$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22586366-872a-4037-9f6a-47cc45bc4ab9.roa File: 22586366-872a-4037-9f6a-47cc45bc4ab9.roa (raw, json) Hash identifier: mUIYJQOHzQAQUlJcE/OuF36E0gVXNupfSm/Gq616aPA= Subject key identifier: 73:F4:97:6A:D2:3C:06:CC:6B:3A:83:81:EA:7A:63:23:7A:61:B8:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B53501C9339F8F55A8F92C3ADC8EBFDB00DA042 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22586366-872a-4037-9f6a-47cc45bc4ab9.roa Signing time: Tue 03 Jun 2025 16:21:09 +0000 ROA not before: Tue 03 Jun 2025 16:21:09 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.219.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:53:50:1c:93:39:f8:f5:5a:8f:92:c3:ad:c8:eb:fd:b0:0d:a0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 16:21:09 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=cbe77943e55442243bf0e586820ed1d311bad252be6c3b25a5ad6e9f6dc6b23e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:ff:38:03:4f:f4:95:fa:db:3c:62:ba:3f: 44:e1:a3:81:37:1f:ed:db:3d:71:61:ef:68:ba:84: 08:ce:c1:30:d6:88:d4:80:dc:ba:91:80:b4:ff:9f: 32:8a:50:a7:65:59:66:f1:ab:58:e6:85:bf:92:c2: 74:60:f1:5f:f4:d2:84:af:d2:9a:5b:3a:62:be:be: 5e:ce:62:5a:3b:6d:34:c0:00:d1:d4:25:6c:d9:0f: 0e:c9:91:d2:cb:ac:00:3a:35:e1:5b:4d:eb:43:00: 34:07:aa:52:09:0e:ba:1d:7b:19:5b:6f:c6:93:5f: 2e:26:d7:0f:ef:e1:ee:a4:6b:c2:13:4a:68:80:14: 6b:90:ed:ef:71:33:84:da:bf:b0:ab:9e:b7:20:f1: 29:e6:0c:0b:62:04:7a:54:b5:f2:da:26:b9:e7:ac: 21:43:67:8e:c3:89:36:4c:7c:45:e9:15:ec:02:25: fc:ba:24:63:57:14:b6:55:5b:2c:3c:7f:9c:d3:fc: 9a:ee:a2:78:b2:04:71:95:6b:97:a1:98:d2:e6:07: 55:f9:6b:1f:a9:2a:d9:21:19:9e:ba:e2:31:2a:bd: 8b:d1:45:7b:e7:b6:8e:80:0d:75:18:5b:53:32:31: cc:e0:a4:be:9b:c2:be:8b:f5:bd:05:24:65:fb:1b: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:97:6A:D2:3C:06:CC:6B:3A:83:81:EA:7A:63:23:7A:61:B8:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22586366-872a-4037-9f6a-47cc45bc4ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.219.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9d:f9:a8:87:c9:03:a8:24:cb:51:2c:ec:00:a0:f9:79:33:9a: b3:4e:e9:48:38:a7:ff:5e:54:8d:d1:95:0c:53:93:57:a0:12: 34:17:4c:00:18:ee:7b:4a:a1:7f:d7:c9:43:e3:3f:ff:33:d9: e7:c8:b3:8e:28:82:8c:ef:a4:e1:5e:1d:54:ca:f7:e0:1f:21: 1e:2a:09:f0:c4:4b:60:64:04:62:e0:21:b6:26:43:6a:a9:a4: bc:f7:b7:60:18:2b:83:9f:a4:5f:a1:03:cc:9a:8a:cb:b7:c8: d7:d6:58:b5:2b:bd:da:88:ec:3a:85:2f:48:76:b0:19:55:68: 10:6b:73:a5:cf:02:66:fd:80:76:88:ab:bb:d3:fe:5b:06:bd: 60:ba:83:9c:10:8b:2a:8b:ad:2b:99:3e:ee:07:d5:d0:b5:7a: db:ea:b1:74:9e:ba:a5:f7:94:a6:5f:68:33:cf:3c:e0:dc:ab: 7d:4b:cd:9c:33:08:8a:bf:c2:83:d6:c0:3c:db:86:d4:5f:b7: b5:e8:fc:2c:3f:ce:d4:97:b1:fe:21:e3:22:67:09:6e:9c:ed: bb:ed:62:27:ed:04:3d:37:96:bb:c2:fe:57:6c:7e:83:1e:42: 52:d5:9a:28:46:be:7d:e4:a2:8d:92:34:4a:29:21:a3:4b:f5: 9d:b6:b4:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUO1NQHJM5+PVaj5LDrcjr/bANoEIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTYyMTA5WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYmU3Nzk0M2U1NTQ0MjI0M2JmMGU1ODY4MjBlZDFkMzEx YmFkMjUyYmU2YzNiMjVhNWFkNmU5ZjZkYzZiMjNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDA6P84A0/0lfrbPGK6P0Tho4E3H+3bPXFh72i6hAjOwTDW iNSA3LqRgLT/nzKKUKdlWWbxq1jmhb+SwnRg8V/00oSv0ppbOmK+vl7OYlo7bTTA ANHUJWzZDw7JkdLLrAA6NeFbTetDADQHqlIJDrodexlbb8aTXy4m1w/v4e6ka8IT SmiAFGuQ7e9xM4Tav7Crnrcg8SnmDAtiBHpUtfLaJrnnrCFDZ47DiTZMfEXpFewC Jfy6JGNXFLZVWyw8f5zT/JruoniyBHGVa5ehmNLmB1X5ax+pKtkhGZ664jEqvYvR RXvnto6ADXUYW1MyMczgpL6bwr6L9b0FJGX7G1aFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc/SXatI8BsxrOoOB6npjI3phuL4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyNTg2MzY2LTg3MmEtNDAzNy05ZjZhLTQ3Y2M0NWJjNGFiOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY224AwDQYJKoZIhvcNAQELBQADggEBAJ35qIfJA6gky1Es7ACg+XkzmrNO 6Ug4p/9eVI3RlQxTk1egEjQXTAAY7ntKoX/XyUPjP/8z2efIs44ogozvpOFeHVTK 9+AfIR4qCfDES2BkBGLgIbYmQ2qppLz3t2AYK4OfpF+hA8yaisu3yNfWWLUrvdqI 7DqFL0h2sBlVaBBrc6XPAmb9gHaIq7vT/lsGvWC6g5wQiyqLrSuZPu4H1dC1etvq sXSeuqX3lKZfaDPPPODcq31LzZwzCIq/woPWwDzbhtRft7Xo/Cw/ztSXsf4h4yJn CW6c7bvtYiftBD03lrvC/ldsfoMeQlLVmihGvn3koo2SNEopIaNL9Z22tDA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:06:30 2025 by rpki-client