$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fcabc937-df80-4df7-95c8-bde2ef225d55.roa File: fcabc937-df80-4df7-95c8-bde2ef225d55.roa (raw, json) Hash identifier: zAuGWzaBHC5KnMLdz0eNWQTxYYxI9ZQZ0xXWtNdn3LE= Subject key identifier: AB:ED:D1:1F:70:41:37:01:84:4C:C3:7D:51:14:0C:8E:99:C8:13:84 Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 3B1A5628B08DE952DD59BBC059433E2F0A12C93A Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fcabc937-df80-4df7-95c8-bde2ef225d55.roa Signing time: Fri 25 Jul 2025 16:41:11 +0000 ROA not before: Fri 25 Jul 2025 16:41:11 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.96.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:1a:56:28:b0:8d:e9:52:dd:59:bb:c0:59:43:3e:2f:0a:12:c9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Jul 25 16:41:11 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=a5c6a84d87698d4af40b51342f8dbae683367b3ebc08f64c1187e524cdbee99b, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6c:95:b9:f8:76:85:2d:ae:d6:b6:e5:4d:f2: 13:c2:84:1c:e9:45:31:00:94:c3:bb:68:0a:74:2a: 0e:1a:e3:26:c8:b5:50:fc:6a:b0:b4:dd:19:fb:4c: 2d:1a:c0:22:7e:41:d3:33:9b:50:4e:87:d7:3e:d7: e7:71:8b:18:b7:4a:bd:82:8f:01:56:d6:0d:1b:18: bd:e3:71:ef:4b:b2:34:bf:35:2d:0c:9b:1e:b9:69: 1e:a4:2e:e5:d7:0e:a4:b2:26:87:40:61:bd:25:c1: f1:6b:37:28:4b:1c:2b:5c:72:c9:e6:30:bb:66:94: 71:1b:ce:5e:b2:fc:e2:0e:7f:57:be:a1:4c:eb:51: ea:c7:9a:a0:69:2e:f4:2c:88:2f:be:a0:a1:62:1f: 36:62:25:6b:09:f2:e4:b7:25:57:1a:6d:f7:d5:b6: 3f:c7:51:c3:82:f6:92:49:83:f6:92:72:61:e0:79: 7e:dd:e0:46:2b:86:e1:e5:7b:6a:83:e7:4e:1d:14: b0:a6:6b:07:34:19:5d:26:94:54:d7:bf:36:62:2b: 7a:f5:fd:6a:87:7f:11:40:bf:f6:b4:62:be:16:fa: b5:70:fb:e2:0b:05:44:6b:03:c3:be:9f:d7:2b:97: 0d:e8:c8:9f:22:fb:a1:92:ba:67:e4:56:6b:20:b5: 33:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:ED:D1:1F:70:41:37:01:84:4C:C3:7D:51:14:0C:8E:99:C8:13:84 X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/fcabc937-df80-4df7-95c8-bde2ef225d55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.48.0/20 Signature Algorithm: sha256WithRSAEncryption 82:f0:64:18:f3:1f:0e:e9:cd:0f:e8:ab:ea:20:bd:b7:16:d5: c0:38:2f:ea:29:3b:42:0d:c4:e5:bb:56:9b:70:4c:5d:be:42: 12:b7:1f:23:f5:80:6c:00:91:c9:ce:5b:3a:ad:e8:df:1e:1d: d2:46:de:43:58:ea:e9:3b:c1:ef:0b:26:3d:cf:ce:cc:c9:c6: a2:7d:94:2b:53:f7:5e:5b:30:58:ba:f2:a2:62:0b:b8:a2:63: db:fb:4a:bf:d4:a6:fd:48:a7:2d:03:52:9a:91:3c:70:82:c4: b0:37:f3:34:3d:68:3e:6b:e8:7b:ce:b8:3b:3e:92:6d:4a:7c: cb:fd:40:b2:6f:d9:d9:b3:65:75:eb:c6:10:da:98:ad:b7:5f: 00:3c:b4:a8:9f:2b:37:dd:67:88:5d:5b:a6:98:d5:17:86:df: a6:20:bc:64:17:12:1f:3a:4e:c7:9b:b3:d1:d8:ed:55:02:20: 99:22:93:2b:15:32:5a:86:e0:f6:24:cf:99:2a:7a:c8:38:82: 9c:54:24:f9:0f:a4:fe:37:93:52:f6:eb:75:e6:81:38:07:9b: 21:fb:c9:c3:54:92:e2:a7:85:c6:ab:ac:8b:10:93:df:7f:9d: 8e:1a:ba:60:63:a5:15:b1:a1:ae:7c:b1:9e:f0:fe:ff:08:a8: 9f:02:17:e8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOxpWKLCN6VLdWbvAWUM+LwoSyTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjUwNzI1MTY0MTExWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWM2YTg0ZDg3Njk4ZDRhZjQwYjUxMzQyZjhkYmFlNjgz MzY3YjNlYmMwOGY2NGMxMTg3ZTUyNGNkYmVlOTliMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqbJW5+HaFLa7WtuVN8hPChBzpRTEAlMO7aAp0Kg4a4ybI tVD8arC03Rn7TC0awCJ+QdMzm1BOh9c+1+dxixi3Sr2CjwFW1g0bGL3jce9LsjS/ NS0Mmx65aR6kLuXXDqSyJodAYb0lwfFrNyhLHCtccsnmMLtmlHEbzl6y/OIOf1e+ oUzrUerHmqBpLvQsiC++oKFiHzZiJWsJ8uS3JVcabffVtj/HUcOC9pJJg/aScmHg eX7d4EYrhuHle2qD504dFLCmawc0GV0mlFTXvzZiK3r1/WqHfxFAv/a0Yr4W+rVw ++ILBURrA8O+n9crlw3oyJ8i+6GSumfkVmsgtTMlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUq+3RH3BBNwGETMN9URQMjpnIE4QwHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyL2ZjYWJjOTM3LWRmODAtNGRmNy05NWM4LWJkZTJlZjIyNWQ1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQjYDAwDQYJKoZIhvcNAQELBQADggEBAILwZBjzHw7pzQ/oq+ogvbcW1cA4 L+opO0INxOW7VptwTF2+QhK3HyP1gGwAkcnOWzqt6N8eHdJG3kNY6uk7we8LJj3P zszJxqJ9lCtT915bMFi68qJiC7iiY9v7Sr/Upv1Ipy0DUpqRPHCCxLA38zQ9aD5r 6HvOuDs+km1KfMv9QLJv2dmzZXXrxhDamK23XwA8tKifKzfdZ4hdW6aY1ReG36Yg vGQXEh86Tsebs9HY7VUCIJkikysVMlqG4PYkz5kqesg4gpxUJPkPpP43k1L263Xm gTgHmyH7ycNUkuKnhcarrIsQk99/nY4aumBjpRWxoa58sZ7w/v8IqJ8CF+g= -----END CERTIFICATE-----Generated at Wed Aug 6 14:19:14 2025 by rpki-client