$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ca5264c-7bf5-4248-b6ad-dd9cf57a2be3.roa File: 2ca5264c-7bf5-4248-b6ad-dd9cf57a2be3.roa (raw, json) Hash identifier: im0y74eAVHEZ4MOGg1HcNvqV2fvFzRNah0HpMaJMkvE= Subject key identifier: 0A:1C:75:AB:22:34:9D:96:E6:06:FF:A0:DE:88:55:3C:E5:8E:40:DF Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 34A824929F51CF0065454C4835B00F39FABE4D81 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ca5264c-7bf5-4248-b6ad-dd9cf57a2be3.roa Signing time: Fri 25 Jul 2025 16:40:23 +0000 ROA not before: Fri 25 Jul 2025 16:40:23 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a8:24:92:9f:51:cf:00:65:45:4c:48:35:b0:0f:39:fa:be:4d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:40:23 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=67b9c4031e19695105e7bc22b933813800b88740605e7e370c4548ead9a6475e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:a3:58:5b:d0:e2:a8:20:46:47:c6:aa:48: 44:76:54:01:cf:68:15:8a:3d:7e:02:f7:f6:8e:c4: b2:26:16:3e:d3:64:eb:b7:92:df:c2:37:84:c4:d3: 99:22:b6:c0:2b:98:55:58:97:c3:96:8a:1d:73:9d: d2:af:24:bb:89:20:c1:0e:8c:e6:80:61:ff:26:3b: bb:c7:b8:fc:55:cc:28:dd:63:13:eb:f9:00:a7:46: a9:cc:69:02:46:6e:b8:ac:27:db:e6:64:51:84:ee: fa:11:21:f2:68:b4:61:f0:6e:63:40:b4:27:5d:07: 19:65:88:65:04:02:8b:86:36:9b:56:d5:42:01:f2: 4a:d9:91:18:d9:ec:7d:16:f9:3a:34:9d:aa:95:fe: 9a:1a:ba:d9:2a:7e:08:6d:7d:e4:ea:a4:d6:59:23: 82:73:99:84:78:7f:93:e3:cd:92:5e:57:30:fc:37: 38:96:44:fb:f4:1a:5e:a3:06:2b:7c:13:fd:fb:65: e1:35:8d:fc:ee:ac:98:79:83:70:7a:ed:a7:4e:a4: e1:59:b9:d3:f3:69:3e:08:b8:80:7f:74:fc:1d:7b: 31:e6:d3:1f:e3:23:56:4b:cf:18:81:5a:23:90:5a: 26:0b:6f:0e:d3:a6:0b:bb:a4:e8:01:a1:90:45:61: cd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1C:75:AB:22:34:9D:96:E6:06:FF:A0:DE:88:55:3C:E5:8E:40:DF X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2ca5264c-7bf5-4248-b6ad-dd9cf57a2be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.244.0/24 Signature Algorithm: sha256WithRSAEncryption 01:02:56:63:88:6c:28:dd:54:64:28:24:16:1c:f2:40:05:8b: aa:ef:0b:72:6d:d9:3e:f0:3f:d1:ed:8d:51:1d:bd:55:57:f7: 27:79:a4:ae:7a:04:a5:98:c8:56:eb:cb:cb:8d:71:ad:5f:bd: 23:a1:a2:bb:2b:ca:a3:de:8d:45:d9:17:ef:69:4a:2b:de:7a: e0:0d:56:a5:cd:9e:9e:a0:f8:27:08:3c:18:4b:75:f8:31:e7: 85:40:36:01:24:b0:0b:0a:24:5f:65:8a:28:11:65:8d:16:21: 94:04:c1:90:29:d7:e7:35:96:42:30:92:0c:52:f8:d8:0e:62: 90:b8:cf:d9:84:e7:a8:6a:93:db:c2:85:ae:67:4d:95:dd:f8: 62:71:1a:ae:ab:5d:b7:d4:91:bd:a2:44:ab:19:9e:33:75:66: 32:89:6b:d8:d6:56:85:fc:9d:5d:c8:93:c1:a6:c6:41:01:a5: fb:18:fe:44:78:24:8f:0f:a8:1b:a8:67:16:63:5d:ce:11:e1: 0a:42:08:8e:d0:da:91:28:4e:8b:83:f9:1c:1b:d9:5d:e4:95: b1:e0:80:8f:84:3a:6d:2f:6d:8a:f9:f9:07:6c:6a:e0:5f:9b: e4:6d:5e:d7:9e:19:99:27:7e:fd:e9:5b:bd:2f:c4:aa:f4:db: 02:9f:e9:48 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNKgkkp9RzwBlRUxINbAPOfq+TYEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MDIzWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2I5YzQwMzFlMTk2OTUxMDVlN2JjMjJiOTMzODEzODAw Yjg4NzQwNjA1ZTdlMzcwYzQ1NDhlYWQ5YTY0NzVlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQzKNYW9DiqCBGR8aqSER2VAHPaBWKPX4C9/aOxLImFj7T ZOu3kt/CN4TE05kitsArmFVYl8OWih1zndKvJLuJIMEOjOaAYf8mO7vHuPxVzCjd YxPr+QCnRqnMaQJGbrisJ9vmZFGE7voRIfJotGHwbmNAtCddBxlliGUEAouGNptW 1UIB8krZkRjZ7H0W+To0naqV/poautkqfghtfeTqpNZZI4JzmYR4f5PjzZJeVzD8 NziWRPv0Gl6jBit8E/37ZeE1jfzurJh5g3B67adOpOFZudPzaT4IuIB/dPwdezHm 0x/jI1ZLzxiBWiOQWiYLbw7Tpgu7pOgBoZBFYc0PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUChx1qyI0nZbmBv+g3ohVPOWOQN8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzJjYTUyNjRjLTdiZjUtNDI0OC1iNmFkLWRkOWNmNTdhMmJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPQwDQYJKoZIhvcNAQELBQADggEBAAECVmOIbCjdVGQoJBYc8kAFi6rv C3Jt2T7wP9HtjVEdvVVX9yd5pK56BKWYyFbry8uNca1fvSOhorsryqPejUXZF+9p SiveeuANVqXNnp6g+CcIPBhLdfgx54VANgEksAsKJF9liigRZY0WIZQEwZAp1+c1 lkIwkgxS+NgOYpC4z9mE56hqk9vCha5nTZXd+GJxGq6rXbfUkb2iRKsZnjN1ZjKJ a9jWVoX8nV3Ik8GmxkEBpfsY/kR4JI8PqBuoZxZjXc4R4QpCCI7Q2pEoTouD+Rwb 2V3klbHggI+EOm0vbYr5+QdsauBfm+RtXteeGZknfv3pW70vxKr02wKf6Ug= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:56 2025 by rpki-client