$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa File: 307addd7-6720-48e7-a2aa-cc1b7205153e.roa (raw, json) Hash identifier: IyqhZCv2ORdM+ytV0GFTJD/LbuEDksShDYKfxi91Tuo= Subject key identifier: AC:D0:5F:2F:EF:75:F1:9E:B3:6B:17:7F:46:6C:75:5F:3B:B0:D1:3E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73C888F358BC8EA0C893032A8B0F8C651B18C225 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa Signing time: Wed 21 May 2025 00:21:28 +0000 ROA not before: Wed 21 May 2025 00:21:28 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.131.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c8:88:f3:58:bc:8e:a0:c8:93:03:2a:8b:0f:8c:65:1b:18:c2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:21:28 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=a2d866062a4813ad5e1939f7468e7f4015c253c5baa1ecf353229473568fefb6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8c:6c:b7:92:31:4e:42:81:5b:0c:b1:b6:97: 8b:1b:59:c9:5c:ea:78:35:b5:73:8f:c3:e7:d1:e5: b9:27:dc:95:88:2c:84:85:be:8c:3f:40:b7:78:fc: c1:79:01:f1:73:f9:80:2f:9a:62:73:ea:6c:ba:68: 97:1d:61:3f:44:bd:71:aa:17:06:c4:90:d2:4a:14: 35:20:4c:2f:66:36:1c:a4:1c:ef:f7:d0:1e:13:63: ff:89:0e:fe:87:3e:4a:78:2c:91:0c:7c:ee:00:14: 67:5f:84:74:22:26:69:81:17:ba:2f:44:1d:29:10: 14:9a:84:c7:66:e7:30:8e:9b:27:ae:85:1c:e3:c2: 21:d8:f8:b7:f0:f9:10:7a:6b:fc:dd:16:2f:d0:a6: 87:7f:09:e9:0b:60:11:63:85:7b:74:7a:5d:2a:52: e0:ff:de:fd:0b:1f:d1:85:d9:45:c4:7f:f3:9d:6e: 7d:07:60:5b:93:b7:e7:ef:fc:ac:08:cf:9a:43:08: 09:29:e3:20:ab:94:26:9a:54:03:b8:8a:f1:a9:48: 3d:24:7f:53:ab:0b:87:7b:54:8b:22:25:02:b8:cc: 49:d3:f5:81:d1:eb:43:d1:84:4a:7a:34:0c:be:d2: aa:16:42:53:46:b2:fb:b3:53:46:94:9a:9f:06:7e: c3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D0:5F:2F:EF:75:F1:9E:B3:6B:17:7F:46:6C:75:5F:3B:B0:D1:3E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/307addd7-6720-48e7-a2aa-cc1b7205153e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.131.0.0/16 Signature Algorithm: sha256WithRSAEncryption 88:35:9b:cb:70:bc:4a:e6:ba:2f:c0:9d:ab:8d:fe:d2:f4:3f: 99:ec:db:6c:43:5d:aa:c1:a3:9e:ec:81:b2:eb:c0:8f:76:e8: c1:59:1d:1a:1a:0e:60:24:c8:ca:aa:ba:da:53:72:5a:e9:f7: 5b:3e:96:c8:42:d2:b2:df:3a:17:04:a1:e8:f0:76:69:d3:70: 2c:32:99:bc:50:a3:06:23:93:95:93:7b:35:73:5a:c9:ea:c5: 91:b8:db:22:92:27:20:30:cb:0f:24:48:37:f5:d0:41:7d:6c: 60:4a:68:d1:8a:ac:ce:0e:77:98:5b:ae:da:14:b6:24:ac:b4: e3:f7:ad:a5:ca:22:41:c7:fb:de:c5:a8:46:87:5d:30:cc:bc: c4:03:84:77:91:03:c4:33:50:4b:e5:8e:ca:08:e6:7e:23:b3: 96:9e:94:c8:59:4b:01:35:69:fc:dc:41:ce:53:c4:a0:b5:0a: d4:31:09:43:ba:7d:6e:f2:dd:ca:70:7a:fe:2c:05:08:7e:27: 18:a7:2c:6e:d2:e4:cd:28:ad:3c:c3:c4:97:e4:7b:f6:93:88: c2:46:4f:d2:86:74:15:09:0e:7e:3f:50:f7:a6:fd:73:d7:1f: a6:d6:5a:d7:68:05:e2:7a:ac:cc:ab:ae:cd:59:2d:c0:5c:6e: 21:13:ca:ad -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUc8iI81i8jqDIkwMqiw+MZRsYwiUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDAyMTI4WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmQ4NjYwNjJhNDgxM2FkNWUxOTM5Zjc0NjhlN2Y0MDE1 YzI1M2M1YmFhMWVjZjM1MzIyOTQ3MzU2OGZlZmI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrjGy3kjFOQoFbDLG2l4sbWclc6ng1tXOPw+fR5bkn3JWI LISFvow/QLd4/MF5AfFz+YAvmmJz6my6aJcdYT9EvXGqFwbEkNJKFDUgTC9mNhyk HO/30B4TY/+JDv6HPkp4LJEMfO4AFGdfhHQiJmmBF7ovRB0pEBSahMdm5zCOmyeu hRzjwiHY+Lfw+RB6a/zdFi/Qpod/CekLYBFjhXt0el0qUuD/3v0LH9GF2UXEf/Od bn0HYFuTt+fv/KwIz5pDCAkp4yCrlCaaVAO4ivGpSD0kf1OrC4d7VIsiJQK4zEnT 9YHR60PRhEp6NAy+0qoWQlNGsvuzU0aUmp8GfsOrAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUrNBfL+918Z6zaxd/Rmx1Xzuw0T4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMwN2FkZGQ3LTY3MjAtNDhlNy1hMmFhLWNjMWI3MjA1MTUzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASgzANBgkqhkiG9w0BAQsFAAOCAQEAiDWby3C8Sua6L8Cdq43+0vQ/mezb bENdqsGjnuyBsuvAj3bowVkdGhoOYCTIyqq62lNyWun3Wz6WyELSst86FwSh6PB2 adNwLDKZvFCjBiOTlZN7NXNayerFkbjbIpInIDDLDyRIN/XQQX1sYEpo0Yqszg53 mFuu2hS2JKy04/etpcoiQcf73sWoRoddMMy8xAOEd5EDxDNQS+WOygjmfiOzlp6U yFlLATVp/NxBzlPEoLUK1DEJQ7p9bvLdynB6/iwFCH4nGKcsbtLkzSitPMPEl+R7 9pOIwkZP0oZ0FQkOfj9Q96b9c9cfptZa12gF4nqszKuuzVktwFxuIRPKrQ== -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:06 2025 by rpki-client