$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa File: c5687b2f-b054-4005-abd5-90394ab21e74.roa (raw, json) Hash identifier: lGHmivmrysNVwA0mwGvmStCTP4FDHnBA3u92CkXQp2I= Subject key identifier: 28:15:94:90:1B:D6:27:DB:53:8B:01:C8:D1:F3:5E:92:B1:05:52:F3 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4DC526CB2DC81A253A9E41B09CC1A71ACFC95A39 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa Signing time: Fri 25 Apr 2025 17:40:41 +0000 ROA not before: Fri 25 Apr 2025 17:40:41 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c5:26:cb:2d:c8:1a:25:3a:9e:41:b0:9c:c1:a7:1a:cf:c9:5a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 25 17:40:41 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=767143962459f261c6034269f571b5e391300adda05ee4905d27ad1fe3cc0548, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c2:ac:f5:f0:5c:f2:c5:c0:5d:10:c8:b9:81: c6:71:48:da:23:72:a4:e6:1a:9f:4a:17:30:8c:57: 74:a2:18:b5:c2:a8:b5:8e:cf:cc:96:40:33:d3:18: 96:93:c2:dc:16:4b:aa:f4:9a:0e:7d:19:74:17:d8: 3b:56:a4:38:dc:44:f5:72:ec:63:73:3f:02:ba:d8: 6d:07:6c:d8:e7:22:dc:ed:17:ea:53:04:52:04:14: 04:f1:a6:cb:2d:4e:e4:37:5f:7b:9a:8b:6a:76:a6: b5:52:ac:88:e1:82:21:bf:e6:ee:75:a1:55:ec:84: 41:86:2c:d4:52:6d:aa:48:20:9b:f3:c0:44:5b:33: 8b:96:fa:16:68:e9:4d:75:ce:86:ff:47:39:8f:7a: 77:34:b2:ec:11:af:4e:fe:19:0a:05:90:6f:d7:8b: d2:0e:55:2e:cc:51:e9:1a:db:ff:9f:24:93:fe:6a: 4e:9e:1b:06:5e:2c:e1:ea:ef:ce:75:50:6d:e1:82: 1c:4f:54:a8:bc:01:f4:2a:d3:d2:db:70:94:a3:a9: 41:ce:c8:b6:59:9d:e4:d0:00:b5:c7:87:82:3f:ef: 48:03:68:44:2f:69:d8:f8:f2:5a:b3:62:2b:b8:c7: 6e:7c:ca:01:71:9b:c5:b7:00:fe:fd:1c:e9:3d:be: ca:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:15:94:90:1B:D6:27:DB:53:8B:01:C8:D1:F3:5E:92:B1:05:52:F3 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c5687b2f-b054-4005-abd5-90394ab21e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.64.0/22 Signature Algorithm: sha256WithRSAEncryption 85:1b:64:99:1c:7e:03:73:69:08:5f:68:24:f2:e5:69:8f:f7: 87:ca:05:07:7c:61:2e:43:a4:e3:85:f9:d1:27:d8:6c:8c:61: 2d:63:19:4d:dd:58:26:ce:10:6a:47:6a:6c:a1:9a:87:fc:44: a1:0b:da:85:bd:64:a0:4d:96:31:27:99:7e:f3:45:6e:70:fd: 36:6f:00:4a:9c:9a:bd:f6:2d:f8:c3:09:1a:fd:42:f5:0d:51: 16:0a:48:e8:92:b1:2c:e4:e4:5c:ca:36:f4:09:9c:49:7c:70: 7a:d4:84:a8:70:cf:1f:25:64:49:9f:33:77:71:5f:eb:06:c4: 4f:bd:74:34:22:1f:1c:d8:b4:72:a9:65:fc:ef:de:55:15:04: 29:bc:85:ac:4f:88:af:1e:1b:46:09:6e:09:46:81:c2:ae:35: d5:38:c8:c9:e6:1f:05:12:d7:a4:85:49:f4:81:ba:0e:eb:c7: c9:57:47:e7:1a:04:50:62:d9:a8:fd:23:58:92:5e:2f:c3:ba: 1a:d4:ad:f6:aa:65:45:c5:fa:ae:71:67:9e:07:00:a8:30:99: 57:1f:56:0a:4f:ac:f7:2c:22:d0:89:20:c1:bb:4f:25:59:08: 49:3a:2c:17:7d:c0:f3:f0:8e:4a:fb:6a:e8:92:98:91:3b:71: 30:6a:4b:fc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTcUmyy3IGiU6nkGwnMGnGs/JWjkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI1MTc0MDQxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjcxNDM5NjI0NTlmMjYxYzYwMzQyNjlmNTcxYjVlMzkx MzAwYWRkYTA1ZWU0OTA1ZDI3YWQxZmUzY2MwNTQ4MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCXwqz18FzyxcBdEMi5gcZxSNojcqTmGp9KFzCMV3SiGLXC qLWOz8yWQDPTGJaTwtwWS6r0mg59GXQX2DtWpDjcRPVy7GNzPwK62G0HbNjnItzt F+pTBFIEFATxpsstTuQ3X3uai2p2prVSrIjhgiG/5u51oVXshEGGLNRSbapIIJvz wERbM4uW+hZo6U11zob/RzmPenc0suwRr07+GQoFkG/Xi9IOVS7MUeka2/+fJJP+ ak6eGwZeLOHq7851UG3hghxPVKi8AfQq09LbcJSjqUHOyLZZneTQALXHh4I/70gD aEQvadj48lqzYiu4x258ygFxm8W3AP79HOk9vsp5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKBWUkBvWJ9tTiwHI0fNekrEFUvMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M1Njg3YjJmLWIwNTQtNDAwNS1hYmQ1LTkwMzk0YWIyMWU3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYEAwDQYJKoZIhvcNAQELBQADggEBAIUbZJkcfgNzaQhfaCTy5WmP94fK BQd8YS5DpOOF+dEn2GyMYS1jGU3dWCbOEGpHamyhmof8RKEL2oW9ZKBNljEnmX7z RW5w/TZvAEqcmr32LfjDCRr9QvUNURYKSOiSsSzk5FzKNvQJnEl8cHrUhKhwzx8l ZEmfM3dxX+sGxE+9dDQiHxzYtHKpZfzv3lUVBCm8haxPiK8eG0YJbglGgcKuNdU4 yMnmHwUS16SFSfSBug7rx8lXR+caBFBi2aj9I1iSXi/DuhrUrfaqZUXF+q5xZ54H AKgwmVcfVgpPrPcsItCJIMG7TyVZCEk6LBd9wPPwjkr7auiSmJE7cTBqS/w= -----END CERTIFICATE-----Generated at Sat Apr 26 16:43:34 2025 by rpki-client