$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ae1012-1168-423d-b8ab-86a64ea44ddf.roa File: 31ae1012-1168-423d-b8ab-86a64ea44ddf.roa (raw, json) Hash identifier: BkTN+LusH3kaKF/9c4Habl8MD9pW7nH/9xQX0TLZhNc= Subject key identifier: D9:77:86:F2:59:E4:3E:6B:7F:74:A6:8E:75:17:DC:F6:4C:F0:D2:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0ABF8F1021A1A54A8B54A047C5C78920C19FD346 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ae1012-1168-423d-b8ab-86a64ea44ddf.roa Signing time: Mon 09 Jun 2025 18:51:29 +0000 ROA not before: Mon 09 Jun 2025 18:51:29 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.244.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:bf:8f:10:21:a1:a5:4a:8b:54:a0:47:c5:c7:89:20:c1:9f:d3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:51:29 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=9bb218eb047534c3438b88ece4a52aad0dc2561542e58aa56f7532aaae1590ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:6b:a8:1a:7e:3d:d4:8f:18:a6:c9:95:2d: 7e:a3:91:2f:df:0e:89:83:bb:30:dc:f5:0a:56:0c: d5:d5:93:a3:1b:63:57:8e:72:c7:5d:ad:ee:4a:07: 12:19:00:8c:45:8c:2b:98:9b:30:35:2c:51:4e:41: 8c:c8:db:61:a0:e3:0c:78:8c:fb:b8:44:eb:89:d4: 44:6c:20:03:a9:af:41:2e:48:1e:fb:a9:f1:1b:b3: d8:fb:d3:f6:a7:0a:f2:8e:cf:59:7e:b5:85:b9:e9: 1e:fc:67:84:4f:7e:11:27:dc:89:f1:80:1b:87:b2: 4a:3e:51:3a:4a:e5:54:73:ce:bb:2d:d1:66:3a:1f: f5:8c:4c:63:75:0f:a0:92:43:ab:d3:4c:ae:b0:ff: 14:8b:8a:85:e4:8d:f0:20:aa:b4:ee:a2:3e:37:4b: 34:9a:ce:f9:d1:11:f5:be:ef:46:b1:6f:31:53:51: 01:77:18:c5:ac:53:0b:55:22:bc:40:83:d0:90:a2: e6:a9:ef:b4:02:8a:11:c2:58:b8:fd:e5:30:ed:5b: e1:b9:c8:d8:40:1d:c8:c2:13:9d:ff:73:80:dc:ca: 9e:1a:e5:79:c9:fa:77:d4:5e:47:bd:0c:6f:5e:07: 6b:46:d6:99:f3:1f:67:74:cd:22:83:31:8e:f0:2d: e3:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:77:86:F2:59:E4:3E:6B:7F:74:A6:8E:75:17:DC:F6:4C:F0:D2:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/31ae1012-1168-423d-b8ab-86a64ea44ddf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.244.112.0/20 Signature Algorithm: sha256WithRSAEncryption 3a:70:64:83:7b:b9:53:a2:d0:e5:0d:00:b9:b0:53:3e:d3:da: c8:48:56:37:96:2e:d3:f1:cf:0a:80:b1:37:39:ae:a1:08:82: 22:5c:ab:c5:b6:05:2c:e4:04:57:02:7f:e9:a1:d6:ff:3a:50: 4b:45:66:74:1f:8f:17:b5:3f:a0:95:db:56:eb:5b:f3:30:61: 89:fa:8e:84:cb:6d:68:e0:e7:51:a7:e9:19:4a:04:85:68:56: 9a:e3:84:e8:de:d5:f0:a2:02:8d:86:5d:63:4a:81:b5:eb:4e: 4c:c0:27:d2:ce:49:cc:40:b3:fc:e8:5f:08:31:3f:ee:83:d9: b1:33:3c:9f:09:70:f0:27:86:94:bf:e2:41:73:15:de:58:fa: dd:b8:87:77:b9:2d:a9:4e:08:8a:3a:8a:06:a0:af:fc:b5:47: d1:47:6a:d8:07:2d:7a:5d:8e:69:fc:ef:94:6b:fb:10:d2:cc: 8c:00:10:e8:f8:37:4c:0d:8e:43:b2:8e:54:a7:f1:6f:bc:67: 46:ad:87:46:fe:62:76:c7:05:cd:6d:e4:16:8d:31:88:e3:f6: 3f:6d:3d:89:5b:9f:c1:80:f1:4a:04:4d:cf:ed:a9:01:56:c7: c6:15:42:8c:e5:be:e3:ee:15:f4:a7:d7:9d:bd:3f:2e:be:18: b6:b6:5d:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCr+PECGhpUqLVKBHxceJIMGf00YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTg1MTI5WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YmIyMThlYjA0NzUzNGMzNDM4Yjg4ZWNlNGE1MmFhZDBk YzI1NjE1NDJlNThhYTU2Zjc1MzJhYWFlMTU5MGVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1Q2uoGn491I8YpsmVLX6jkS/fDomDuzDc9QpWDNXVk6Mb Y1eOcsddre5KBxIZAIxFjCuYmzA1LFFOQYzI22Gg4wx4jPu4ROuJ1ERsIAOpr0Eu SB77qfEbs9j70/anCvKOz1l+tYW56R78Z4RPfhEn3InxgBuHsko+UTpK5VRzzrst 0WY6H/WMTGN1D6CSQ6vTTK6w/xSLioXkjfAgqrTuoj43SzSazvnREfW+70axbzFT UQF3GMWsUwtVIrxAg9CQouap77QCihHCWLj95TDtW+G5yNhAHcjCE53/c4Dcyp4a 5XnJ+nfUXke9DG9eB2tG1pnzH2d0zSKDMY7wLeOLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2XeG8lnkPmt/dKaOdRfc9kzw0lYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxYWUxMDEyLTExNjgtNDIzZC1iOGFiLTg2YTY0ZWE0NGRkZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ29HAwDQYJKoZIhvcNAQELBQADggEBADpwZIN7uVOi0OUNALmwUz7T2shI VjeWLtPxzwqAsTc5rqEIgiJcq8W2BSzkBFcCf+mh1v86UEtFZnQfjxe1P6CV21br W/MwYYn6joTLbWjg51Gn6RlKBIVoVprjhOje1fCiAo2GXWNKgbXrTkzAJ9LOScxA s/zoXwgxP+6D2bEzPJ8JcPAnhpS/4kFzFd5Y+t24h3e5LalOCIo6igagr/y1R9FH atgHLXpdjmn875Rr+xDSzIwAEOj4N0wNjkOyjlSn8W+8Z0ath0b+YnbHBc1t5BaN MYjj9j9tPYlbn8GA8UoETc/tqQFWx8YVQozlvuPuFfSn1529Py6+GLa2Xbw= -----END CERTIFICATE-----Generated at Sat Jun 14 06:06:28 2025 by rpki-client