$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa File: d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa (raw, json) Hash identifier: ED2ZZXIL1gQD3YAV3BvvbQ0sRGECk4w22hfUf/iuUQ0= Subject key identifier: E5:87:CB:02:11:E3:DE:B0:10:42:2F:14:51:5F:74:F9:F2:4A:31:87 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 64CEB91226163118C193FA783370CC90759F684B Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa Signing time: Sat 24 May 2025 00:30:16 +0000 ROA not before: Sat 24 May 2025 00:30:16 +0000 ROA not after: Sat 28 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:ce:b9:12:26:16:31:18:c1:93:fa:78:33:70:cc:90:75:9f:68:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: May 24 00:30:16 2025 GMT Not After : Jun 28 23:59:59 2025 GMT Subject: serialNumber=d82612a83c4f9403d18091de7bc3cb55ba0ec8fd5118087bd918a28d4fdc0ae7, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:17:32:3a:e3:5f:3a:88:53:3d:76:89:cf: cd:72:82:f8:4c:ec:fa:ce:a4:0b:fd:db:2e:e1:20: 3d:63:83:8b:95:e6:e3:08:95:31:a5:0c:1b:53:f2: ed:30:e0:35:22:ee:54:3e:9a:d5:dd:f7:d0:22:4e: ea:c7:c6:d8:b8:c8:66:6e:fe:65:8d:63:be:ba:45: da:ee:7d:09:06:0a:d1:1a:c7:4c:cf:42:a9:ab:0b: e3:fe:17:49:62:bf:15:bf:f1:2d:9a:fa:5d:d9:34: 2b:33:52:38:bb:2d:cc:24:ec:1d:8e:c2:52:40:f3: 83:ab:7b:79:71:14:1a:9d:ab:ec:a6:45:33:d6:ce: 12:6d:6a:eb:c2:3b:90:75:2a:38:d1:77:83:51:82: 60:c9:c3:c2:64:29:3b:08:1b:81:c2:7e:7d:0f:26: 41:36:7a:f9:bb:0d:2d:52:f1:71:31:be:56:28:f1: b6:51:7c:43:7a:4e:5c:68:b5:f6:f4:fb:79:d5:6e: 5f:4c:dc:fa:a2:7d:45:63:de:87:45:88:0a:92:39: eb:45:aa:aa:33:b6:46:6d:16:d6:5b:4b:85:a3:15: 5c:61:54:2f:7d:f3:9c:a2:ea:ae:ea:aa:f8:17:03: e4:39:2d:92:74:cc:ff:40:b4:0e:9e:c0:51:a9:20: 20:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:87:CB:02:11:E3:DE:B0:10:42:2F:14:51:5F:74:F9:F2:4A:31:87 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d4c4477c-38ab-4e3a-a8ed-6942eb4ea062.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.18.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:10:7b:6f:83:cc:4b:1b:77:bc:f4:93:34:6c:f3:1e:d9:da: 7b:5f:5b:0b:1a:ce:ce:79:0a:dd:db:01:b5:59:e5:6b:61:37: d3:73:c3:dc:c2:3b:03:14:14:13:51:d0:f4:b0:c9:c0:a8:db: fb:56:21:fe:58:f7:b8:4d:72:3b:92:9b:00:b8:f4:4d:fd:b7: 8d:62:58:3d:a8:0b:f3:93:ee:af:4c:34:96:c6:44:22:19:e1: 9a:7b:08:f4:d7:a7:8c:f6:34:06:83:51:f2:66:1e:8d:03:f4: a3:6c:62:ad:a8:82:38:3c:08:e4:45:4b:b9:9f:c1:b5:57:96: 78:ae:6c:f3:01:70:1f:b5:0f:b4:bd:fe:53:8d:b5:cb:76:48: 69:ee:44:ea:a3:e6:f8:ce:4f:02:73:e2:4c:e8:ad:34:0b:60: e9:6c:a3:11:7d:0b:8c:52:c2:a3:b6:1c:74:cb:b9:7c:45:f2: 2c:d3:8f:da:7d:89:ce:0a:5c:bd:59:71:0a:5b:ee:e8:24:1c: 81:72:9e:b5:fd:3c:5f:be:42:df:ba:0f:1f:1d:51:9e:ff:7e: 40:80:8d:54:66:a3:0e:a7:29:cd:3a:3f:02:4d:66:4d:f9:fe: ab:49:56:92:08:be:95:87:80:45:3d:dd:ab:16:56:41:c0:d9: bd:92:82:c0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZM65EiYWMRjBk/p4M3DMkHWfaEswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNTI0MDAzMDE2WhcNMjUwNjI4MjM1OTU5 WjB6MUkwRwYDVQQFE0BkODI2MTJhODNjNGY5NDAzZDE4MDkxZGU3YmMzY2I1NWJh MGVjOGZkNTExODA4N2JkOTE4YTI4ZDRmZGMwYWU3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuXRcyOuNfOohTPXaJz81ygvhM7PrOpAv92y7hID1jg4uV 5uMIlTGlDBtT8u0w4DUi7lQ+mtXd99AiTurHxti4yGZu/mWNY766RdrufQkGCtEa x0zPQqmrC+P+F0livxW/8S2a+l3ZNCszUji7Lcwk7B2OwlJA84Ore3lxFBqdq+ym RTPWzhJtauvCO5B1KjjRd4NRgmDJw8JkKTsIG4HCfn0PJkE2evm7DS1S8XExvlYo 8bZRfEN6Tlxotfb0+3nVbl9M3PqifUVj3odFiAqSOetFqqoztkZtFtZbS4WjFVxh VC9985yi6q7qqvgXA+Q5LZJ0zP9AtA6ewFGpICC7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5YfLAhHj3rAQQi8UUV90+fJKMYcwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Q0YzQ0NzdjLTM4YWItNGUzYS1hOGVkLTY5NDJlYjRlYTA2Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjYBIwDQYJKoZIhvcNAQELBQADggEBAE4Qe2+DzEsbd7z0kzRs8x7Z2ntf Wwsazs55Ct3bAbVZ5WthN9Nzw9zCOwMUFBNR0PSwycCo2/tWIf5Y97hNcjuSmwC4 9E39t41iWD2oC/OT7q9MNJbGRCIZ4Zp7CPTXp4z2NAaDUfJmHo0D9KNsYq2ogjg8 CORFS7mfwbVXlniubPMBcB+1D7S9/lONtct2SGnuROqj5vjOTwJz4kzorTQLYOls oxF9C4xSwqO2HHTLuXxF8izTj9p9ic4KXL1ZcQpb7ugkHIFynrX9PF++Qt+6Dx8d UZ7/fkCAjVRmow6nKc06PwJNZk35/qtJVpIIvpWHgEU93asWVkHA2b2SgsA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:43:22 2025 by rpki-client