$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dab7b827-1f32-4753-a416-06d18b6645e2.roa File: dab7b827-1f32-4753-a416-06d18b6645e2.roa (raw, json) Hash identifier: f2wo+xxIIIvZuGO23pJe8OPv8pUggy33+XsZUWgoiOI= Subject key identifier: D9:F8:A3:76:6A:BB:18:B1:08:03:BF:D7:06:F8:32:21:C4:6A:AC:98 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 571D54D812AA7C5C899DF1EE4F03A89184C8B211 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dab7b827-1f32-4753-a416-06d18b6645e2.roa Signing time: Mon 09 Jun 2025 19:37:09 +0000 ROA not before: Mon 09 Jun 2025 19:37:09 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1d:54:d8:12:aa:7c:5c:89:9d:f1:ee:4f:03:a8:91:84:c8:b2:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jun 9 19:37:09 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=78ad1a932ce2b9248130ef27323788506e4d87b2928432d8e7744c3f006a5de9, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:95:8a:d9:9d:e5:f1:46:4b:08:06:0d:7a: 23:5e:4e:3a:6a:1b:29:b9:c0:4b:a1:a8:aa:6c:d0: e0:b0:cc:d6:80:35:46:3b:6d:43:60:b2:e1:17:bd: 8f:37:54:42:43:7a:3d:3a:12:20:29:a3:8d:75:19: c6:07:71:51:33:f7:79:6f:43:42:96:28:83:72:95: 13:e5:14:0f:c2:4c:5a:f0:8a:57:ec:e6:83:a7:d3: 4d:37:de:7d:0e:1a:eb:df:47:b0:ce:e2:6e:22:1f: c0:f7:3c:79:f3:55:d0:c0:83:1f:c3:2a:d2:d5:fa: b1:0a:19:51:39:6a:b9:7c:e0:0f:7a:13:70:f3:bf: b2:c4:89:5b:a9:38:77:9c:ce:d2:59:7e:de:8d:dc: 0a:1a:ad:1d:05:04:d1:c3:1c:7e:c1:5c:c4:4c:70: 84:9d:da:47:c6:64:70:78:0f:a2:17:17:a1:f3:0d: 81:46:ec:62:5d:7f:db:90:aa:5a:8f:23:44:a0:cf: dd:a4:95:aa:f4:26:ff:bd:8d:a4:6e:83:fa:d4:99: a3:eb:d1:78:46:3d:34:b6:85:9f:89:a2:1e:4d:30: a7:f8:2a:51:53:9e:c9:e8:df:59:7c:58:7d:16:c3: 6a:ac:80:19:f1:45:dd:da:6d:1b:7c:70:37:4b:f8: e8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:A3:76:6A:BB:18:B1:08:03:BF:D7:06:F8:32:21:C4:6A:AC:98 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dab7b827-1f32-4753-a416-06d18b6645e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/20 Signature Algorithm: sha256WithRSAEncryption 70:0b:5b:bf:ec:34:a5:bd:74:3b:e7:15:27:91:4a:58:7f:77: ad:87:85:14:c1:ae:da:ae:2d:6c:0c:be:cb:50:d0:41:06:48: 9f:fb:87:fd:83:51:19:11:bd:a2:d4:86:51:cb:6a:8e:ee:25: 57:c0:36:de:03:66:23:1b:33:27:46:b8:2f:8f:b3:d3:8b:8d: 86:58:c0:96:1d:97:b3:93:27:4f:80:0b:bf:35:37:ae:14:bf: 3a:cb:26:93:0b:bc:0d:a6:d9:af:93:97:72:15:6e:1d:ae:44: 6f:60:87:db:42:01:61:6a:8e:38:c4:6f:74:9f:b4:bb:a1:b7: 3c:79:b5:30:99:f1:06:60:df:51:d4:4f:4f:c9:e4:58:46:e3: 45:41:e7:60:5b:0d:1d:68:aa:e6:43:d9:70:bb:c6:3f:bf:55: 22:f8:36:56:92:81:cc:de:f9:39:72:c3:ce:a7:ca:33:5e:47: 9e:a6:70:5d:87:28:7a:cd:04:84:3e:a9:57:c1:8b:95:5b:d9: 16:32:05:2b:ac:84:f4:2b:a8:ec:eb:5e:9e:ae:cb:e5:8e:dd: 8e:b9:c0:ed:10:49:28:b0:19:fa:20:40:3d:e8:17:ed:b1:73: d2:f3:76:99:d3:60:a9:f2:f5:76:0b:18:0f:bd:ff:cc:7c:54: 69:e9:43:67 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVx1U2BKqfFyJnfHuTwOokYTIshEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNjA5MTkzNzA5WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGFkMWE5MzJjZTJiOTI0ODEzMGVmMjczMjM3ODg1MDZl NGQ4N2IyOTI4NDMyZDhlNzc0NGMzZjAwNmE1ZGU5MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9rpWK2Z3l8UZLCAYNeiNeTjpqGym5wEuhqKps0OCwzNaA NUY7bUNgsuEXvY83VEJDej06EiApo411GcYHcVEz93lvQ0KWKINylRPlFA/CTFrw ilfs5oOn00033n0OGuvfR7DO4m4iH8D3PHnzVdDAgx/DKtLV+rEKGVE5arl84A96 E3Dzv7LEiVupOHecztJZft6N3AoarR0FBNHDHH7BXMRMcISd2kfGZHB4D6IXF6Hz DYFG7GJdf9uQqlqPI0Sgz92klar0Jv+9jaRug/rUmaPr0XhGPTS2hZ+Joh5NMKf4 KlFTnsno31l8WH0Ww2qsgBnxRd3abRt8cDdL+OjrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2fijdmq7GLEIA7/XBvgyIcRqrJgwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RhYjdiODI3LTFmMzItNDc1My1hNDE2LTA2ZDE4YjY2NDVlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYCAwDQYJKoZIhvcNAQELBQADggEBAHALW7/sNKW9dDvnFSeRSlh/d62H hRTBrtquLWwMvstQ0EEGSJ/7h/2DURkRvaLUhlHLao7uJVfANt4DZiMbMydGuC+P s9OLjYZYwJYdl7OTJ0+AC781N64UvzrLJpMLvA2m2a+Tl3IVbh2uRG9gh9tCAWFq jjjEb3SftLuhtzx5tTCZ8QZg31HUT0/J5FhG40VB52BbDR1oquZD2XC7xj+/VSL4 NlaSgcze+Tlyw86nyjNeR56mcF2HKHrNBIQ+qVfBi5Vb2RYyBSushPQrqOzrXp6u y+WO3Y65wO0QSSiwGfogQD3oF+2xc9LzdpnTYKny9XYLGA+9/8x8VGnpQ2c= -----END CERTIFICATE-----Generated at Sat Jun 14 06:51:50 2025 by rpki-client