$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa File: 36f11e82-bc71-442c-ab59-243123ca3029.roa (raw, json) Hash identifier: 46p6mJaxLeL5OuZvQZkDLiZl3NOTvq2tZDyEMOqpz0Y= Subject key identifier: 83:C5:A5:6F:45:B4:E9:DF:7F:EB:2D:EC:C4:64:1A:B0:2A:C7:DF:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 794FA09D9FD2739A2D1BC6F2990A647974A1065D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa Signing time: Tue 20 May 2025 17:00:20 +0000 ROA not before: Tue 20 May 2025 17:00:20 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 47.128.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:4f:a0:9d:9f:d2:73:9a:2d:1b:c6:f2:99:0a:64:79:74:a1:06:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 17:00:20 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=7a1879a4e524a2365592b2cc152880cc9bd716fa3126b7847cb02c19356ae50c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:03:7f:c7:46:49:e0:b2:fc:a9:c0:74:21:e7: cb:30:96:2c:8b:b1:21:76:18:ee:d4:03:0e:56:32: 6f:e5:a9:c3:3b:e3:c7:90:20:43:72:d3:8c:55:ab: f4:2d:ca:46:81:5d:b2:9c:6e:35:3e:da:9e:43:ea: 96:c1:d5:f3:0c:2e:91:78:0a:e4:14:7e:93:e6:e3: ef:3b:81:38:c0:03:97:72:ae:8f:96:eb:60:e1:d5: 52:b3:b6:db:95:c1:e8:62:7c:b4:de:1a:fe:7d:71: 45:04:c1:ed:40:e2:27:54:2e:03:c9:51:99:12:cf: f1:3a:46:09:e3:1d:fb:ce:c1:70:7c:23:4e:12:43: eb:ad:73:b5:72:b9:07:3a:f9:da:e4:b9:d4:72:a0: 64:82:9a:ff:08:d3:da:9b:da:84:00:bb:80:7e:60: b6:94:3f:b8:d0:cd:d8:3a:37:d9:98:17:9c:26:a8: 3c:8a:3d:7c:4a:c7:ec:f5:24:c9:f4:f0:ee:16:55: 14:9b:f1:b8:d0:84:a9:10:e3:d0:13:47:62:fb:7a: 0c:86:f6:70:c7:ab:aa:84:45:c3:85:6c:0b:00:b5: 6c:b8:4d:58:77:56:13:d9:3e:c1:0b:57:64:53:b8: 97:68:24:7c:41:f7:47:af:f3:7f:b7:78:31:4d:3f: d8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C5:A5:6F:45:B4:E9:DF:7F:EB:2D:EC:C4:64:1A:B0:2A:C7:DF:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.128.8.0/23 Signature Algorithm: sha256WithRSAEncryption a8:30:70:72:2c:a3:4a:4f:a7:1e:95:db:65:1e:e1:dd:ca:bc: a6:a5:17:ff:b8:b8:1a:28:2b:d9:8a:60:e9:55:91:e0:eb:3a: c7:24:cd:d4:01:71:8e:69:72:91:b4:47:e6:d2:0d:bc:90:e8: bc:30:af:38:68:55:79:6d:0d:fa:cb:bc:d3:d2:6f:17:93:78: 09:30:fc:26:2c:b5:6a:0d:65:88:f8:a1:de:d0:60:13:29:ba: 44:e1:3b:38:97:48:a1:9f:e4:59:00:2f:20:ec:0a:7c:f8:94: 61:30:01:f4:ff:3a:51:00:19:ca:00:e5:1d:cb:c1:fe:ff:7c: 22:38:57:7a:2d:9a:d0:8e:a0:f8:9a:6f:82:e6:ac:5f:2f:37: 65:24:cc:5e:40:ff:a4:18:e1:f6:41:5e:6a:af:a1:46:db:f8: 4e:49:16:86:52:e8:eb:7e:31:be:68:9c:3b:01:d5:fd:dd:10: 6b:ae:89:14:d7:81:75:7f:22:54:50:fa:23:f3:96:af:19:f9: c5:34:07:e9:ea:be:ba:37:27:45:30:f5:98:3a:3d:9e:80:14: cc:f8:49:76:0a:cb:f3:09:b1:bf:f3:76:53:30:1b:45:91:c8: c4:3c:cb:ce:f3:3b:8c:c8:a0:69:a6:25:d7:45:3c:32:2e:bf: 75:15:fa:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeU+gnZ/Sc5otG8bymQpkeXShBl0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTcwMDIwWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YTE4NzlhNGU1MjRhMjM2NTU5MmIyY2MxNTI4ODBjYzli ZDcxNmZhMzEyNmI3ODQ3Y2IwMmMxOTM1NmFlNTBjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/A3/HRkngsvypwHQh58swliyLsSF2GO7UAw5WMm/lqcM7 48eQIENy04xVq/QtykaBXbKcbjU+2p5D6pbB1fMMLpF4CuQUfpPm4+87gTjAA5dy ro+W62Dh1VKzttuVwehifLTeGv59cUUEwe1A4idULgPJUZkSz/E6RgnjHfvOwXB8 I04SQ+utc7VyuQc6+drkudRyoGSCmv8I09qb2oQAu4B+YLaUP7jQzdg6N9mYF5wm qDyKPXxKx+z1JMn08O4WVRSb8bjQhKkQ49ATR2L7egyG9nDHq6qERcOFbAsAtWy4 TVh3VhPZPsELV2RTuJdoJHxB90ev83+3eDFNP9i1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg8Wlb0W06d9/6y3sxGQasCrH34wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2ZjExZTgyLWJjNzEtNDQyYy1hYjU5LTI0MzEyM2NhMzAyOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEvgAgwDQYJKoZIhvcNAQELBQADggEBAKgwcHIso0pPpx6V22Ue4d3KvKal F/+4uBooK9mKYOlVkeDrOsckzdQBcY5pcpG0R+bSDbyQ6LwwrzhoVXltDfrLvNPS bxeTeAkw/CYstWoNZYj4od7QYBMpukThOziXSKGf5FkALyDsCnz4lGEwAfT/OlEA GcoA5R3Lwf7/fCI4V3otmtCOoPiab4LmrF8vN2UkzF5A/6QY4fZBXmqvoUbb+E5J FoZS6Ot+Mb5onDsB1f3dEGuuiRTXgXV/IlRQ+iPzlq8Z+cU0B+nqvro3J0Uw9Zg6 PZ6AFMz4SXYKy/MJsb/zdlMwG0WRyMQ8y87zO4zIoGmmJddFPDIuv3UV+ro= -----END CERTIFICATE-----Generated at Sat Jun 14 05:46:38 2025 by rpki-client