$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2bb990f-fadc-4280-8d1a-b6ae8bb331a5.roa File: e2bb990f-fadc-4280-8d1a-b6ae8bb331a5.roa (raw, json) Hash identifier: Kg+Pi2nPJl85/tM5vbJk/U9I0KHyv5gm1+7Mp4t4rsg= Subject key identifier: 5F:44:D9:66:BD:79:1B:11:D9:EF:72:CB:4A:F0:CB:80:D1:F1:D2:D4 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 5AF1538FD3C3AF39AAE4058790EDA03C7082CD35 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2bb990f-fadc-4280-8d1a-b6ae8bb331a5.roa Signing time: Fri 25 Jul 2025 16:41:19 +0000 ROA not before: Fri 25 Jul 2025 16:41:19 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f1:53:8f:d3:c3:af:39:aa:e4:05:87:90:ed:a0:3c:70:82:cd:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:41:19 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=e95ff6725a2e37168682517e4813425167d9677b40f6f3f5e956d00d34641847, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0d:40:2f:5f:48:2b:1c:a7:e2:c4:49:ef:3b: 17:ff:8b:90:06:c6:f7:20:3e:2e:f2:0f:0b:3c:16: 19:b7:bd:0d:4f:29:c3:b6:d6:8e:0a:40:19:2e:d6: a6:12:73:ee:02:8e:83:33:8c:1c:24:cf:8e:6a:ed: 56:53:15:25:37:52:f6:d5:95:ce:d9:5f:45:ac:7a: 65:f1:62:83:05:f1:0a:f0:45:c6:14:c9:cb:ff:bb: 04:15:ac:97:af:7f:10:c6:b1:32:11:60:9f:98:58: cf:11:a2:59:01:dd:4b:2a:fd:68:9c:d6:4c:aa:cf: 1d:b8:81:db:1f:bc:13:43:f2:2c:fb:7c:43:93:94: 09:a8:a8:ed:75:50:80:6c:3c:8a:73:a8:36:71:cb: b5:ad:b4:2c:fb:84:1e:db:7b:cc:69:86:a6:b2:aa: 64:82:a6:3b:cb:1f:e7:2f:47:72:24:a6:b8:1e:82: 48:09:f7:f8:93:a6:ca:dc:52:11:79:3a:fb:b7:a3: dd:ba:e5:e6:18:3b:42:a2:0f:ac:57:64:cf:b9:39: ca:08:8d:ae:22:18:73:ea:c2:d2:5f:86:9d:70:cf: b4:a8:b8:f2:73:b6:5e:5a:24:ce:a8:0c:2e:86:92: 41:6f:1c:60:91:34:03:81:b8:dc:db:62:df:ef:1b: 5e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:44:D9:66:BD:79:1B:11:D9:EF:72:CB:4A:F0:CB:80:D1:F1:D2:D4 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e2bb990f-fadc-4280-8d1a-b6ae8bb331a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.80.0/22 Signature Algorithm: sha256WithRSAEncryption 64:32:6e:6e:a3:0b:d9:77:12:67:5b:ed:90:b4:e1:e7:d1:6b: db:1a:85:86:2a:3e:ae:54:a5:7f:e3:10:4f:e3:28:21:5f:30: ff:53:b7:f6:22:f1:f6:db:e0:05:9b:a5:d1:45:a9:4e:77:41: 51:56:bd:60:4d:8b:4b:f7:c5:5e:13:e4:50:2d:78:12:e8:b1: ec:57:d8:41:96:88:3a:b9:18:1c:c8:ca:ff:a5:5a:1c:6b:b4: 4d:a1:3e:32:25:e0:26:1e:01:99:3c:64:f8:f9:1c:b9:c1:a7: 70:d2:ee:08:e4:5c:87:38:80:d7:e0:bc:2b:67:05:f9:dd:61: 91:7f:45:d8:a9:5b:73:b3:9d:b4:d3:88:37:9e:ec:e4:a6:95: 69:3f:16:b0:86:fa:ce:53:da:74:f2:d4:20:ac:8d:2a:05:0a: 3b:d6:97:74:39:b4:c2:c2:e2:34:cc:55:5a:39:c7:27:f6:89: fc:8d:75:cb:ab:c5:80:9a:85:7c:62:42:1d:8f:bf:ff:32:cf: 42:05:9a:a7:e9:9b:a9:c1:50:ea:18:71:20:84:38:73:23:2b: 31:1c:e6:bf:a0:f8:f0:79:89:a1:f0:70:b0:c7:ed:64:cc:2b: e7:fd:a0:80:99:69:30:30:09:e7:99:c5:2b:e6:0e:d0:57:f2: b4:69:94:34 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWvFTj9PDrzmq5AWHkO2gPHCCzTUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MTE5WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTVmZjY3MjVhMmUzNzE2ODY4MjUxN2U0ODEzNDI1MTY3 ZDk2NzdiNDBmNmYzZjVlOTU2ZDAwZDM0NjQxODQ3MS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEDUAvX0grHKfixEnvOxf/i5AGxvcgPi7yDws8Fhm3vQ1P KcO21o4KQBku1qYSc+4CjoMzjBwkz45q7VZTFSU3UvbVlc7ZX0WsemXxYoMF8Qrw RcYUycv/uwQVrJevfxDGsTIRYJ+YWM8RolkB3Usq/Wic1kyqzx24gdsfvBND8iz7 fEOTlAmoqO11UIBsPIpzqDZxy7WttCz7hB7be8xphqayqmSCpjvLH+cvR3Ikprge gkgJ9/iTpsrcUhF5Ovu3o9265eYYO0KiD6xXZM+5OcoIja4iGHPqwtJfhp1wz7So uPJztl5aJM6oDC6GkkFvHGCRNAOBuNzbYt/vG17nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUX0TZZr15GxHZ73LLSvDLgNHx0tQwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2UyYmI5OTBmLWZhZGMtNDI4MC04ZDFhLWI2YWU4YmIzMzFhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjYFAwDQYJKoZIhvcNAQELBQADggEBAGQybm6jC9l3Emdb7ZC04efRa9sa hYYqPq5UpX/jEE/jKCFfMP9Tt/Yi8fbb4AWbpdFFqU53QVFWvWBNi0v3xV4T5FAt eBLosexX2EGWiDq5GBzIyv+lWhxrtE2hPjIl4CYeAZk8ZPj5HLnBp3DS7gjkXIc4 gNfgvCtnBfndYZF/RdipW3OznbTTiDee7OSmlWk/FrCG+s5T2nTy1CCsjSoFCjvW l3Q5tMLC4jTMVVo5xyf2ifyNdcurxYCahXxiQh2Pv/8yz0IFmqfpm6nBUOoYcSCE OHMjKzEc5r+g+PB5iaHwcLDH7WTMK+f9oICZaTAwCeeZxSvmDtBX8rRplDQ= -----END CERTIFICATE-----Generated at Wed Aug 6 07:53:02 2025 by rpki-client