$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/36e15619-dfe9-449a-af54-98f22b348fcd.roa File: 36e15619-dfe9-449a-af54-98f22b348fcd.roa (raw, json) Hash identifier: hUyy9CT3QhoBQi/2ZV9IuAtOwTRaEyUNDDzrcFr6Af0= Subject key identifier: FC:F8:50:65:71:9C:2A:A3:7A:40:44:02:A1:B1:1D:FE:99:95:74:BE Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 669DB3CCA7BF7E9585C87B3658C4AEE986641AC9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/36e15619-dfe9-449a-af54-98f22b348fcd.roa Signing time: Fri 25 Jul 2025 16:41:21 +0000 ROA not before: Fri 25 Jul 2025 16:41:21 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:9d:b3:cc:a7:bf:7e:95:85:c8:7b:36:58:c4:ae:e9:86:64:1a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:41:21 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=da9a1d2354a1f390410ce00fd8c40c49fd2fd376decc7cd3342e19c530910527, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:88:40:33:08:1c:56:c5:18:26:30:a7:34: ed:88:8a:dc:52:7b:a7:ea:92:bb:26:d8:4d:4f:09: 0b:b0:ef:aa:df:96:a3:19:53:23:dc:20:cb:1d:f0: 97:c0:3f:9f:9d:98:73:c8:91:9f:3b:c4:03:eb:62: f3:7e:ed:0f:c5:6c:50:c9:bf:8e:f6:7a:c4:c3:1e: 26:4d:5e:f9:af:be:4b:b0:9d:e6:c8:8b:54:ab:17: c2:92:a8:2b:c8:a6:41:d8:a1:36:57:90:a6:70:6e: 98:d4:8d:ce:21:a1:d7:bc:be:75:ef:5f:22:ea:a4: 23:f5:79:dd:9e:c4:33:86:10:0c:82:ac:9c:3a:98: 05:dd:2f:2a:f3:01:4c:f1:25:35:1a:bf:ff:fc:f6: f1:46:f6:e7:9c:b2:50:6f:e3:9b:b5:17:cf:4c:ff: 96:d4:7a:c8:ec:19:f7:91:c7:4e:c1:2c:5c:8c:5a: b1:73:b6:11:c9:18:df:04:63:20:6f:f3:50:92:f3: a8:db:38:c8:11:02:ea:3b:8d:b1:d1:42:53:54:86: 11:d6:c0:0f:99:d7:81:bc:ca:9d:9f:93:45:29:f6: ce:f5:9a:0a:e7:bf:ac:17:f7:cf:4c:b0:5a:9a:d3: 5a:3a:1d:98:85:13:0a:44:6e:57:95:58:be:6b:22: 14:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F8:50:65:71:9C:2A:A3:7A:40:44:02:A1:B1:1D:FE:99:95:74:BE X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/36e15619-dfe9-449a-af54-98f22b348fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.80.0/20 Signature Algorithm: sha256WithRSAEncryption 38:e6:2b:5f:e0:b2:df:a8:9c:b8:aa:4d:41:50:62:cc:72:8c: 45:d9:7a:47:6d:9b:51:43:55:8d:44:f4:55:10:99:d7:47:59: 11:52:48:a2:4f:1c:17:ae:a2:51:1d:5a:20:26:38:b2:71:77: 23:cc:be:1a:a0:9a:c9:3c:6c:10:b6:ec:cd:63:6b:25:d7:7e: 3a:f8:ba:aa:46:5f:ef:02:eb:55:61:90:97:09:32:d4:48:31: c2:59:56:68:ad:d9:1e:b7:ff:94:95:38:08:48:d1:de:12:86: fd:7a:26:31:5c:49:71:3f:ba:8f:5a:b8:f5:0b:f7:aa:52:98: ac:7b:ee:c8:05:5a:14:22:cc:9b:f0:c8:65:56:0c:22:41:fd: c2:7b:fc:e2:ae:43:bd:64:e1:65:0c:36:62:c3:01:8b:7b:9c: 81:ed:62:5e:97:39:80:c7:96:55:a1:11:09:8b:ed:db:55:23: 46:19:94:18:76:b8:c8:a8:cf:a9:84:6d:b7:72:e1:20:b6:ce: 44:c0:08:ac:66:d0:cd:4a:01:38:17:04:4c:52:7f:80:d6:0c: b4:81:e9:68:ce:28:c1:e9:ac:46:85:95:25:89:e7:e7:20:ca: bc:97:68:74:8a:e7:fb:33:63:7d:db:a0:0c:70:5a:e0:7d:5e: 79:e7:37:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZp2zzKe/fpWFyHs2WMSu6YZkGskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MTIxWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTlhMWQyMzU0YTFmMzkwNDEwY2UwMGZkOGM0MGM0OWZk MmZkMzc2ZGVjYzdjZDMzNDJlMTljNTMwOTEwNTI3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrZIhAMwgcVsUYJjCnNO2IitxSe6fqkrsm2E1PCQuw76rf lqMZUyPcIMsd8JfAP5+dmHPIkZ87xAPrYvN+7Q/FbFDJv472esTDHiZNXvmvvkuw nebIi1SrF8KSqCvIpkHYoTZXkKZwbpjUjc4hode8vnXvXyLqpCP1ed2exDOGEAyC rJw6mAXdLyrzAUzxJTUav//89vFG9uecslBv45u1F89M/5bUesjsGfeRx07BLFyM WrFzthHJGN8EYyBv81CS86jbOMgRAuo7jbHRQlNUhhHWwA+Z14G8yp2fk0Up9s71 mgrnv6wX989MsFqa01o6HZiFEwpEbleVWL5rIhQTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/PhQZXGcKqN6QEQCobEd/pmVdL4wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzM2ZTE1NjE5LWRmZTktNDQ5YS1hZjU0LTk4ZjIyYjM0OGZjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYFAwDQYJKoZIhvcNAQELBQADggEBADjmK1/gst+onLiqTUFQYsxyjEXZ ekdtm1FDVY1E9FUQmddHWRFSSKJPHBeuolEdWiAmOLJxdyPMvhqgmsk8bBC27M1j ayXXfjr4uqpGX+8C61VhkJcJMtRIMcJZVmit2R63/5SVOAhI0d4Shv16JjFcSXE/ uo9auPUL96pSmKx77sgFWhQizJvwyGVWDCJB/cJ7/OKuQ71k4WUMNmLDAYt7nIHt Yl6XOYDHllWhEQmL7dtVI0YZlBh2uMioz6mEbbdy4SC2zkTACKxm0M1KATgXBExS f4DWDLSB6WjOKMHprEaFlSWJ5+cgyryXaHSK5/szY33boAxwWuB9XnnnN40= -----END CERTIFICATE-----Generated at Sun Aug 10 21:08:24 2025 by rpki-client