$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a541c4d2-1c45-48f2-9c5e-be1aa414666f.roa File: a541c4d2-1c45-48f2-9c5e-be1aa414666f.roa (raw, json) Hash identifier: PBs/f2kZTeHmW3xAkRqUA40rDNza8WuJVQfdWpHXssI= Subject key identifier: D8:9B:9F:85:C9:E4:CD:27:D8:24:89:39:92:AA:A5:7B:35:94:3D:9F Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 71AF306D7356958F6FC315BF07D6EE4C02D772F2 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a541c4d2-1c45-48f2-9c5e-be1aa414666f.roa Signing time: Mon 09 Jun 2025 19:37:00 +0000 ROA not before: Mon 09 Jun 2025 19:37:00 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:af:30:6d:73:56:95:8f:6f:c3:15:bf:07:d6:ee:4c:02:d7:72:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 9 19:37:00 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=e04b8f341a28601675eb1d4175e14a9adc40842fa31a08616f11ab2577173468, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:5a:1c:df:97:55:3c:e8:bc:3e:11:36:5f: 02:bf:62:a9:eb:cc:06:52:4c:1d:2f:73:bd:66:f7: 27:56:43:7a:24:a5:a6:37:24:ac:83:6b:9c:6a:4f: 19:87:6a:78:71:11:95:2b:08:46:b4:0d:d8:3c:37: 2d:c1:a6:b6:73:c6:3a:c2:90:d0:51:9f:ef:00:8a: 58:31:f7:f8:c5:35:0f:eb:5b:a4:42:1e:78:4c:95: 97:b1:25:3f:57:73:ef:f7:60:16:07:57:85:30:f3: 55:49:0f:3d:cc:66:74:6e:be:04:3b:5e:8c:94:c6: 02:19:92:55:9b:40:0c:1a:d5:5f:ad:52:ba:5b:48: 9e:c3:89:16:8d:95:61:9e:c2:37:ad:a3:bc:94:a7: 72:42:c4:34:a9:af:d1:ee:cd:62:26:d7:bd:8f:9b: 04:be:bc:f5:90:de:50:9d:14:5c:69:9b:ed:18:a5: 8a:3a:8b:ee:d4:e0:0f:3e:eb:41:b8:6b:a9:e7:9a: d4:0b:f4:ba:22:d1:17:c2:77:2a:d0:c9:e2:e5:c6: 75:19:c6:9c:f8:88:17:ac:e1:81:4b:3d:60:ea:41: e4:dd:bf:a5:e3:aa:99:7b:aa:98:e7:14:40:65:87: 37:2f:71:b9:c8:d8:4e:f8:72:78:95:35:70:8e:51: 04:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9B:9F:85:C9:E4:CD:27:D8:24:89:39:92:AA:A5:7B:35:94:3D:9F X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a541c4d2-1c45-48f2-9c5e-be1aa414666f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:f9:d1:69:c8:f9:8d:73:01:8c:31:05:08:7f:dc:0f:d9:8f: a9:f6:5e:95:1f:37:95:8b:b3:6b:43:b6:2a:12:e4:29:76:86: c3:87:09:e3:2d:bc:cb:1d:65:14:32:73:23:c1:07:1b:e6:a4: b6:a7:e3:38:71:00:7e:a5:d9:33:43:05:e9:b7:3d:f6:0a:d7: 47:5b:09:bb:c5:d8:7c:0a:c0:55:71:cf:49:65:17:c8:de:b5: 83:fb:ac:d0:44:91:d0:de:13:53:03:02:7f:a2:74:ed:fb:d0: 8b:d8:9d:30:09:98:ac:86:de:df:b2:27:b6:c7:78:e2:e8:eb: e6:8b:f6:59:59:a6:f6:4a:bf:ba:01:aa:11:cd:3f:8e:78:19: ac:63:76:80:0a:4a:04:98:06:d9:77:53:fa:52:7d:4b:6e:b0: 92:19:c0:56:55:b0:3c:52:37:08:8d:04:a9:3a:7c:97:ae:b8: d0:52:4c:2d:80:4e:71:95:1f:98:8a:6f:be:77:f2:f8:35:85: fb:f8:81:06:92:59:27:46:2b:c6:e7:52:19:cb:23:82:b4:b2: 87:9a:4a:7b:72:0d:ab:a5:aa:ce:dd:15:e5:01:01:7f:5f:40: ca:b8:c4:c9:ed:17:4c:32:a3:a1:56:44:24:65:55:88:82:cd: 0c:90:d8:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUca8wbXNWlY9vwxW/B9buTALXcvIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA5MTkzNzAwWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDRiOGYzNDFhMjg2MDE2NzVlYjFkNDE3NWUxNGE5YWRj NDA4NDJmYTMxYTA4NjE2ZjExYWIyNTc3MTczNDY4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLXVoc35dVPOi8PhE2XwK/YqnrzAZSTB0vc71m9ydWQ3ok paY3JKyDa5xqTxmHanhxEZUrCEa0Ddg8Ny3BprZzxjrCkNBRn+8Ailgx9/jFNQ/r W6RCHnhMlZexJT9Xc+/3YBYHV4Uw81VJDz3MZnRuvgQ7XoyUxgIZklWbQAwa1V+t UrpbSJ7DiRaNlWGewjeto7yUp3JCxDSpr9HuzWIm172PmwS+vPWQ3lCdFFxpm+0Y pYo6i+7U4A8+60G4a6nnmtQL9Loi0RfCdyrQyeLlxnUZxpz4iBes4YFLPWDqQeTd v6Xjqpl7qpjnFEBlhzcvcbnI2E74cniVNXCOUQSBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2JufhcnkzSfYJIk5kqqlezWUPZ8wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2E1NDFjNGQyLTFjNDUtNDhmMi05YzVlLWJlMWFhNDE0NjY2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBAI350WnI+Y1zAYwxBQh/3A/Zj6n2 XpUfN5WLs2tDtioS5Cl2hsOHCeMtvMsdZRQycyPBBxvmpLan4zhxAH6l2TNDBem3 PfYK10dbCbvF2HwKwFVxz0llF8jetYP7rNBEkdDeE1MDAn+idO370IvYnTAJmKyG 3t+yJ7bHeOLo6+aL9llZpvZKv7oBqhHNP454GaxjdoAKSgSYBtl3U/pSfUtusJIZ wFZVsDxSNwiNBKk6fJeuuNBSTC2ATnGVH5iKb7538vg1hfv4gQaSWSdGK8bnUhnL I4K0soeaSntyDaulqs7dFeUBAX9fQMq4xMntF0wyo6FWRCRlVYiCzQyQ2Hk= -----END CERTIFICATE-----Generated at Sat Jun 14 06:53:57 2025 by rpki-client