$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551033f3-d268-4474-aaf5-8cb10349f8fe.roa File: 551033f3-d268-4474-aaf5-8cb10349f8fe.roa (raw, json) Hash identifier: u3E2tn2gib8CiWmvvZHFg0yvjS3/itd/wKMXpn8vNEk= Subject key identifier: AF:79:07:EC:37:94:CC:43:E3:06:DF:FC:91:7A:2B:3B:FA:95:E3:C7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 786A6B3718C375DBA1EA48FE92D46166B6F4105B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551033f3-d268-4474-aaf5-8cb10349f8fe.roa Signing time: Tue 03 Jun 2025 00:30:20 +0000 ROA not before: Tue 03 Jun 2025 00:30:20 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6a:6b:37:18:c3:75:db:a1:ea:48:fe:92:d4:61:66:b6:f4:10:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 00:30:20 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=9f556a92a347e24125c0c737eaa8614385b1694f940a92e52c803f72a5bb7fc4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:65:e1:26:35:f6:83:9d:da:d7:52:e1:c2:06: cc:9b:cd:c6:8f:5a:b0:93:f3:df:d0:18:a7:bf:61: af:d2:c4:cf:a1:34:f1:d4:ec:d1:52:73:00:14:55: fa:af:0c:36:02:a5:09:1e:50:58:84:f1:ef:2d:aa: 2a:44:36:4b:f2:7e:5f:27:f5:af:1e:1b:15:af:13: 1f:3c:6d:fa:2e:13:a6:0c:87:96:f5:f0:a5:9b:2e: 78:a6:86:d1:5b:1d:5b:d1:3f:bb:72:dd:67:46:42: 9b:05:f5:22:26:e5:9d:4f:85:ee:96:e2:e6:43:51: 40:56:d2:ce:f3:6c:75:c1:a6:34:d5:f6:d8:af:6c: 65:77:ee:b9:58:3f:04:ee:a6:38:11:19:3f:d7:e8: e2:9d:44:cc:ed:ca:45:be:1e:07:69:aa:33:ae:e5: 69:12:c2:8f:9c:f1:16:c4:e2:69:52:d4:46:c3:a8: a7:51:0c:8e:22:31:11:4a:03:b5:33:41:5a:e6:0c: a5:31:50:c6:57:98:c6:22:f2:40:37:3d:68:90:fc: 07:f5:50:cc:e3:51:f9:b8:93:cc:69:08:99:e6:5b: da:7d:6f:55:88:a6:05:38:93:f2:80:8b:46:44:51: fe:25:ae:49:e3:90:51:2c:53:99:21:b1:40:21:70: 79:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:79:07:EC:37:94:CC:43:E3:06:DF:FC:91:7A:2B:3B:FA:95:E3:C7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/551033f3-d268-4474-aaf5-8cb10349f8fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.236.0/22 Signature Algorithm: sha256WithRSAEncryption 67:9a:e0:61:0f:79:a5:9e:73:cd:f9:4f:4e:e1:3b:87:45:95: e1:d3:d3:19:93:7b:7b:d5:03:12:6c:40:f6:c2:d1:d4:ae:5e: 8c:09:68:e0:0c:7c:f6:a6:a5:b3:2b:64:7f:14:df:23:35:d6: 11:39:da:54:ea:f6:f8:fe:cb:54:21:df:a2:ac:c8:6a:81:eb: 1f:5e:ae:16:0c:dc:0a:3b:31:a3:19:f7:97:f6:60:a3:ae:8e: 6f:7a:ed:06:e2:d2:60:7d:ba:5f:68:73:b3:21:b2:75:7b:af: fd:01:70:67:50:ba:86:88:b6:f1:2b:9b:28:d7:cf:d1:dd:f0: 4b:ba:c4:90:86:03:d4:1d:7a:e1:58:73:b8:f8:1d:00:39:fa: d6:93:47:c0:cd:96:46:8f:4d:71:c9:e2:94:63:8f:a5:0a:a9: 3f:cf:ff:c9:d3:2d:91:84:29:50:38:74:d3:0b:a4:62:31:bd: ea:29:c5:72:05:ce:0a:67:e1:1c:6a:27:a3:fb:6a:ae:c3:be: 1b:99:54:e8:ea:73:f4:db:44:da:6a:df:0f:d0:ce:13:d8:c9: 62:ca:5b:c8:b9:2d:11:04:94:a6:cc:36:bc:92:40:ed:49:de: 73:ab:ac:4e:85:af:42:8a:85:53:95:93:b3:f3:25:52:ef:52: fa:0f:f4:aa -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeGprNxjDdduh6kj+ktRhZrb0EFswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMDAzMDIwWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZjU1NmE5MmEzNDdlMjQxMjVjMGM3MzdlYWE4NjE0Mzg1 YjE2OTRmOTQwYTkyZTUyYzgwM2Y3MmE1YmI3ZmM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiZeEmNfaDndrXUuHCBsybzcaPWrCT89/QGKe/Ya/SxM+h NPHU7NFScwAUVfqvDDYCpQkeUFiE8e8tqipENkvyfl8n9a8eGxWvEx88bfouE6YM h5b18KWbLnimhtFbHVvRP7ty3WdGQpsF9SIm5Z1Phe6W4uZDUUBW0s7zbHXBpjTV 9tivbGV37rlYPwTupjgRGT/X6OKdRMztykW+HgdpqjOu5WkSwo+c8RbE4mlS1EbD qKdRDI4iMRFKA7UzQVrmDKUxUMZXmMYi8kA3PWiQ/Af1UMzjUfm4k8xpCJnmW9p9 b1WIpgU4k/KAi0ZEUf4lrknjkFEsU5khsUAhcHl5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUr3kH7DeUzEPjBt/8kXorO/qV48cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU1MTAzM2YzLWQyNjgtNDQ3NC1hYWY1LThjYjEwMzQ5ZjhmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3OwwDQYJKoZIhvcNAQELBQADggEBAGea4GEPeaWec835T07hO4dFleHT 0xmTe3vVAxJsQPbC0dSuXowJaOAMfPampbMrZH8U3yM11hE52lTq9vj+y1Qh36Ks yGqB6x9erhYM3Ao7MaMZ95f2YKOujm967Qbi0mB9ul9oc7MhsnV7r/0BcGdQuoaI tvErmyjXz9Hd8Eu6xJCGA9QdeuFYc7j4HQA5+taTR8DNlkaPTXHJ4pRjj6UKqT/P /8nTLZGEKVA4dNMLpGIxveopxXIFzgpn4RxqJ6P7aq7DvhuZVOjqc/TbRNpq3w/Q zhPYyWLKW8i5LREElKbMNrySQO1J3nOrrE6Fr0KKhVOVk7PzJVLvUvoP9Ko= -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:13 2025 by rpki-client