$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa File: 6b90b1f9-6b22-4e82-af32-2981da75246a.roa (raw, json) Hash identifier: DZA4qAXoO8JEIuaDIv89AG4D06A500LMQFXpn/4KESc= Subject key identifier: CC:07:E5:AC:32:2E:B1:70:7D:23:E8:F7:0D:BD:42:03:86:D2:D5:B7 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 15F376D10758CFA2BB398718D2984D6066D8E74D Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa Signing time: Fri 25 Jul 2025 16:40:08 +0000 ROA not before: Fri 25 Jul 2025 16:40:08 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f3:76:d1:07:58:cf:a2:bb:39:87:18:d2:98:4d:60:66:d8:e7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:40:08 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=f558a5cb68daf9557243609bc316fb367f806ddad23508df1f9f9682239f69a4, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:08:69:98:a7:88:94:2d:0c:df:7a:a6:37:b9: 80:e4:ab:78:ca:2f:d1:8d:69:f2:6f:77:35:8b:9b: e3:66:bf:1f:ba:70:dc:49:e6:e9:c9:71:7d:ec:2e: 87:3c:ca:e0:63:92:3c:e7:c9:74:5a:63:a7:80:fa: fa:d0:eb:f8:91:89:54:56:59:29:22:7a:3b:40:21: 24:84:2b:98:fd:e7:29:85:50:35:6f:8a:1a:9b:67: 21:be:a1:75:15:72:c1:fb:01:be:f6:77:fa:c3:81: ea:1d:00:8a:14:e9:fb:33:a9:18:54:c9:27:16:c8: 74:c7:6c:fa:c8:1f:5e:fd:8d:8c:b6:20:be:3f:68: 7d:2b:22:9a:32:3f:ec:9c:dd:64:92:e5:2f:89:34: d6:25:5e:61:fc:ba:04:03:c8:7b:53:53:64:55:89: 40:50:c9:ed:15:4a:8e:d5:0b:1d:e5:7b:03:85:2a: a4:62:b9:27:85:f8:9a:31:cb:c9:11:48:dc:0a:da: 0e:47:a3:14:da:d3:7f:82:1f:13:12:35:ea:19:43: 39:c4:17:c2:bc:fe:a8:09:0a:d6:5b:47:30:0c:2b: a4:91:4e:b7:cf:9a:4f:a7:52:43:f9:77:35:39:20: 02:ee:1a:9b:c4:0b:fe:d3:ee:c5:2d:6b:9d:02:94: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:07:E5:AC:32:2E:B1:70:7D:23:E8:F7:0D:BD:42:03:86:D2:D5:B7 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/6b90b1f9-6b22-4e82-af32-2981da75246a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:86:8c:c4:66:f9:af:59:cf:c2:15:09:71:05:df:e5:41:5c: 0c:ef:f6:fe:fe:54:77:b6:31:61:d7:ab:2d:4d:af:4c:ce:02: 2b:7a:f7:4f:1f:08:88:8d:37:18:e2:93:fd:fe:b5:a8:a9:af: 11:3b:32:4b:f6:3b:0f:21:74:4a:62:47:9a:d1:a1:e7:02:4d: 4e:04:6a:9a:66:14:d6:32:b8:bc:f5:b1:e2:cf:fe:7d:c8:ec: 2c:23:ab:96:3e:31:0e:19:71:af:ed:da:f8:32:6f:f7:58:d8: 06:a6:fc:17:5f:2b:d9:40:88:e3:54:3a:09:6e:f3:80:de:c7: f9:d1:a4:00:99:ff:aa:a6:c5:fd:58:d9:f0:f3:b4:a1:56:8e: 1d:31:bf:67:7a:fc:62:4d:a6:e3:68:34:be:f9:fc:3b:7d:83: ae:53:88:83:34:5d:ea:d3:1f:25:c5:fd:9d:ad:8f:c6:d7:c4: 1d:6c:2d:ce:74:c7:6d:7c:4c:06:63:ca:51:0a:fd:81:89:a2: a6:da:c1:af:54:40:5e:0d:5d:98:d9:b9:05:5a:f6:d9:48:84: 91:e2:b7:b8:19:9b:cc:38:5e:0a:cf:11:27:a9:ef:69:82:1c: 6d:df:a3:c8:49:11:dc:c6:71:e4:55:b4:8d:99:8a:8e:b3:b5: ef:bb:6c:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFfN20QdYz6K7OYcY0phNYGbY500wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MDA4WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTU4YTVjYjY4ZGFmOTU1NzI0MzYwOWJjMzE2ZmIzNjdm ODA2ZGRhZDIzNTA4ZGYxZjlmOTY4MjIzOWY2OWE0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqCGmYp4iULQzfeqY3uYDkq3jKL9GNafJvdzWLm+Nmvx+6 cNxJ5unJcX3sLoc8yuBjkjznyXRaY6eA+vrQ6/iRiVRWWSkiejtAISSEK5j95ymF UDVvihqbZyG+oXUVcsH7Ab72d/rDgeodAIoU6fszqRhUyScWyHTHbPrIH179jYy2 IL4/aH0rIpoyP+yc3WSS5S+JNNYlXmH8ugQDyHtTU2RViUBQye0VSo7VCx3lewOF KqRiuSeF+Joxy8kRSNwK2g5HoxTa03+CHxMSNeoZQznEF8K8/qgJCtZbRzAMK6SR TrfPmk+nUkP5dzU5IALuGpvEC/7T7sUta50ClIPPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzAflrDIusXB9I+j3Db1CA4bS1bcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzZiOTBiMWY5LTZiMjItNGU4Mi1hZjMyLTI5ODFkYTc1MjQ2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBABuGjMRm+a9Zz8IVCXEF3+VBXAzv 9v7+VHe2MWHXqy1Nr0zOAit6908fCIiNNxjik/3+taiprxE7Mkv2Ow8hdEpiR5rR oecCTU4EappmFNYyuLz1seLP/n3I7Cwjq5Y+MQ4Zca/t2vgyb/dY2Aam/BdfK9lA iONUOglu84Dex/nRpACZ/6qmxf1Y2fDztKFWjh0xv2d6/GJNpuNoNL75/Dt9g65T iIM0XerTHyXF/Z2tj8bXxB1sLc50x218TAZjylEK/YGJoqbawa9UQF4NXZjZuQVa 9tlIhJHit7gZm8w4XgrPESep72mCHG3fo8hJEdzGceRVtI2Zio6zte+7bNg= -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:07 2025 by rpki-client