$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa File: 1fda11a5-3827-4922-97d4-a02926961ddf.roa (raw, json) Hash identifier: XbMqUiYW16NsXNg3A/Rh0roEWb3BnMaxKoZJS6crFMw= Subject key identifier: 75:16:1B:66:3F:F8:85:A4:C8:9D:D7:A8:53:90:63:E2:60:EE:F4:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26FC97BD41F7546E74687C96A0C0591A4963D68E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa Signing time: Fri 25 Jul 2025 15:10:08 +0000 ROA not before: Fri 25 Jul 2025 15:10:08 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.214.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fc:97:bd:41:f7:54:6e:74:68:7c:96:a0:c0:59:1a:49:63:d6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 15:10:08 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=38a5cc273dc0c5e88e8579038ee193559602985f7e96a2026be6e4f363a6d70b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1e:57:0c:39:ec:b5:af:59:3e:07:1e:2e:50: 5f:d2:74:54:d9:6c:4f:ea:7f:07:68:ad:48:5e:2e: d2:30:66:c3:ae:b4:6c:f9:96:b2:cf:d1:bf:f5:6c: 06:a4:d5:85:aa:b5:44:66:81:25:ef:9d:e2:79:9a: 8b:3e:87:15:0b:99:a0:1f:7f:e0:18:bd:69:3e:84: cd:2c:3c:8c:29:5a:20:98:e1:2c:df:88:7f:c8:41: 09:75:53:8d:ab:2e:e2:55:0e:e8:46:e4:cd:12:19: f0:ef:72:89:92:5d:8e:6c:2b:7a:01:60:5e:cd:2e: 45:5f:c1:3d:30:0d:ef:51:64:f3:50:27:0e:00:1f: b1:0d:da:02:ad:97:a8:2e:f7:f8:67:d5:7d:e4:dd: ae:cd:7b:be:91:33:02:e9:9c:d5:5d:c3:e7:f9:11: aa:58:90:c9:cf:7b:fe:53:d4:d2:66:e2:c8:38:0e: 5c:e1:c8:73:2b:62:6c:57:cd:5e:36:a3:b6:82:0d: ae:ba:d2:2f:f8:1b:67:34:67:30:cb:30:67:59:3d: f1:72:9a:60:07:e8:7c:ad:92:e4:fc:ec:4f:44:ff: 46:28:16:c2:fc:1a:f9:a1:71:d9:e7:10:e7:b3:9c: 1c:71:2b:e5:01:5a:30:32:a3:be:ca:d0:e3:db:52: 71:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:16:1B:66:3F:F8:85:A4:C8:9D:D7:A8:53:90:63:E2:60:EE:F4:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fda11a5-3827-4922-97d4-a02926961ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.214.118.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:0c:94:30:95:a0:66:99:7e:0b:40:5d:07:06:f6:1e:b6:bc: 6f:6b:2d:72:57:e3:d0:79:5d:59:7a:bf:2f:f7:da:be:25:6d: 09:26:e2:20:19:73:9e:c8:42:06:ec:fb:d4:05:03:c2:0f:65: ac:b1:11:9e:c4:32:fd:ac:d7:20:ca:dc:f9:2c:9b:1d:24:7d: 48:b0:ce:c8:2b:fa:91:e4:22:46:07:79:b9:08:a4:df:7b:c2: f3:bd:c4:60:94:26:79:b5:e2:b3:3f:56:c7:c0:3f:62:ef:1e: 5d:97:00:37:c4:eb:1d:3f:77:d7:fb:cf:ed:59:f2:7d:bc:e0: 36:1a:17:8f:09:c2:05:f0:e8:83:f6:cf:e4:37:6f:8d:f5:f6: 9e:62:d1:16:f3:01:90:ea:b9:37:89:64:9f:54:36:fb:ff:f8: 43:41:b5:fe:20:6c:c4:14:13:71:a5:9d:56:f5:13:f1:47:f4: db:87:a7:5a:ae:ea:25:37:e9:8f:f2:22:a4:ab:06:0e:2b:b3: 67:48:e1:de:29:da:a6:4c:5f:54:b4:ef:38:28:ea:1f:d8:84: f0:29:88:75:0d:33:18:5b:43:b0:95:00:06:79:82:ee:d4:d2: 5b:d0:46:9d:a2:74:bd:96:68:d6:50:2a:62:02:99:d3:27:1c: 53:36:3d:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJvyXvUH3VG50aHyWoMBZGklj1o4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTUxMDA4WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzOGE1Y2MyNzNkYzBjNWU4OGU4NTc5MDM4ZWUxOTM1NTk2 MDI5ODVmN2U5NmEyMDI2YmU2ZTRmMzYzYTZkNzBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7HlcMOey1r1k+Bx4uUF/SdFTZbE/qfwdorUheLtIwZsOu tGz5lrLP0b/1bAak1YWqtURmgSXvneJ5mos+hxULmaAff+AYvWk+hM0sPIwpWiCY 4SzfiH/IQQl1U42rLuJVDuhG5M0SGfDvcomSXY5sK3oBYF7NLkVfwT0wDe9RZPNQ Jw4AH7EN2gKtl6gu9/hn1X3k3a7Ne76RMwLpnNVdw+f5EapYkMnPe/5T1NJm4sg4 DlzhyHMrYmxXzV42o7aCDa660i/4G2c0ZzDLMGdZPfFymmAH6HytkuT87E9E/0Yo FsL8GvmhcdnnEOeznBxxK+UBWjAyo77K0OPbUnEDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdRYbZj/4haTIndeoU5Bj4mDu9OAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmZGExMWE1LTM4MjctNDkyMi05N2Q0LWEwMjkyNjk2MWRkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN1nYwDQYJKoZIhvcNAQELBQADggEBAFsMlDCVoGaZfgtAXQcG9h62vG9r LXJX49B5XVl6vy/32r4lbQkm4iAZc57IQgbs+9QFA8IPZayxEZ7EMv2s1yDK3Pks mx0kfUiwzsgr+pHkIkYHebkIpN97wvO9xGCUJnm14rM/VsfAP2LvHl2XADfE6x0/ d9f7z+1Z8n284DYaF48JwgXw6IP2z+Q3b4319p5i0RbzAZDquTeJZJ9UNvv/+ENB tf4gbMQUE3GlnVb1E/FH9NuHp1qu6iU36Y/yIqSrBg4rs2dI4d4p2qZMX1S07zgo 6h/YhPApiHUNMxhbQ7CVAAZ5gu7U0lvQRp2idL2WaNZQKmICmdMnHFM2PZQ= -----END CERTIFICATE-----Generated at Mon Aug 4 22:12:05 2025 by rpki-client