$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa File: 724c8337-ea3c-48d0-aa37-5e55be799b4e.roa (raw, json) Hash identifier: AGKH5M9Uz8f4P/Sf2nuqEyGRFLnBxIUA4VpUOfp7/bo= Subject key identifier: 87:9C:8A:5F:D2:72:75:09:55:24:1F:7E:B2:E7:BC:4E:23:57:A6:61 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 08FC6C5B19A705F6DEDF2093044A96D948DA6905 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa Signing time: Fri 11 Apr 2025 00:40:06 +0000 ROA not before: Fri 11 Apr 2025 00:40:06 +0000 ROA not after: Fri 16 May 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:fc:6c:5b:19:a7:05:f6:de:df:20:93:04:4a:96:d9:48:da:69:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 11 00:40:06 2025 GMT Not After : May 16 23:59:59 2025 GMT Subject: serialNumber=39ab0f879369f11d8fb3ecaa7ca067152259c9db5ac8e412e073050dc78ca7c8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:93:17:0d:3f:8b:a1:51:c3:be:c7:ec:aa:93: 6e:36:e9:f1:15:54:ec:ea:31:7b:1a:9b:59:3a:64: 91:cf:59:cc:3b:ec:b4:bc:af:87:06:74:ba:9b:bb: f2:71:5b:5b:38:1c:ae:55:a3:a5:9c:9f:6d:d1:8c: a3:de:ad:8f:9b:b8:45:b4:20:0f:5c:85:64:98:44: 4c:48:b3:af:dc:e5:63:a3:90:05:99:73:4d:22:a3: 0d:59:dd:d4:7d:40:00:25:cc:60:12:67:3f:01:ff: d6:2b:28:ad:77:bd:a1:60:c3:62:b5:d1:9c:45:f7: e5:1c:d9:bf:b3:ff:f2:4b:5f:51:7c:17:69:15:6d: 3f:b0:8a:c2:a7:ef:81:62:ca:84:65:ee:8d:46:1b: a1:d7:d8:5e:b8:30:1b:04:af:bc:04:c3:d1:24:d3: 50:c3:c7:ac:67:9c:87:a2:91:a5:9a:8f:22:e0:f6: fa:cd:c3:95:03:75:c5:2b:39:18:d6:8e:00:2d:1f: a3:e9:ea:ff:f4:9e:f1:e6:4b:76:f1:6c:96:19:0e: 19:73:22:0c:90:97:44:fa:38:6f:e0:3e:2a:ab:4d: 64:86:40:20:85:30:39:a2:1d:cc:24:ff:93:21:38: 2e:dd:1a:02:bd:68:35:a0:bc:f6:ba:b6:50:ef:8e: 61:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9C:8A:5F:D2:72:75:09:55:24:1F:7E:B2:E7:BC:4E:23:57:A6:61 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/724c8337-ea3c-48d0-aa37-5e55be799b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.247.0/24 Signature Algorithm: sha256WithRSAEncryption 53:eb:37:b8:87:6c:49:07:8c:72:0c:f7:21:16:88:ef:ad:3c: 07:b7:c9:be:58:dd:b5:f4:64:73:f2:18:d5:42:38:f4:02:ab: 2d:37:ce:99:b7:d7:34:fb:32:c1:0f:ca:a5:1a:f0:ce:e8:08: 2a:1a:f2:ee:92:df:a1:66:43:6e:4d:c3:10:43:4e:15:02:17: ab:13:a2:72:fd:bb:62:49:aa:72:99:d3:5b:1f:d8:e3:a0:f3: 08:60:35:92:a7:f8:9e:7c:82:ef:bf:f3:1a:ea:f2:cb:56:6d: fd:56:46:ef:08:a7:a0:cc:f0:e8:83:b9:ea:9f:7f:51:11:79: 2e:3e:80:f2:ba:93:0b:4a:d8:ae:fa:52:98:31:e4:a6:70:2c: 9e:94:18:0a:ab:6c:c2:7d:13:fc:e3:c5:3c:e6:45:d0:49:3e: 7d:e4:0d:98:50:9d:80:9b:c0:86:23:b4:b9:c7:39:4d:3c:19: 2e:b2:d0:0c:02:06:2e:8d:66:9f:f2:4d:d0:1c:fe:8d:2a:ce: 6c:4f:ff:8d:13:ce:51:14:29:f2:c6:e7:aa:1d:dc:be:68:b5: fa:36:36:5e:9b:c2:f1:64:9e:f6:12:b4:7a:cc:59:18:0e:8c: 63:ae:7a:a4:fa:c7:e0:ad:2d:84:3b:08:7f:c0:3d:d9:af:9c: 24:a1:fc:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCPxsWxmnBfbe3yCTBEqW2UjaaQUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDExMDA0MDA2WhcNMjUwNTE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWFiMGY4NzkzNjlmMTFkOGZiM2VjYWE3Y2EwNjcxNTIy NTljOWRiNWFjOGU0MTJlMDczMDUwZGM3OGNhN2M4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjkxcNP4uhUcO+x+yqk2426fEVVOzqMXsam1k6ZJHPWcw7 7LS8r4cGdLqbu/JxW1s4HK5Vo6Wcn23RjKPerY+buEW0IA9chWSYRExIs6/c5WOj kAWZc00iow1Z3dR9QAAlzGASZz8B/9YrKK13vaFgw2K10ZxF9+Uc2b+z//JLX1F8 F2kVbT+wisKn74FiyoRl7o1GG6HX2F64MBsEr7wEw9Ek01DDx6xnnIeikaWajyLg 9vrNw5UDdcUrORjWjgAtH6Pp6v/0nvHmS3bxbJYZDhlzIgyQl0T6OG/gPiqrTWSG QCCFMDmiHcwk/5MhOC7dGgK9aDWgvPa6tlDvjmGDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh5yKX9JydQlVJB9+sue8TiNXpmEwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzcyNGM4MzM3LWVhM2MtNDhkMC1hYTM3LTVlNTViZTc5OWI0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPcwDQYJKoZIhvcNAQELBQADggEBAFPrN7iHbEkHjHIM9yEWiO+tPAe3 yb5Y3bX0ZHPyGNVCOPQCqy03zpm31zT7MsEPyqUa8M7oCCoa8u6S36FmQ25NwxBD ThUCF6sTonL9u2JJqnKZ01sf2OOg8whgNZKn+J58gu+/8xrq8stWbf1WRu8Ip6DM 8OiDueqff1EReS4+gPK6kwtK2K76Upgx5KZwLJ6UGAqrbMJ9E/zjxTzmRdBJPn3k DZhQnYCbwIYjtLnHOU08GS6y0AwCBi6NZp/yTdAc/o0qzmxP/40TzlEUKfLG56od 3L5otfo2Nl6bwvFknvYStHrMWRgOjGOueqT6x+CtLYQ7CH/APdmvnCSh/MM= -----END CERTIFICATE-----Generated at Sat Apr 26 12:55:32 2025 by rpki-client