$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cab47dac-09a8-4952-8453-614e0299abcf.roa File: cab47dac-09a8-4952-8453-614e0299abcf.roa (raw, json) Hash identifier: YCk8jEpeoMeAVn5eOvCTc9+s+voybwOAVLV++skDnQA= Subject key identifier: E1:05:1E:FD:20:B1:23:46:51:32:C0:74:FC:3E:4F:FA:1C:3D:50:46 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 228433AF500BE11339EB80B6D8737DA511B5EF05 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cab47dac-09a8-4952-8453-614e0299abcf.roa Signing time: Sat 09 Aug 2025 00:10:17 +0000 ROA not before: Sat 09 Aug 2025 00:10:17 +0000 ROA not after: Sat 13 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:84:33:af:50:0b:e1:13:39:eb:80:b6:d8:73:7d:a5:11:b5:ef:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Aug 9 00:10:17 2025 GMT Not After : Sep 13 23:59:59 2025 GMT Subject: serialNumber=b107a852a3e776405b33c88ae4d110d8e42452a8dc44422794ce4cb624aaec52, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:52:de:16:4e:21:b7:73:db:45:68:23:42:ab: 1d:24:e2:80:c0:d6:7f:be:31:2c:c3:39:b3:14:d9: b0:65:ff:9b:ea:0a:0d:c8:2a:32:9a:21:95:a4:48: 1d:1a:f5:45:09:ab:dd:0b:bc:9a:7f:fd:fc:0f:97: 08:3c:89:8b:92:89:30:76:52:5e:6e:d3:76:3f:b9: 50:08:52:02:ac:2d:3f:70:94:10:16:a2:bf:da:df: 14:84:36:1e:d3:ca:4d:be:42:8e:0f:4d:6f:1f:c0: 0b:32:92:75:dc:6b:7e:ac:e9:db:b8:ed:98:3e:a2: 94:db:8e:90:65:25:7c:13:82:e7:07:3f:ce:1f:12: 73:a9:2d:bb:4d:47:93:8d:e5:1a:21:9e:cd:24:f5: c7:a7:3f:66:0d:d9:b3:5f:b1:19:10:9d:b3:be:8a: f0:d4:c5:98:c3:8a:e2:6e:4c:58:f3:af:3b:73:e0: 43:94:a9:76:35:13:6f:3f:de:80:ee:d0:51:c3:3f: eb:2a:02:ca:aa:08:9d:9e:bc:6f:c5:2f:62:f6:a5: d7:17:f8:52:b5:e4:60:b7:c3:0f:25:1e:50:0e:02: 23:43:65:b5:11:63:ae:45:51:9d:c0:01:71:e4:ad: 53:6c:e6:5a:fe:f9:f2:ff:46:e5:00:70:a7:69:a0: 4a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:05:1E:FD:20:B1:23:46:51:32:C0:74:FC:3E:4F:FA:1C:3D:50:46 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/cab47dac-09a8-4952-8453-614e0299abcf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.243.0/24 Signature Algorithm: sha256WithRSAEncryption 89:cb:a8:fb:4d:f9:ca:bf:00:94:19:b6:a9:e8:8c:8f:4a:53: 72:90:36:d7:40:1e:78:10:b6:04:29:f2:c3:b7:3d:ee:84:6b: 04:40:48:8f:d5:30:5f:f8:05:32:64:5c:7d:1a:0f:ee:97:ce: bd:40:96:43:13:55:9c:6c:ef:a6:8a:14:c4:09:76:23:a8:c3: ef:a9:6a:94:0b:1a:cd:cc:b4:06:be:a1:11:c1:63:b3:44:3d: 09:2f:3f:82:15:94:71:63:22:70:f4:43:c0:43:9c:32:22:9b: e6:6c:4a:60:af:5c:3f:b0:a7:19:82:ea:37:70:8b:82:bd:0f: 60:31:0f:71:f4:2a:e3:65:4b:dd:89:c0:b9:4a:c2:07:44:80: 48:53:3c:95:d2:4e:7d:87:92:7e:0d:f8:f7:41:7d:8f:00:36: ef:51:3d:8d:d9:d0:96:55:9a:ce:ec:55:dd:63:fb:46:e8:d3: 6c:b5:88:ba:8e:a8:74:ba:d6:28:19:cb:60:98:fc:0b:23:7e: 70:1b:d7:70:49:d3:e7:75:61:ba:94:b1:ca:11:aa:d0:05:e7: 0f:3a:3a:58:80:bd:ef:b4:fc:d2:1b:c1:12:44:3b:e3:9b:b4: a4:8b:07:de:6e:63:1e:9d:6c:b6:f5:e6:69:df:37:c0:b4:5f: 68:a3:7d:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIoQzr1AL4RM564C22HN9pRG17wUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwODA5MDAxMDE3WhcNMjUwOTEzMjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTA3YTg1MmEzZTc3NjQwNWIzM2M4OGFlNGQxMTBkOGU0 MjQ1MmE4ZGM0NDQyMjc5NGNlNGNiNjI0YWFlYzUyMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+Ut4WTiG3c9tFaCNCqx0k4oDA1n++MSzDObMU2bBl/5vq Cg3IKjKaIZWkSB0a9UUJq90LvJp//fwPlwg8iYuSiTB2Ul5u03Y/uVAIUgKsLT9w lBAWor/a3xSENh7Tyk2+Qo4PTW8fwAsyknXca36s6du47Zg+opTbjpBlJXwTgucH P84fEnOpLbtNR5ON5Rohns0k9cenP2YN2bNfsRkQnbO+ivDUxZjDiuJuTFjzrztz 4EOUqXY1E28/3oDu0FHDP+sqAsqqCJ2evG/FL2L2pdcX+FK15GC3ww8lHlAOAiND ZbURY65FUZ3AAXHkrVNs5lr++fL/RuUAcKdpoEonAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4QUe/SCxI0ZRMsB0/D5P+hw9UEYwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2NhYjQ3ZGFjLTA5YTgtNDk1Mi04NDUzLTYxNGUwMjk5YWJjZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYPMwDQYJKoZIhvcNAQELBQADggEBAInLqPtN+cq/AJQZtqnojI9KU3KQ NtdAHngQtgQp8sO3Pe6EawRASI/VMF/4BTJkXH0aD+6Xzr1AlkMTVZxs76aKFMQJ diOow++papQLGs3MtAa+oRHBY7NEPQkvP4IVlHFjInD0Q8BDnDIim+ZsSmCvXD+w pxmC6jdwi4K9D2AxD3H0KuNlS92JwLlKwgdEgEhTPJXSTn2Hkn4N+PdBfY8ANu9R PY3Z0JZVms7sVd1j+0bo02y1iLqOqHS61igZy2CY/AsjfnAb13BJ0+d1YbqUscoR qtAF5w86OliAve+0/NIbwRJEO+ObtKSLB95uYx6dbLb15mnfN8C0X2ijfQE= -----END CERTIFICATE-----Generated at Sun Aug 10 04:53:18 2025 by rpki-client