$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/168c9c33-f825-442d-9e23-a9fe1e16c687.roa File: 168c9c33-f825-442d-9e23-a9fe1e16c687.roa (raw, json) Hash identifier: r4Qm1mnjtxjH74Rh+rzFxsysxQOG29wqUaaC9ShfYO4= Subject key identifier: C7:2D:CB:66:92:7E:6A:45:EE:66:EE:D9:4D:A3:FA:F4:CC:80:AA:53 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5B0DD2A738BD490C39C3E46CBE607D5BABE8047D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/168c9c33-f825-442d-9e23-a9fe1e16c687.roa Signing time: Mon 09 Jun 2025 16:20:08 +0000 ROA not before: Mon 09 Jun 2025 16:20:08 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.159.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:0d:d2:a7:38:bd:49:0c:39:c3:e4:6c:be:60:7d:5b:ab:e8:04:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:20:08 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=ef0871f8d84dbd9622083c41c3b18aa0defe9a787699c85b42c76ad07b5ff609, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dc:01:83:75:ce:99:d2:80:e4:28:4a:c4:aa: cf:e1:1c:b2:11:5b:7f:f2:84:a3:0c:b4:2b:96:58: 37:50:e3:05:bc:a3:e0:d2:68:41:e2:e2:1d:fe:ab: 06:0b:3b:0f:88:73:cd:a8:be:7f:4f:17:48:91:87: 70:d5:26:75:dc:ad:95:fb:15:ff:6f:f9:54:20:03: 21:02:83:6b:f2:df:6f:8b:4d:be:4a:b8:7e:b7:06: bf:b5:b2:0e:1f:c0:29:5b:7a:88:a6:98:ce:b1:cd: cb:b0:31:11:8c:d8:05:98:05:c4:f9:93:f6:fa:b7: ab:0a:e7:b1:10:d7:40:35:bf:7d:13:a4:b3:2a:06: ee:c0:1c:a7:f8:2a:2f:76:79:af:42:39:94:12:45: ab:2e:db:33:8b:f7:05:9b:55:64:1c:56:90:bf:6a: 64:0d:93:67:af:c3:24:f3:8a:2a:51:2d:a1:a0:4b: 0c:8f:3d:ed:56:ed:39:25:4a:e9:b0:de:45:cc:2d: 1b:ae:f7:d1:f1:aa:b2:d4:58:60:70:02:e5:9f:61: 10:99:89:17:43:7e:6f:75:63:6e:97:d8:ee:3e:ef: 35:4c:51:06:2b:3b:5b:09:14:41:36:8f:67:91:cc: 81:9a:2b:0e:57:d2:b2:79:34:69:6f:4b:ca:3f:42: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2D:CB:66:92:7E:6A:45:EE:66:EE:D9:4D:A3:FA:F4:CC:80:AA:53 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/168c9c33-f825-442d-9e23-a9fe1e16c687.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.159.128.0/17 Signature Algorithm: sha256WithRSAEncryption 56:3b:9b:0f:6c:9e:6a:59:ce:dd:1a:dc:a2:3f:41:d1:56:58: c9:4f:6e:44:35:97:96:21:a9:6c:f8:e4:ee:a3:e5:1d:47:3f: f1:05:6d:74:ab:89:93:5e:6a:58:7e:d1:ae:9d:aa:c4:3a:63: d0:f3:e1:16:4f:b2:82:32:b5:66:80:fd:aa:52:b2:7e:14:b9: bf:c2:32:0c:ef:cd:cd:aa:fb:1d:88:7e:e4:58:0f:89:90:b3: d9:49:ed:74:e7:c3:12:59:58:9f:6f:5a:24:b1:0b:cf:c8:d6: 6f:fe:3c:3d:07:e1:54:d6:f9:f4:9a:db:ad:46:15:b0:52:28: d8:bb:7c:96:d0:7f:73:6a:b4:93:3c:cf:43:74:23:e1:5f:e4: b4:6d:83:b0:bb:cf:a0:99:44:d9:c3:c0:48:e1:c7:68:ff:82: f0:1d:3b:89:1e:c3:9b:67:dd:bc:f6:35:24:9b:b4:a1:b0:96: a4:5a:5a:14:3d:5d:87:95:36:ba:53:4d:0b:c6:ab:81:8e:c5: 53:40:79:a0:fa:c0:57:40:53:60:d1:ff:60:92:27:11:f5:42: 66:d3:68:d9:de:37:ef:04:c4:20:27:7e:e7:4c:9f:88:95:a7: b5:68:b6:88:9e:2d:b1:d0:5b:17:a1:71:a2:11:a2:f7:e9:c1: bb:f6:a5:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWw3Spzi9SQw5w+RsvmB9W6voBH0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYyMDA4WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjA4NzFmOGQ4NGRiZDk2MjIwODNjNDFjM2IxOGFhMGRl ZmU5YTc4NzY5OWM4NWI0MmM3NmFkMDdiNWZmNjA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC33AGDdc6Z0oDkKErEqs/hHLIRW3/yhKMMtCuWWDdQ4wW8 o+DSaEHi4h3+qwYLOw+Ic82ovn9PF0iRh3DVJnXcrZX7Ff9v+VQgAyECg2vy32+L Tb5KuH63Br+1sg4fwClbeoimmM6xzcuwMRGM2AWYBcT5k/b6t6sK57EQ10A1v30T pLMqBu7AHKf4Ki92ea9COZQSRasu2zOL9wWbVWQcVpC/amQNk2evwyTziipRLaGg SwyPPe1W7TklSumw3kXMLRuu99HxqrLUWGBwAuWfYRCZiRdDfm91Y26X2O4+7zVM UQYrO1sJFEE2j2eRzIGaKw5X0rJ5NGlvS8o/QvClAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxy3LZpJ+akXuZu7ZTaP69MyAqlMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2OGM5YzMzLWY4MjUtNDQyZC05ZTIzLWE5ZmUxZTE2YzY4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2n4AwDQYJKoZIhvcNAQELBQADggEBAFY7mw9snmpZzt0a3KI/QdFWWMlP bkQ1l5YhqWz45O6j5R1HP/EFbXSriZNealh+0a6dqsQ6Y9Dz4RZPsoIytWaA/apS sn4Uub/CMgzvzc2q+x2IfuRYD4mQs9lJ7XTnwxJZWJ9vWiSxC8/I1m/+PD0H4VTW +fSa261GFbBSKNi7fJbQf3NqtJM8z0N0I+Ff5LRtg7C7z6CZRNnDwEjhx2j/gvAd O4kew5tn3bz2NSSbtKGwlqRaWhQ9XYeVNrpTTQvGq4GOxVNAeaD6wFdAU2DR/2CS JxH1QmbTaNneN+8ExCAnfudMn4iVp7VotoieLbHQWxehcaIRovfpwbv2pbs= -----END CERTIFICATE-----Generated at Sat Jun 14 05:50:34 2025 by rpki-client