$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa File: 71148066-49a2-41d1-9e03-9f35254905d3.roa (raw, json) Hash identifier: RGmP5YktGdKzr4yFoAiMAnBAXIuCIW5iuN/FJi+JZoc= Subject key identifier: 73:04:B2:1D:51:D4:5D:F8:5B:C4:27:01:3B:E9:E5:B7:B6:31:3E:46 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 7AB5254319337BC6CFA44C87B233A473B1A6CBAE Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa Signing time: Mon 09 Jun 2025 19:37:06 +0000 ROA not before: Mon 09 Jun 2025 19:37:06 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:b5:25:43:19:33:7b:c6:cf:a4:4c:87:b2:33:a4:73:b1:a6:cb:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 9 19:37:06 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=d64f2c7f66e44f8be56ac8106ca4e03a52ddb8fbb93a37e0b0c8d57570aef3cb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ac:70:2a:e0:3f:43:a7:dc:0f:5c:3e:8d:43: 09:2a:d2:b0:f3:73:32:21:49:f1:df:3d:61:1e:86: 3f:d6:4c:21:79:e2:aa:98:34:2a:a7:23:4d:f7:e3: 85:1a:ea:0e:b5:8b:43:4f:b3:2e:0e:61:4a:92:a7: 90:91:1a:c5:06:93:10:3f:63:29:a3:b3:bc:b3:52: 22:93:09:1b:57:3b:ea:71:12:84:82:f7:75:67:fc: ea:34:3b:05:27:ad:ef:f7:93:09:f3:34:31:35:0d: 2d:4e:41:6e:40:2c:d8:9e:25:55:20:69:e4:5f:99: cf:e7:c5:7d:4b:91:d4:c1:a8:68:1d:7e:b1:e2:36: 5e:7e:ef:5f:55:a4:18:ba:d2:98:8e:7f:9d:2f:76: 40:10:7f:3c:fc:84:9c:1f:85:5f:87:31:96:7c:a8: 87:3b:37:17:73:ca:1c:17:77:f2:b9:97:8b:66:4c: 48:85:69:fe:9b:7c:71:ea:89:51:76:b9:4b:4c:6c: 06:68:c8:b2:be:0a:4e:e6:f0:54:87:e6:aa:c8:5d: 1c:7e:a0:d1:a4:49:7e:d3:c7:b8:87:cb:9c:f8:e9: 3e:4e:92:e6:c9:28:64:3f:18:fa:c1:84:fa:57:13: 15:b9:18:94:1d:3a:0d:50:99:05:64:4f:91:f6:be: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:04:B2:1D:51:D4:5D:F8:5B:C4:27:01:3B:E9:E5:B7:B6:31:3E:46 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/71148066-49a2-41d1-9e03-9f35254905d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.41.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:bc:c4:80:c9:bf:7a:80:c0:fd:8c:47:41:03:ed:fc:77:e1: 0f:7c:69:81:46:27:9d:06:c5:cd:fd:f7:e7:ca:15:dc:d7:18: 5b:f1:8c:91:d4:c6:54:cd:4a:88:01:a9:01:00:d5:c3:67:c2: ea:f9:2b:72:e9:b2:8f:ac:de:de:e9:8d:9e:04:ce:95:dc:8c: af:d8:09:1d:0a:38:2e:3f:3a:90:53:c5:fa:4c:8d:28:3e:67: 2e:81:1e:b5:fe:35:39:5c:de:69:fe:65:aa:f0:a4:bc:5d:d8: 54:31:ef:74:44:bc:57:c0:eb:22:bf:8e:59:55:c7:6a:e1:f1: 06:4c:ea:6c:81:51:87:95:36:18:1e:54:ba:3c:1d:ea:ce:ae: 20:e0:a3:41:d6:02:bd:a9:3f:fe:57:63:e7:3b:ed:a1:8c:e5: 53:5e:79:0c:aa:12:c6:f0:91:3f:1b:d5:b9:15:df:81:75:a3: 95:b1:ba:c8:c5:f0:99:83:c5:ce:ab:12:9a:f6:b7:54:2c:36: 19:4e:55:b3:00:b3:a8:f9:c0:8a:79:47:48:9d:43:30:53:99: 43:66:6d:87:e2:a0:a0:8f:1a:a5:b4:11:61:8c:64:96:51:bc: bc:5b:13:00:77:e9:8a:b4:03:7c:b6:92:30:b9:bb:da:5d:b7: 5d:4a:ca:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUerUlQxkze8bPpEyHsjOkc7Gmy64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA5MTkzNzA2WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjRmMmM3ZjY2ZTQ0ZjhiZTU2YWM4MTA2Y2E0ZTAzYTUy ZGRiOGZiYjkzYTM3ZTBiMGM4ZDU3NTcwYWVmM2NiMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBrHAq4D9Dp9wPXD6NQwkq0rDzczIhSfHfPWEehj/WTCF5 4qqYNCqnI03344Ua6g61i0NPsy4OYUqSp5CRGsUGkxA/Yymjs7yzUiKTCRtXO+px EoSC93Vn/Oo0OwUnre/3kwnzNDE1DS1OQW5ALNieJVUgaeRfmc/nxX1LkdTBqGgd frHiNl5+719VpBi60piOf50vdkAQfzz8hJwfhV+HMZZ8qIc7NxdzyhwXd/K5l4tm TEiFaf6bfHHqiVF2uUtMbAZoyLK+Ck7m8FSH5qrIXRx+oNGkSX7Tx7iHy5z46T5O kubJKGQ/GPrBhPpXExW5GJQdOg1QmQVkT5H2vjVvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcwSyHVHUXfhbxCcBO+nlt7YxPkYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcxMTQ4MDY2LTQ5YTItNDFkMS05ZTAzLTlmMzUyNTQ5MDVkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCkwDQYJKoZIhvcNAQELBQADggEBAD+8xIDJv3qAwP2MR0ED7fx34Q98 aYFGJ50Gxc399+fKFdzXGFvxjJHUxlTNSogBqQEA1cNnwur5K3Lpso+s3t7pjZ4E zpXcjK/YCR0KOC4/OpBTxfpMjSg+Zy6BHrX+NTlc3mn+ZarwpLxd2FQx73REvFfA 6yK/jllVx2rh8QZM6myBUYeVNhgeVLo8HerOriDgo0HWAr2pP/5XY+c77aGM5VNe eQyqEsbwkT8b1bkV34F1o5WxusjF8JmDxc6rEpr2t1QsNhlOVbMAs6j5wIp5R0id QzBTmUNmbYfioKCPGqW0EWGMZJZRvLxbEwB36Yq0A3y2kjC5u9pdt11KyjU= -----END CERTIFICATE-----Generated at Thu Jun 19 08:43:03 2025 by rpki-client