$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa File: dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa (raw, json) Hash identifier: ks7GQCPtXSD3w8qS9IVCGl4t/vmV0icCmY+d2xT5YHw= Subject key identifier: 4B:9B:E3:1C:8A:27:8B:96:35:02:7B:4B:14:35:18:20:CA:E0:E0:39 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 702D67E27E29C35EE8FD820FBD5E929FDDE3C001 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa Signing time: Tue 29 Jul 2025 18:30:14 +0000 ROA not before: Tue 29 Jul 2025 18:30:14 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2d:67:e2:7e:29:c3:5e:e8:fd:82:0f:bd:5e:92:9f:dd:e3:c0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 29 18:30:14 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=a261aa57eb41db0ff758f3361b2ba4b53a1f757bfd073c114fc2d25ed6eef265, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:a3:ce:7f:39:d8:c8:48:7e:44:fa:fd:73: 7c:d6:95:68:f8:76:29:22:1c:bc:e4:c3:8a:30:83: 09:70:05:69:71:45:fb:65:08:41:a7:82:2b:ab:b4: f2:47:ca:62:79:85:46:a3:f2:08:30:ce:ee:a0:29: cf:95:64:9c:60:ee:b9:55:b9:2f:c8:ee:9b:f2:07: ac:13:1c:bc:cf:cf:32:51:e1:90:73:90:57:3b:d8: c0:50:a2:15:e0:bf:e6:1e:cd:75:9e:7b:57:72:fb: e7:70:aa:e7:df:7f:d7:55:37:13:fb:94:41:80:0d: 1c:d9:bf:c9:9c:85:07:f6:35:81:bc:ba:dd:29:b3: 1a:c1:98:d0:40:82:ef:2b:61:fc:1f:d9:6f:dd:d5: b5:3a:1c:c2:71:9e:61:1d:4d:1a:99:1a:47:c9:07: ed:9c:65:bc:f6:9e:34:9b:db:a8:4d:c1:25:4a:50: 89:a3:8e:24:6a:59:f6:93:8d:78:43:e2:0c:49:15: f9:28:54:6f:bd:57:a9:42:b4:eb:13:e3:2d:c3:54: 0b:d8:29:a6:53:f2:31:df:d5:f3:11:bc:06:cf:99: c8:d6:84:d8:e8:4a:e8:b7:7b:1e:16:85:70:45:a1: a5:29:ef:a8:9a:26:56:01:3a:5c:ff:61:0f:26:20: 08:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9B:E3:1C:8A:27:8B:96:35:02:7B:4B:14:35:18:20:CA:E0:E0:39 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/dd032031-9fc2-4a6b-8d1d-6eb21a5f8258.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.35.0/24 Signature Algorithm: sha256WithRSAEncryption 00:30:9c:11:01:31:ca:f1:f7:90:af:a3:d3:aa:d5:f7:95:9a: 6d:74:3e:28:13:77:48:2d:b8:b4:10:a4:a3:93:6a:cd:8a:34: 20:38:47:5b:9f:03:72:0d:07:38:4f:20:bc:9b:4d:25:8f:e0: 00:d1:9e:89:fe:02:78:ab:bb:7c:86:c8:d3:fd:b4:68:ac:82: f7:68:23:cb:ff:a4:38:11:9f:d7:ff:39:dd:ed:2a:54:cd:d3: aa:95:b7:f1:11:33:ac:c1:51:5f:4b:b4:fc:df:09:20:12:00: 98:c8:1d:66:49:05:e3:f3:25:6c:ae:a1:b2:1e:6d:6a:c9:98: ce:20:2d:87:1c:4b:52:2b:5f:16:ce:f1:d3:5c:51:ad:f5:46: 37:03:28:6c:68:b7:84:7c:db:22:da:47:78:65:e8:cb:e6:ec: 57:5f:72:28:41:78:23:ef:a1:c7:bb:1d:04:6f:28:f1:bd:15: ba:73:44:04:3f:87:e7:1e:ee:6b:44:37:5d:a7:a9:62:01:61: c6:d3:2c:99:64:bd:44:75:91:a8:f2:ec:80:ca:0e:a8:37:94: 1c:b4:b5:69:2c:a0:a7:52:86:1a:1e:62:52:d9:1d:3e:31:50: 84:a6:4b:05:a5:75:24:26:09:2a:bb:d1:f4:dd:a5:96:dc:1c: 0f:9b:e9:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcC1n4n4pw17o/YIPvV6Sn93jwAEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI5MTgzMDE0WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjYxYWE1N2ViNDFkYjBmZjc1OGYzMzYxYjJiYTRiNTNh MWY3NTdiZmQwNzNjMTE0ZmMyZDI1ZWQ2ZWVmMjY1MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChIaPOfznYyEh+RPr9c3zWlWj4dikiHLzkw4owgwlwBWlx RftlCEGngiurtPJHymJ5hUaj8ggwzu6gKc+VZJxg7rlVuS/I7pvyB6wTHLzPzzJR 4ZBzkFc72MBQohXgv+YezXWee1dy++dwqufff9dVNxP7lEGADRzZv8mchQf2NYG8 ut0psxrBmNBAgu8rYfwf2W/d1bU6HMJxnmEdTRqZGkfJB+2cZbz2njSb26hNwSVK UImjjiRqWfaTjXhD4gxJFfkoVG+9V6lCtOsT4y3DVAvYKaZT8jHf1fMRvAbPmcjW hNjoSui3ex4WhXBFoaUp76iaJlYBOlz/YQ8mIAhhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUS5vjHIoni5Y1AntLFDUYIMrg4DkwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RkMDMyMDMxLTlmYzItNGE2Yi04ZDFkLTZlYjIxYTVmODI1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCMwDQYJKoZIhvcNAQELBQADggEBAAAwnBEBMcrx95Cvo9Oq1feVmm10 PigTd0gtuLQQpKOTas2KNCA4R1ufA3INBzhPILybTSWP4ADRnon+Aniru3yGyNP9 tGisgvdoI8v/pDgRn9f/Od3tKlTN06qVt/ERM6zBUV9LtPzfCSASAJjIHWZJBePz JWyuobIebWrJmM4gLYccS1IrXxbO8dNcUa31RjcDKGxot4R82yLaR3hl6Mvm7Fdf cihBeCPvoce7HQRvKPG9FbpzRAQ/h+ce7mtEN12nqWIBYcbTLJlkvUR1kajy7IDK Dqg3lBy0tWksoKdShhoeYlLZHT4xUISmSwWldSQmCSq70fTdpZbcHA+b6Rw= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:37 2025 by rpki-client