$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cfc9d70-0a52-4214-8b55-5ed284df57ee.roa File: 3cfc9d70-0a52-4214-8b55-5ed284df57ee.roa (raw, json) Hash identifier: ppYKM7Tbd/LcwYNRRe6T+Lnfc425IUM2FKSRuSEm9cI= Subject key identifier: CD:61:51:BE:05:6D:5E:2B:BE:05:0A:92:EF:F0:F9:80:43:E0:FC:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3663E3491E9F72FF71C0151B784EA5A994DEA2E6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cfc9d70-0a52-4214-8b55-5ed284df57ee.roa Signing time: Fri 25 Jul 2025 16:21:57 +0000 ROA not before: Fri 25 Jul 2025 16:21:57 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:63:e3:49:1e:9f:72:ff:71:c0:15:1b:78:4e:a5:a9:94:de:a2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 16:21:57 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=6f7f0443a48ba438883f3454bc58aa0d54f3de8f5be03b8e8b01f865162638a7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:94:7f:e6:99:26:d7:85:33:01:d5:86:44:94: e0:1d:23:4f:b8:e8:3e:a4:0d:d5:32:68:f4:c5:1d: 2e:68:7b:0a:0c:ce:86:12:98:c1:5b:27:33:bd:2b: 3b:e0:dd:d2:5a:bf:da:a4:8b:b6:28:24:ff:d1:d8: da:97:dd:26:e2:4f:e3:8b:e7:68:c0:3b:03:a1:ea: f1:08:4e:4a:61:02:9f:ac:6b:4d:0c:11:3d:16:c3: 89:02:f6:4b:70:f3:34:f5:1f:f4:98:fe:ae:8f:8f: 7c:aa:66:9f:e2:61:5d:bd:94:ad:d3:d5:f0:9b:f2: 17:c9:da:7c:20:35:e8:37:72:aa:5f:77:89:08:63: aa:21:a9:3d:e7:98:fd:62:1f:25:d9:f0:28:2a:a4: bb:b8:4c:c1:13:13:d9:5d:d3:0a:42:4c:02:eb:2c: 12:15:ab:22:46:74:fc:8c:d4:75:77:2f:0c:95:47: 94:b5:a6:11:4f:af:2f:25:20:0c:c2:ee:fc:5d:d8: 57:f6:f6:09:85:0f:ce:92:cb:dd:59:55:5e:5f:4c: ec:51:bb:90:76:47:5f:db:e0:72:89:46:37:39:81: e7:10:5c:b9:74:fd:01:91:b7:4a:10:a3:54:62:0d: 02:d6:71:aa:09:61:de:c9:d1:44:97:6b:e3:b1:65: d9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:61:51:BE:05:6D:5E:2B:BE:05:0A:92:EF:F0:F9:80:43:E0:FC:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cfc9d70-0a52-4214-8b55-5ed284df57ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.0.0/19 Signature Algorithm: sha256WithRSAEncryption 41:20:9e:1d:5a:d6:44:f1:fd:94:ac:da:5f:8c:71:c0:45:97: 35:3d:e6:9f:16:57:8b:d7:c6:f5:d9:b6:12:fc:28:25:0e:9c: 30:57:16:9f:e3:6b:85:b1:a3:79:60:73:c5:bd:78:38:6a:a9: 87:a7:78:63:08:20:e7:ce:9c:d5:a9:0e:e1:0e:68:69:f4:ed: c9:d8:6f:0a:6b:36:35:6f:fa:39:38:40:33:de:82:be:a6:f2: 71:32:66:4f:5c:5e:be:25:12:a5:9a:a3:0b:24:b4:3c:e1:e6: 67:df:c6:0d:3b:d9:f3:5a:f6:c9:71:93:72:54:26:42:f2:16: 2e:f3:0c:61:f1:ff:9d:36:27:8a:62:83:c8:bb:cc:28:94:8d: c0:b8:c0:6b:e8:51:a6:6d:82:e8:c2:92:ea:ba:95:43:50:7d: c3:e9:d1:76:4a:f3:7e:cd:3c:90:ba:ed:db:1f:b7:09:74:e9: 07:d2:91:e4:99:ac:64:95:50:5c:db:6a:e8:0d:5e:44:98:a7: b1:ac:e9:15:cc:85:ae:fa:2f:1b:18:e5:87:bf:29:01:c4:e2: f7:04:e6:98:f0:07:26:1c:5e:15:9c:86:4a:3f:7c:02:a3:f6: 60:4b:ae:62:3d:27:cd:c8:4b:7d:dc:c6:fd:1d:5d:98:60:7b: 8c:8d:75:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNmPjSR6fcv9xwBUbeE6lqZTeouYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTYyMTU3WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjdmMDQ0M2E0OGJhNDM4ODgzZjM0NTRiYzU4YWEwZDU0 ZjNkZThmNWJlMDNiOGU4YjAxZjg2NTE2MjYzOGE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6lH/mmSbXhTMB1YZElOAdI0+46D6kDdUyaPTFHS5oewoM zoYSmMFbJzO9Kzvg3dJav9qki7YoJP/R2NqX3SbiT+OL52jAOwOh6vEITkphAp+s a00MET0Ww4kC9ktw8zT1H/SY/q6Pj3yqZp/iYV29lK3T1fCb8hfJ2nwgNeg3cqpf d4kIY6ohqT3nmP1iHyXZ8CgqpLu4TMETE9ld0wpCTALrLBIVqyJGdPyM1HV3LwyV R5S1phFPry8lIAzC7vxd2Ff29gmFD86Sy91ZVV5fTOxRu5B2R1/b4HKJRjc5gecQ XLl0/QGRt0oQo1RiDQLWcaoJYd7J0USXa+OxZdm3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzWFRvgVtXiu+BQqS7/D5gEPg/KMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjZmM5ZDcwLTBhNTItNDIxNC04YjU1LTVlZDI4NGRmNTdlZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU21gAwDQYJKoZIhvcNAQELBQADggEBAEEgnh1a1kTx/ZSs2l+MccBFlzU9 5p8WV4vXxvXZthL8KCUOnDBXFp/ja4Wxo3lgc8W9eDhqqYeneGMIIOfOnNWpDuEO aGn07cnYbwprNjVv+jk4QDPegr6m8nEyZk9cXr4lEqWaowsktDzh5mffxg072fNa 9slxk3JUJkLyFi7zDGHx/502J4pig8i7zCiUjcC4wGvoUaZtgujCkuq6lUNQfcPp 0XZK837NPJC67dsftwl06QfSkeSZrGSVUFzbaugNXkSYp7Gs6RXMha76LxsY5Ye/ KQHE4vcE5pjwByYcXhWchko/fAKj9mBLrmI9J83IS33cxv0dXZhge4yNdWs= -----END CERTIFICATE-----Generated at Tue Aug 5 08:21:09 2025 by rpki-client