$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa File: 8467dcd7-366c-4080-b9a9-e85d9f84b167.roa (raw, json) Hash identifier: no1NKhOJ5i5Qy2ayd8PJSf6m/xHAUJ7kDcS+NZ60feA= Subject key identifier: 09:33:41:2D:6C:C1:EF:5E:F1:97:1E:FE:95:56:D7:A0:34:96:70:6C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 081795880CB9F823A02FD9E1DC013C7F28FB4BD1 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa Signing time: Fri 25 Apr 2025 17:40:08 +0000 ROA not before: Fri 25 Apr 2025 17:40:08 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:17:95:88:0c:b9:f8:23:a0:2f:d9:e1:dc:01:3c:7f:28:fb:4b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 25 17:40:08 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=a7fdef03aa57bac2d7d733f33c3697581ce6927141eb4846fb09db7802cd3d3d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ad:c1:e8:29:d5:3d:d3:01:1e:89:b7:91:9f: 3d:1c:0c:e7:cd:72:3c:4d:7a:5a:e5:35:ac:93:a5: f9:b0:a5:3b:f9:37:e3:5e:05:6a:de:53:40:1b:cf: cb:8e:e2:50:bf:d1:c7:34:5b:88:0b:94:86:25:92: b0:46:ec:3f:14:e7:24:d2:19:43:52:65:e5:03:99: 98:8a:07:fa:65:22:ad:3f:7e:b9:b3:1a:4c:95:c4: 32:90:8b:53:69:ba:64:74:02:e3:49:4d:33:4e:65: 3f:30:3e:12:56:55:6d:c1:4e:79:45:bc:fd:89:a2: e7:dd:20:8e:50:a3:9d:ae:0c:e8:c0:79:6f:46:c1: 57:4d:1e:12:b8:a9:58:4d:2a:ba:78:a6:2a:2a:02: 3f:99:69:aa:d7:3b:08:fe:68:ca:58:f7:ae:75:4f: d9:f8:b6:4c:28:15:06:ce:96:f0:da:f1:37:3c:5c: 5f:1f:2e:57:e0:27:44:c6:7d:7c:0b:91:49:01:13: 1b:d4:d1:58:3f:c1:30:34:3f:ca:ce:86:c1:38:e5: 8c:c7:ca:6b:e1:fd:71:85:87:08:eb:ee:80:d2:19: e3:7b:c6:11:1f:27:e7:90:29:53:2d:4f:c7:6b:40: b4:19:e6:0d:2c:59:66:78:53:40:6c:c9:9d:67:c3: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:33:41:2D:6C:C1:EF:5E:F1:97:1E:FE:95:56:D7:A0:34:96:70:6C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8467dcd7-366c-4080-b9a9-e85d9f84b167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.0.0/20 Signature Algorithm: sha256WithRSAEncryption 3e:9b:b4:e7:da:de:07:16:a9:0b:71:d4:4d:be:ae:e8:d2:cf: 22:c8:51:9d:72:a8:fc:52:af:1b:e5:e2:67:d6:12:c7:92:a8: 30:80:a7:c0:63:fd:23:e8:3e:f7:ff:9f:a6:19:b7:19:e3:3a: bf:f5:cc:d1:84:63:c1:53:c2:52:08:74:49:12:9c:24:ac:d5: 27:6b:17:0b:a4:4a:32:b9:9b:99:3f:0d:65:dc:1f:e9:22:4f: 98:1a:d4:0f:0b:26:02:27:c3:dc:68:1b:fb:94:b4:36:55:d8: bf:12:f1:a3:32:2c:37:b5:b7:86:09:cb:19:15:f5:af:50:12: 29:7a:ee:ea:f4:3e:17:bb:2a:33:f8:7c:04:d1:9c:2b:62:ed: 5a:e2:6f:0d:d7:31:3f:c0:4e:5c:6a:87:95:9a:2a:1a:95:8a: ae:52:33:f1:11:62:71:37:7c:08:9d:74:11:c4:e5:c4:b1:fc: 08:b7:91:48:12:c9:01:eb:f0:9f:85:71:ca:74:82:97:eb:54: e3:2e:a7:d6:3a:c2:c4:d4:31:7f:16:ea:d8:3c:aa:d0:a3:83: 51:2f:93:a5:04:dd:59:f6:a3:c8:d5:5e:d1:84:f0:e6:a8:c2: d8:78:22:88:c8:63:d1:bd:29:e2:c4:2d:be:fe:80:8a:a7:63: d2:b7:f9:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCBeViAy5+COgL9nh3AE8fyj7S9EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI1MTc0MDA4WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2ZkZWYwM2FhNTdiYWMyZDdkNzMzZjMzYzM2OTc1ODFj ZTY5MjcxNDFlYjQ4NDZmYjA5ZGI3ODAyY2QzZDNkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmrcHoKdU90wEeibeRnz0cDOfNcjxNelrlNayTpfmwpTv5 N+NeBWreU0Abz8uO4lC/0cc0W4gLlIYlkrBG7D8U5yTSGUNSZeUDmZiKB/plIq0/ frmzGkyVxDKQi1NpumR0AuNJTTNOZT8wPhJWVW3BTnlFvP2JoufdII5Qo52uDOjA eW9GwVdNHhK4qVhNKrp4pioqAj+ZaarXOwj+aMpY9651T9n4tkwoFQbOlvDa8Tc8 XF8fLlfgJ0TGfXwLkUkBExvU0Vg/wTA0P8rOhsE45YzHymvh/XGFhwjr7oDSGeN7 xhEfJ+eQKVMtT8drQLQZ5g0sWWZ4U0BsyZ1nw1mnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCTNBLWzB717xlx7+lVbXoDSWcGwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzg0NjdkY2Q3LTM2NmMtNDA4MC1iOWE5LWU4NWQ5Zjg0YjE2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYAAwDQYJKoZIhvcNAQELBQADggEBAD6btOfa3gcWqQtx1E2+rujSzyLI UZ1yqPxSrxvl4mfWEseSqDCAp8Bj/SPoPvf/n6YZtxnjOr/1zNGEY8FTwlIIdEkS nCSs1SdrFwukSjK5m5k/DWXcH+kiT5ga1A8LJgInw9xoG/uUtDZV2L8S8aMyLDe1 t4YJyxkV9a9QEil67ur0Phe7KjP4fATRnCti7Vribw3XMT/ATlxqh5WaKhqViq5S M/ERYnE3fAiddBHE5cSx/Ai3kUgSyQHr8J+Fccp0gpfrVOMup9Y6wsTUMX8W6tg8 qtCjg1Evk6UE3Vn2o8jVXtGE8Oaowth4IojIY9G9KeLELb7+gIqnY9K3+aQ= -----END CERTIFICATE-----Generated at Sat Apr 26 14:54:36 2025 by rpki-client