$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa File: c7aad382-ae61-40b8-a77c-d9297773c96b.roa (raw, json) Hash identifier: XHjn6CnnkQ54/brNROBwH9tjQXkYKquovWt51M60C84= Subject key identifier: C5:B4:DC:D4:32:9D:41:98:96:CF:BC:25:09:1E:77:EB:C3:7B:EE:7C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 15EA39E898E0165E64DE1D929D1EEB1CC7F4CBEB Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa Signing time: Tue 29 Jul 2025 18:30:22 +0000 ROA not before: Tue 29 Jul 2025 18:30:22 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 801 IP address blocks: 35.96.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 12 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ea:39:e8:98:e0:16:5e:64:de:1d:92:9d:1e:eb:1c:c7:f4:cb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 29 18:30:22 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=3ea25bcfa63235fd13689acb96c20a366ca24bd75b82acba11225048f484fe93, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:10:0f:9d:87:f6:41:94:b4:d3:94:f6:c9: b1:d4:9d:17:4a:67:8b:10:97:cc:dc:a3:fc:a8:2d: 7a:2a:33:07:2c:d9:13:92:c3:bf:1e:a4:33:b7:51: f1:94:f4:3c:53:19:49:1d:b1:6e:73:a6:ce:1b:c2: c1:c1:e2:05:78:d0:61:33:fd:2c:db:ff:be:2b:fb: a6:c2:ff:66:1a:8f:d2:f7:e1:1a:ec:c0:b8:fe:03: 31:ff:af:04:08:89:d0:06:b7:71:12:57:42:31:c9: c2:a9:f3:f4:cf:33:25:b2:29:8a:3c:db:da:59:fd: 50:72:d9:b6:f0:8c:dd:5a:23:14:ec:15:b1:ed:40: 82:0d:47:3a:3e:71:e0:fd:16:45:44:0c:d8:83:51: 13:0c:ef:c9:31:88:57:28:9d:04:97:a5:0d:36:fc: 89:1f:cc:63:c1:13:f2:04:21:7c:ef:19:86:0d:ee: a4:28:06:85:b5:56:1a:f9:1e:89:92:da:28:9d:fb: 19:9f:9e:44:bc:b7:ff:f8:7f:68:ce:68:1f:2d:d5: 52:27:e8:bd:4c:25:22:ac:ed:15:8c:04:28:b2:53: ae:41:ac:74:7f:c4:4a:75:b9:d2:94:7e:bf:95:f8: e9:da:6c:74:68:9a:48:2c:6b:49:a7:88:6e:7f:37: ab:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B4:DC:D4:32:9D:41:98:96:CF:BC:25:09:1E:77:EB:C3:7B:EE:7C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c7aad382-ae61-40b8-a77c-d9297773c96b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.36.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:3b:d5:ab:82:07:14:06:c2:7e:a2:b5:51:23:17:01:b1:84: 87:15:5a:3a:86:ac:f3:6a:b8:59:e1:2a:72:a0:59:80:78:af: 6c:06:7f:39:7b:1b:ba:00:3b:52:d5:29:24:53:68:8e:6e:9d: 42:3c:fd:ca:81:1c:26:a6:65:31:86:e3:0a:59:31:20:eb:67: e3:6c:00:4e:0e:0b:64:3c:41:79:95:21:19:ee:0c:ca:82:ae: 1e:2f:30:61:e7:61:ad:7f:54:c3:62:1d:42:38:3a:dd:41:72: 8e:83:50:92:ad:0d:fe:f6:07:70:e7:02:f8:24:3e:b1:00:16: 93:d1:16:71:e9:f2:35:fe:71:04:7f:22:22:9a:a0:31:e8:45: f3:f5:99:3a:7b:68:ac:3d:fa:f6:2c:6b:04:a9:56:7b:08:b8: db:16:2d:0a:9e:0b:64:e8:1d:2f:09:06:ca:8d:af:e7:5f:8c: 4b:7d:49:19:a5:b6:7d:8a:2c:ed:73:30:38:73:52:fb:fe:a3: 0c:88:44:dc:ae:8d:60:77:33:62:e5:98:a2:7e:71:07:10:a8: 3a:38:ea:b9:12:d9:1a:d4:af:83:00:db:66:cb:98:5b:81:cb: f6:03:0f:25:ff:78:52:34:12:a6:34:cf:29:8e:ab:7c:be:5c: 94:26:1a:d2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFeo56JjgFl5k3h2SnR7rHMf0y+swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI5MTgzMDIyWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZWEyNWJjZmE2MzIzNWZkMTM2ODlhY2I5NmMyMGEzNjZj YTI0YmQ3NWI4MmFjYmExMTIyNTA0OGY0ODRmZTkzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSMBAPnYf2QZS005T2ybHUnRdKZ4sQl8zco/yoLXoqMwcs 2ROSw78epDO3UfGU9DxTGUkdsW5zps4bwsHB4gV40GEz/Szb/74r+6bC/2Yaj9L3 4RrswLj+AzH/rwQIidAGt3ESV0IxycKp8/TPMyWyKYo829pZ/VBy2bbwjN1aIxTs FbHtQIINRzo+ceD9FkVEDNiDURMM78kxiFconQSXpQ02/IkfzGPBE/IEIXzvGYYN 7qQoBoW1Vhr5HomS2iid+xmfnkS8t//4f2jOaB8t1VIn6L1MJSKs7RWMBCiyU65B rHR/xEp1udKUfr+V+OnabHRomkgsa0mniG5/N6uvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxbTc1DKdQZiWz7wlCR5368N77nwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2M3YWFkMzgyLWFlNjEtNDBiOC1hNzdjLWQ5Mjk3NzczYzk2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBADo71auCBxQGwn6itVEjFwGxhIcV WjqGrPNquFnhKnKgWYB4r2wGfzl7G7oAO1LVKSRTaI5unUI8/cqBHCamZTGG4wpZ MSDrZ+NsAE4OC2Q8QXmVIRnuDMqCrh4vMGHnYa1/VMNiHUI4Ot1Bco6DUJKtDf72 B3DnAvgkPrEAFpPRFnHp8jX+cQR/IiKaoDHoRfP1mTp7aKw9+vYsawSpVnsIuNsW LQqeC2ToHS8JBsqNr+dfjEt9SRmltn2KLO1zMDhzUvv+owyIRNyujWB3M2LlmKJ+ cQcQqDo46rkS2RrUr4MA22bLmFuBy/YDDyX/eFI0EqY0zymOq3y+XJQmGtI= -----END CERTIFICATE-----Generated at Mon Aug 11 01:46:00 2025 by rpki-client