$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa File: ad8fff98-4abc-4324-8c36-b77778f66799.roa (raw, json) Hash identifier: BaTffKddbPFQb3yL38zV5uj/9uweIbxvSZT2IogkYkk= Subject key identifier: 2D:70:74:8D:94:CD:E0:7B:5B:C5:59:B3:27:A7:2F:09:E6:78:18:F3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2EA4724318B49E1AF81C2AE38D681E2D259C02FC Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa Signing time: Thu 05 Jun 2025 14:37:11 +0000 ROA not before: Thu 05 Jun 2025 14:37:11 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a4:72:43:18:b4:9e:1a:f8:1c:2a:e3:8d:68:1e:2d:25:9c:02:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:37:11 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=0bf39edd899e1b1b36df26fe4311a2535f11592b1cd7704dfcfdcf082be3d73f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6b:24:30:79:6c:e4:ec:08:0b:98:f5:68:0b: 05:fa:ef:21:c0:9f:84:b4:ae:ea:e8:2e:f8:2a:33: ac:26:85:d8:cc:f5:c5:c6:ed:ca:b0:38:10:a0:d0: ca:06:f9:2f:a4:e3:e3:e9:8a:52:3c:4d:b8:c1:3b: 6f:c7:79:fb:25:5f:f5:11:df:b9:2d:a7:e9:c7:05: ea:5b:fe:37:56:b2:d5:86:ab:a1:fe:97:87:c8:65: 1c:5b:87:5e:cc:7d:63:5d:15:c4:b7:9b:0f:67:dd: 94:74:e2:96:7f:69:55:85:53:84:e0:d8:bd:68:df: 68:2b:9c:72:12:71:c4:00:3c:af:78:58:df:5a:f2: a6:85:81:97:66:93:c6:5d:58:60:dd:8e:ea:1e:61: 85:e8:42:77:81:40:84:e0:3a:2b:ba:50:7b:b6:7e: 4e:7a:09:8b:d4:b2:c8:2d:9c:80:1d:e2:16:8b:c2: 34:49:4f:e5:27:f5:d2:1b:e7:d1:a6:35:f1:50:ee: 97:f1:51:2b:55:83:8d:c6:b1:f1:4f:e2:02:9d:10: 94:91:5d:73:f9:98:ca:51:cf:db:08:11:c0:3b:dc: af:37:0c:65:35:29:43:79:ff:63:85:5f:c5:aa:0e: a4:7e:16:93:e4:e5:37:48:0a:6d:35:b7:43:bb:35: 3b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:70:74:8D:94:CD:E0:7B:5B:C5:59:B3:27:A7:2F:09:E6:78:18:F3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ad8fff98-4abc-4324-8c36-b77778f66799.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.33.0/24 Signature Algorithm: sha256WithRSAEncryption 12:e2:57:a8:a0:29:f4:b3:36:ce:45:9d:75:a9:a1:f3:f6:c8: a0:92:67:8f:79:32:bd:d6:4d:77:0c:df:84:c3:1e:21:7a:a6: 3d:6e:79:3f:7b:92:0c:06:47:a9:b7:5a:79:aa:a4:c4:5c:5e: 3a:2f:98:55:3f:f9:fc:d9:a8:57:11:c0:1a:77:a3:68:6f:72: 1a:51:46:91:79:44:f3:98:cd:e9:2a:06:7f:5f:7b:e0:17:03: f6:5c:32:b5:0c:e4:2c:07:b5:d5:da:5d:e3:ac:02:41:f7:5a: 4c:5f:22:22:d0:63:2c:5a:05:81:df:b8:b8:15:50:ba:2e:d2: 74:e6:88:32:3b:73:75:91:d3:0f:e1:d6:c9:13:d2:9e:02:cf: fd:f9:2a:1f:3a:c0:7a:14:5a:54:03:0c:e9:73:9c:b9:50:b0: 65:a9:f8:0d:0e:b4:d2:87:27:b2:2d:c2:63:db:33:8a:c2:f8: 84:ce:aa:19:30:15:4a:d8:22:ee:cc:68:66:cc:da:c1:70:b1: b9:c2:d9:5c:c4:44:93:eb:80:c1:c5:b3:f2:96:6e:3d:d6:79: 89:e0:a3:2f:ef:34:da:a4:e3:09:56:48:be:3d:d3:29:6e:65: 13:5f:60:ea:4e:a5:2c:a6:8a:33:18:ef:43:ea:51:3c:18:06: 94:27:58:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULqRyQxi0nhr4HCrjjWgeLSWcAvwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzNzExWhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYmYzOWVkZDg5OWUxYjFiMzZkZjI2ZmU0MzExYTI1MzVm MTE1OTJiMWNkNzcwNGRmY2ZkY2YwODJiZTNkNzNmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD3ayQweWzk7AgLmPVoCwX67yHAn4S0ruroLvgqM6wmhdjM 9cXG7cqwOBCg0MoG+S+k4+PpilI8TbjBO2/HefslX/UR37ktp+nHBepb/jdWstWG q6H+l4fIZRxbh17MfWNdFcS3mw9n3ZR04pZ/aVWFU4Tg2L1o32grnHISccQAPK94 WN9a8qaFgZdmk8ZdWGDdjuoeYYXoQneBQITgOiu6UHu2fk56CYvUssgtnIAd4haL wjRJT+Un9dIb59GmNfFQ7pfxUStVg43GsfFP4gKdEJSRXXP5mMpRz9sIEcA73K83 DGU1KUN5/2OFX8WqDqR+FpPk5TdICm01t0O7NTt3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULXB0jZTN4HtbxVmzJ6cvCeZ4GPMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2FkOGZmZjk4LTRhYmMtNDMyNC04YzM2LWI3Nzc3OGY2Njc5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCEwDQYJKoZIhvcNAQELBQADggEBABLiV6igKfSzNs5FnXWpofP2yKCS Z495Mr3WTXcM34TDHiF6pj1ueT97kgwGR6m3WnmqpMRcXjovmFU/+fzZqFcRwBp3 o2hvchpRRpF5RPOYzekqBn9fe+AXA/ZcMrUM5CwHtdXaXeOsAkH3WkxfIiLQYyxa BYHfuLgVULou0nTmiDI7c3WR0w/h1skT0p4Cz/35Kh86wHoUWlQDDOlznLlQsGWp +A0OtNKHJ7ItwmPbM4rC+ITOqhkwFUrYIu7MaGbM2sFwsbnC2VzERJPrgMHFs/KW bj3WeYngoy/vNNqk4wlWSL490yluZRNfYOpOpSymijMY70PqUTwYBpQnWP8= -----END CERTIFICATE-----Generated at Sun Jun 15 10:05:50 2025 by rpki-client