$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa File: 53bb6c44-c850-4982-8e2f-551c668d57af.roa (raw, json) Hash identifier: bGyU8/PQudnceefDWArhKlR4ovKFqpTIwjB8OF2PY7k= Subject key identifier: 21:51:C3:81:E4:DB:4F:2C:46:81:1F:06:28:0E:84:CB:92:7F:0A:18 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7EA1735BE67C37FB68F4A23DBAB2EBA5FE5D3BAC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa Signing time: Thu 05 Jun 2025 14:39:09 +0000 ROA not before: Thu 05 Jun 2025 14:39:09 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a1:73:5b:e6:7c:37:fb:68:f4:a2:3d:ba:b2:eb:a5:fe:5d:3b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:39:09 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=1b45a24293e9505af51ccfd315bf5bf5084b0f6920c40e0a5ebedb0d275c3e1a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:44:c8:43:24:bc:b8:78:4c:89:62:b5:81:66: 86:02:74:37:21:a4:e7:1d:b9:56:78:3b:9f:96:30: 26:20:bd:91:be:fd:86:d8:bd:9f:e6:e7:b2:f2:40: cc:5e:75:c4:bf:93:1a:c5:51:6a:19:c4:26:79:e9: 15:db:80:82:2e:05:1c:09:3a:a5:29:49:95:94:34: e3:97:2c:d2:f7:4d:15:1a:59:a8:04:e5:5b:c8:f1: 5d:d4:fb:ec:03:e6:a5:c1:f0:20:2a:c5:4d:90:f0: 37:58:13:89:eb:af:f8:ad:ff:a4:5a:7d:ef:08:f2: be:7b:f4:ae:1b:b0:c3:84:df:f1:31:76:b4:7a:db: 97:af:17:4d:4a:44:48:e2:9f:81:de:37:24:eb:93: e4:5d:69:be:8a:54:c2:79:3c:3d:67:fd:cb:6d:3f: 20:f4:bb:a1:53:d1:3a:f5:76:05:57:b8:30:14:6e: 74:d6:b6:e7:71:9d:36:9b:42:af:0e:d3:3b:4b:5d: 66:fe:dd:28:80:21:7e:da:88:20:67:fd:92:34:f2: 3f:d7:a0:63:45:82:de:f6:af:ef:f8:ad:17:3a:f7: 65:38:d3:42:88:73:03:20:ce:0c:54:ef:2e:6f:17: 7f:2b:0a:95:2c:69:69:56:13:f4:55:cc:c1:77:25: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:51:C3:81:E4:DB:4F:2C:46:81:1F:06:28:0E:84:CB:92:7F:0A:18 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.240.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:4d:0d:2a:1b:31:21:40:d9:c4:d3:e1:c0:f9:08:9d:0a:b9: 96:4b:68:34:ab:fa:a7:5a:19:02:cc:40:77:92:70:69:50:74: 8a:aa:ce:e4:8e:2e:75:29:21:f8:42:4e:e4:33:83:df:22:e0: cb:fe:24:75:a6:84:af:90:c8:31:48:66:5f:6d:d7:09:e6:fc: a7:ab:6d:a0:c2:4c:aa:9a:a3:4c:30:e4:f3:5d:08:f1:74:84: a0:42:ed:72:b1:b0:87:68:04:1a:72:b7:3c:e6:2c:1a:bc:6d: cb:e0:65:5a:b5:0a:13:82:f3:94:75:3e:a8:7c:02:3e:34:f9: 79:f1:e3:49:db:62:a7:e8:5e:12:b1:ca:3a:c2:77:e0:23:6a: 8a:f3:89:f9:8f:20:fa:06:5a:75:c1:42:be:18:73:7b:6d:11: b9:80:3a:54:60:95:d4:72:56:b7:9f:19:8e:55:fe:77:63:29: 8e:0a:30:e7:a1:4f:b9:c8:8e:28:4f:d3:8a:eb:9c:54:fb:8d: 9e:46:e5:eb:be:1b:81:e3:c7:d3:49:b8:e0:5c:39:cb:e2:56: 38:80:80:91:cf:8a:f9:7e:3c:81:fa:e8:49:ea:5a:08:ef:0b: cf:7b:3f:dc:de:94:5a:69:f5:7b:a2:8c:fb:5b:df:c0:f8:e1: a9:d1:4b:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfqFzW+Z8N/to9KI9urLrpf5dO6wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzOTA5WhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYjQ1YTI0MjkzZTk1MDVhZjUxY2NmZDMxNWJmNWJmNTA4 NGIwZjY5MjBjNDBlMGE1ZWJlZGIwZDI3NWMzZTFhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoRMhDJLy4eEyJYrWBZoYCdDchpOcduVZ4O5+WMCYgvZG+ /YbYvZ/m57LyQMxedcS/kxrFUWoZxCZ56RXbgIIuBRwJOqUpSZWUNOOXLNL3TRUa WagE5VvI8V3U++wD5qXB8CAqxU2Q8DdYE4nrr/it/6Rafe8I8r579K4bsMOE3/Ex drR625evF01KREjin4HeNyTrk+Rdab6KVMJ5PD1n/cttPyD0u6FT0Tr1dgVXuDAU bnTWtudxnTabQq8O0ztLXWb+3SiAIX7aiCBn/ZI08j/XoGNFgt72r+/4rRc692U4 00KIcwMgzgxU7y5vF38rCpUsaWlWE/RVzMF3JeGvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIVHDgeTbTyxGgR8GKA6Ey5J/ChgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzUzYmI2YzQ0LWM4NTAtNDk4Mi04ZTJmLTU1MWM2NjhkNTdhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYPAwDQYJKoZIhvcNAQELBQADggEBAI5NDSobMSFA2cTT4cD5CJ0KuZZL aDSr+qdaGQLMQHeScGlQdIqqzuSOLnUpIfhCTuQzg98i4Mv+JHWmhK+QyDFIZl9t 1wnm/KerbaDCTKqao0ww5PNdCPF0hKBC7XKxsIdoBBpytzzmLBq8bcvgZVq1ChOC 85R1Pqh8Aj40+Xnx40nbYqfoXhKxyjrCd+AjaorzifmPIPoGWnXBQr4Yc3ttEbmA OlRgldRyVrefGY5V/ndjKY4KMOehT7nIjihP04rrnFT7jZ5G5eu+G4Hjx9NJuOBc OcviVjiAgJHPivl+PIH66EnqWgjvC897P9zelFpp9XuijPtb38D44anRS7Q= -----END CERTIFICATE-----Generated at Sun Jun 15 08:41:56 2025 by rpki-client