$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae1cd1f-d060-408d-bc85-cbabc7bc2053.roa File: 3ae1cd1f-d060-408d-bc85-cbabc7bc2053.roa (raw, json) Hash identifier: M5i1hDztrGAP5V7Rg+lvhf9v8NBogI48Oi1kofEd+Yo= Subject key identifier: 43:1C:19:FF:AF:E0:81:5E:69:E3:8A:5A:E9:46:B8:C4:F4:BF:5B:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1B98C7A6F451B22949B161CD43932A46AC79569C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae1cd1f-d060-408d-bc85-cbabc7bc2053.roa Signing time: Mon 09 Jun 2025 18:31:42 +0000 ROA not before: Mon 09 Jun 2025 18:31:42 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.244.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:98:c7:a6:f4:51:b2:29:49:b1:61:cd:43:93:2a:46:ac:79:56:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:31:42 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=5f261d8832f12bfed3ac2ed92c6a6d86ed2ac19993da39825dd4052ab8ebb703, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:10:fa:ff:0f:ef:20:53:60:09:80:43:38: 71:40:20:63:e8:24:b2:1c:40:9a:26:6c:74:c9:ac: 50:c9:e9:16:d9:35:d3:3d:5b:39:dd:1a:31:c9:82: a1:1c:27:4e:a1:5e:17:5b:6e:ac:fc:43:4b:03:70: 29:93:a8:88:68:fe:7e:4c:6d:3a:d8:a1:6c:a6:d2: e9:b4:71:5c:85:58:4a:ae:48:89:b3:d9:9b:4f:75: 3a:23:84:2d:0c:3f:80:30:e7:b7:79:60:7e:3e:80: df:e3:a2:78:d7:04:e7:6e:62:93:20:97:31:49:5e: 36:58:5e:66:e3:00:9d:10:af:a9:b5:25:2d:6f:05: 6b:f9:f7:3d:90:d6:37:4b:4d:49:73:06:3f:81:fa: 57:f2:d4:6d:2d:48:97:ca:9e:de:de:ef:12:75:1b: 2c:99:5c:db:1e:cd:d1:bb:71:d6:66:91:58:1c:d3: b9:0b:fd:01:c0:d0:41:ad:99:ac:ab:17:ea:5e:5b: 12:12:bd:35:88:d1:2f:b0:2a:c1:f5:71:1f:02:cb: 8d:c9:ea:c4:2d:c3:9e:26:db:5f:5b:cc:3c:dd:d5: 45:92:d4:b5:bc:22:f8:5a:96:24:32:33:86:1d:a2: d4:70:eb:4f:d2:3a:bc:5a:ce:99:f7:4b:20:ce:03: 66:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1C:19:FF:AF:E0:81:5E:69:E3:8A:5A:E9:46:B8:C4:F4:BF:5B:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ae1cd1f-d060-408d-bc85-cbabc7bc2053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.244.88.0/21 Signature Algorithm: sha256WithRSAEncryption a0:d6:d7:f2:89:c4:d2:f7:6b:a2:4c:e4:1c:81:65:33:c2:db: f6:10:ac:f5:de:29:78:36:50:c4:d5:ef:b4:7d:df:06:c2:53: 6e:1b:3e:28:13:5a:b6:31:7d:36:9a:01:37:3a:6c:3d:a2:94: 27:30:a1:57:f4:60:01:64:bd:62:85:d2:1f:da:d2:b2:91:cf: 57:ec:dc:ce:b7:a5:b1:1f:60:70:47:8b:ef:92:29:f1:57:a3: 46:bb:70:0f:2e:2f:65:e8:97:29:87:16:83:83:1c:9a:69:84: fb:c2:8d:cc:66:a0:14:51:64:47:42:d0:d1:ec:59:77:71:9f: 13:4b:15:6f:37:d2:61:07:e2:fa:22:4a:7f:7a:9e:ed:71:e2: b9:54:46:c6:42:47:ed:00:ca:39:c5:ed:6d:c4:10:2a:cd:58: 2a:87:10:5f:36:83:d7:f7:24:2f:96:e5:43:a4:98:97:8f:01: 8e:b8:1a:21:57:95:c6:53:52:68:33:ea:ee:f7:6c:9f:2c:cb: 22:cb:ef:eb:5a:b3:d4:86:7f:7a:a8:4e:4e:64:29:b9:8e:23: 09:eb:33:bc:78:d1:f9:04:4b:6a:12:f0:ff:38:36:13:58:85: e5:eb:7f:3c:76:d3:15:1c:e2:89:a3:76:88:9b:71:b6:66:29: 5c:09:6c:95 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG5jHpvRRsilJsWHNQ5MqRqx5VpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgzMTQyWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjI2MWQ4ODMyZjEyYmZlZDNhYzJlZDkyYzZhNmQ4NmVk MmFjMTk5OTNkYTM5ODI1ZGQ0MDUyYWI4ZWJiNzAzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTrxD6/w/vIFNgCYBDOHFAIGPoJLIcQJombHTJrFDJ6RbZ NdM9WzndGjHJgqEcJ06hXhdbbqz8Q0sDcCmTqIho/n5MbTrYoWym0um0cVyFWEqu SImz2ZtPdTojhC0MP4Aw57d5YH4+gN/jonjXBOduYpMglzFJXjZYXmbjAJ0Qr6m1 JS1vBWv59z2Q1jdLTUlzBj+B+lfy1G0tSJfKnt7e7xJ1GyyZXNsezdG7cdZmkVgc 07kL/QHA0EGtmayrF+peWxISvTWI0S+wKsH1cR8Cy43J6sQtw54m219bzDzd1UWS 1LW8IvhaliQyM4YdotRw60/SOrxazpn3SyDOA2ZrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQxwZ/6/ggV5p44pa6Ua4xPS/Wy8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhZTFjZDFmLWQwNjAtNDA4ZC1iYzg1LWNiYWJjN2JjMjA1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM29FgwDQYJKoZIhvcNAQELBQADggEBAKDW1/KJxNL3a6JM5ByBZTPC2/YQ rPXeKXg2UMTV77R93wbCU24bPigTWrYxfTaaATc6bD2ilCcwoVf0YAFkvWKF0h/a 0rKRz1fs3M63pbEfYHBHi++SKfFXo0a7cA8uL2XolymHFoODHJpphPvCjcxmoBRR ZEdC0NHsWXdxnxNLFW830mEH4voiSn96nu1x4rlURsZCR+0AyjnF7W3EECrNWCqH EF82g9f3JC+W5UOkmJePAY64GiFXlcZTUmgz6u73bJ8syyLL7+tas9SGf3qoTk5k KbmOIwnrM7x40fkES2oS8P84NhNYheXrfzx20xUc4omjdoibcbZmKVwJbJU= -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:19 2025 by rpki-client