$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f2e87f1-4127-40e4-8f0d-b767f49da617.roa File: 5f2e87f1-4127-40e4-8f0d-b767f49da617.roa (raw, json) Hash identifier: xTP7ZhNhqjl0tg+SwYpE51maiCsfdsS3tztac1eGlh4= Subject key identifier: F7:CB:BC:BD:27:FA:2D:10:9E:75:D0:7A:C7:64:66:3F:F0:4E:FF:7F Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 46A97AE3C030D2934BE2DE5851FB7A40192C1F6D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f2e87f1-4127-40e4-8f0d-b767f49da617.roa Signing time: Thu 05 Jun 2025 14:39:17 +0000 ROA not before: Thu 05 Jun 2025 14:39:17 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a9:7a:e3:c0:30:d2:93:4b:e2:de:58:51:fb:7a:40:19:2c:1f:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:39:17 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=7a52fa7c6d548231cb632fd5c8abd47712154c41c0e22390946514ed0b224a48, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:6d:dd:12:e7:56:ca:e5:c5:2e:40:5f:af: fe:31:02:c4:41:a3:d7:da:52:4e:2e:70:c5:09:1f: c0:34:a2:82:b3:4e:7c:b9:9b:d4:06:23:00:5b:89: b9:fc:ff:ed:d8:7d:f2:07:f3:2a:9c:22:6a:19:d9: 41:b3:1a:0f:72:b2:83:d4:64:dc:83:2f:4d:3f:f9: 4f:3b:2e:0d:45:f8:75:3f:44:16:06:d6:4b:d8:39: 39:a1:e1:c9:31:48:ed:a4:f2:3a:a9:4d:92:18:03: 00:43:6c:62:29:e6:fb:46:52:67:d1:57:c3:d0:f6: 2d:95:f5:35:c0:91:e6:3e:67:ad:fa:87:f5:22:c0: f2:2d:e3:35:89:e2:50:bc:76:10:1b:b1:dd:73:15: f8:4a:e6:03:6f:06:54:aa:e1:ec:3c:39:ce:17:c1: c7:c0:c6:32:6e:0f:82:11:3e:b7:5c:cf:3d:86:91: 0f:fe:83:e3:5a:d4:16:78:f8:b1:37:bf:59:1e:18: ff:0f:d9:19:59:ca:b2:24:b0:ba:df:63:e4:15:1c: cf:19:b1:c0:cd:d8:c8:8b:ee:4c:c5:f1:98:61:d8: d0:4b:88:33:2c:2a:d8:49:d3:6a:6f:5e:0e:42:44: 0e:dc:0a:fe:d5:88:21:6e:1b:a1:75:a6:67:35:75: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CB:BC:BD:27:FA:2D:10:9E:75:D0:7A:C7:64:66:3F:F0:4E:FF:7F X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5f2e87f1-4127-40e4-8f0d-b767f49da617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.96.0/20 Signature Algorithm: sha256WithRSAEncryption 69:02:42:14:1e:8c:a6:af:7f:dc:4a:d9:53:a7:34:19:76:69: 29:47:f2:f5:e9:2e:cf:15:28:a9:b9:b2:d1:3a:51:3a:61:67: 05:89:8c:eb:b6:5f:9b:13:f1:bf:67:fa:c4:44:02:b8:56:cd: 86:43:04:3f:fa:2a:04:1d:a4:e7:2c:21:29:72:5b:39:2f:e4: 7a:70:87:d0:ab:28:59:66:56:fa:62:dd:5a:d8:aa:00:3e:2e: 38:b9:21:b6:e4:0c:c6:46:06:f7:96:3b:9f:3b:30:ce:cd:f2: 69:c6:dd:30:27:f3:dd:22:05:13:27:c2:03:a2:5e:eb:da:6c: 68:e1:40:3c:59:6b:bd:f6:fc:10:79:73:46:12:b3:dc:c1:f7: 7f:10:78:0b:a3:28:3b:75:de:7f:72:7c:de:d9:9f:80:42:33: de:2f:f7:36:a7:34:35:76:1f:1e:0c:1c:9e:d2:0f:cf:99:1e: 06:e6:92:4d:e2:35:82:60:8b:80:1e:21:70:24:24:14:f3:39: 50:fa:1a:23:d1:97:ff:a1:f5:e2:ed:5c:59:00:00:c5:58:d2: ff:82:77:58:d9:ec:79:fd:f0:17:64:52:7f:97:42:d5:64:c4: 4b:dd:84:22:d7:92:69:17:f9:1d:6a:68:9e:d7:6f:71:90:d2: 06:ef:78:eb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURql648Aw0pNL4t5YUft6QBksH20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzOTE3WhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTUyZmE3YzZkNTQ4MjMxY2I2MzJmZDVjOGFiZDQ3NzEy MTU0YzQxYzBlMjIzOTA5NDY1MTRlZDBiMjI0YTQ4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwN23dEudWyuXFLkBfr/4xAsRBo9faUk4ucMUJH8A0ooKz Tny5m9QGIwBbibn8/+3YffIH8yqcImoZ2UGzGg9ysoPUZNyDL00/+U87Lg1F+HU/ RBYG1kvYOTmh4ckxSO2k8jqpTZIYAwBDbGIp5vtGUmfRV8PQ9i2V9TXAkeY+Z636 h/UiwPIt4zWJ4lC8dhAbsd1zFfhK5gNvBlSq4ew8Oc4XwcfAxjJuD4IRPrdczz2G kQ/+g+Na1BZ4+LE3v1keGP8P2RlZyrIksLrfY+QVHM8ZscDN2MiL7kzF8Zhh2NBL iDMsKthJ02pvXg5CRA7cCv7ViCFuG6F1pmc1ddsjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU98u8vSf6LRCeddB6x2RmP/BO/38wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVmMmU4N2YxLTQxMjctNDBlNC04ZjBkLWI3NjdmNDlkYTYxNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYGAwDQYJKoZIhvcNAQELBQADggEBAGkCQhQejKavf9xK2VOnNBl2aSlH 8vXpLs8VKKm5stE6UTphZwWJjOu2X5sT8b9n+sREArhWzYZDBD/6KgQdpOcsISly Wzkv5Hpwh9CrKFlmVvpi3VrYqgA+Lji5IbbkDMZGBveWO587MM7N8mnG3TAn890i BRMnwgOiXuvabGjhQDxZa732/BB5c0YSs9zB938QeAujKDt13n9yfN7Zn4BCM94v 9zanNDV2Hx4MHJ7SD8+ZHgbmkk3iNYJgi4AeIXAkJBTzOVD6GiPRl/+h9eLtXFkA AMVY0v+Cd1jZ7Hn98BdkUn+XQtVkxEvdhCLXkmkX+R1qaJ7Xb3GQ0gbveOs= -----END CERTIFICATE-----Generated at Sat Jun 14 06:47:30 2025 by rpki-client