$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2bb58cb8-f5b5-4d0a-aa61-da95798b3b27.roa File: 2bb58cb8-f5b5-4d0a-aa61-da95798b3b27.roa (raw, json) Hash identifier: OYmJYn25JY2rsVaz1tlt7piwavIHFApqCpzy3w7bBmA= Subject key identifier: 70:45:20:15:64:5F:B3:60:EE:12:C1:D7:AE:B4:01:FC:D1:2A:F9:E3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7ABD86A1168D0582DB5339112B20141FAFBF0F38 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2bb58cb8-f5b5-4d0a-aa61-da95798b3b27.roa Signing time: Thu 05 Jun 2025 14:37:02 +0000 ROA not before: Thu 05 Jun 2025 14:37:02 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:bd:86:a1:16:8d:05:82:db:53:39:11:2b:20:14:1f:af:bf:0f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:37:02 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=212614fbdd84b5c8663061b15332d07f5389c06a1177b7881425ee4777016a6e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d5:0b:a6:9c:5d:3b:fb:be:98:23:48:6d:1a: 8e:cc:fc:b4:9f:4e:66:9b:96:a4:28:3d:b1:1b:4a: 34:12:d5:a5:3c:ab:ff:3c:83:ac:be:32:08:94:84: 61:9f:98:ce:dc:b4:00:0d:c6:67:cd:e3:fb:33:5e: 7b:e1:7d:e0:71:31:59:bf:3b:33:11:aa:cb:79:09: a1:a9:46:04:c2:73:d6:c7:23:8a:b6:23:58:16:cb: cb:ae:08:7e:9e:3c:15:21:c4:97:4b:04:3b:85:e1: 55:cc:47:71:b7:e4:b1:10:62:a2:f8:3f:b0:0d:e2: fc:53:fe:f1:a1:9e:be:8e:c6:f8:35:3a:93:ce:fc: 82:a3:cf:db:0e:1f:63:1e:89:5a:78:f8:6a:5f:f2: 9c:d6:a6:93:4e:d2:cb:1d:2d:9e:f2:cf:f1:04:e6: c2:16:60:34:28:64:42:d6:77:5c:83:e9:5f:05:7f: 21:cd:ea:31:6f:0d:14:52:7b:e7:e7:63:48:2a:19: 81:af:62:92:5b:54:84:c4:59:4f:73:f9:cd:33:00: 66:c9:70:57:63:dc:1b:71:f6:ba:8c:1c:ac:4f:1e: 91:c2:db:b7:8d:91:82:05:69:2b:11:7a:e1:b5:fd: 9c:c2:23:8e:d0:71:ed:06:4f:d3:00:9f:a4:a6:72: 65:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:45:20:15:64:5F:B3:60:EE:12:C1:D7:AE:B4:01:FC:D1:2A:F9:E3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2bb58cb8-f5b5-4d0a-aa61-da95798b3b27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.242.0/24 Signature Algorithm: sha256WithRSAEncryption 20:45:51:41:83:eb:4f:99:4f:6a:96:c0:17:93:ef:00:6a:e8: 90:4a:a1:46:ad:90:23:f0:80:e3:2e:5b:0d:96:91:dc:d3:32: 78:71:55:7a:78:c8:73:a4:8e:93:50:8a:63:46:06:a1:98:7d: 28:62:78:65:cc:4d:7b:fd:eb:a9:84:c0:95:3f:4d:b0:85:05: b0:26:c5:86:ed:b9:a3:0b:d2:46:58:a0:aa:db:ae:e6:3f:67: 0a:b9:ab:ed:ec:5a:31:a8:15:03:05:b9:e1:34:14:03:d2:f3: da:6f:8f:4e:2c:5f:31:fb:aa:09:fe:15:e8:84:1c:69:2a:04: 41:36:c7:27:34:af:a2:2d:59:3e:74:18:8a:b7:47:15:fb:db: 12:8f:37:42:6b:85:e8:06:d6:d8:77:e1:0c:80:99:c9:96:14: a1:0f:2e:b5:a7:a9:94:16:b8:f8:c6:e3:35:9e:da:ac:fa:ed: 70:75:bb:ad:d0:cd:7e:4c:22:5b:d5:00:80:4f:78:f5:72:44: 69:ad:2d:a8:91:d6:57:99:36:67:2a:9b:6d:f5:bf:8f:af:62: b0:93:dd:18:18:47:c7:3f:38:72:a3:27:5d:b6:b6:c1:f9:42: 42:b9:6e:92:df:24:34:a9:7c:c0:21:a9:e9:58:03:1a:1d:21: 99:c7:4a:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUer2GoRaNBYLbUzkRKyAUH6+/DzgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzNzAyWhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTI2MTRmYmRkODRiNWM4NjYzMDYxYjE1MzMyZDA3ZjUz ODljMDZhMTE3N2I3ODgxNDI1ZWU0Nzc3MDE2YTZlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCV1QumnF07+76YI0htGo7M/LSfTmablqQoPbEbSjQS1aU8 q/88g6y+MgiUhGGfmM7ctAANxmfN4/szXnvhfeBxMVm/OzMRqst5CaGpRgTCc9bH I4q2I1gWy8uuCH6ePBUhxJdLBDuF4VXMR3G35LEQYqL4P7AN4vxT/vGhnr6Oxvg1 OpPO/IKjz9sOH2MeiVp4+Gpf8pzWppNO0ssdLZ7yz/EE5sIWYDQoZELWd1yD6V8F fyHN6jFvDRRSe+fnY0gqGYGvYpJbVITEWU9z+c0zAGbJcFdj3Btx9rqMHKxPHpHC 27eNkYIFaSsReuG1/ZzCI47Qce0GT9MAn6SmcmVBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcEUgFWRfs2DuEsHXrrQB/NEq+eMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJiYjU4Y2I4LWY1YjUtNGQwYS1hYTYxLWRhOTU3OThiM2IyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPIwDQYJKoZIhvcNAQELBQADggEBACBFUUGD60+ZT2qWwBeT7wBq6JBK oUatkCPwgOMuWw2WkdzTMnhxVXp4yHOkjpNQimNGBqGYfShieGXMTXv966mEwJU/ TbCFBbAmxYbtuaML0kZYoKrbruY/Zwq5q+3sWjGoFQMFueE0FAPS89pvj04sXzH7 qgn+FeiEHGkqBEE2xyc0r6ItWT50GIq3RxX72xKPN0JrhegG1th34QyAmcmWFKEP LrWnqZQWuPjG4zWe2qz67XB1u63QzX5MIlvVAIBPePVyRGmtLaiR1leZNmcqm231 v4+vYrCT3RgYR8c/OHKjJ122tsH5QkK5bpLfJDSpfMAhqelYAxodIZnHSgI= -----END CERTIFICATE-----Generated at Sat Jun 14 06:46:23 2025 by rpki-client