$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47656a28-7777-4df3-a6ed-be2485cc8be3.roa File: 47656a28-7777-4df3-a6ed-be2485cc8be3.roa (raw, json) Hash identifier: qjxqm413OuaNQI2+3w+iWxCEOdd5JdBC3A27ZuOIn48= Subject key identifier: 66:1A:D3:D0:3A:57:64:07:B5:BF:CA:D0:FE:5A:87:3B:AA:CD:AC:69 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5BBDBCF261CBDF0072A65493F3DF9EDF47F48197 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47656a28-7777-4df3-a6ed-be2485cc8be3.roa Signing time: Tue 03 Jun 2025 00:50:56 +0000 ROA not before: Tue 03 Jun 2025 00:50:56 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.235.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:bd:bc:f2:61:cb:df:00:72:a6:54:93:f3:df:9e:df:47:f4:81:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 00:50:56 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=042f27649dc4f75e4e86c2ecfc7d1a0f1697aaccd07eaf6a8ab79d1236a0da75, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:58:5e:2a:af:f4:fd:5b:18:db:ce:d7:e5:59: ae:7c:b8:74:47:96:a7:bc:02:5c:24:6b:0b:61:30: d7:c9:a2:de:a7:ef:ef:e9:fc:55:bc:35:76:31:b7: b6:0d:be:7f:57:8f:b2:dc:10:4d:0b:9a:8a:66:58: 7b:2d:27:64:6c:a4:82:ac:51:75:a0:ed:58:6c:e9: 7b:a7:5d:5d:f8:1a:24:43:1b:6b:c9:9d:28:d7:60: 56:3f:ed:c9:be:b4:d7:ec:71:56:ce:05:4b:27:6f: 17:ec:f0:7a:18:e8:5c:66:1d:ef:bd:5e:00:a7:27: 00:e4:4f:ca:98:3b:15:ab:c1:69:20:88:62:0d:c7: 9b:6d:e6:0a:ff:49:49:9d:ac:c7:19:63:97:93:ee: 4c:02:53:62:24:92:f0:8f:3c:88:e4:fb:c9:ed:a1: 24:fa:26:17:a0:2a:84:6b:12:2e:6e:ac:4e:90:3d: ed:71:5a:f8:5f:27:b3:95:3a:6c:a8:4b:5f:9a:4f: 7a:56:31:0e:62:38:e1:1c:39:cf:3c:1e:5d:a9:87: a1:fd:b5:91:7c:a3:54:18:4d:af:d3:6e:97:a6:5e: 25:7c:d6:c0:33:58:98:2b:84:4c:c3:8a:a8:4e:71: a2:d8:66:94:23:e5:37:68:77:e5:d8:21:f5:83:28: f8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1A:D3:D0:3A:57:64:07:B5:BF:CA:D0:FE:5A:87:3B:AA:CD:AC:69 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/47656a28-7777-4df3-a6ed-be2485cc8be3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.235.203.0/24 Signature Algorithm: sha256WithRSAEncryption 84:1b:2f:b9:bd:7c:c5:da:44:fa:ea:ee:2b:6f:13:e8:43:a8: ff:8d:2f:ba:cc:3e:47:86:6e:da:cf:ba:f0:73:79:b9:a2:1c: 21:29:a1:93:14:30:b5:98:01:73:60:a8:64:13:41:d9:6e:80: eb:a8:4f:a4:1b:af:c2:32:d5:15:2e:98:fa:8c:4f:5e:04:ca: a8:e2:ba:eb:d0:88:89:9b:2b:01:96:d0:84:aa:e0:02:08:24: 40:2f:05:2c:01:a6:5e:40:81:d7:b0:c2:22:28:ef:9b:4c:76: 71:45:64:c2:a0:f4:d1:38:f1:73:05:57:71:bd:61:cc:41:cd: ab:1b:12:c2:ea:ee:25:24:bb:4f:cd:b8:e3:a5:84:7e:7b:fb: f1:83:ed:5a:56:97:37:a0:20:02:e7:d1:3f:94:f2:9a:69:7d: db:4c:7e:06:85:df:93:06:b2:2a:bc:76:af:13:29:76:9f:e1: 28:cc:3e:e7:d0:d6:87:c0:25:15:a6:00:83:31:c8:39:ea:3d: 2f:dc:55:e6:1f:34:1b:da:11:ea:03:a3:94:4e:60:f4:da:50: 8e:8b:2b:be:a2:07:9a:24:72:b1:ac:e6:a9:16:7d:8c:cb:c7: 87:52:95:c0:80:18:ac:01:9d:f1:12:34:90:c9:54:2e:07:12: a0:ec:01:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUW7288mHL3wByplST89+e30f0gZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMDA1MDU2WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDJmMjc2NDlkYzRmNzVlNGU4NmMyZWNmYzdkMWEwZjE2 OTdhYWNjZDA3ZWFmNmE4YWI3OWQxMjM2YTBkYTc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDfWF4qr/T9WxjbztflWa58uHRHlqe8AlwkawthMNfJot6n 7+/p/FW8NXYxt7YNvn9Xj7LcEE0LmopmWHstJ2RspIKsUXWg7Vhs6XunXV34GiRD G2vJnSjXYFY/7cm+tNfscVbOBUsnbxfs8HoY6FxmHe+9XgCnJwDkT8qYOxWrwWkg iGINx5tt5gr/SUmdrMcZY5eT7kwCU2IkkvCPPIjk+8ntoST6JhegKoRrEi5urE6Q Pe1xWvhfJ7OVOmyoS1+aT3pWMQ5iOOEcOc88Hl2ph6H9tZF8o1QYTa/TbpemXiV8 1sAzWJgrhEzDiqhOcaLYZpQj5Tdod+XYIfWDKPgtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZhrT0DpXZAe1v8rQ/lqHO6rNrGkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3NjU2YTI4LTc3NzctNGRmMy1hNmVkLWJlMjQ4NWNjOGJlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAD68swDQYJKoZIhvcNAQELBQADggEBAIQbL7m9fMXaRPrq7itvE+hDqP+N L7rMPkeGbtrPuvBzebmiHCEpoZMUMLWYAXNgqGQTQdlugOuoT6Qbr8Iy1RUumPqM T14EyqjiuuvQiImbKwGW0ISq4AIIJEAvBSwBpl5AgdewwiIo75tMdnFFZMKg9NE4 8XMFV3G9YcxBzasbEsLq7iUku0/NuOOlhH57+/GD7VpWlzegIALn0T+U8pppfdtM fgaF35MGsiq8dq8TKXaf4SjMPufQ1ofAJRWmAIMxyDnqPS/cVeYfNBvaEeoDo5RO YPTaUI6LK76iB5okcrGs5qkWfYzLx4dSlcCAGKwBnfESNJDJVC4HEqDsASE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:00:02 2025 by rpki-client