$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c867e80-204f-4587-b385-961b410415e2.roa File: 1c867e80-204f-4587-b385-961b410415e2.roa (raw, json) Hash identifier: /ajoFQfGzecgtGKVx6DIH3v15RnIqf17dn5r7UBuZOk= Subject key identifier: ED:E1:6D:D1:FF:32:EB:48:B6:A1:6C:76:8F:06:AF:A2:CF:A4:C3:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 37D3BF98FF4EE70AAF250E65E73A8050AA768277 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c867e80-204f-4587-b385-961b410415e2.roa Signing time: Tue 03 Jun 2025 00:40:20 +0000 ROA not before: Tue 03 Jun 2025 00:40:20 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.60.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d3:bf:98:ff:4e:e7:0a:af:25:0e:65:e7:3a:80:50:aa:76:82:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 00:40:20 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=7d0fb1d975f38f5a1b73fcce52d5f1a4dd5ca7c07bd8c89e64e3f3cd46b7867d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:82:c4:45:ca:7c:32:30:47:95:7b:ec:43:09: 4e:2d:4c:9f:78:cc:18:36:69:da:b4:65:19:4e:4c: 3f:62:1e:0b:7e:dd:0e:5c:ec:e9:69:2e:c1:cf:0f: 9a:2c:62:5c:86:ca:5d:3a:8c:07:0f:2c:88:42:56: 8b:e0:d4:f2:d9:d8:01:7f:aa:aa:53:67:31:a3:eb: 85:ea:f0:ca:f6:52:62:56:65:fd:e5:40:04:f8:b0: 93:9c:4a:8d:bf:87:3a:06:8d:5d:bf:5a:f9:0d:2f: f3:2b:4a:48:e3:d3:14:72:2c:d1:f2:2d:8d:cc:1e: 89:3d:e7:12:73:82:02:db:05:03:dd:f5:1c:f4:21: 25:39:0b:bf:05:21:50:d1:eb:23:bb:a5:47:51:56: 8d:f3:3a:8f:30:c9:5d:7f:a0:43:7e:aa:a4:a9:39: c6:06:54:15:98:0b:cf:60:93:9f:b2:ad:5a:f5:c4: 84:17:99:70:9c:bb:c8:1a:7c:a0:f0:68:62:22:6b: 30:0f:38:3a:e2:82:91:0d:9e:4d:32:a3:d0:82:85: fd:fe:da:05:fb:d2:c3:2c:d0:4b:dc:ec:08:00:e3: f4:19:fe:01:56:66:cc:49:e0:14:73:84:69:87:e6: c5:6c:f6:4f:33:99:c9:a2:7a:cf:89:bb:8d:ed:aa: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E1:6D:D1:FF:32:EB:48:B6:A1:6C:76:8F:06:AF:A2:CF:A4:C3:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1c867e80-204f-4587-b385-961b410415e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.60.125.0/24 Signature Algorithm: sha256WithRSAEncryption a1:56:bc:cd:be:7d:e1:d6:da:dd:87:5f:19:f8:f1:5c:4f:46: eb:25:b1:47:21:a1:9b:0f:f8:fa:2a:48:29:26:d2:a6:79:ad: 82:1c:8e:5c:b1:11:ac:a9:99:e0:a2:d7:a4:8e:2f:99:2c:d4: 97:30:dd:e1:29:d6:2c:ac:d5:3b:02:39:46:2d:f1:b9:fc:a4: 05:8d:44:09:da:3b:39:8c:82:ff:42:e5:3e:71:a1:c8:66:46: f7:0f:17:d2:bf:e7:7a:de:bc:d6:eb:57:5b:82:45:f1:00:91: 69:2d:bf:d4:ce:64:ac:fb:94:79:37:60:f3:dd:eb:aa:aa:e2: eb:a2:0d:1e:3e:89:d3:97:bc:4c:4c:d0:af:5b:f6:3a:56:e3: c0:e5:50:4b:68:ab:8a:6b:77:e1:a9:0e:78:d3:1e:c6:30:78: 05:de:d0:b3:1f:7f:7c:d9:77:30:30:8d:5d:a8:4c:7e:f5:db: 6d:af:8c:39:4d:30:16:a3:a6:14:77:11:6c:68:4f:34:01:4b: d6:99:01:cc:03:2c:e7:e2:45:16:73:28:35:ae:9e:8f:02:ef: 05:6e:6b:e7:75:a9:f7:23:a6:5b:39:f1:b4:5d:ea:1a:6c:09: 59:d7:36:bf:f1:e5:ee:79:77:53:56:2c:ab:41:f1:11:27:f1: f3:d7:f1:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUN9O/mP9O5wqvJQ5l5zqAUKp2gncwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMDA0MDIwWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZDBmYjFkOTc1ZjM4ZjVhMWI3M2ZjY2U1MmQ1ZjFhNGRk NWNhN2MwN2JkOGM4OWU2NGUzZjNjZDQ2Yjc4NjdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzgsRFynwyMEeVe+xDCU4tTJ94zBg2adq0ZRlOTD9iHgt+ 3Q5c7OlpLsHPD5osYlyGyl06jAcPLIhCVovg1PLZ2AF/qqpTZzGj64Xq8Mr2UmJW Zf3lQAT4sJOcSo2/hzoGjV2/WvkNL/MrSkjj0xRyLNHyLY3MHok95xJzggLbBQPd 9Rz0ISU5C78FIVDR6yO7pUdRVo3zOo8wyV1/oEN+qqSpOcYGVBWYC89gk5+yrVr1 xIQXmXCcu8gafKDwaGIiazAPODrigpENnk0yo9CChf3+2gX70sMs0Evc7AgA4/QZ /gFWZsxJ4BRzhGmH5sVs9k8zmcmies+Ju43tqhLDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7eFt0f8y60i2oWx2jwavos+kwzowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFjODY3ZTgwLTIwNGYtNDU4Ny1iMzg1LTk2MWI0MTA0MTVlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASPH0wDQYJKoZIhvcNAQELBQADggEBAKFWvM2+feHW2t2HXxn48VxPRusl sUchoZsP+PoqSCkm0qZ5rYIcjlyxEaypmeCi16SOL5ks1Jcw3eEp1iys1TsCOUYt 8bn8pAWNRAnaOzmMgv9C5T5xochmRvcPF9K/53revNbrV1uCRfEAkWktv9TOZKz7 lHk3YPPd66qq4uuiDR4+idOXvExM0K9b9jpW48DlUEtoq4prd+GpDnjTHsYweAXe 0LMff3zZdzAwjV2oTH71222vjDlNMBajphR3EWxoTzQBS9aZAcwDLOfiRRZzKDWu no8C7wVua+d1qfcjpls58bRd6hpsCVnXNr/x5e55d1NWLKtB8REn8fPX8dc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:37:23 2025 by rpki-client