$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5777146d-b90f-4e7f-8816-d91c8e8d47b6.roa File: 5777146d-b90f-4e7f-8816-d91c8e8d47b6.roa (raw, json) Hash identifier: HbShn0w7N4IuvqgWdzhAJg9yaUSlF4babT6meXvERgk= Subject key identifier: 20:39:0B:00:9E:65:1A:9C:D2:AD:20:2A:60:18:9F:4A:CC:08:41:15 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7E3D59041D89D5472977670826C89126A97BDB0D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5777146d-b90f-4e7f-8816-d91c8e8d47b6.roa Signing time: Fri 25 Jul 2025 16:41:27 +0000 ROA not before: Fri 25 Jul 2025 16:41:27 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3d:59:04:1d:89:d5:47:29:77:67:08:26:c8:91:26:a9:7b:db:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:41:27 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=d56d5bacbbfa34e65f4f23d9f8502e6421077bbae7f86194b1a19a8a9c74dbea, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:f8:98:36:2a:75:2c:44:e0:8d:23:df:fc: 19:1c:60:66:bd:bf:c1:4c:8b:5c:44:4c:5e:9a:6b: db:cf:ad:32:3a:60:ee:82:78:62:a6:f2:d4:72:53: c3:31:f5:e7:ce:9c:f9:e3:72:c6:0e:de:15:48:18: 66:a7:f8:06:ef:a1:d0:90:85:14:ec:27:5d:cb:c8: fc:b8:31:fd:50:19:c4:95:39:84:37:40:68:30:b5: 05:58:11:26:d2:c2:f3:11:77:49:40:fe:8a:a5:2b: 8f:c7:5b:c4:9c:a2:10:19:d5:ee:6b:18:b4:3d:8b: 11:0b:dc:24:8d:a6:c3:d4:b2:d7:71:52:4b:cf:69: 08:38:4a:1f:81:ea:88:90:57:2b:9c:ff:82:b9:18: 43:2a:33:93:72:7a:bc:c3:d3:8a:1b:97:7a:07:ad: a2:aa:cf:2d:d6:22:3c:c8:db:34:3e:dd:4e:31:3a: 95:b5:ee:fd:df:c7:87:5e:46:47:d1:14:7b:11:98: af:a8:df:66:bd:27:e1:fa:d4:eb:c1:8d:04:f5:c5: 5b:c7:81:a5:b4:f7:18:73:cc:57:58:33:ab:ae:6b: 80:26:8c:8e:bc:c0:72:64:17:a1:df:ea:9e:e0:00: e6:2c:df:1f:44:99:69:26:3f:94:a3:09:41:4d:a9: 3e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:39:0B:00:9E:65:1A:9C:D2:AD:20:2A:60:18:9F:4A:CC:08:41:15 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5777146d-b90f-4e7f-8816-d91c8e8d47b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.144.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:8f:43:a0:09:d0:75:ff:2d:3d:fa:6b:14:02:d1:fb:26:54: 55:0e:a4:8a:50:9e:91:c0:88:84:e8:50:25:74:7c:df:dc:89: e0:74:e3:a9:57:31:e4:d1:66:dd:a4:40:f3:87:9b:6b:b4:2f: 24:6a:fe:a9:d8:28:e3:d8:d7:f3:f9:e4:d3:a2:00:c3:35:9f: 72:74:45:8b:41:54:74:30:34:49:e9:14:45:4e:31:35:f2:23: 9c:6b:4f:8d:94:7d:2a:b9:56:65:21:1d:6a:ed:75:39:64:42: 0e:34:bd:54:53:49:b8:ad:a1:4e:00:3d:71:cf:8e:e0:1c:b1: 4d:cd:98:4d:fd:1c:a6:03:05:6a:ee:9d:e0:38:bc:fc:29:98: 79:8e:5d:f3:d4:f0:88:68:8b:30:54:91:4f:b7:81:a1:fd:fe: ca:52:46:89:b5:ed:a6:7b:16:f3:fc:55:db:b7:b2:da:1a:0a: e0:32:1e:a1:39:3f:4a:08:b3:0e:4a:5d:a6:2f:40:81:f7:80: 59:2f:47:0c:4b:df:f3:c5:53:fe:1b:ae:23:1a:b3:98:41:ed: dc:b9:41:4d:65:d7:04:c7:ba:15:ea:58:ba:50:c4:2d:54:28: a8:86:8e:a6:b5:cf:95:7a:02:50:7e:28:00:20:6d:25:23:11: af:1f:3d:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfj1ZBB2J1Ucpd2cIJsiRJql72w0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MTI3WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTZkNWJhY2JiZmEzNGU2NWY0ZjIzZDlmODUwMmU2NDIx MDc3YmJhZTdmODYxOTRiMWExOWE4YTljNzRkYmVhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzSviYNip1LETgjSPf/BkcYGa9v8FMi1xETF6aa9vPrTI6 YO6CeGKm8tRyU8Mx9efOnPnjcsYO3hVIGGan+AbvodCQhRTsJ13LyPy4Mf1QGcSV OYQ3QGgwtQVYESbSwvMRd0lA/oqlK4/HW8ScohAZ1e5rGLQ9ixEL3CSNpsPUstdx UkvPaQg4Sh+B6oiQVyuc/4K5GEMqM5NyerzD04obl3oHraKqzy3WIjzI2zQ+3U4x OpW17v3fx4deRkfRFHsRmK+o32a9J+H61OvBjQT1xVvHgaW09xhzzFdYM6uua4Am jI68wHJkF6Hf6p7gAOYs3x9EmWkmP5SjCUFNqT5dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIDkLAJ5lGpzSrSAqYBifSswIQRUwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzU3NzcxNDZkLWI5MGYtNGU3Zi04ODE2LWQ5MWM4ZThkNDdiNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYJAwDQYJKoZIhvcNAQELBQADggEBAEyPQ6AJ0HX/LT36axQC0fsmVFUO pIpQnpHAiIToUCV0fN/cieB046lXMeTRZt2kQPOHm2u0LyRq/qnYKOPY1/P55NOi AMM1n3J0RYtBVHQwNEnpFEVOMTXyI5xrT42UfSq5VmUhHWrtdTlkQg40vVRTSbit oU4APXHPjuAcsU3NmE39HKYDBWruneA4vPwpmHmOXfPU8IhoizBUkU+3gaH9/spS Rom17aZ7FvP8Vdu3stoaCuAyHqE5P0oIsw5KXaYvQIH3gFkvRwxL3/PFU/4briMa s5hB7dy5QU1l1wTHuhXqWLpQxC1UKKiGjqa1z5V6AlB+KAAgbSUjEa8fPXA= -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:55 2025 by rpki-client