$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa File: 9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa (raw, json) Hash identifier: eDerDivTF6rXgMACKAhkIX57lHhaT9DIos0o5pjDSS8= Subject key identifier: AD:02:16:D5:C2:57:24:75:38:4F:B7:91:DF:FA:FF:F0:79:3C:F3:48 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 16303F638F3D489BF51518482B1BF7CB148B9508 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa Signing time: Mon 14 Apr 2025 17:20:06 +0000 ROA not before: Mon 14 Apr 2025 17:20:06 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:30:3f:63:8f:3d:48:9b:f5:15:18:48:2b:1b:f7:cb:14:8b:95:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 14 17:20:06 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=b1e57dd4312b14a82d0930c72f88b2d6d1ef20d5d8b4967b3fb24aa8278488f9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:14:e5:dc:d9:4b:5b:e7:57:e5:1b:f0:7d: 00:93:6d:e7:23:00:eb:ad:94:35:e9:e8:c8:eb:8d: fb:58:03:7c:2e:00:d3:68:71:4a:41:b3:24:14:c3: 29:d3:eb:af:35:a6:f2:0b:54:fa:d5:d9:f0:67:22: 8a:e5:ff:9d:98:b5:52:de:25:18:9e:48:64:71:4d: d9:19:28:a1:83:31:78:48:c4:5a:43:7a:ee:f5:a4: 46:60:bd:94:61:bf:98:ff:5b:7a:9e:ed:ad:d3:49: 18:a4:77:18:d7:d8:d4:54:8b:79:f8:30:b3:0a:ed: 35:3b:b0:4f:86:ea:67:1d:75:f5:c6:1d:ea:73:8c: 2e:57:17:65:62:6a:6f:5a:bb:d4:b7:5a:fd:a8:e8: 7c:ee:8f:b1:ab:cc:6e:fc:6c:be:d1:d1:d7:3a:f2: f8:84:d3:78:c1:98:03:01:b0:09:0b:15:b8:50:da: 5c:e4:5f:66:c8:9b:30:47:39:d0:40:94:33:ab:8f: 0b:5c:98:89:e8:19:8d:2b:c9:0e:1f:38:b5:a7:2a: 30:45:4f:8b:61:98:51:aa:69:92:eb:7c:91:28:6a: de:ae:5b:de:69:41:31:61:15:f6:36:15:1d:a1:1e: 62:f0:08:a7:5c:39:94:0a:19:a9:5e:bf:69:7f:53: 18:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:02:16:D5:C2:57:24:75:38:4F:B7:91:DF:FA:FF:F0:79:3C:F3:48 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.12.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:fe:81:50:3a:59:52:65:b4:56:05:e1:7c:70:a0:e3:b6:23: d7:71:8e:1c:19:34:36:f4:57:92:c2:eb:23:26:cf:20:24:65: 47:dc:a6:c0:c0:ec:d9:7b:08:88:33:65:cf:ba:37:4b:8f:89: 51:a4:ee:6e:31:e0:3e:6e:68:23:54:92:a4:3f:e5:a9:dd:a2: 15:6b:93:87:1f:1a:db:f3:42:f5:5f:7c:b6:52:0f:d9:62:b1: 45:28:0b:a2:5f:5b:d2:67:b5:62:80:5a:40:37:81:87:28:4b: 8f:eb:63:0f:45:4b:fe:bd:55:a6:7c:81:19:db:4f:b8:ba:f0: 3a:1b:1e:7b:e7:29:2a:09:f1:bf:62:2d:7d:29:c9:bf:29:08: d7:f0:f5:6e:26:24:bf:70:92:88:88:04:6d:0e:71:95:77:00: 69:86:c7:ba:12:40:4f:1d:bf:8b:b2:73:22:42:bc:5f:40:1a: de:2e:de:7a:b1:5e:8b:fb:79:11:da:75:ed:ae:03:31:70:2e: 2e:ba:05:ef:88:3d:ea:46:1a:cd:f3:63:3a:7a:2a:7a:af:12: 64:bf:6e:3c:7e:56:2c:1a:d8:db:b4:72:dc:66:aa:b4:fa:e0: 76:ad:86:22:61:8e:03:59:c3:9f:61:fe:9e:5e:91:f8:55:17: 5d:c5:88:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFjA/Y489SJv1FRhIKxv3yxSLlQgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDE0MTcyMDA2WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMWU1N2RkNDMxMmIxNGE4MmQwOTMwYzcyZjg4YjJkNmQx ZWYyMGQ1ZDhiNDk2N2IzZmIyNGFhODI3ODQ4OGY5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCv0hTl3NlLW+dX5RvwfQCTbecjAOutlDXp6MjrjftYA3wu ANNocUpBsyQUwynT6681pvILVPrV2fBnIorl/52YtVLeJRieSGRxTdkZKKGDMXhI xFpDeu71pEZgvZRhv5j/W3qe7a3TSRikdxjX2NRUi3n4MLMK7TU7sE+G6mcddfXG HepzjC5XF2Viam9au9S3Wv2o6Hzuj7GrzG78bL7R0dc68viE03jBmAMBsAkLFbhQ 2lzkX2bImzBHOdBAlDOrjwtcmInoGY0ryQ4fOLWnKjBFT4thmFGqaZLrfJEoat6u W95pQTFhFfY2FR2hHmLwCKdcOZQKGalev2l/Uxj/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrQIW1cJXJHU4T7eR3/r/8Hk880gwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzlmY2Q5ZDZhLTcyNzItNGMxZS1iNDZjLWNjOTRlNTgzMjJlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYAwwDQYJKoZIhvcNAQELBQADggEBAIv+gVA6WVJltFYF4XxwoOO2I9dx jhwZNDb0V5LC6yMmzyAkZUfcpsDA7Nl7CIgzZc+6N0uPiVGk7m4x4D5uaCNUkqQ/ 5andohVrk4cfGtvzQvVffLZSD9lisUUoC6JfW9JntWKAWkA3gYcoS4/rYw9FS/69 VaZ8gRnbT7i68DobHnvnKSoJ8b9iLX0pyb8pCNfw9W4mJL9wkoiIBG0OcZV3AGmG x7oSQE8dv4uycyJCvF9AGt4u3nqxXov7eRHade2uAzFwLi66Be+IPepGGs3zYzp6 KnqvEmS/bjx+Viwa2Nu0ctxmqrT64HathiJhjgNZw59h/p5ekfhVF13FiF4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:13 2025 by rpki-client