$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa File: b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa (raw, json) Hash identifier: GJo3PIDJikSfEai0StlP6Us6gZKrqb1k5N9QQpwDqXw= Subject key identifier: 86:76:F6:D5:0B:4B:5A:D6:DA:C3:33:A0:71:C7:9D:EB:7D:23:40:88 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5EE55A9387C48E1199E817CE408DFA35A1B139D8 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa Signing time: Fri 25 Jul 2025 16:41:24 +0000 ROA not before: Fri 25 Jul 2025 16:41:24 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e5:5a:93:87:c4:8e:11:99:e8:17:ce:40:8d:fa:35:a1:b1:39:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:41:24 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=08d3828727bac18d259f1bcec11bad6f9667f4d4ae760229c044e9b269297094, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:0b:0b:ee:ff:a8:c8:3c:59:35:51:45:e5: 4e:86:23:87:7b:2c:cc:09:66:cf:b1:c5:af:c6:04: a5:5f:81:c8:ed:7f:25:fa:07:1e:43:4e:42:d3:ee: 11:32:42:19:a3:da:d1:d2:8c:55:6c:04:22:6c:2f: 13:7f:df:3c:59:3d:46:bc:ca:35:12:8e:a7:a6:2d: 73:bd:06:a9:9a:37:2d:3a:20:e0:ca:59:68:ef:59: 93:e3:e1:5d:03:4a:7d:d8:19:de:81:8b:20:d6:aa: 24:47:50:f2:ed:8b:fd:c0:5b:9b:56:8c:47:e3:a3: 04:f2:df:5e:99:86:3e:78:98:03:48:fa:dc:c3:78: d6:5c:3f:1d:07:79:f5:24:a2:e9:c8:86:1e:3b:22: f0:bd:dd:18:d0:c4:d1:88:10:ad:97:d2:e2:88:8e: 74:32:98:da:38:1f:d3:a5:a6:bb:7b:ae:cb:ff:01: 1f:f4:09:cc:e0:71:46:0b:03:0d:63:4b:06:6b:14: b1:5b:4b:52:67:e6:87:88:7e:8b:70:fd:d0:7d:27: a0:52:5a:80:f5:18:65:ba:bd:ac:22:43:10:04:0a: 16:66:e8:d7:67:b6:33:92:33:5c:a4:af:fb:34:33: 2b:bc:38:b9:b6:d3:39:6f:fd:b4:c1:14:a4:99:67: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:76:F6:D5:0B:4B:5A:D6:DA:C3:33:A0:71:C7:9D:EB:7D:23:40:88 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.112.0/22 Signature Algorithm: sha256WithRSAEncryption 91:8c:32:3a:37:5c:31:29:b1:8e:b0:6f:c0:90:82:e9:b0:41: 06:61:ca:02:00:fb:c1:99:d0:09:eb:16:d5:18:d4:98:a8:a0: b2:3a:a8:ff:b9:90:5f:9c:2d:a5:00:dc:a1:86:8f:50:d8:c3: 16:70:37:bf:aa:0c:2f:15:fe:ae:0e:6e:84:a8:25:0c:e8:6a: 32:70:d7:45:fa:9a:ba:ea:40:d3:8e:7d:8b:95:96:f0:6f:03: d4:86:80:b4:05:21:b9:3b:1c:62:7e:3c:78:05:82:d2:4a:06: 95:b4:93:8d:cb:8f:4f:ce:bd:de:69:7c:ed:65:81:0c:ec:c8: 6d:73:57:d1:bc:50:21:5a:2a:a4:aa:0c:ce:e6:d6:0b:53:98: b3:62:76:11:1e:71:7c:f7:f1:ca:cf:2c:3a:4a:ac:18:e4:9e: ff:2e:d4:9d:dc:a6:f7:dc:5b:78:05:be:c5:52:20:ae:dc:14: ea:f8:ef:58:61:de:50:b0:37:59:3d:7a:c0:65:39:99:b7:75: 9c:b5:8e:c1:dc:0b:f9:ed:64:05:8b:53:70:68:70:9c:c6:40: e9:65:8b:41:e2:37:f6:c0:86:03:31:0b:1b:33:90:fa:55:ed: e5:5a:92:de:39:56:60:e1:b8:39:9a:87:bc:04:63:29:27:9a: 3c:ac:82:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXuVak4fEjhGZ6BfOQI36NaGxOdgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MTI0WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwOGQzODI4NzI3YmFjMThkMjU5ZjFiY2VjMTFiYWQ2Zjk2 NjdmNGQ0YWU3NjAyMjljMDQ0ZTliMjY5Mjk3MDk0MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt/wsL7v+oyDxZNVFF5U6GI4d7LMwJZs+xxa/GBKVfgcjt fyX6Bx5DTkLT7hEyQhmj2tHSjFVsBCJsLxN/3zxZPUa8yjUSjqemLXO9BqmaNy06 IODKWWjvWZPj4V0DSn3YGd6BiyDWqiRHUPLti/3AW5tWjEfjowTy316Zhj54mANI +tzDeNZcPx0HefUkounIhh47IvC93RjQxNGIEK2X0uKIjnQymNo4H9Olprt7rsv/ AR/0CczgcUYLAw1jSwZrFLFbS1Jn5oeIfotw/dB9J6BSWoD1GGW6vawiQxAEChZm 6NdntjOSM1ykr/s0Myu8OLm20zlv/bTBFKSZZxLjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhnb21QtLWtbawzOgcced630jQIgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2I4N2IxNjM1LTAwNmEtNDA1ZC1iNmM2LWQzMmViZWE5YWUwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYHAwDQYJKoZIhvcNAQELBQADggEBAJGMMjo3XDEpsY6wb8CQgumwQQZh ygIA+8GZ0AnrFtUY1JiooLI6qP+5kF+cLaUA3KGGj1DYwxZwN7+qDC8V/q4OboSo JQzoajJw10X6mrrqQNOOfYuVlvBvA9SGgLQFIbk7HGJ+PHgFgtJKBpW0k43Lj0/O vd5pfO1lgQzsyG1zV9G8UCFaKqSqDM7m1gtTmLNidhEecXz38crPLDpKrBjknv8u 1J3cpvfcW3gFvsVSIK7cFOr471hh3lCwN1k9esBlOZm3dZy1jsHcC/ntZAWLU3Bo cJzGQOlli0HiN/bAhgMxCxszkPpV7eVakt45VmDhuDmah7wEYyknmjysggw= -----END CERTIFICATE-----Generated at Sat Aug 9 02:48:15 2025 by rpki-client