$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa File: 3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa (raw, json) Hash identifier: Xup8vPFonGSl0LLPuU2z6d7hLG8ljuidRbr9TEkRbhg= Subject key identifier: C3:30:DE:1D:95:AD:79:13:98:73:3C:93:0B:F7:7A:C3:9C:F9:30:F8 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 1562118E0991CBD1D58EB2EE137C39E211ECCF76 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa Signing time: Tue 15 Apr 2025 00:50:39 +0000 ROA not before: Tue 15 Apr 2025 00:50:39 +0000 ROA not after: Tue 20 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:62:11:8e:09:91:cb:d1:d5:8e:b2:ee:13:7c:39:e2:11:ec:cf:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 15 00:50:39 2025 GMT Not After : May 20 23:59:59 2025 GMT Subject: serialNumber=0875677e861aefeea7ed442e867925e938d14d1be59061746a3b8ee054ea4076, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:af:64:b7:cc:ab:59:af:75:bf:18:42:02: 3e:c0:09:c5:d4:24:5c:23:b2:dd:a0:53:3a:69:78: d5:67:66:d8:72:53:3d:55:11:02:66:d7:18:49:18: 29:67:21:d2:97:29:9c:d7:e7:8e:78:85:c0:61:85: fb:d7:5b:a8:ae:ef:d3:83:78:02:cd:b8:e5:55:0f: d0:5b:d5:9c:7c:fb:37:45:45:7e:73:76:1c:c9:d0: 89:18:65:1c:01:e5:f4:07:50:44:13:ec:b3:fd:18: f6:e8:69:f9:b4:67:71:18:42:0f:4c:a1:38:11:c1: a1:e2:d3:25:12:8a:a9:46:c5:7b:7a:d4:8b:ab:c4: b3:65:b6:96:f6:68:40:24:32:89:92:33:5b:17:35: c7:60:aa:ae:be:f2:0e:da:6e:d8:bf:64:20:f9:c6: 81:91:c3:1f:29:60:55:10:28:dc:23:f3:6f:28:9f: c4:07:02:b3:b9:34:1a:5d:38:62:26:e4:46:ce:23: ee:0e:8c:bd:34:46:6a:37:c9:5d:1b:b5:b9:d3:24: 57:ac:c8:0b:34:5b:08:9f:83:b6:d3:22:eb:c6:4b: c9:c6:f4:a3:1c:55:ff:c7:a6:d3:ba:64:fe:f2:2d: a2:17:95:0f:4a:80:e2:2d:7c:b7:a6:09:52:60:f4: 57:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:30:DE:1D:95:AD:79:13:98:73:3C:93:0B:F7:7A:C3:9C:F9:30:F8 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/3d830bb6-2bab-4cc6-b795-84f0b39be70f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.242.0/24 Signature Algorithm: sha256WithRSAEncryption 03:2d:1b:29:73:2c:57:45:92:fa:fd:b9:de:fd:d3:d9:40:9b: ed:81:6b:49:f6:c2:e1:2c:8e:d4:ca:4a:d6:b4:a0:e0:bb:b0: db:b0:20:78:a2:65:6b:62:de:43:d9:23:26:31:e2:ea:6b:c9: 09:3c:56:5d:45:3d:fa:81:28:81:76:32:f9:44:50:ab:56:d2: cb:7a:40:98:7e:46:27:f4:ad:ab:6f:11:3e:d7:43:3d:67:07: c5:ad:cb:65:e3:60:77:4b:95:d5:3a:64:f9:d0:e8:b5:68:14: ba:1e:a4:c7:2d:97:a2:3d:97:6b:f2:e6:50:46:19:7a:cf:b1: 6e:34:d1:c1:df:84:f4:7f:c2:08:82:65:16:9b:64:99:8e:03: 1f:29:25:f2:d7:3b:0f:ab:69:7e:b3:04:93:27:28:b2:7f:29: 25:af:f4:de:45:24:d9:90:fa:5a:32:db:de:cb:f1:80:50:29: b8:cb:0d:fd:48:4e:01:09:ef:a7:58:a0:5a:51:ee:09:ef:7e: e1:0d:04:12:53:96:0f:9b:83:89:0a:8c:de:d9:a4:2a:e6:8a: 51:a3:23:3b:45:07:fd:ef:cb:2b:b7:75:72:1e:4f:02:b2:87: a5:3c:d9:77:96:1c:61:8f:6a:38:ac:0f:91:40:01:62:c8:13: e2:48:34:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFWIRjgmRy9HVjrLuE3w54hHsz3YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDE1MDA1MDM5WhcNMjUwNTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODc1Njc3ZTg2MWFlZmVlYTdlZDQ0MmU4Njc5MjVlOTM4 ZDE0ZDFiZTU5MDYxNzQ2YTNiOGVlMDU0ZWE0MDc2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2ma9kt8yrWa91vxhCAj7ACcXUJFwjst2gUzppeNVnZthy Uz1VEQJm1xhJGClnIdKXKZzX5454hcBhhfvXW6iu79ODeALNuOVVD9Bb1Zx8+zdF RX5zdhzJ0IkYZRwB5fQHUEQT7LP9GPboafm0Z3EYQg9MoTgRwaHi0yUSiqlGxXt6 1IurxLNltpb2aEAkMomSM1sXNcdgqq6+8g7abti/ZCD5xoGRwx8pYFUQKNwj828o n8QHArO5NBpdOGIm5EbOI+4OjL00Rmo3yV0btbnTJFesyAs0Wwifg7bTIuvGS8nG 9KMcVf/HptO6ZP7yLaIXlQ9KgOItfLemCVJg9FcbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwzDeHZWteROYczyTC/d6w5z5MPgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzNkODMwYmI2LTJiYWItNGNjNi1iNzk1LTg0ZjBiMzliZTcwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPIwDQYJKoZIhvcNAQELBQADggEBAAMtGylzLFdFkvr9ud7909lAm+2B a0n2wuEsjtTKSta0oOC7sNuwIHiiZWti3kPZIyYx4upryQk8Vl1FPfqBKIF2MvlE UKtW0st6QJh+Rif0ratvET7XQz1nB8Wty2XjYHdLldU6ZPnQ6LVoFLoepMctl6I9 l2vy5lBGGXrPsW400cHfhPR/wgiCZRabZJmOAx8pJfLXOw+raX6zBJMnKLJ/KSWv 9N5FJNmQ+loy297L8YBQKbjLDf1ITgEJ76dYoFpR7gnvfuENBBJTlg+bg4kKjN7Z pCrmilGjIztFB/3vyyu3dXIeTwKyh6U82XeWHGGPajisD5FAAWLIE+JINMY= -----END CERTIFICATE-----Generated at Sat Apr 26 12:29:27 2025 by rpki-client