$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5892d34-8457-485d-a5bb-33dc03a2e607.roa File: e5892d34-8457-485d-a5bb-33dc03a2e607.roa (raw, json) Hash identifier: rv/f/l4KrAGcpqxHlpLWxfdtK6WSjstKv1TdHkUtLJU= Subject key identifier: D4:64:31:71:81:54:50:D5:8A:E1:2A:53:FB:F0:52:CE:AF:53:A9:2C Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 6A14A363F751B0C17585D0D49488933E8C00E056 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5892d34-8457-485d-a5bb-33dc03a2e607.roa Signing time: Fri 25 Jul 2025 16:40:13 +0000 ROA not before: Fri 25 Jul 2025 16:40:13 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:14:a3:63:f7:51:b0:c1:75:85:d0:d4:94:88:93:3e:8c:00:e0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:40:13 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=aa32aff5aa62b4dbef445a201cd9411339f88e5cd76b12ad8a555c3f0c2c2823, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:90:24:d4:0b:4f:d5:df:11:2a:10:2b:22: 72:bb:2f:b5:ff:c1:33:af:ad:69:0b:77:cf:f7:fa: a6:fc:bb:29:b0:4d:18:88:40:9b:2a:39:50:90:4f: 8b:66:34:cc:d5:6b:51:d8:1d:69:9a:1e:1b:8b:97: 36:d4:c4:fa:13:58:6a:4e:9a:15:e9:23:dc:3a:96: 0a:fc:76:f8:cd:2d:c0:85:7e:f8:b4:eb:1d:7b:41: c8:1e:1e:28:19:3b:16:67:44:a3:58:20:4f:31:64: 81:ad:fa:a8:9c:2e:46:02:93:c4:ef:b8:8e:6d:18: da:17:83:7d:89:91:f0:ec:e0:1f:58:23:61:84:ea: 34:68:c8:c5:9e:0c:2e:ef:01:0c:83:18:e6:1a:a4: ba:80:8f:3f:dd:4e:b4:1f:e9:5a:2c:2a:bb:8c:ca: 66:94:d9:1b:b3:1c:96:67:f6:97:a8:70:df:b1:6a: e2:22:6f:3c:4e:b0:89:f7:5c:e1:10:2a:5d:4b:6a: 42:a9:d9:c0:e8:b1:5e:f6:fd:ce:96:6a:ec:9a:a1: f6:40:a2:0a:fe:a6:1d:7f:71:8f:88:a1:8d:7e:1b: b0:58:34:d6:fd:cf:a3:9a:cd:8b:06:e5:68:a5:8d: 88:43:30:31:c1:cd:99:a6:25:b0:9b:06:b2:7f:00: 5f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:64:31:71:81:54:50:D5:8A:E1:2A:53:FB:F0:52:CE:AF:53:A9:2C X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e5892d34-8457-485d-a5bb-33dc03a2e607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.32.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:1c:31:06:a9:37:a3:44:11:e1:ad:cd:7f:ee:88:74:66:d4: 2d:e9:0e:ef:6b:c3:52:f7:c2:f4:e1:de:d9:4f:f8:a9:83:af: 01:3a:6e:24:9b:2a:8d:4f:e5:2a:a4:21:ef:7c:92:21:f3:94: 35:e9:b1:ba:f8:58:8f:ce:75:de:e7:52:d7:ce:67:c2:30:2c: 4b:54:24:94:ff:71:f1:33:6e:68:9b:5f:ec:0a:56:42:0f:b4: 4b:5e:2f:7d:8e:f7:5b:72:67:bf:77:67:24:88:fc:72:a5:5e: 5e:28:94:8f:16:4f:cc:2a:0c:db:13:8b:e8:33:bd:26:c7:4e: 65:48:5f:88:39:5e:a0:4b:b2:ad:14:24:41:28:09:32:36:db: 7d:09:72:4d:b9:e9:43:a1:16:a1:e0:1f:24:0a:dc:c1:73:09: 33:50:af:f8:b0:2d:56:ba:d3:1c:98:6f:aa:b5:23:7d:b8:73: f6:6a:e6:f9:34:c9:31:3c:c4:ab:b7:24:49:c2:ab:08:7e:87: d5:d2:32:f0:3b:7f:11:fe:b5:7a:3a:fe:c2:74:59:f4:64:cf: 97:e0:39:3f:d8:57:c0:c4:35:fa:be:1c:bf:2c:5d:d5:76:08: 2b:7e:98:d6:ff:49:a2:b1:bf:23:2c:6c:84:af:37:dc:c6:43: c4:13:5d:db -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUahSjY/dRsMF1hdDUlIiTPowA4FYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MDEzWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYTMyYWZmNWFhNjJiNGRiZWY0NDVhMjAxY2Q5NDExMzM5 Zjg4ZTVjZDc2YjEyYWQ4YTU1NWMzZjBjMmMyODIzMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx4ZAk1AtP1d8RKhArInK7L7X/wTOvrWkLd8/3+qb8uymw TRiIQJsqOVCQT4tmNMzVa1HYHWmaHhuLlzbUxPoTWGpOmhXpI9w6lgr8dvjNLcCF fvi06x17QcgeHigZOxZnRKNYIE8xZIGt+qicLkYCk8TvuI5tGNoXg32JkfDs4B9Y I2GE6jRoyMWeDC7vAQyDGOYapLqAjz/dTrQf6VosKruMymaU2RuzHJZn9peocN+x auIibzxOsIn3XOEQKl1LakKp2cDosV72/c6WauyaofZAogr+ph1/cY+IoY1+G7BY NNb9z6OazYsG5WiljYhDMDHBzZmmJbCbBrJ/AF8LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1GQxcYFUUNWK4SpT+/BSzq9TqSwwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2U1ODkyZDM0LTg0NTctNDg1ZC1hNWJiLTMzZGMwM2EyZTYwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYCAwDQYJKoZIhvcNAQELBQADggEBAA8cMQapN6NEEeGtzX/uiHRm1C3p Du9rw1L3wvTh3tlP+KmDrwE6biSbKo1P5SqkIe98kiHzlDXpsbr4WI/Odd7nUtfO Z8IwLEtUJJT/cfEzbmibX+wKVkIPtEteL32O91tyZ793ZySI/HKlXl4olI8WT8wq DNsTi+gzvSbHTmVIX4g5XqBLsq0UJEEoCTI2230Jck256UOhFqHgHyQK3MFzCTNQ r/iwLVa60xyYb6q1I324c/Zq5vk0yTE8xKu3JEnCqwh+h9XSMvA7fxH+tXo6/sJ0 WfRkz5fgOT/YV8DENfq+HL8sXdV2CCt+mNb/SaKxvyMsbISvN9zGQ8QTXds= -----END CERTIFICATE-----Generated at Sat Aug 9 23:14:06 2025 by rpki-client