$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/549780f9-870a-404a-8f64-73dec0314022.roa File: 549780f9-870a-404a-8f64-73dec0314022.roa (raw, json) Hash identifier: 5/8s7iAY+1rPHbKX7e78j8Bv08hF+780C/5Drg/daW8= Subject key identifier: EF:49:9C:45:CA:30:A7:4D:F3:07:A4:E1:42:36:DE:2D:2D:13:57:F4 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 77175EE643C451BE3C5732933C128DBA06894D57 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/549780f9-870a-404a-8f64-73dec0314022.roa Signing time: Fri 25 Apr 2025 17:40:23 +0000 ROA not before: Fri 25 Apr 2025 17:40:23 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:17:5e:e6:43:c4:51:be:3c:57:32:93:3c:12:8d:ba:06:89:4d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 25 17:40:23 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=2d2b2b957cc55122ca94865a63fb6aeb9ad1b498b84c40247c68e8be82184e65, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:53:1e:81:ec:41:88:af:ee:26:8d:73:42: 8d:57:c9:64:60:50:fd:d9:77:21:18:ec:e5:c7:3f: bf:d9:7f:67:2a:44:f8:1b:19:d8:4b:fb:ef:95:65: 33:6a:9c:4c:50:2d:18:9e:11:05:7a:8d:b0:7f:86: 65:1b:be:51:cc:df:6b:7d:75:3d:c8:c2:28:b8:51: 3e:93:97:65:15:7f:7f:98:e0:32:8c:e7:b3:62:64: d6:2f:09:2f:ea:65:bb:4a:04:fb:93:0d:88:7a:37: cf:cb:ed:28:c9:4e:6e:a8:fc:bb:0d:80:e0:a6:72: 60:8c:7d:81:98:25:35:78:8c:75:f1:5d:14:99:51: 0b:5f:2a:86:6a:44:5f:3f:bb:22:75:d2:ba:c3:b0: d1:83:9b:27:ad:69:23:29:a0:ef:8e:97:a4:80:99: f9:81:8f:16:a8:66:48:c3:34:96:a8:57:48:f7:44: ed:5b:8f:98:ac:1a:c6:d8:c7:72:97:3a:27:35:0f: 6c:ee:8c:97:b2:ea:57:b4:df:79:cc:ee:5b:2e:94: af:86:46:a2:b1:a8:95:72:1a:25:ab:de:89:b1:3b: 9b:37:37:e0:85:f4:ad:f7:61:d2:73:ea:59:d3:72: 20:37:c4:ed:27:60:15:1b:1a:9c:4f:ac:66:63:9d: 4a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:49:9C:45:CA:30:A7:4D:F3:07:A4:E1:42:36:DE:2D:2D:13:57:F4 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/549780f9-870a-404a-8f64-73dec0314022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.56.0/22 Signature Algorithm: sha256WithRSAEncryption 04:ae:f8:93:98:4a:bf:4b:1c:d3:7a:41:94:83:5b:b2:1a:fc: 74:92:b0:03:29:34:3d:69:3d:a6:5b:01:db:ec:e1:e1:cd:d0: d8:86:2e:87:c3:80:97:f7:8c:bc:25:2f:51:11:ee:2b:ae:d3: 27:79:79:53:35:e3:d4:53:a3:88:d8:eb:15:16:2b:7f:83:bb: 22:b0:96:3f:c7:e3:09:55:00:0c:c3:44:2d:3a:03:de:73:a7: 3f:f1:54:93:b0:94:4c:2f:61:52:f7:46:e4:2f:1e:c2:fe:97: 11:ff:03:70:63:e8:7c:37:dc:85:ff:2b:56:25:3d:67:a5:87: e1:c7:69:91:52:c2:57:e5:fd:00:ff:e5:57:e4:d4:c2:07:d3: 92:90:dc:43:b5:6c:34:93:3d:e2:c5:8a:f7:aa:21:e7:97:35: c3:11:e0:7e:2d:38:e0:6e:eb:38:d6:38:96:7b:d4:d2:83:23: ff:8d:29:02:f6:2a:31:c2:a7:b7:38:c5:37:fb:1d:13:80:3f: f0:90:6e:9c:bc:7f:1d:bd:a0:e6:34:5e:d5:e6:4c:88:f7:a6: 8f:3f:91:f1:3d:66:b4:7f:fc:98:b3:0d:fb:3d:78:0b:14:1c: 80:49:37:2a:85:a5:6c:6d:c9:4e:fc:d9:d5:06:d9:02:fb:ee: 85:98:19:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdxde5kPEUb48VzKTPBKNugaJTVcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI1MTc0MDIzWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDJiMmI5NTdjYzU1MTIyY2E5NDg2NWE2M2ZiNmFlYjlh ZDFiNDk4Yjg0YzQwMjQ3YzY4ZThiZTgyMTg0ZTY1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDa71MegexBiK/uJo1zQo1XyWRgUP3ZdyEY7OXHP7/Zf2cq RPgbGdhL+++VZTNqnExQLRieEQV6jbB/hmUbvlHM32t9dT3Iwii4UT6Tl2UVf3+Y 4DKM57NiZNYvCS/qZbtKBPuTDYh6N8/L7SjJTm6o/LsNgOCmcmCMfYGYJTV4jHXx XRSZUQtfKoZqRF8/uyJ10rrDsNGDmyetaSMpoO+Ol6SAmfmBjxaoZkjDNJaoV0j3 RO1bj5isGsbYx3KXOic1D2zujJey6le033nM7lsulK+GRqKxqJVyGiWr3omxO5s3 N+CF9K33YdJz6lnTciA3xO0nYBUbGpxPrGZjnUp1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU70mcRcowp03zB6ThQjbeLS0TV/QwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzU0OTc4MGY5LTg3MGEtNDA0YS04ZjY0LTczZGVjMDMxNDAyMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYDgwDQYJKoZIhvcNAQELBQADggEBAASu+JOYSr9LHNN6QZSDW7Ia/HSS sAMpND1pPaZbAdvs4eHN0NiGLofDgJf3jLwlL1ER7iuu0yd5eVM149RTo4jY6xUW K3+DuyKwlj/H4wlVAAzDRC06A95zpz/xVJOwlEwvYVL3RuQvHsL+lxH/A3Bj6Hw3 3IX/K1YlPWelh+HHaZFSwlfl/QD/5Vfk1MIH05KQ3EO1bDSTPeLFiveqIeeXNcMR 4H4tOOBu6zjWOJZ71NKDI/+NKQL2KjHCp7c4xTf7HROAP/CQbpy8fx29oOY0XtXm TIj3po8/kfE9ZrR//JizDfs9eAsUHIBJNyqFpWxtyU782dUG2QL77oWYGWc= -----END CERTIFICATE-----Generated at Sat Apr 26 12:31:57 2025 by rpki-client