$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55614c32-2a17-4b78-80f5-15ba7f57fc2c.roa File: 55614c32-2a17-4b78-80f5-15ba7f57fc2c.roa (raw, json) Hash identifier: k6Qr9N4eCoksSjUN6btETYnzBy76Wdg8qkuXv6ZGJpw= Subject key identifier: 86:43:87:EE:25:52:88:31:82:18:67:1E:30:EB:44:49:35:FF:82:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 791E68294094445C7FFB239A66B30EACF1C31C35 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55614c32-2a17-4b78-80f5-15ba7f57fc2c.roa Signing time: Fri 06 Jun 2025 00:51:04 +0000 ROA not before: Fri 06 Jun 2025 00:51:04 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.33.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1e:68:29:40:94:44:5c:7f:fb:23:9a:66:b3:0e:ac:f1:c3:1c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 00:51:04 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=cb3436bd220e35419152426e3c81c7499bba67a8716781f5101ab46becd36589, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:de:d8:fc:ec:cb:ce:9d:e5:9e:8f:1c:a4: 3d:15:5d:c3:b3:74:07:bd:be:0e:ed:3b:e5:4b:a1: 57:30:65:63:69:70:86:06:7e:52:32:23:63:20:97: 34:5c:f4:41:44:79:d5:0f:2f:90:f1:b2:97:16:fc: a0:13:fd:59:c0:ca:b7:9f:c2:3e:0f:47:5b:22:03: 25:c6:e2:e1:0a:5d:cf:e1:5e:5e:f6:12:13:e2:4e: e9:be:c8:9b:a5:a7:78:8c:2d:9d:6b:53:58:03:22: bb:31:4a:36:d1:91:be:d6:e8:c3:e9:4f:0c:cc:f2: 2d:c3:f2:58:ff:7c:04:58:cf:83:c6:1f:04:f3:47: dc:99:6e:6d:d4:00:2f:1f:fb:b6:e9:0b:53:c9:7b: 8b:24:a8:8e:fa:25:ef:cd:c6:72:b6:c5:5a:4c:cd: 7c:50:e6:31:ec:b3:e6:27:c4:b8:55:15:5f:f0:bc: 27:d4:2a:0d:2f:64:6a:0b:13:f2:01:e2:86:fa:16: 8c:9e:ef:11:4a:96:dd:5e:4f:9a:54:d1:f2:85:a6: 30:a7:55:b5:00:69:fb:af:67:12:87:3d:27:25:7a: 19:27:d6:fe:a2:b0:21:c7:4e:cb:fe:52:19:b0:10: c3:7e:21:d7:a8:e8:2a:9b:5a:00:74:96:9c:b8:44: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:43:87:EE:25:52:88:31:82:18:67:1E:30:EB:44:49:35:FF:82:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55614c32-2a17-4b78-80f5-15ba7f57fc2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.33.40.0/22 Signature Algorithm: sha256WithRSAEncryption 78:1a:50:e5:6c:8b:d1:5f:ed:07:22:26:5a:e5:74:56:86:16: 45:19:1c:9e:3c:6a:a3:68:a9:a8:bc:fb:75:85:9d:3b:4d:35: 71:c0:65:1e:5d:50:7c:0f:81:07:61:28:a2:b4:1e:b0:b6:7d: 5a:cd:17:4d:92:8b:c4:1d:a9:2e:29:8f:b9:83:a5:e4:6f:11: fa:b1:f4:77:6a:9a:07:3f:eb:6f:84:bb:05:58:fd:3a:97:4b: 1a:64:5e:0f:75:7b:0c:c7:8c:66:16:c1:93:3e:3a:c6:1e:67: 75:01:c8:04:58:04:2d:3d:35:fb:8c:b2:84:ef:3a:2c:d8:d2: b5:79:46:93:35:ce:99:ab:fc:d0:52:f2:f5:5b:1d:86:df:ef: c7:03:44:3f:1f:a5:3a:30:95:a6:91:86:fb:f6:ca:ed:76:ca: 8c:11:69:1d:54:8b:0a:6f:02:1c:79:06:7b:4d:4f:1e:81:8f: e6:75:f5:b5:54:c1:ed:11:0d:5c:01:c8:72:04:00:c0:ed:c4: 70:c6:45:47:d8:13:c5:bd:51:a3:62:d5:ff:70:7c:55:e4:c4: 8d:50:68:8f:6e:3a:0b:27:5a:2c:ec:68:50:4a:ad:8a:2c:86: 38:29:88:e0:2a:4b:37:73:2e:c8:18:94:51:60:db:4b:46:39: 81:1c:7f:8d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeR5oKUCURFx/+yOaZrMOrPHDHDUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MDA1MTA0WhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYjM0MzZiZDIyMGUzNTQxOTE1MjQyNmUzYzgxYzc0OTli YmE2N2E4NzE2NzgxZjUxMDFhYjQ2YmVjZDM2NTg5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8aN7Y/OzLzp3lno8cpD0VXcOzdAe9vg7tO+VLoVcwZWNp cIYGflIyI2MglzRc9EFEedUPL5DxspcW/KAT/VnAyrefwj4PR1siAyXG4uEKXc/h Xl72EhPiTum+yJulp3iMLZ1rU1gDIrsxSjbRkb7W6MPpTwzM8i3D8lj/fARYz4PG HwTzR9yZbm3UAC8f+7bpC1PJe4skqI76Je/NxnK2xVpMzXxQ5jHss+YnxLhVFV/w vCfUKg0vZGoLE/IB4ob6Foye7xFKlt1eT5pU0fKFpjCnVbUAafuvZxKHPSclehkn 1v6isCHHTsv+UhmwEMN+Ideo6CqbWgB0lpy4RER7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhkOH7iVSiDGCGGceMOtESTX/gqAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU1NjE0YzMyLTJhMTctNGI3OC04MGY1LTE1YmE3ZjU3ZmMyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDISgwDQYJKoZIhvcNAQELBQADggEBAHgaUOVsi9Ff7QciJlrldFaGFkUZ HJ48aqNoqai8+3WFnTtNNXHAZR5dUHwPgQdhKKK0HrC2fVrNF02Si8QdqS4pj7mD peRvEfqx9Hdqmgc/62+EuwVY/TqXSxpkXg91ewzHjGYWwZM+OsYeZ3UByARYBC09 NfuMsoTvOizY0rV5RpM1zpmr/NBS8vVbHYbf78cDRD8fpTowlaaRhvv2yu12yowR aR1UiwpvAhx5BntNTx6Bj+Z19bVUwe0RDVwByHIEAMDtxHDGRUfYE8W9UaNi1f9w fFXkxI1QaI9uOgsnWizsaFBKrYoshjgpiOAqSzdzLsgYlFFg20tGOYEcf40= -----END CERTIFICATE-----Generated at Sat Jun 14 05:58:05 2025 by rpki-client