$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/de89b5cc-8cd4-4206-884c-189b4133f8da.roa File: de89b5cc-8cd4-4206-884c-189b4133f8da.roa (raw, json) Hash identifier: HM9OlffrpwIUAS4a9KOrA+1iKWe+L4dWdVRdgIu6zrs= Subject key identifier: 23:CE:05:4F:AA:68:74:A1:0C:E5:A6:6A:03:FE:FD:0A:12:FF:92:BD Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 67AF4BB9ACAB3BAE1D1C81E34A04DAFF982AED3C Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/de89b5cc-8cd4-4206-884c-189b4133f8da.roa Signing time: Fri 25 Jul 2025 16:40:20 +0000 ROA not before: Fri 25 Jul 2025 16:40:20 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:af:4b:b9:ac:ab:3b:ae:1d:1c:81:e3:4a:04:da:ff:98:2a:ed:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:40:20 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=568f37d8668e842e496ffb994828a7fa05475d51ccbe409b24b82a39a9cf692c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:b1:16:75:d1:1c:61:08:1a:2a:e5:ce:3c: d2:c7:f6:ab:fd:4f:89:16:54:9c:e5:24:95:f5:25: 05:48:29:90:28:8e:21:d9:aa:d1:17:c4:d0:1c:b8: d8:bf:ce:5e:31:09:e6:0b:5f:de:c7:eb:30:04:a8: a7:c1:d0:1c:c0:2b:49:77:20:57:79:d0:37:b3:36: e6:09:21:33:c5:9e:38:39:e8:eb:fb:b9:0b:d1:1e: 64:e7:e8:12:c4:0f:39:b3:f4:84:e4:79:c6:e1:38: cb:42:86:9e:86:de:30:57:e2:7c:7d:5e:82:6d:93: ce:9a:0d:2f:0a:32:b6:85:f0:a5:30:3f:dc:e2:12: 61:d3:39:a5:ed:c7:31:54:e2:54:71:0d:05:dd:e8: 4d:3e:7b:e0:bf:15:44:12:98:98:b3:a4:ed:73:1a: 46:6a:94:e2:22:46:27:19:85:b4:a5:13:b5:ea:be: 3d:56:6d:92:c9:b1:f9:f8:e8:0f:e3:7c:b4:a5:29: 0e:cf:bd:77:de:06:eb:3f:0d:2f:35:c5:95:26:91: 66:11:04:20:cc:2d:81:d4:f2:2c:f4:34:56:a8:1d: d5:c7:60:88:d3:5f:c9:72:ee:4e:64:25:dd:59:92: f5:2c:cd:88:94:7b:da:52:05:c0:6f:e1:f5:bd:d8: 93:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CE:05:4F:AA:68:74:A1:0C:E5:A6:6A:03:FE:FD:0A:12:FF:92:BD X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/de89b5cc-8cd4-4206-884c-189b4133f8da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.255.0/24 Signature Algorithm: sha256WithRSAEncryption 90:1d:bf:ab:31:cf:07:d4:15:c7:b1:7a:c2:2a:42:5d:e0:fb: 5e:7c:a5:6d:68:67:f2:83:fc:5a:85:1d:31:65:ca:6e:10:ee: b7:d2:00:a3:ba:a2:4e:d2:0f:03:a8:ce:a0:f8:6c:9b:1f:55: 12:c6:85:aa:46:0f:98:09:91:88:07:40:0f:b6:1b:0f:b0:66: e5:06:ed:64:8b:a5:c6:b8:8e:c5:e0:a4:aa:c5:10:09:b0:1c: 3a:b9:ff:10:e3:46:3c:e1:1f:4b:ac:3e:1c:58:52:87:d1:4f: 24:0f:28:cb:89:f0:f3:61:a4:97:dc:ec:10:2b:95:d1:8d:de: 42:52:a5:d8:2d:ae:f6:78:7b:31:dd:26:db:6f:d7:0b:aa:02: 02:fb:2f:b7:d6:58:d6:f2:33:69:bc:cd:bf:0e:6e:6b:b9:5c: c1:26:17:b9:7c:de:38:62:35:fa:78:77:4f:33:81:0d:fe:e9: e8:2d:a5:cf:6c:7a:ea:7c:53:37:e1:46:fb:02:d4:8c:c6:35: a6:b9:91:89:b8:e0:20:f5:73:17:59:9a:43:5b:32:26:dc:ca: cf:44:c3:ee:9c:d3:8c:01:34:ad:ef:21:cf:d4:f4:3a:1f:10: 0f:69:75:3c:b9:d0:48:29:0d:a9:8c:4b:8a:2e:32:66:b5:03: 01:94:7f:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ69LuayrO64dHIHjSgTa/5gq7TwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MDIwWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjhmMzdkODY2OGU4NDJlNDk2ZmZiOTk0ODI4YTdmYTA1 NDc1ZDUxY2NiZTQwOWIyNGI4MmEzOWE5Y2Y2OTJjMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC00rEWddEcYQgaKuXOPNLH9qv9T4kWVJzlJJX1JQVIKZAo jiHZqtEXxNAcuNi/zl4xCeYLX97H6zAEqKfB0BzAK0l3IFd50DezNuYJITPFnjg5 6Ov7uQvRHmTn6BLEDzmz9ITkecbhOMtChp6G3jBX4nx9XoJtk86aDS8KMraF8KUw P9ziEmHTOaXtxzFU4lRxDQXd6E0+e+C/FUQSmJizpO1zGkZqlOIiRicZhbSlE7Xq vj1WbZLJsfn46A/jfLSlKQ7PvXfeBus/DS81xZUmkWYRBCDMLYHU8iz0NFaoHdXH YIjTX8ly7k5kJd1ZkvUszYiUe9pSBcBv4fW92JOzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUI84FT6podKEM5aZqA/79ChL/kr0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2RlODliNWNjLThjZDQtNDIwNi04ODRjLTE4OWI0MTMzZjhkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYP8wDQYJKoZIhvcNAQELBQADggEBAJAdv6sxzwfUFcexesIqQl3g+158 pW1oZ/KD/FqFHTFlym4Q7rfSAKO6ok7SDwOozqD4bJsfVRLGhapGD5gJkYgHQA+2 Gw+wZuUG7WSLpca4jsXgpKrFEAmwHDq5/xDjRjzhH0usPhxYUofRTyQPKMuJ8PNh pJfc7BArldGN3kJSpdgtrvZ4ezHdJttv1wuqAgL7L7fWWNbyM2m8zb8Obmu5XMEm F7l83jhiNfp4d08zgQ3+6egtpc9seup8UzfhRvsC1IzGNaa5kYm44CD1cxdZmkNb Mibcys9Ew+6c04wBNK3vIc/U9DofEA9pdTy50EgpDamMS4ouMma1AwGUf8w= -----END CERTIFICATE-----Generated at Sat Aug 9 02:53:43 2025 by rpki-client