$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7008dbb8-efa0-4731-b0e1-56c5f8aef999.roa File: 7008dbb8-efa0-4731-b0e1-56c5f8aef999.roa (raw, json) Hash identifier: iyk5GXgPpVnq3xb4bbOqm9eP3uLbPVAkm3M4jihGzAg= Subject key identifier: 4E:2E:82:F5:63:C1:CF:02:B2:0F:F5:6E:A2:5A:52:AD:D9:80:83:7D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 46EE8B9AEC6604DAED941E601093474B0CF6DB92 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7008dbb8-efa0-4731-b0e1-56c5f8aef999.roa Signing time: Thu 05 Jun 2025 14:39:08 +0000 ROA not before: Thu 05 Jun 2025 14:39:08 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ee:8b:9a:ec:66:04:da:ed:94:1e:60:10:93:47:4b:0c:f6:db:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:39:08 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=596f764a74cd5be5a8c85180ae37a5246b70f2c23b0791dcb7080240e048b3f9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:87:10:13:96:45:0e:a0:93:33:e3:bf:4c: 41:b1:e2:18:22:d3:13:5d:93:5c:98:86:5f:5a:a7: 3b:36:0f:84:f0:55:e9:f1:be:21:80:b1:3d:4e:9b: 05:0d:47:8c:5d:bd:b2:ad:db:28:4d:95:48:70:67: 0b:bf:ba:53:4f:ae:fd:2e:75:bb:2a:f3:ab:99:b8: ff:2e:ec:dc:d8:3d:59:5c:fb:c1:fe:f2:6e:84:4f: 0b:4f:16:5b:ee:4d:38:15:99:e5:50:34:1b:c3:79: eb:80:f7:4d:08:b3:65:eb:75:47:80:8a:58:fa:38: 8a:f6:64:1e:3d:d1:9c:b2:34:2e:df:33:d2:4b:f0: 61:ad:4b:ab:c0:f3:ee:4e:fd:57:0a:dd:25:7a:75: 19:cc:03:22:1a:a4:6a:75:f6:b2:86:d4:db:76:c6: ce:86:bb:c2:d1:0e:a1:5b:1d:4b:85:ae:4d:4e:f4: 06:fb:fa:46:6f:6b:7a:71:65:4a:38:5c:ab:85:5f: bc:5e:80:70:10:b7:09:f4:8c:79:4a:4f:78:c0:38: 0f:44:39:7f:b0:cf:91:b9:32:4d:88:f5:94:f3:4b: 8d:0f:ed:99:b8:6e:93:1b:eb:e3:a6:ae:74:e0:80: f6:68:7b:1e:89:c9:9c:04:e6:35:42:51:78:b1:26: 4e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2E:82:F5:63:C1:CF:02:B2:0F:F5:6E:A2:5A:52:AD:D9:80:83:7D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7008dbb8-efa0-4731-b0e1-56c5f8aef999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.144.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:92:d0:5b:c3:b5:27:cf:cd:9d:82:e7:02:bb:bf:5c:2e:d7: 05:8b:e2:a7:89:48:f0:5a:bd:4a:f4:a6:cb:12:d7:6e:8a:5d: 11:13:1c:57:14:b1:f4:e7:c0:67:1d:66:0d:8e:b5:01:16:bc: 9f:13:46:6a:4b:13:74:9f:43:8c:95:f5:0f:59:90:32:04:4a: 4a:2a:6a:8f:11:ce:df:0b:ad:b1:62:ee:57:5b:f4:bf:68:56: c8:3a:dc:61:f0:12:33:ba:6b:4a:16:06:2c:07:65:59:53:e8: dd:b8:c3:a1:12:1d:3d:9c:26:a2:5b:01:9a:8d:51:99:0b:7b: dc:b9:8b:99:02:65:83:fb:eb:e5:54:31:05:b4:0a:af:70:3e: 10:01:22:0d:92:fd:ef:f2:cd:96:62:4f:5b:30:72:0f:b8:8d: 8d:5d:10:0b:d6:81:ef:d9:52:1f:77:7d:ac:31:da:c2:0b:13: 7e:c6:c4:e6:3d:f0:cf:53:7f:9b:38:8f:32:88:2c:b9:ca:e6: 9e:b1:52:43:a1:02:2f:40:9e:e1:ac:15:1b:d8:c3:31:7d:a8: a3:e0:58:da:d5:06:51:ad:e2:60:f8:dc:9b:6f:c9:99:9c:71: 7d:4e:3b:6b:d9:8e:11:ee:c8:3a:c6:c5:42:46:8d:3c:ef:8c: 81:16:41:3e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURu6LmuxmBNrtlB5gEJNHSwz225IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzOTA4WhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0A1OTZmNzY0YTc0Y2Q1YmU1YThjODUxODBhZTM3YTUyNDZi NzBmMmMyM2IwNzkxZGNiNzA4MDI0MGUwNDhiM2Y5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPnocQE5ZFDqCTM+O/TEGx4hgi0xNdk1yYhl9apzs2D4Tw VenxviGAsT1OmwUNR4xdvbKt2yhNlUhwZwu/ulNPrv0udbsq86uZuP8u7NzYPVlc +8H+8m6ETwtPFlvuTTgVmeVQNBvDeeuA900Is2XrdUeAilj6OIr2ZB490ZyyNC7f M9JL8GGtS6vA8+5O/VcK3SV6dRnMAyIapGp19rKG1Nt2xs6Gu8LRDqFbHUuFrk1O 9Ab7+kZva3pxZUo4XKuFX7xegHAQtwn0jHlKT3jAOA9EOX+wz5G5Mk2I9ZTzS40P 7Zm4bpMb6+OmrnTggPZoex6JyZwE5jVCUXixJk6dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTi6C9WPBzwKyD/VuolpSrdmAg30wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcwMDhkYmI4LWVmYTAtNDczMS1iMGUxLTU2YzVmOGFlZjk5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYJAwDQYJKoZIhvcNAQELBQADggEBABuS0FvDtSfPzZ2C5wK7v1wu1wWL 4qeJSPBavUr0pssS126KXRETHFcUsfTnwGcdZg2OtQEWvJ8TRmpLE3SfQ4yV9Q9Z kDIESkoqao8Rzt8LrbFi7ldb9L9oVsg63GHwEjO6a0oWBiwHZVlT6N24w6ESHT2c JqJbAZqNUZkLe9y5i5kCZYP76+VUMQW0Cq9wPhABIg2S/e/yzZZiT1swcg+4jY1d EAvWge/ZUh93fawx2sILE37GxOY98M9Tf5s4jzKILLnK5p6xUkOhAi9AnuGsFRvY wzF9qKPgWNrVBlGt4mD43JtvyZmccX1OO2vZjhHuyDrGxUJGjTzvjIEWQT4= -----END CERTIFICATE-----Generated at Sun Jun 15 08:49:50 2025 by rpki-client