$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bf6cf9b-03ef-446f-8fce-3872d8689681.roa File: 2bf6cf9b-03ef-446f-8fce-3872d8689681.roa (raw, json) Hash identifier: yCCb43Aa8BC80KCL4VrAeP/qsvCsXwGOa08zBkOsPxw= Subject key identifier: 6D:F9:41:57:8C:5F:43:58:CA:FC:4E:6F:CA:FD:E5:17:08:A1:66:86 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D03B5740FD914158AAF2DD4AC9D7E29F196F4FC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bf6cf9b-03ef-446f-8fce-3872d8689681.roa Signing time: Tue 03 Jun 2025 15:50:18 +0000 ROA not before: Tue 03 Jun 2025 15:50:18 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.167.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:03:b5:74:0f:d9:14:15:8a:af:2d:d4:ac:9d:7e:29:f1:96:f4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:50:18 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=96efc3c7e924908c3dedd9e5d6f51bb4f89ea9c95bf220482fc00c02dd4b84e3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2a:88:7b:93:fa:06:8b:2c:8c:c4:f2:27:d2: 65:a9:29:6a:16:89:2e:76:a2:23:c5:6a:32:5e:09: 96:3b:e8:36:57:7b:29:a8:57:a3:2a:1b:11:27:0f: 51:92:41:65:e8:c8:ce:ea:91:ce:f4:4a:5d:0c:c1: 6a:74:73:95:bb:cd:02:b4:e9:71:18:a5:08:06:fb: dc:08:30:37:24:53:96:70:f8:94:bb:1b:56:84:86: 3d:97:96:b2:14:af:a7:cf:73:80:53:3f:83:fc:f7: 98:4a:5e:2d:2c:48:e7:46:d6:f3:9c:ca:09:6d:25: 36:be:22:32:d0:38:04:73:dd:2f:b1:d9:21:ad:f0: 51:61:74:8b:61:7b:1c:7c:86:38:50:be:4a:5b:55: 7e:c9:80:25:8e:d6:f3:bd:62:1b:5a:34:c8:82:81: ae:c2:31:62:4e:98:77:ae:58:6d:cf:1d:d9:66:03: 57:fe:d1:0a:0a:13:50:00:3f:71:d1:c9:7c:cf:86: 47:8a:aa:2c:15:2c:e2:76:6c:7e:c5:ec:e9:6f:d8: ed:60:e4:15:82:6a:0f:f3:4b:14:1d:c0:d0:70:f4: 27:76:d9:06:04:15:3b:4d:7d:47:8b:54:96:23:33: 7e:8f:0a:86:d6:c2:e9:e4:ed:03:50:8d:f7:6c:87: 6a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F9:41:57:8C:5F:43:58:CA:FC:4E:6F:CA:FD:E5:17:08:A1:66:86 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2bf6cf9b-03ef-446f-8fce-3872d8689681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.167.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9c:23:ab:50:52:49:e3:34:99:a3:66:c7:d8:42:bb:fb:6a:f8: 68:17:43:77:fb:c2:28:78:d5:5e:b8:d2:3b:35:51:f2:dd:4d: c0:0d:b0:78:04:89:7d:fa:e0:94:be:91:ec:44:fa:64:8a:e6: c3:d3:c5:d4:f9:b1:fe:81:00:9e:e0:57:2b:33:75:82:a5:6f: 94:70:b2:8f:3e:4f:15:b3:a1:af:95:50:b4:2b:22:32:52:e7: 2b:05:e5:0e:f8:b0:bf:4d:d2:ab:09:df:ac:26:f2:34:e5:67: 52:58:bc:3f:b7:8b:9b:7f:79:04:8b:23:f9:cf:80:9b:88:21: 1c:ca:28:6d:ef:f0:35:41:36:15:52:a5:05:55:4d:00:93:da: a7:f2:2f:dd:c6:a4:ec:0f:93:f2:31:80:92:ff:fb:22:40:f3: bb:44:1a:37:e2:8e:40:b7:e5:d4:20:94:87:6b:69:12:68:50: 0f:a7:d5:fa:4e:5a:ff:f3:cd:0e:66:88:48:ce:d9:11:62:32: 31:f8:69:9f:b3:77:b7:2e:7f:df:42:77:60:19:58:0e:f0:a1: 1e:cf:82:0b:fa:7d:51:eb:08:68:29:62:f0:1d:62:b2:b0:1e: be:73:d4:0d:7e:f0:7d:c6:aa:78:a7:00:31:ea:70:b0:80:81: 59:ad:01:19 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHQO1dA/ZFBWKry3UrJ1+KfGW9PwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTU1MDE4WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmVmYzNjN2U5MjQ5MDhjM2RlZGQ5ZTVkNmY1MWJiNGY4 OWVhOWM5NWJmMjIwNDgyZmMwMGMwMmRkNGI4NGUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLKoh7k/oGiyyMxPIn0mWpKWoWiS52oiPFajJeCZY76DZX eymoV6MqGxEnD1GSQWXoyM7qkc70Sl0MwWp0c5W7zQK06XEYpQgG+9wIMDckU5Zw +JS7G1aEhj2XlrIUr6fPc4BTP4P895hKXi0sSOdG1vOcygltJTa+IjLQOARz3S+x 2SGt8FFhdIthexx8hjhQvkpbVX7JgCWO1vO9YhtaNMiCga7CMWJOmHeuWG3PHdlm A1f+0QoKE1AAP3HRyXzPhkeKqiwVLOJ2bH7F7Olv2O1g5BWCag/zSxQdwNBw9Cd2 2QYEFTtNfUeLVJYjM36PCobWwunk7QNQjfdsh2rdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbflBV4xfQ1jK/E5vyv3lFwihZoYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJiZjZjZjliLTAzZWYtNDQ2Zi04ZmNlLTM4NzJkODY4OTY4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2pwAwDQYJKoZIhvcNAQELBQADggEBAJwjq1BSSeM0maNmx9hCu/tq+GgX Q3f7wih41V640js1UfLdTcANsHgEiX364JS+kexE+mSK5sPTxdT5sf6BAJ7gVysz dYKlb5Rwso8+TxWzoa+VULQrIjJS5ysF5Q74sL9N0qsJ36wm8jTlZ1JYvD+3i5t/ eQSLI/nPgJuIIRzKKG3v8DVBNhVSpQVVTQCT2qfyL93GpOwPk/IxgJL/+yJA87tE GjfijkC35dQglIdraRJoUA+n1fpOWv/zzQ5miEjO2RFiMjH4aZ+zd7cuf99Cd2AZ WA7woR7Pggv6fVHrCGgpYvAdYrKwHr5z1A1+8H3GqninADHqcLCAgVmtARk= -----END CERTIFICATE-----Generated at Sat Jun 14 23:45:22 2025 by rpki-client