$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7081834a-8e47-41c4-b648-ecb8acc8ea5d.roa File: 7081834a-8e47-41c4-b648-ecb8acc8ea5d.roa (raw, json) Hash identifier: +pOIM6D8byyUYX9WHMrwZc+UuyIZmWfq0sh5uE3TzRw= Subject key identifier: 13:27:75:0F:6F:AA:B4:51:BE:1B:03:7D:C8:A4:C0:58:9D:35:B1:F6 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 07B0C0FD232CA2430435EBE9FEBD54312B8642F7 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7081834a-8e47-41c4-b648-ecb8acc8ea5d.roa Signing time: Thu 05 Jun 2025 14:39:02 +0000 ROA not before: Thu 05 Jun 2025 14:39:02 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b0:c0:fd:23:2c:a2:43:04:35:eb:e9:fe:bd:54:31:2b:86:42:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:39:02 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=bbdf925154a7dd708183b65848a4c8f219492eafc86003ecd9658f21200f497e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:50:72:e1:e2:91:67:fa:bc:86:75:5a:3c: 1e:eb:38:fc:9e:06:78:ef:3e:35:be:ee:57:d5:d2: 3c:44:e7:3c:64:7a:0a:5a:8c:7d:6b:d0:e4:b9:56: 27:4c:f7:f4:61:ed:56:06:55:e6:1b:ec:24:31:7c: 90:68:f2:12:a4:a9:9e:1b:b3:ae:ad:a1:bb:63:a4: 06:55:0c:d0:8f:c3:ee:52:38:ef:27:e5:e5:e2:96: ca:69:90:e1:89:c5:ab:0c:f2:a9:a7:51:64:c8:ac: 01:ae:da:32:7b:d5:c5:39:68:68:32:bf:62:f8:30: ce:a4:00:d8:78:f8:20:9a:cd:02:cf:7b:8b:a2:fc: 14:4e:25:5f:45:de:9e:a1:55:fe:49:e9:56:1e:d1: 12:67:7e:90:94:9a:f2:6a:ca:b6:2f:ad:6b:9f:6c: bd:00:ac:1e:53:63:ae:ba:9d:18:c5:bf:6f:ff:7b: 41:b1:27:80:b2:5a:da:45:6f:47:2e:b2:21:ba:5d: a4:f3:90:75:e7:7a:48:f9:e8:dc:bb:b9:56:41:3d: 17:bc:e0:78:c8:b3:e2:1e:e0:34:38:7b:5e:33:b4: b2:7a:73:b2:3d:b9:be:97:5f:66:83:2e:e4:2a:7d: d1:6e:bc:ad:7a:1e:9d:0a:0e:bc:8d:4e:f8:18:3f: 56:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:27:75:0F:6F:AA:B4:51:BE:1B:03:7D:C8:A4:C0:58:9D:35:B1:F6 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7081834a-8e47-41c4-b648-ecb8acc8ea5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.64.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:31:b2:46:36:8a:db:cc:71:68:62:0a:ed:9c:37:e8:27:21: 22:af:29:91:78:22:36:d2:29:72:f6:5d:d2:94:e9:93:a5:39: d4:4c:67:95:72:85:6e:c3:8f:8a:b9:55:a3:5b:22:ea:27:2d: bc:d6:b0:41:ff:27:7e:b1:c3:4f:e1:e1:5e:30:f7:e9:8d:71: cd:b7:77:b4:bf:ab:97:a3:bb:e0:e8:72:be:07:8f:9f:a2:e2: 01:97:10:5e:1c:79:2f:ab:8d:8b:55:1f:11:fa:ee:00:28:f1: 04:29:d2:32:8e:b0:1f:f5:9f:af:3c:49:4a:b2:b7:32:06:ef: d1:ef:17:22:ff:05:c6:02:f5:90:89:37:4f:37:b8:ab:f9:0a: 51:fd:5d:13:6e:02:18:bb:8e:47:09:07:81:14:9e:d2:5e:63: 91:43:15:43:ed:b3:da:e6:92:41:6e:e0:5d:fe:95:24:1d:48: 86:87:1c:18:7f:f3:9c:53:85:9f:90:62:b8:7e:ba:1c:3c:ec: dd:51:95:6c:8c:96:7d:98:80:1b:7d:65:64:08:6c:b4:f4:42: 3f:a0:cb:fc:a2:5a:4d:be:6f:0f:e6:fc:27:c7:75:30:a0:57: 9f:e2:0b:e1:47:48:26:22:12:f5:d7:2d:27:c3:bf:51:e0:a6: 4d:46:3d:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUB7DA/SMsokMENevp/r1UMSuGQvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzOTAyWhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmRmOTI1MTU0YTdkZDcwODE4M2I2NTg0OGE0YzhmMjE5 NDkyZWFmYzg2MDAzZWNkOTY1OGYyMTIwMGY0OTdlMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4/FBy4eKRZ/q8hnVaPB7rOPyeBnjvPjW+7lfV0jxE5zxk egpajH1r0OS5VidM9/Rh7VYGVeYb7CQxfJBo8hKkqZ4bs66tobtjpAZVDNCPw+5S OO8n5eXilsppkOGJxasM8qmnUWTIrAGu2jJ71cU5aGgyv2L4MM6kANh4+CCazQLP e4ui/BROJV9F3p6hVf5J6VYe0RJnfpCUmvJqyrYvrWufbL0ArB5TY666nRjFv2// e0GxJ4CyWtpFb0cusiG6XaTzkHXnekj56Ny7uVZBPRe84HjIs+Ie4DQ4e14ztLJ6 c7I9ub6XX2aDLuQqfdFuvK16Hp0KDryNTvgYP1b7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEyd1D2+qtFG+GwN9yKTAWJ01sfYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcwODE4MzRhLThlNDctNDFjNC1iNjQ4LWVjYjhhY2M4ZWE1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYEAwDQYJKoZIhvcNAQELBQADggEBAA8xskY2itvMcWhiCu2cN+gnISKv KZF4IjbSKXL2XdKU6ZOlOdRMZ5VyhW7Dj4q5VaNbIuonLbzWsEH/J36xw0/h4V4w 9+mNcc23d7S/q5eju+Docr4Hj5+i4gGXEF4ceS+rjYtVHxH67gAo8QQp0jKOsB/1 n688SUqytzIG79HvFyL/BcYC9ZCJN083uKv5ClH9XRNuAhi7jkcJB4EUntJeY5FD FUPts9rmkkFu4F3+lSQdSIaHHBh/85xThZ+QYrh+uhw87N1RlWyMln2YgBt9ZWQI bLT0Qj+gy/yiWk2+bw/m/CfHdTCgV5/iC+FHSCYiEvXXLSfDv1Hgpk1GPfk= -----END CERTIFICATE-----Generated at Sat Jun 14 07:14:03 2025 by rpki-client