$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/31375d26-e2f2-4b0b-8d94-424d3ef5e55a.roa File: 31375d26-e2f2-4b0b-8d94-424d3ef5e55a.roa (raw, json) Hash identifier: XTAbRz1pt8zJaDWUcl/8f0F2eNQ9Th/5CEEz/2NcDtw= Subject key identifier: CA:63:12:01:07:3E:0D:71:9A:0C:8F:7F:0B:2A:98:71:41:AA:24:91 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 06F551F7A0DDAF1DE6E97AE50A1405CCD71C93B0 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/31375d26-e2f2-4b0b-8d94-424d3ef5e55a.roa Signing time: Fri 25 Jul 2025 20:37:10 +0000 ROA not before: Fri 25 Jul 2025 20:37:10 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.97.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f5:51:f7:a0:dd:af:1d:e6:e9:7a:e5:0a:14:05:cc:d7:1c:93:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 20:37:10 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=b2a194d11645991de00b2e4ebda1d9e1c079d3bd25f56d9f65ff532732394279, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fa:c9:71:ec:9b:a8:5b:b0:44:c6:0d:c2:dd: eb:ef:48:84:43:73:99:00:f1:37:e8:21:f8:87:31: 0b:99:53:84:8b:56:58:ad:c2:1a:f9:43:6d:76:98: 44:67:65:85:87:20:ea:78:61:9a:03:01:9a:3b:26: d1:97:68:5c:a1:af:d2:27:9d:ec:88:90:2d:78:fb: be:99:2d:af:eb:c0:6f:72:c5:26:df:82:ca:aa:f7: 23:3c:f4:a2:05:03:dc:03:c5:33:e7:eb:f2:ce:3b: 58:cd:c1:f6:d2:71:79:23:0d:e7:50:14:40:6d:0b: d8:15:e3:a3:af:42:f1:fc:68:35:06:de:2a:f3:d6: 19:05:a8:cd:9f:70:35:bb:94:02:63:7a:41:86:80: bf:ad:cc:a7:56:e6:46:82:47:55:61:c2:e2:32:49: 1e:df:24:ae:5f:ea:d8:c4:58:7d:ec:ee:84:57:f6: f6:90:e5:cc:93:1b:db:f5:6a:56:b7:64:90:ea:7b: cd:a2:5e:00:53:c8:d1:7d:69:4f:e9:1d:28:bf:8d: 81:88:d1:5c:21:d0:fe:42:8b:9c:b9:1d:b7:22:f0: e0:5f:f0:dc:b2:92:d5:f8:66:5a:01:90:5a:60:40: 31:f1:4d:f3:7e:23:83:a8:46:16:d9:0d:51:c2:28: 23:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:12:01:07:3E:0D:71:9A:0C:8F:7F:0B:2A:98:71:41:AA:24:91 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/31375d26-e2f2-4b0b-8d94-424d3ef5e55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.97.0.0/20 Signature Algorithm: sha256WithRSAEncryption 92:69:eb:81:4f:71:d6:70:9e:1a:6a:18:e1:93:8a:88:f5:d9: 6d:23:17:03:d3:82:9d:8d:ba:84:ab:30:5d:6d:4b:c5:63:63: 67:32:6c:62:3a:86:42:83:8c:6f:8f:6e:7c:1c:d8:c7:f0:bb: 44:0a:03:44:36:bb:b5:c9:00:db:cc:cf:90:71:29:66:a8:b9: 31:7d:e2:91:a2:6b:d1:b2:9a:17:35:36:0d:b2:a7:74:62:e2: 05:f8:8f:a9:2e:9a:c1:9f:6d:f6:08:79:80:24:fa:1b:d4:59: 6b:f6:05:5e:74:32:50:0a:ef:4a:86:5b:85:e1:ce:fb:af:8f: 7b:49:8e:2f:e2:32:87:2a:65:56:08:43:fa:40:b4:aa:8a:6e: 92:80:92:44:5e:8d:a7:33:fd:8f:ee:c3:16:af:55:87:1f:32: 69:f4:46:fa:e3:27:17:fa:fe:28:2a:de:6e:19:ed:25:bd:92: 05:d0:8b:52:45:9d:3a:08:ae:00:d1:d7:e1:c3:97:fa:57:f6: 2b:2e:8d:26:c2:79:67:04:43:0c:71:72:d5:2b:60:2d:ed:bf: ad:92:eb:8c:14:df:a7:05:4a:67:22:ff:0a:77:00:f9:46:0c: 4d:15:bb:2d:08:a0:dd:83:d2:de:a8:56:e2:22:e5:6a:37:5b: dd:5a:e5:e0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBvVR96Ddrx3m6XrlChQFzNcck7AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MjAzNzEwWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMmExOTRkMTE2NDU5OTFkZTAwYjJlNGViZGExZDllMWMw NzlkM2JkMjVmNTZkOWY2NWZmNTMyNzMyMzk0Mjc5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8+slx7JuoW7BExg3C3evvSIRDc5kA8TfoIfiHMQuZU4SL Vlitwhr5Q212mERnZYWHIOp4YZoDAZo7JtGXaFyhr9InneyIkC14+76ZLa/rwG9y xSbfgsqq9yM89KIFA9wDxTPn6/LOO1jNwfbScXkjDedQFEBtC9gV46OvQvH8aDUG 3irz1hkFqM2fcDW7lAJjekGGgL+tzKdW5kaCR1VhwuIySR7fJK5f6tjEWH3s7oRX 9vaQ5cyTG9v1ala3ZJDqe82iXgBTyNF9aU/pHSi/jYGI0Vwh0P5Ci5y5Hbci8OBf 8NyyktX4ZloBkFpgQDHxTfN+I4OoRhbZDVHCKCPRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUymMSAQc+DXGaDI9/CyqYcUGqJJEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzMxMzc1ZDI2LWUyZjItNGIwYi04ZDk0LTQyNGQzZWY1ZTU1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYQAwDQYJKoZIhvcNAQELBQADggEBAJJp64FPcdZwnhpqGOGTioj12W0j FwPTgp2NuoSrMF1tS8VjY2cybGI6hkKDjG+Pbnwc2Mfwu0QKA0Q2u7XJANvMz5Bx KWaouTF94pGia9Gymhc1Ng2yp3Ri4gX4j6kumsGfbfYIeYAk+hvUWWv2BV50MlAK 70qGW4Xhzvuvj3tJji/iMocqZVYIQ/pAtKqKbpKAkkRejacz/Y/uwxavVYcfMmn0 RvrjJxf6/igq3m4Z7SW9kgXQi1JFnToIrgDR1+HDl/pX9isujSbCeWcEQwxxctUr YC3tv62S64wU36cFSmci/wp3APlGDE0Vuy0IoN2D0t6oVuIi5Wo3W91a5eA= -----END CERTIFICATE-----Generated at Wed Aug 6 16:12:43 2025 by rpki-client