$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5073d0aa-0177-41f1-9cc7-32ddf8130b6a.roa File: 5073d0aa-0177-41f1-9cc7-32ddf8130b6a.roa (raw, json) Hash identifier: kOlCdEj8yc6Zd8VIOcrdQZyzI5LASJM+7hGwtPU4zSY= Subject key identifier: 66:3A:F4:F2:53:FB:01:03:56:14:4A:E4:C5:12:DE:EB:DB:46:F6:DC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C59DE0BB152823C5B7A1686367ABD17694F8BFF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5073d0aa-0177-41f1-9cc7-32ddf8130b6a.roa Signing time: Fri 13 Jun 2025 18:20:25 +0000 ROA not before: Fri 13 Jun 2025 18:20:25 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:59:de:0b:b1:52:82:3c:5b:7a:16:86:36:7a:bd:17:69:4f:8b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 13 18:20:25 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=7b5d08ed1b80b5e11cb4d714f20f3359aee2ad1f36cb4942ab115bebad8b3e91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:7c:e2:c8:46:e1:73:42:ce:22:13:1a:ab: 17:28:3a:8d:cf:fe:28:c0:0b:10:2d:7b:3b:df:0b: bc:6a:df:30:b9:b7:86:e4:c5:09:75:d7:f9:d1:dc: dd:e5:21:6e:48:97:d0:ff:25:29:6e:21:45:99:1a: 16:80:26:80:5d:21:26:13:58:0e:29:53:f4:87:9d: d0:b9:c8:6e:20:4e:a9:ec:76:10:c7:3f:c6:fb:55: fd:c5:1a:78:f6:65:3c:72:2f:65:d3:c6:01:30:d2: cb:8b:b4:b9:6f:bd:83:d3:22:76:c9:b3:ad:ee:3a: 5a:d1:bb:c1:aa:45:9b:2c:e9:10:d7:51:46:a4:ce: 19:7f:0e:6e:50:c6:d7:de:de:39:b9:95:9c:71:e9: bc:bc:e0:b1:fb:17:8b:a3:46:fe:63:38:e5:8c:49: 7f:fe:45:af:28:d8:af:66:cb:d2:8b:5a:3c:0d:ba: 7e:00:61:1c:05:9a:5b:31:a2:b4:fe:88:52:42:8c: f6:53:47:94:62:30:12:1e:08:f3:bb:ae:5b:02:b4: 27:b9:44:d5:86:eb:60:76:08:ed:21:a8:c7:bd:be: c2:6d:62:fe:f9:ba:04:f9:0d:07:bf:7b:80:04:4f: 21:f0:cf:72:3f:86:c5:39:56:4c:00:0a:14:b1:1c: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3A:F4:F2:53:FB:01:03:56:14:4A:E4:C5:12:DE:EB:DB:46:F6:DC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5073d0aa-0177-41f1-9cc7-32ddf8130b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.16.0/20 Signature Algorithm: sha256WithRSAEncryption 1f:f1:2d:c3:04:9e:fa:43:c6:85:fc:e1:99:89:51:c2:88:64: 6b:7e:fe:c7:57:37:89:bb:64:e0:34:32:b6:ed:38:6e:45:fc: 9a:e9:46:01:a0:03:c0:e4:71:b5:99:e0:65:8d:22:34:b5:f7: 83:f5:af:eb:b8:a8:0e:1e:54:d9:f9:1c:95:30:e4:15:ef:82: b2:1b:55:6b:e6:dc:fc:a1:94:fe:41:9c:0d:36:dc:67:b8:c6: f1:3d:6c:9e:de:2d:e5:40:c4:4d:73:47:04:e8:8a:99:0a:40: 2b:8d:26:85:f9:ee:63:32:29:fe:d2:7c:ee:93:f7:68:3c:1c: e4:26:24:0e:0f:1d:4c:2d:1e:d3:49:7a:ed:e3:39:00:c1:09: 76:67:38:5c:a0:b0:f9:85:7a:15:6a:58:e0:d0:ac:b7:a4:44: 85:82:e5:ef:03:27:3e:ca:2f:6f:c5:09:22:5a:b4:f5:78:e3: 35:db:0a:45:2d:e8:96:83:68:fa:0c:0f:ff:b3:b5:5f:4c:3b: 03:f1:bd:e6:4f:f2:28:95:8d:47:57:0a:a0:19:42:d0:12:88: 29:05:c5:8f:52:9d:b5:e5:c8:50:b3:70:15:c2:6b:bf:12:61: b9:0f:75:8c:b3:be:22:a7:58:f3:3c:27:c4:e5:e1:96:a2:82: 9a:d7:49:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTFneC7FSgjxbehaGNnq9F2lPi/8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjEzMTgyMDI1WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjVkMDhlZDFiODBiNWUxMWNiNGQ3MTRmMjBmMzM1OWFl ZTJhZDFmMzZjYjQ5NDJhYjExNWJlYmFkOGIzZTkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE4XziyEbhc0LOIhMaqxcoOo3P/ijACxAtezvfC7xq3zC5 t4bkxQl11/nR3N3lIW5Il9D/JSluIUWZGhaAJoBdISYTWA4pU/SHndC5yG4gTqns dhDHP8b7Vf3FGnj2ZTxyL2XTxgEw0suLtLlvvYPTInbJs63uOlrRu8GqRZss6RDX UUakzhl/Dm5Qxtfe3jm5lZxx6by84LH7F4ujRv5jOOWMSX/+Ra8o2K9my9KLWjwN un4AYRwFmlsxorT+iFJCjPZTR5RiMBIeCPO7rlsCtCe5RNWG62B2CO0hqMe9vsJt Yv75ugT5DQe/e4AETyHwz3I/hsU5VkwAChSxHIenAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZjr08lP7AQNWFErkxRLe69tG9twwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwNzNkMGFhLTAxNzctNDFmMS05Y2M3LTMyZGRmODEzMGI2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ27xAwDQYJKoZIhvcNAQELBQADggEBAB/xLcMEnvpDxoX84ZmJUcKIZGt+ /sdXN4m7ZOA0MrbtOG5F/JrpRgGgA8DkcbWZ4GWNIjS194P1r+u4qA4eVNn5HJUw 5BXvgrIbVWvm3PyhlP5BnA023Ge4xvE9bJ7eLeVAxE1zRwToipkKQCuNJoX57mMy Kf7SfO6T92g8HOQmJA4PHUwtHtNJeu3jOQDBCXZnOFygsPmFehVqWODQrLekRIWC 5e8DJz7KL2/FCSJatPV44zXbCkUt6JaDaPoMD/+ztV9MOwPxveZP8iiVjUdXCqAZ QtASiCkFxY9SnbXlyFCzcBXCa78SYbkPdYyzviKnWPM8J8Tl4ZaigprXSR4= -----END CERTIFICATE-----Generated at Sat Jun 14 05:52:48 2025 by rpki-client