$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa File: d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa (raw, json) Hash identifier: 3LQGFDR0NeaxNu88oo271CAQ1AM7mAQ7TpNvP/br6tc= Subject key identifier: 24:CC:33:4B:7A:78:F6:81:2D:37:09:3F:F0:95:45:A0:53:E0:68:63 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 0D105033883D1EE086ABE8C1E51C6A590E50E21A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa Signing time: Fri 25 Apr 2025 17:40:45 +0000 ROA not before: Fri 25 Apr 2025 17:40:45 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:10:50:33:88:3d:1e:e0:86:ab:e8:c1:e5:1c:6a:59:0e:50:e2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Apr 25 17:40:45 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=86bc6d9f44cbba2622b4bf6c091aad4f6d20d7743d23ba4e58e55a035ffff196, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:47:8b:88:7a:26:df:07:37:07:c2:13:6d:59: 0c:90:0a:d2:1d:04:0e:5a:67:79:fd:db:d2:3d:c7: 04:f6:e8:42:ab:c8:89:4e:5f:a6:50:00:08:c4:8b: ce:08:06:94:66:71:64:62:7b:9a:8b:36:62:a8:24: 68:21:f5:02:59:d6:15:3d:b5:59:43:93:e2:e3:d5: 6b:09:78:e4:a2:06:a7:3f:4b:68:be:86:14:9b:32: c6:b7:3f:65:cd:42:d2:2d:ba:93:0b:2b:f4:af:20: 85:85:41:cb:36:3b:23:e0:82:93:7d:82:e7:46:ca: ce:d5:68:54:e9:6a:c0:74:d1:f9:b8:7e:0e:5c:21: 4d:1c:02:c0:94:47:9b:28:5d:d3:91:c7:f1:aa:ca: b0:b4:b2:88:18:86:e1:16:19:a5:86:31:1e:b2:53: 80:b8:aa:a4:8e:25:aa:33:75:e7:dd:09:fa:3b:8b: 45:6d:3d:4e:fe:87:47:29:04:75:98:2c:24:e5:e3: 10:c8:24:92:1d:53:35:a1:30:c2:12:ab:5b:ad:e4: 21:ae:db:8a:1c:cf:ee:f5:4c:66:55:77:c4:0e:45: 36:6d:7c:c7:67:09:73:33:c5:40:ae:ba:04:56:74: 65:36:15:49:d3:e8:50:63:ba:dd:4d:96:fc:52:d1: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:CC:33:4B:7A:78:F6:81:2D:37:09:3F:F0:95:45:A0:53:E0:68:63 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d41b201e-ea5a-4196-87d3-ddfb160d53f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.52.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:07:6f:d0:6e:d7:8f:c9:fe:ae:b5:fa:80:53:e0:ab:fd:28: 09:65:8e:bd:9c:39:ee:a7:2c:fb:76:ef:23:b0:e4:b5:11:8e: 67:b8:fa:b1:5e:d4:c1:fc:44:5f:c1:99:e9:0a:48:82:e0:88: 01:4c:7a:dc:52:6b:c9:46:93:7b:b0:4c:fb:79:67:d4:68:44: 88:40:06:78:db:3a:db:73:22:61:d3:55:6c:b4:43:f1:2b:42: f0:79:29:7c:46:8e:ac:a2:c8:fa:de:6c:d0:ff:19:e0:7a:f9: ea:b9:27:ca:e3:dd:fe:3f:3f:2b:2d:df:4a:d0:8a:9c:e9:92: c0:6e:dd:f3:52:fe:c4:52:fd:17:53:95:9a:5f:24:33:47:5a: 7b:ae:e4:7b:cf:5b:d2:36:30:11:49:5b:ec:e0:3f:20:7b:49: 8e:1d:1c:93:6a:9f:c5:de:04:80:0f:a8:8b:24:6b:b4:a6:58: e4:6b:c4:55:ac:46:e3:fa:02:24:3f:60:ce:04:86:2b:3e:4e: 52:cb:0d:0d:98:e9:bf:0e:d9:25:b9:ca:50:a1:18:f5:0f:52: 82:7a:68:f3:e9:6f:fc:f8:18:a8:80:b3:65:77:c3:e5:5c:55: 2e:35:66:a1:01:55:8b:17:ff:a1:eb:ec:b7:18:d1:c7:0b:c5: 0f:85:1e:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDRBQM4g9HuCGq+jB5RxqWQ5Q4howDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNDI1MTc0MDQ1WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmJjNmQ5ZjQ0Y2JiYTI2MjJiNGJmNmMwOTFhYWQ0ZjZk MjBkNzc0M2QyM2JhNGU1OGU1NWEwMzVmZmZmMTk2MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQR4uIeibfBzcHwhNtWQyQCtIdBA5aZ3n929I9xwT26EKr yIlOX6ZQAAjEi84IBpRmcWRie5qLNmKoJGgh9QJZ1hU9tVlDk+Lj1WsJeOSiBqc/ S2i+hhSbMsa3P2XNQtItupMLK/SvIIWFQcs2OyPggpN9gudGys7VaFTpasB00fm4 fg5cIU0cAsCUR5soXdORx/GqyrC0sogYhuEWGaWGMR6yU4C4qqSOJaozdefdCfo7 i0VtPU7+h0cpBHWYLCTl4xDIJJIdUzWhMMISq1ut5CGu24ocz+71TGZVd8QORTZt fMdnCXMzxUCuugRWdGU2FUnT6FBjut1NlvxS0c0HAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJMwzS3p49oEtNwk/8JVFoFPgaGMwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q0MWIyMDFlLWVhNWEtNDE5Ni04N2QzLWRkZmIxNjBkNTNmMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYDQwDQYJKoZIhvcNAQELBQADggEBADoHb9Bu14/J/q61+oBT4Kv9KAll jr2cOe6nLPt27yOw5LURjme4+rFe1MH8RF/BmekKSILgiAFMetxSa8lGk3uwTPt5 Z9RoRIhABnjbOttzImHTVWy0Q/ErQvB5KXxGjqyiyPrebND/GeB6+eq5J8rj3f4/ Pyst30rQipzpksBu3fNS/sRS/RdTlZpfJDNHWnuu5HvPW9I2MBFJW+zgPyB7SY4d HJNqn8XeBIAPqIska7SmWORrxFWsRuP6AiQ/YM4Ehis+TlLLDQ2Y6b8O2SW5ylCh GPUPUoJ6aPPpb/z4GKiAs2V3w+VcVS41ZqEBVYsX/6Hr7LcY0ccLxQ+FHlU= -----END CERTIFICATE-----Generated at Sat Apr 26 12:22:45 2025 by rpki-client