$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa File: 0dd6c7e2-b47d-45bc-910f-cd729038d719.roa (raw, json) Hash identifier: 37PlDeEhUPYvcowkzS5ZYvs88KuWaZ3M9yqMnCO3svY= Subject key identifier: E8:A2:B5:62:E6:99:7F:9C:09:0E:AB:C1:F9:87:84:C1:F2:93:71:E8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 095092FBCA57BAB0840E88BB0F78B0460C9CF182 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa Signing time: Tue 03 Jun 2025 15:10:17 +0000 ROA not before: Tue 03 Jun 2025 15:10:17 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.53.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:50:92:fb:ca:57:ba:b0:84:0e:88:bb:0f:78:b0:46:0c:9c:f1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:10:17 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=7cc24d4f0833ab88cfdfa974f691ad1885b6c7eef198e5b0916ea254c349309b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2b:35:db:1f:6c:ca:43:6b:97:4f:ed:45:28: b8:13:30:c6:ef:41:21:76:93:73:fb:3a:44:56:68: 5f:6f:af:63:b8:da:9d:27:d0:ed:c3:69:d4:54:4b: fe:10:4b:e4:3a:a9:23:a5:5f:43:2f:1d:56:05:a1: dd:4d:b8:03:79:41:b0:1a:12:a2:97:ae:a3:26:46: a8:f0:c7:10:c3:dd:4d:a2:38:c3:73:4d:8c:f8:5b: e2:78:46:c8:25:02:72:18:13:a1:64:55:2e:d5:c8: e5:46:af:f2:40:d8:e2:4d:ba:2e:85:ae:28:80:e4: d1:b4:ff:03:02:fa:75:45:53:90:3f:b7:da:df:0f: f4:c6:91:90:c2:18:96:9b:ad:b7:ba:a7:d7:ad:1f: 0b:5d:02:7d:ac:4a:f8:b5:7f:29:cc:27:6d:59:ba: f7:f8:06:a4:d8:69:17:a9:5a:c7:4f:00:07:d7:71: 00:17:10:3e:dd:b4:a3:4a:57:66:2b:53:dd:e3:cc: a2:a7:8c:21:2a:ee:46:32:e0:2d:43:9c:8d:72:62: da:a4:c9:85:70:dd:e8:cd:1b:a4:bf:d1:f0:83:36: 55:76:d5:23:59:4b:59:42:0e:80:26:2d:23:db:8b: 4f:3f:2a:e6:c9:bf:fe:8a:24:d3:45:8b:40:31:f9: ca:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A2:B5:62:E6:99:7F:9C:09:0E:AB:C1:F9:87:84:C1:F2:93:71:E8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.53.0.0/16 Signature Algorithm: sha256WithRSAEncryption a1:b3:67:f0:e9:ba:2a:ba:54:ea:89:93:18:ce:54:46:72:b9: 66:b3:c1:14:a9:5f:00:19:02:45:10:99:09:2b:be:39:c0:46: 72:ea:64:ee:60:6d:b4:b7:d6:d1:10:f0:2f:dc:24:76:07:36: 79:3c:90:54:70:38:dd:1b:08:d5:85:88:bb:a9:f6:40:4c:f1: f8:f6:26:26:2e:fd:cf:89:4e:c9:60:11:61:3e:eb:a1:e4:5a: cf:25:fb:0c:4e:92:8b:94:82:13:33:a7:7d:f1:bf:d0:e0:92: 29:1c:0b:d9:7e:dc:61:86:1a:8b:85:82:4d:98:ac:68:e7:37: bf:09:5f:2c:1d:9b:93:fa:49:f7:67:f2:6f:a3:61:14:87:a5: 67:74:17:c9:93:f4:79:2c:a0:71:56:29:a0:25:dc:2d:27:bc: 83:8b:83:d3:14:db:db:1a:cf:cf:c1:88:e8:e1:ca:b9:bb:a8: ab:4d:9a:5b:21:8c:2c:fb:96:6c:6a:6e:65:6f:a5:c7:86:06: ac:d1:de:2b:6b:91:4e:cd:3a:50:25:11:78:68:f8:52:d8:f9: 42:61:93:56:16:d9:16:97:18:49:ee:17:0c:b9:83:13:58:ba: bd:20:90:2a:ae:86:88:82:51:46:56:1e:15:84:75:0a:30:21: 87:2c:4a:60 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCVCS+8pXurCEDoi7D3iwRgyc8YIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUxMDE3WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3Y2MyNGQ0ZjA4MzNhYjg4Y2ZkZmE5NzRmNjkxYWQxODg1 YjZjN2VlZjE5OGU1YjA5MTZlYTI1NGMzNDkzMDliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKKzXbH2zKQ2uXT+1FKLgTMMbvQSF2k3P7OkRWaF9vr2O4 2p0n0O3DadRUS/4QS+Q6qSOlX0MvHVYFod1NuAN5QbAaEqKXrqMmRqjwxxDD3U2i OMNzTYz4W+J4RsglAnIYE6FkVS7VyOVGr/JA2OJNui6FriiA5NG0/wMC+nVFU5A/ t9rfD/TGkZDCGJabrbe6p9etHwtdAn2sSvi1fynMJ21Zuvf4BqTYaRepWsdPAAfX cQAXED7dtKNKV2YrU93jzKKnjCEq7kYy4C1DnI1yYtqkyYVw3ejNG6S/0fCDNlV2 1SNZS1lCDoAmLSPbi08/KubJv/6KJNNFi0Ax+co3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU6KK1YuaZf5wJDqvB+YeEwfKTcegwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkZDZjN2UyLWI0N2QtNDViYy05MTBmLWNkNzI5MDM4ZDcxOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANNTANBgkqhkiG9w0BAQsFAAOCAQEAobNn8Om6KrpU6omTGM5URnK5ZrPB FKlfABkCRRCZCSu+OcBGcupk7mBttLfW0RDwL9wkdgc2eTyQVHA43RsI1YWIu6n2 QEzx+PYmJi79z4lOyWARYT7roeRazyX7DE6Si5SCEzOnffG/0OCSKRwL2X7cYYYa i4WCTZisaOc3vwlfLB2bk/pJ92fyb6NhFIelZ3QXyZP0eSygcVYpoCXcLSe8g4uD 0xTb2xrPz8GI6OHKubuoq02aWyGMLPuWbGpuZW+lx4YGrNHeK2uRTs06UCUReGj4 Utj5QmGTVhbZFpcYSe4XDLmDE1i6vSCQKq6GiIJRRlYeFYR1CjAhhyxKYA== -----END CERTIFICATE-----Generated at Sat Jun 14 05:53:54 2025 by rpki-client