$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa File: 53bb6c44-c850-4982-8e2f-551c668d57af.roa (raw, json) Hash identifier: goDgbUaIw5AKySVhv8NKNFXkCx3ByAJqt/vZqLiRlBw= Subject key identifier: 41:24:FA:92:99:59:7C:1F:0B:96:BD:4B:23:4C:75:3C:D4:1F:04:BB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0DFE40C1D045AB74783D1D83418246C90BF23616 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa Signing time: Sat 09 Aug 2025 00:10:19 +0000 ROA not before: Sat 09 Aug 2025 00:10:19 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fe:40:c1:d0:45:ab:74:78:3d:1d:83:41:82:46:c9:0b:f2:36:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 9 00:10:19 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=82c8ccfad7058b31745da408bf75732d5e694644768aadf25cd1b0534f3f1f9c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:40:28:7b:0b:61:c0:21:8f:f7:8a:9e:8e: ce:70:4c:b5:63:4c:eb:ab:a1:eb:d1:0a:c4:14:64: 3b:bb:c5:a0:30:6b:f7:48:8d:f3:85:07:df:a3:3c: ea:19:04:79:a6:47:3b:7f:59:df:98:a8:a0:11:5d: 01:65:c8:ed:8b:c6:83:e4:21:4e:9e:0d:81:1b:60: 02:76:6f:ab:ce:5b:88:7a:5f:b0:fe:bd:7a:27:e3: 56:cd:8a:a1:2c:39:2a:45:82:10:e3:d6:5b:73:db: 8e:bf:41:52:f0:04:68:2c:37:96:2a:84:df:be:bb: b5:77:01:a2:6b:56:89:65:7d:7a:ff:27:2f:c5:9d: 8e:a3:44:cc:4e:c4:d5:63:42:8a:2b:be:3a:00:3a: ac:2c:8c:8a:3a:39:22:4d:59:49:45:e1:d0:2c:8b: 65:c1:14:8d:a3:61:4a:98:31:db:40:fb:b2:7d:63: f1:62:44:d7:25:1b:75:4a:31:7a:48:cb:55:2e:70: 13:9d:1f:6d:60:62:02:f0:6a:1f:e9:0c:f9:a6:15: bc:08:0f:9a:e7:58:7c:42:64:5f:23:35:8c:1f:2e: d1:c1:1a:92:ff:50:9e:fc:55:21:eb:e8:b7:8c:a1: c6:6b:21:b6:59:c8:ed:8d:39:1b:d8:01:75:8b:30: 39:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:24:FA:92:99:59:7C:1F:0B:96:BD:4B:23:4C:75:3C:D4:1F:04:BB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/53bb6c44-c850-4982-8e2f-551c668d57af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.240.0/20 Signature Algorithm: sha256WithRSAEncryption 68:4f:e9:78:9c:a2:83:ff:0a:96:28:94:09:39:45:b6:53:c2: 7c:2c:93:53:6a:b0:89:06:bd:21:59:1e:b2:c6:43:cc:51:31: bb:27:43:86:80:8f:44:55:a3:58:08:be:ac:98:a2:29:de:35: a3:15:06:e4:10:b9:b9:6a:2b:14:c2:db:24:0a:3e:db:d6:96: 36:f1:9c:5e:12:9e:ec:a1:fa:47:56:a6:74:01:8c:c4:2a:25: c0:3f:7c:fc:47:5f:7e:30:cc:d0:77:c4:0f:f8:15:ac:14:e8: 04:ff:d2:bd:e2:02:76:9e:0e:31:67:c3:8d:79:7d:1e:21:66: c2:94:06:aa:54:57:c2:6d:4c:da:9e:c1:65:43:80:6c:5e:52: 3b:83:d6:28:32:39:3a:55:a6:df:e3:13:f7:28:b5:d4:cd:fe: af:cc:0d:44:1c:c0:dc:17:7e:7f:ee:d5:a5:c1:a7:28:76:df: ec:95:42:d1:49:ee:54:70:75:6c:41:65:a9:de:45:c6:5c:e2: 92:ce:6b:95:47:2d:c0:2f:ce:47:6f:dd:ce:9e:9e:97:7d:6c: fb:7a:89:45:06:ec:a1:ad:ab:2c:91:fc:ce:ec:09:0a:c7:cd: c3:58:00:0c:a9:4e:4d:7d:75:57:1c:d0:64:45:24:1c:73:5f: af:52:1e:3f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDf5AwdBFq3R4PR2DQYJGyQvyNhYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODA5MDAxMDE5WhcNMjUwOTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MmM4Y2NmYWQ3MDU4YjMxNzQ1ZGE0MDhiZjc1NzMyZDVl Njk0NjQ0NzY4YWFkZjI1Y2QxYjA1MzRmM2YxZjljMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC080AoewthwCGP94qejs5wTLVjTOuroevRCsQUZDu7xaAw a/dIjfOFB9+jPOoZBHmmRzt/Wd+YqKARXQFlyO2LxoPkIU6eDYEbYAJ2b6vOW4h6 X7D+vXon41bNiqEsOSpFghDj1ltz246/QVLwBGgsN5YqhN++u7V3AaJrVollfXr/ Jy/FnY6jRMxOxNVjQoorvjoAOqwsjIo6OSJNWUlF4dAsi2XBFI2jYUqYMdtA+7J9 Y/FiRNclG3VKMXpIy1UucBOdH21gYgLwah/pDPmmFbwID5rnWHxCZF8jNYwfLtHB GpL/UJ78VSHr6LeMocZrIbZZyO2NORvYAXWLMDm5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQST6kplZfB8Llr1LI0x1PNQfBLswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzUzYmI2YzQ0LWM4NTAtNDk4Mi04ZTJmLTU1MWM2NjhkNTdhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYPAwDQYJKoZIhvcNAQELBQADggEBAGhP6XicooP/CpYolAk5RbZTwnws k1NqsIkGvSFZHrLGQ8xRMbsnQ4aAj0RVo1gIvqyYoineNaMVBuQQublqKxTC2yQK PtvWljbxnF4Snuyh+kdWpnQBjMQqJcA/fPxHX34wzNB3xA/4FawU6AT/0r3iAnae DjFnw415fR4hZsKUBqpUV8JtTNqewWVDgGxeUjuD1igyOTpVpt/jE/cotdTN/q/M DUQcwNwXfn/u1aXBpyh23+yVQtFJ7lRwdWxBZaneRcZc4pLOa5VHLcAvzkdv3c6e npd9bPt6iUUG7KGtqyyR/M7sCQrHzcNYAAypTk19dVcc0GRFJBxzX69SHj8= -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:36 2025 by rpki-client