f2:20:48:d6:90:01:6e:ec:07:e6:2c:c6:e4:aa:34:cb:37:f4: ab:94:81:41:45:83:ca:ba:36:66:62:5e:b1:f4:1f:b5:1a:17: c5:a1:b3:fe:bc:da:45:0b:b0:a3:e0:76:75:a3:09:ec:a7:7c: 95:9d:88:24:e3:98:4d:7e:40:25:59:2d:2e:bd:71:b0:aa:7a: 68:75:85:f1:15:e1:5f:bb:28:32:c1:b6:04:8f:90:a2:c0:49: 1b:76:f8:26:02:de:77:8b:f1:a4:07:5d:2a:e7:89:63:2f:38: 44:85:71:ab:da:a9:13:6f:8f:34:0c:09:69:da:95:06:8e:0d: 51:06:86:c8:00:14:9a:a9:11:8a:4d:23:87:15:57:2e:c1:de: 7c:a4:3d:7a:70:a0:25:43:0f:e7:18:6f:c5:f4:aa:24:70:ff: 03:df:b5:59:d4:43:fe:3d:38:09:eb:d4:02:48:b0:f2:fb:a8: 35:f9:85:4e:5d:5f:df:ee:4a:56:50:56:fc:e1:fb:ee:82:98: a1:e2:e2:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTzhR6xNkUsiVAOAryJ49aIblZEIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA5MTkzNzAzWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ODg0ZDM3MGFjYTc5NjNmNDM5NTg3NzhiYjc0ZDNjZWQ3 YTI2NGM4ZGI0MzUyZDhiNTBlM2UzMjgyODBlOWZmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9bW7/oFtY1rQGguhUrKNh6zdivICislsBT6DhuTahGibJ mvKpCOXyGHwxd03SDvXGtWm45mY7cF1UJ+RaiXJWv1nEIf9OZQ1OlKnfsuYq7MwX xWVSX04freFqV+ZGqVlQgtTRviIzK71yOzXX0FWYfLz2LKD2e90EDTmDfK9kE+19 XNNnOsl/tdGjil2he5kQM0rodSJFGW9/TNfUPk5wNqlLFhApc7OuOVPJirLqCcOp rFZn7rRiIOduB0P1lNg2ObaylFZV5+9e2dgH+WxGbRdi2Nk2K9UJ39SF6k6eK/OO lJvupS6lQBFeygTkeBmsa6ZHV/Mw/gg0nMhumqGpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUj6sdSFQmtOWm/wHHX8hHikyI1hAwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJhYzA5MWM1LTgxNDMtNGE3MS04MWM0LWYzNGMzM2Q5OTZhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCYwDQYJKoZIhvcNAQELBQADggEBABAz1UUrtiuBV4MhY5icPJb3G39z ZLCP+cdsetcjVfgbLlryYThb1fQQXUy7vyZLhMvG2sFcNfIgSNaQAW7sB+YsxuSq NMs39KuUgUFFg8q6NmZiXrH0H7UaF8Whs/682kULsKPgdnWjCeynfJWdiCTjmE1+ QCVZLS69cbCqemh1hfEV4V+7KDLBtgSPkKLASRt2+CYC3neL8aQHXSrniWMvOESF cavaqRNvjzQMCWnalQaODVEGhsgAFJqpEYpNI4cVVy7B3nykPXpwoCVDD+cYb8X0 qiRw/wPftVnUQ/49OAnr1AJIsPL7qDX5hU5dX9/uSlZQVvzh++6CmKHi4hI= -----END CERTIFICATE-----Generated at Sat Jun 14 07:02:56 2025 by rpki-client