$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9e50d68-b0c9-485d-9221-bde42a68abe9.roa File: f9e50d68-b0c9-485d-9221-bde42a68abe9.roa (raw, json) Hash identifier: a9pSOxbYdEKpXzf/krrgwRronwHPXShLbG+B7sNefTs= Subject key identifier: 26:B1:07:FE:D3:C8:12:15:9F:4D:24:EA:A9:A6:73:E4:C5:AB:53:72 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3605C58CF3239F2ED3991551B029622D968369E9 Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9e50d68-b0c9-485d-9221-bde42a68abe9.roa Signing time: Fri 25 Jul 2025 16:41:17 +0000 ROA not before: Fri 25 Jul 2025 16:41:17 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:05:c5:8c:f3:23:9f:2e:d3:99:15:51:b0:29:62:2d:96:83:69:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:41:17 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=c9bf06144274108f92e601793a2a79a0b442bbf6f479457fc5a7bf2a4861a05d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:d8:12:30:7c:5f:d3:0a:ed:55:5c:3b:0d: 73:c5:00:65:cf:08:40:a1:8a:93:79:85:cc:21:38: 58:8f:3c:9f:f9:cb:6c:b5:e1:8e:a9:c1:8b:67:a0: be:1f:f1:d2:cb:4b:82:34:a2:89:62:26:08:e1:86: 7e:76:09:80:c9:05:e1:95:fe:d0:98:75:85:2c:f1: 70:87:cb:49:72:5e:d9:e8:43:f8:a6:1f:fa:1d:7e: 31:31:57:7b:0b:3c:9f:4d:b0:3c:ed:d8:99:ab:8e: 3c:af:b5:12:de:25:63:00:68:aa:ec:bc:e9:a7:f1: 83:7a:1e:38:ae:b4:5e:5f:3a:d7:36:15:fc:a3:b2: c0:0d:19:52:a4:29:57:22:1c:87:d3:29:e5:7d:d5: 83:37:74:1f:7f:01:30:7c:39:ac:16:73:52:72:0d: 95:91:8e:9c:8d:02:74:cb:14:8f:1f:dc:fe:17:36: e7:69:bc:db:ef:57:e6:31:27:c5:68:c2:f9:81:de: 9f:46:e8:b9:fc:8c:0e:f0:ac:fd:45:9e:0c:ed:b9: 54:35:22:cb:dd:4f:34:a6:50:3e:ae:95:f0:f5:a3: ec:aa:57:ce:8e:43:6a:a6:32:86:22:1b:71:1c:c8: 83:47:f7:01:6c:b3:a1:74:73:55:ce:46:04:36:33: 53:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B1:07:FE:D3:C8:12:15:9F:4D:24:EA:A9:A6:73:E4:C5:AB:53:72 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f9e50d68-b0c9-485d-9221-bde42a68abe9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.64.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:b4:37:a9:da:08:35:ee:5f:a6:cb:65:fd:50:a2:39:7f:a8: a9:52:ab:8b:22:a2:fe:8d:f9:aa:f1:9b:41:4d:d6:f7:80:a7: 9e:99:65:92:13:e6:12:e3:09:56:63:97:24:ea:84:21:9d:a8: 7e:76:f7:a4:0c:b2:80:cf:a3:e4:e4:a0:f5:d3:68:f8:cb:93: fa:24:19:0f:9e:84:94:0b:1b:a9:b1:22:ec:8f:8c:0b:c0:ad: 1c:0d:11:2a:3e:62:20:2f:91:fd:f2:1e:0d:f3:64:6c:2f:07: dc:b0:c2:c6:9f:19:ef:3f:fb:42:50:6f:a5:bc:86:d0:66:b0: d8:9c:13:ac:5b:5c:de:13:8b:c2:40:85:e6:43:68:3e:9e:d2: 2b:27:9c:bd:8c:21:0d:72:6e:53:b2:e5:10:67:db:32:bd:e4: f7:f5:b4:bf:84:b1:fb:ea:34:81:72:1a:4c:9e:53:6c:90:a9: cb:29:bb:6f:5d:61:93:02:b4:e9:c4:71:ed:00:cd:b8:95:91: 3c:7a:33:c8:52:22:5f:fb:8c:c9:87:50:f3:66:f3:59:8b:b7: 08:b9:9b:0a:87:e5:bb:e5:45:63:31:35:21:65:72:f7:dd:ec: ed:63:88:24:75:23:84:d3:e6:e7:f1:a0:e9:1d:d1:9d:d0:82: 68:25:14:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNgXFjPMjny7TmRVRsCliLZaDaekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MTE3WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjOWJmMDYxNDQyNzQxMDhmOTJlNjAxNzkzYTJhNzlhMGI0 NDJiYmY2ZjQ3OTQ1N2ZjNWE3YmYyYTQ4NjFhMDVkMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCindgSMHxf0wrtVVw7DXPFAGXPCEChipN5hcwhOFiPPJ/5 y2y14Y6pwYtnoL4f8dLLS4I0ooliJgjhhn52CYDJBeGV/tCYdYUs8XCHy0lyXtno Q/imH/odfjExV3sLPJ9NsDzt2JmrjjyvtRLeJWMAaKrsvOmn8YN6HjiutF5fOtc2 FfyjssANGVKkKVciHIfTKeV91YM3dB9/ATB8OawWc1JyDZWRjpyNAnTLFI8f3P4X NudpvNvvV+YxJ8VowvmB3p9G6Ln8jA7wrP1FngztuVQ1IsvdTzSmUD6ulfD1o+yq V86OQ2qmMoYiG3EcyINH9wFss6F0c1XORgQ2M1OnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJrEH/tPIEhWfTSTqqaZz5MWrU3IwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2Y5ZTUwZDY4LWIwYzktNDg1ZC05MjIxLWJkZTQyYTY4YWJlOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYEAwDQYJKoZIhvcNAQELBQADggEBADu0N6naCDXuX6bLZf1Qojl/qKlS q4siov6N+arxm0FN1veAp56ZZZIT5hLjCVZjlyTqhCGdqH5296QMsoDPo+TkoPXT aPjLk/okGQ+ehJQLG6mxIuyPjAvArRwNESo+YiAvkf3yHg3zZGwvB9ywwsafGe8/ +0JQb6W8htBmsNicE6xbXN4Ti8JAheZDaD6e0isnnL2MIQ1yblOy5RBn2zK95Pf1 tL+EsfvqNIFyGkyeU2yQqcspu29dYZMCtOnEce0AzbiVkTx6M8hSIl/7jMmHUPNm 81mLtwi5mwqH5bvlRWMxNSFlcvfd7O1jiCR1I4TT5ufxoOkd0Z3QgmglFJc= -----END CERTIFICATE-----Generated at Sat Aug 9 01:09:24 2025 by rpki-client