$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa File: b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa (raw, json) Hash identifier: Hjf7b/ICti/XBgbZz+moz8JjV+mzamtJdT8YjIJZTZk= Subject key identifier: 33:1B:1E:EA:CA:A6:5C:A3:0E:5A:39:20:E1:32:F8:25:96:89:7A:AB Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 2F84E4515A404C0A86594A75B0E78B96B80536B7 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa Signing time: Thu 05 Jun 2025 14:37:14 +0000 ROA not before: Thu 05 Jun 2025 14:37:14 +0000 ROA not after: Thu 10 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:84:e4:51:5a:40:4c:0a:86:59:4a:75:b0:e7:8b:96:b8:05:36:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 5 14:37:14 2025 GMT Not After : Jul 10 23:59:59 2025 GMT Subject: serialNumber=d4f55b09ed1b18b62cc92c0f3265c4479ccf098a86b00254d6a7351c802d0fe1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:05:a8:94:cd:12:98:ad:38:09:a0:fd:4b: 04:14:df:42:6d:7e:05:84:22:f7:eb:51:0c:08:20: 2c:35:11:af:ee:61:52:3b:7a:98:23:be:8b:2c:87: fa:ff:d7:9e:cf:ae:89:9a:ad:46:82:6a:22:12:28: 59:29:ae:5f:c3:ea:83:4b:ed:7f:d2:e0:ce:ac:f0: 76:c8:55:bc:a9:07:d4:2c:1d:0f:f2:95:94:86:ca: 3d:d6:82:6d:3e:43:a7:9f:d5:05:cb:11:43:e2:e7: fc:67:8a:b4:cb:04:b6:6e:42:34:b9:f9:bb:2a:29: 97:be:18:b0:7a:0a:03:a0:48:4e:4d:cd:cb:3b:78: ad:84:33:c0:09:4d:f9:f7:50:e7:87:37:6a:dd:64: e9:cd:1d:1f:c7:e8:62:a9:cc:de:a8:19:08:88:9d: 3f:88:d2:d4:95:ef:7d:b0:bd:fe:68:88:88:89:cc: c6:1b:7e:10:79:a7:b4:c6:09:b0:0d:f8:f0:b6:58: a5:79:db:2a:41:4b:dc:e1:b4:97:79:57:44:48:52: 48:1e:c8:b4:9c:53:fc:a1:2c:cd:82:ef:c4:cf:c5: 6b:6f:a3:bf:67:3d:d5:bb:7a:30:97:af:a7:cf:ef: c2:4c:cf:c0:9d:91:fa:9b:79:bc:44:83:5e:27:6e: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1B:1E:EA:CA:A6:5C:A3:0E:5A:39:20:E1:32:F8:25:96:89:7A:AB X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b87b1635-006a-405d-b6c6-d32ebea9ae0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.112.0/22 Signature Algorithm: sha256WithRSAEncryption 32:04:0d:7d:5d:a1:65:6c:d2:db:39:d7:c4:9b:56:47:1c:15: 82:24:98:da:1c:d1:8e:f6:67:2d:d7:63:4d:00:0d:56:37:6f: d9:03:b1:0f:81:b5:5c:5d:2f:0b:fe:6b:e0:dd:ef:a1:b0:bd: bb:dd:ed:74:7d:6a:49:bb:eb:fb:ce:d0:9d:b4:cb:b9:04:15: e7:4c:73:75:a2:1b:64:1f:8f:4b:a5:f6:df:70:33:e1:06:6d: ef:a3:d7:f5:1e:0a:a0:b8:8c:26:60:69:de:2e:b5:bc:96:c2: f7:3a:bd:27:c2:ed:f0:f8:13:bb:e7:71:45:20:d3:3f:7f:56: d4:bb:5b:29:a3:5a:da:47:0f:39:c1:03:a7:e3:ee:91:30:29: 55:9f:f0:c5:e4:27:ec:93:47:24:83:41:8e:6a:d7:0f:c0:75: 5a:44:81:20:ee:7a:b8:d7:6c:d7:1c:8f:c8:4a:22:73:bb:06: a8:05:94:91:90:13:cf:87:f8:b7:0e:ab:e3:c0:51:b2:9e:a7: f4:62:b0:6c:2b:de:a1:a8:c3:5c:3b:61:87:08:2d:19:76:61: f2:10:73:71:01:a7:bc:e8:16:33:37:83:90:83:32:ac:60:55: 72:cd:74:8e:24:f9:34:65:36:6e:3e:d9:e0:f6:13:f4:76:66: 87:aa:b4:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL4TkUVpATAqGWUp1sOeLlrgFNrcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA1MTQzNzE0WhcNMjUwNzEwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNGY1NWIwOWVkMWIxOGI2MmNjOTJjMGYzMjY1YzQ0Nzlj Y2YwOThhODZiMDAyNTRkNmE3MzUxYzgwMmQwZmUxMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDToQWolM0SmK04CaD9SwQU30JtfgWEIvfrUQwIICw1Ea/u YVI7epgjvossh/r/157PromarUaCaiISKFkprl/D6oNL7X/S4M6s8HbIVbypB9Qs HQ/ylZSGyj3Wgm0+Q6ef1QXLEUPi5/xnirTLBLZuQjS5+bsqKZe+GLB6CgOgSE5N zcs7eK2EM8AJTfn3UOeHN2rdZOnNHR/H6GKpzN6oGQiInT+I0tSV732wvf5oiIiJ zMYbfhB5p7TGCbAN+PC2WKV52ypBS9zhtJd5V0RIUkgeyLScU/yhLM2C78TPxWtv o79nPdW7ejCXr6fP78JMz8CdkfqbebxEg14nbtj3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMxse6sqmXKMOWjkg4TL4JZaJeqswHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2I4N2IxNjM1LTAwNmEtNDA1ZC1iNmM2LWQzMmViZWE5YWUwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYHAwDQYJKoZIhvcNAQELBQADggEBADIEDX1doWVs0ts518SbVkccFYIk mNoc0Y72Zy3XY00ADVY3b9kDsQ+BtVxdLwv+a+Dd76Gwvbvd7XR9akm76/vO0J20 y7kEFedMc3WiG2Qfj0ul9t9wM+EGbe+j1/UeCqC4jCZgad4utbyWwvc6vSfC7fD4 E7vncUUg0z9/VtS7WymjWtpHDznBA6fj7pEwKVWf8MXkJ+yTRySDQY5q1w/AdVpE gSDuerjXbNccj8hKInO7BqgFlJGQE8+H+LcOq+PAUbKep/RisGwr3qGow1w7YYcI LRl2YfIQc3EBp7zoFjM3g5CDMqxgVXLNdI4k+TRlNm4+2eD2E/R2ZoeqtCA= -----END CERTIFICATE-----Generated at Sat Jun 14 07:10:43 2025 by rpki-client