$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18099450-c1be-4211-975a-2047f3b55653.roa File: 18099450-c1be-4211-975a-2047f3b55653.roa (raw, json) Hash identifier: /R/hdJcadjnOyMRj6nXh9OvhdvjIc1ln+XI7ZYYM/wc= Subject key identifier: 73:01:60:E0:10:57:73:74:A2:60:C8:46:0A:0C:AF:E6:19:0D:C1:4F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3080DF8FC8E8D616E05F6BB54CACA131C50444FD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18099450-c1be-4211-975a-2047f3b55653.roa Signing time: Fri 25 Jul 2025 16:21:54 +0000 ROA not before: Fri 25 Jul 2025 16:21:54 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.212.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:80:df:8f:c8:e8:d6:16:e0:5f:6b:b5:4c:ac:a1:31:c5:04:44:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 16:21:54 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=633a5b3d91e39977724413963b6d16a058e8df76fd8bc53fee7efc0dbb3f98f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:83:0f:f6:d8:72:dd:63:63:d2:e4:4c:09: ec:5c:96:26:4e:60:e9:3c:d1:a7:2e:55:34:0b:28: 45:d4:17:11:26:d8:54:bf:ce:f5:ab:4f:c0:57:d8: 43:b1:22:cd:4e:f5:f0:86:34:73:80:af:ca:a7:a9: f5:c6:4f:f0:a9:01:48:c4:23:e1:1c:91:90:39:a5: 97:a6:cc:3a:5a:07:6a:ec:a4:87:7a:e2:7f:f8:ce: a7:b8:ca:01:a6:2d:48:d3:a7:c1:73:c7:83:95:17: d2:f6:d0:3f:bc:95:b2:df:55:0f:dd:bf:28:d7:f8: 26:8a:f4:0b:fd:8b:95:10:7c:81:d2:97:39:87:f2: 98:5a:17:77:5e:e8:3e:96:fe:fa:e8:35:f0:ca:92: 00:43:3c:e1:fd:d0:05:bc:75:9d:3c:62:c1:90:0a: 06:43:87:d0:f8:e2:1f:66:2c:ad:a6:df:e9:3e:8a: 61:f7:cd:af:97:46:3b:4e:c1:a7:f2:05:5f:3a:f9: a0:e3:8f:6b:8f:32:ef:3f:ab:95:f4:27:3f:79:1a: 34:0a:86:72:54:26:50:70:43:19:10:13:14:10:ac: 13:76:56:b1:d8:c1:dd:e0:6f:3a:0e:b9:a5:76:8a: 3d:e8:45:97:14:b3:9f:dd:e5:6d:02:c9:58:ee:a0: 7a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:01:60:E0:10:57:73:74:A2:60:C8:46:0A:0C:AF:E6:19:0D:C1:4F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/18099450-c1be-4211-975a-2047f3b55653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.212.192.0/19 Signature Algorithm: sha256WithRSAEncryption 27:b3:18:58:f4:35:29:30:46:ea:f7:29:40:01:c2:eb:00:db: e4:fd:28:05:e6:be:fe:48:a2:f2:5d:bc:d5:5a:76:10:a6:e2: 6b:a5:21:6e:b8:ed:2d:39:a2:20:c9:6b:5e:38:42:fe:e1:0f: f0:b7:f6:47:21:3a:84:28:f4:e4:a5:b3:39:26:6c:9f:5e:4c: 6b:2f:9a:89:f9:db:3d:5e:b0:fe:e9:c6:9e:e3:4c:68:1f:2d: fb:7e:14:61:75:bd:7e:ff:d3:c7:af:b7:97:ed:87:cc:ae:bd: c4:27:ec:f8:5f:69:7d:67:07:5f:5a:c8:82:f6:56:da:98:79: b4:cd:02:0e:60:87:f8:5f:6e:23:95:77:7d:36:9f:91:60:f8: bb:75:d3:99:68:f6:de:0d:9a:c5:91:12:51:d0:c9:bc:67:aa: c4:4b:68:0b:95:ab:49:b4:92:ad:30:aa:13:0d:98:f2:69:92: 3b:26:f9:67:d7:fe:0a:fa:ed:a6:5a:d0:25:0f:fa:ef:cf:7f: d4:86:9c:74:b3:ad:26:73:1b:99:bb:fa:84:19:f3:de:52:5d: cd:a9:27:68:ec:60:6c:df:a5:7b:45:0b:b3:ec:6c:80:c3:1d: 65:d6:b5:5e:4f:3a:03:f4:e1:4a:5b:79:f3:00:33:47:93:cb: 04:3f:1d:5d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMIDfj8jo1hbgX2u1TKyhMcUERP0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTYyMTU0WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MzNhNWIzZDkxZTM5OTc3NzI0NDEzOTYzYjZkMTZhMDU4 ZThkZjc2ZmQ4YmM1M2ZlZTdlZmMwZGJiM2Y5OGY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6H4MP9thy3WNj0uRMCexcliZOYOk80acuVTQLKEXUFxEm 2FS/zvWrT8BX2EOxIs1O9fCGNHOAr8qnqfXGT/CpAUjEI+EckZA5pZemzDpaB2rs pId64n/4zqe4ygGmLUjTp8Fzx4OVF9L20D+8lbLfVQ/dvyjX+CaK9Av9i5UQfIHS lzmH8phaF3de6D6W/vroNfDKkgBDPOH90AW8dZ08YsGQCgZDh9D44h9mLK2m3+k+ imH3za+XRjtOwafyBV86+aDjj2uPMu8/q5X0Jz95GjQKhnJUJlBwQxkQExQQrBN2 VrHYwd3gbzoOuaV2ij3oRZcUs5/d5W0CyVjuoHoJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcwFg4BBXc3SiYMhGCgyv5hkNwU8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE4MDk5NDUwLWMxYmUtNDIxMS05NzVhLTIwNDdmM2I1NTY1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU21MAwDQYJKoZIhvcNAQELBQADggEBACezGFj0NSkwRur3KUABwusA2+T9 KAXmvv5IovJdvNVadhCm4mulIW647S05oiDJa144Qv7hD/C39kchOoQo9OSlszkm bJ9eTGsvmon52z1esP7pxp7jTGgfLft+FGF1vX7/08evt5fth8yuvcQn7PhfaX1n B19ayIL2VtqYebTNAg5gh/hfbiOVd302n5Fg+Lt105lo9t4NmsWRElHQybxnqsRL aAuVq0m0kq0wqhMNmPJpkjsm+WfX/gr67aZa0CUP+u/Pf9SGnHSzrSZzG5m7+oQZ 895SXc2pJ2jsYGzfpXtFC7PsbIDDHWXWtV5POgP04UpbefMAM0eTywQ/HV0= -----END CERTIFICATE-----Generated at Tue Aug 5 17:14:00 2025 by rpki-client