$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa File: 9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa (raw, json) Hash identifier: t1FKkqECTFs0H3wnAEOC5LXneunNUEhHC+QVyLbD8J4= Subject key identifier: 88:2D:80:EB:27:CD:B6:D8:29:A7:4A:94:F1:19:5A:97:B4:6B:59:C9 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3FCEF401D8CEC053EFF66E3C46A5E211CC291E40 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa Signing time: Thu 31 Jul 2025 01:51:57 +0000 ROA not before: Thu 31 Jul 2025 01:51:57 +0000 ROA not after: Thu 04 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ce:f4:01:d8:ce:c0:53:ef:f6:6e:3c:46:a5:e2:11:cc:29:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 31 01:51:57 2025 GMT Not After : Sep 4 23:59:59 2025 GMT Subject: serialNumber=6208ddb8f75ede254d41f5bbb29f30fcedab84e23671986cae02f91bb46bd71a, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ed:39:61:01:ba:3c:cf:09:45:f3:e1:d7:60: a5:cc:8e:75:9a:8f:19:b1:7b:fe:22:6a:44:e6:e6: c2:f8:96:5c:38:c5:30:47:db:b1:00:d6:e2:09:3a: 05:ad:c0:6a:ef:3f:9f:9d:8f:cc:10:9a:60:28:3f: 0b:af:c2:84:8d:90:a2:e4:e0:a4:56:9c:6b:4b:d4: 38:a6:79:16:9b:f4:ca:66:ef:9e:b0:2d:0b:ce:12: 89:d7:9f:ac:68:ba:01:06:3a:2e:ad:93:81:5f:8f: d0:8d:87:73:0f:b4:60:63:1e:b5:41:3a:ab:14:9c: 26:df:8c:5c:a0:ff:a6:c6:93:d6:a9:27:85:ab:4e: 37:b4:33:9e:99:98:1b:cd:e4:35:1a:09:06:39:e9: 27:2d:bd:86:4b:77:80:ad:bc:0d:dc:70:96:df:07: 0c:d7:36:a1:5b:06:c3:eb:59:97:a6:dc:fa:f1:52: 19:ba:28:8a:98:45:44:92:e3:78:97:ac:25:d3:e1: b9:d1:e3:59:80:30:0e:64:c8:e7:8d:98:ee:76:4b: 8b:e3:dc:f8:05:37:43:40:09:cb:18:c1:28:65:46: dd:5f:c7:b1:4e:22:f6:6c:24:10:25:ef:06:49:c7: 14:e4:b8:be:0d:81:a2:6c:e0:a0:dc:c2:c1:cb:f9: 56:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2D:80:EB:27:CD:B6:D8:29:A7:4A:94:F1:19:5A:97:B4:6B:59:C9 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.45.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:8b:97:f3:5e:33:4a:8a:f6:39:1e:0e:31:c3:4b:05:69:03: a8:2a:94:fb:0a:7f:00:51:e1:4d:bf:79:1f:7d:69:d7:0e:11: 9d:bb:ed:4c:45:b3:12:e8:1f:69:b2:17:c8:a9:57:b0:60:47: c9:b3:af:6b:01:af:35:e9:7f:db:ae:5a:42:bd:b3:34:5d:c4: e0:a8:b4:80:ef:b4:76:dc:9d:c7:87:b4:c3:13:20:a9:8b:c5: 3d:25:1c:8e:1d:46:9c:e1:b5:2c:f2:da:8c:40:3d:6f:01:d1: c4:7f:ca:31:fc:dd:2d:fc:54:a9:f6:55:ff:64:21:69:27:96: 84:47:db:ab:89:1c:e8:13:a7:59:96:e3:5d:25:5b:77:ed:ae: e7:43:b8:ee:c2:c9:13:99:cb:f9:87:db:12:25:da:a7:e6:29: 16:88:ca:fb:db:7e:81:48:14:2f:a8:a7:b5:7c:56:ed:e9:a1: c4:91:51:69:78:f6:d7:30:91:9b:ea:c1:86:85:01:9f:b4:14: 06:d2:36:a4:df:7f:53:9f:68:f5:4f:2f:94:fe:46:57:b8:04: 57:c0:b8:de:ca:6e:10:45:cb:cb:88:22:78:7c:4f:50:16:fc: 87:30:14:b1:36:b2:d0:97:6c:8e:c6:fd:c7:96:f5:b1:c8:55: 0a:66:41:5b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP870AdjOwFPv9m48RqXiEcwpHkAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzMxMDE1MTU3WhcNMjUwOTA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MjA4ZGRiOGY3NWVkZTI1NGQ0MWY1YmJiMjlmMzBmY2Vk YWI4NGUyMzY3MTk4NmNhZTAyZjkxYmI0NmJkNzFhMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA7TlhAbo8zwlF8+HXYKXMjnWajxmxe/4iakTm5sL4llw4 xTBH27EA1uIJOgWtwGrvP5+dj8wQmmAoPwuvwoSNkKLk4KRWnGtL1DimeRab9Mpm 756wLQvOEonXn6xougEGOi6tk4Ffj9CNh3MPtGBjHrVBOqsUnCbfjFyg/6bGk9ap J4WrTje0M56ZmBvN5DUaCQY56SctvYZLd4CtvA3ccJbfBwzXNqFbBsPrWZem3Prx Uhm6KIqYRUSS43iXrCXT4bnR41mAMA5kyOeNmO52S4vj3PgFN0NACcsYwShlRt1f x7FOIvZsJBAl7wZJxxTkuL4NgaJs4KDcwsHL+VaXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiC2A6yfNttgpp0qU8Rlal7RrWckwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljYWY1MGQ3LTE1MTEtNDhhNy1hYmNmLWQyNjFkZWQ3ZjdjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYC0wDQYJKoZIhvcNAQELBQADggEBAHyLl/NeM0qK9jkeDjHDSwVpA6gq lPsKfwBR4U2/eR99adcOEZ277UxFsxLoH2myF8ipV7BgR8mzr2sBrzXpf9uuWkK9 szRdxOCotIDvtHbcnceHtMMTIKmLxT0lHI4dRpzhtSzy2oxAPW8B0cR/yjH83S38 VKn2Vf9kIWknloRH26uJHOgTp1mW410lW3ftrudDuO7CyROZy/mH2xIl2qfmKRaI yvvbfoFIFC+op7V8Vu3pocSRUWl49tcwkZvqwYaFAZ+0FAbSNqTff1OfaPVPL5T+ Rle4BFfAuN7KbhBFy8uIInh8T1AW/IcwFLE2stCXbI7G/ceW9bHIVQpmQVs= -----END CERTIFICATE-----Generated at Thu Aug 7 04:00:51 2025 by rpki-client