$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa File: 5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa (raw, json) Hash identifier: FnzSassO1sQunnNNgnJPrlZX2oK4dsCJ4PK3FZ4MgLw= Subject key identifier: 7C:03:FC:A1:E6:14:55:DA:94:05:3C:CD:D5:08:8E:E6:E7:C7:5E:6C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4A3ABF9B4483A229B756EA61D30DFE97E78BE663 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa Signing time: Fri 25 Apr 2025 17:40:10 +0000 ROA not before: Fri 25 Apr 2025 17:40:10 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:3a:bf:9b:44:83:a2:29:b7:56:ea:61:d3:0d:fe:97:e7:8b:e6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 25 17:40:10 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=ab3db78f86ecb71a8863de54b43ac0c115477c49a3255e66e74f26250287f0f5, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:48:b0:66:b8:6f:15:5e:a9:94:c0:af:67: a3:74:0f:cb:82:60:fb:f6:48:97:50:3a:e6:a2:41: d4:2b:cf:08:6d:b5:b0:00:cd:02:68:0c:f2:26:20: e3:52:f1:bd:1a:2a:b7:37:55:a9:37:10:38:a2:e6: 84:50:4d:66:f7:73:1b:11:10:cf:3d:19:95:6f:f0: 61:ee:5e:78:5f:fc:bf:d1:80:87:9d:65:ca:04:5e: eb:b2:6d:48:aa:39:43:39:5a:0e:a6:d2:84:6a:5b: 44:6c:e3:09:eb:df:75:f1:5c:64:c6:8c:80:cf:3f: 04:3a:97:d9:a2:ba:9b:d5:8b:7b:de:97:f0:36:82: 39:4a:c0:90:ac:b5:83:09:6e:0a:a6:d6:26:a7:fb: 07:4d:92:c1:32:a2:3b:0e:1c:29:9e:1c:75:d4:4c: fa:ce:5b:19:19:9a:de:4e:39:81:4d:a6:dd:dd:f9: bf:2e:58:aa:df:af:78:a7:65:1c:7b:b6:2e:e0:4b: 59:f1:52:2c:11:3a:3a:7f:06:ac:37:aa:dc:af:2e: d0:18:be:8c:fd:2f:5b:e0:b6:11:d5:6f:fb:6a:0c: 3b:69:e5:68:e4:46:91:0a:af:14:a7:07:43:07:01: a1:0d:e5:ac:27:44:c8:33:20:a2:34:43:25:f8:3e: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:03:FC:A1:E6:14:55:DA:94:05:3C:CD:D5:08:8E:E6:E7:C7:5E:6C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/5ffaeb6f-2056-42ae-b0de-d1fff053a663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.2.0/24 Signature Algorithm: sha256WithRSAEncryption 04:38:7c:9d:f0:22:23:8c:fe:0f:1f:98:16:da:1e:b8:5c:38: 7f:70:9a:6c:4a:f4:f9:79:c2:87:93:09:c6:f9:27:9c:c7:0c: 51:b4:cd:84:e3:b3:10:34:b7:cb:22:1f:d8:84:6a:c8:8d:29: a2:c8:52:0b:91:b3:1d:92:ff:ce:7f:fd:0d:88:35:ba:05:d3: a6:f9:b4:05:b7:dd:e8:55:50:91:24:de:10:43:0a:73:13:00: 7e:0b:f5:fc:4f:66:84:21:0d:76:0f:13:36:cb:fa:ca:d1:a2: ee:7f:f7:ac:87:a1:e7:b6:83:93:1c:f1:2b:b3:4b:92:e3:a8: 9c:6e:3b:f6:4a:17:77:68:25:ab:a6:24:1b:9d:54:48:11:2e: 75:66:cd:01:7a:9c:d9:1f:45:da:b1:c4:0b:08:62:58:d1:f5: 0f:67:1b:84:d9:ee:ab:1e:16:ce:3d:a9:fd:19:19:29:b3:fa: 83:bd:e7:82:06:b4:8d:8c:51:8d:ff:0f:f5:e4:1c:f7:fd:33: 1a:b8:f5:83:91:6d:fb:49:12:10:cd:44:47:7e:d1:e6:c3:21: f4:73:95:30:5c:28:c0:4b:43:e1:d0:95:2e:39:c6:16:13:d5: cb:15:be:d3:69:1e:0a:0e:76:fc:5a:49:c3:c9:01:65:1c:fa: 83:23:4a:2f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSjq/m0SDoim3Vuph0w3+l+eL5mMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI1MTc0MDEwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjNkYjc4Zjg2ZWNiNzFhODg2M2RlNTRiNDNhYzBjMTE1 NDc3YzQ5YTMyNTVlNjZlNzRmMjYyNTAyODdmMGY1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDM/EiwZrhvFV6plMCvZ6N0D8uCYPv2SJdQOuaiQdQrzwht tbAAzQJoDPImIONS8b0aKrc3Vak3EDii5oRQTWb3cxsREM89GZVv8GHuXnhf/L/R gIedZcoEXuuybUiqOUM5Wg6m0oRqW0Rs4wnr33XxXGTGjIDPPwQ6l9miupvVi3ve l/A2gjlKwJCstYMJbgqm1ian+wdNksEyojsOHCmeHHXUTPrOWxkZmt5OOYFNpt3d +b8uWKrfr3inZRx7ti7gS1nxUiwROjp/Bqw3qtyvLtAYvoz9L1vgthHVb/tqDDtp 5WjkRpEKrxSnB0MHAaEN5awnRMgzIKI0QyX4PqAjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfAP8oeYUVdqUBTzN1QiO5ufHXmwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzVmZmFlYjZmLTIwNTYtNDJhZS1iMGRlLWQxZmZmMDUzYTY2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAIwDQYJKoZIhvcNAQELBQADggEBAAQ4fJ3wIiOM/g8fmBbaHrhcOH9w mmxK9Pl5woeTCcb5J5zHDFG0zYTjsxA0t8siH9iEasiNKaLIUguRsx2S/85//Q2I NboF06b5tAW33ehVUJEk3hBDCnMTAH4L9fxPZoQhDXYPEzbL+srRou5/96yHoee2 g5Mc8SuzS5LjqJxuO/ZKF3doJaumJBudVEgRLnVmzQF6nNkfRdqxxAsIYljR9Q9n G4TZ7qseFs49qf0ZGSmz+oO954IGtI2MUY3/D/XkHPf9Mxq49YORbftJEhDNREd+ 0ebDIfRzlTBcKMBLQ+HQlS45xhYT1csVvtNpHgoOdvxaScPJAWUc+oMjSi8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:57:24 2025 by rpki-client