$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59c5163b-3011-4a94-9e8d-80ee5b9aa8d8.roa File: 59c5163b-3011-4a94-9e8d-80ee5b9aa8d8.roa (raw, json) Hash identifier: qTcDW4eiEn1ppxbxzSKiF+Jb4rejCIdd/KO08yDR51o= Subject key identifier: 01:91:CF:0C:4E:51:B7:20:9B:C6:A5:23:C9:09:2B:72:D7:DA:94:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 654F5ABD17CD19FF709EC9DE2F5755E9F308E53A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59c5163b-3011-4a94-9e8d-80ee5b9aa8d8.roa Signing time: Fri 25 Jul 2025 15:31:37 +0000 ROA not before: Fri 25 Jul 2025 15:31:37 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.250.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4f:5a:bd:17:cd:19:ff:70:9e:c9:de:2f:57:55:e9:f3:08:e5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 15:31:37 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=1f1fdc19c0f47f7feda49a51e7d538c7d6bc59fdf0527e7a3d576cece88c913e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:30:47:66:62:5b:90:69:d0:9a:de:26:ce: 9d:0c:37:92:b1:02:f2:02:e6:65:26:57:0b:44:5b: 53:6a:62:6d:2b:fb:85:73:9d:10:ba:c6:ff:52:d1: 83:84:85:8c:39:ff:e3:88:53:44:ff:67:61:50:04: b2:38:cc:d9:4b:5f:05:af:94:62:f5:9f:42:0b:04: 20:61:b1:c8:9b:e4:94:0b:05:8f:12:03:5f:49:98: 8d:65:13:a4:e3:c2:04:a6:ca:84:e8:38:45:d3:fa: ba:45:b7:c7:f7:3e:67:a6:a7:d4:35:68:ca:ac:8f: 0a:91:61:08:de:44:74:d0:ed:f7:bb:81:ed:85:96: 02:87:ab:9e:ba:80:ba:a7:86:be:c6:27:c8:06:fb: c2:12:f5:1f:a5:06:b2:e4:9b:12:8d:1c:60:85:0c: 45:96:69:cb:1f:58:8c:12:be:e1:fc:a2:ba:e8:7c: 4e:d9:b7:ce:5c:b2:24:0a:82:48:49:b8:9c:75:43: 25:7b:f1:bc:ec:02:f7:6f:ee:ac:b1:29:10:fa:35: 56:ed:8e:86:e3:d5:b2:ba:6b:b6:de:ea:b2:a9:e2: 8d:de:6f:26:43:de:ff:a6:a9:cb:a2:9b:fc:e0:43: 3e:bb:28:80:76:dc:cd:4d:15:38:5e:ec:43:bc:3b: 75:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:91:CF:0C:4E:51:B7:20:9B:C6:A5:23:C9:09:2B:72:D7:DA:94:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59c5163b-3011-4a94-9e8d-80ee5b9aa8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.250.128.0/18 Signature Algorithm: sha256WithRSAEncryption 97:f3:55:6f:09:e1:56:05:67:d6:3a:dc:38:a7:41:a6:7c:c6: cb:ce:7e:2d:9d:31:9e:91:2b:34:93:4a:c1:b2:0c:49:9c:d8: 79:17:58:09:48:3b:f5:63:76:68:a4:38:aa:c7:32:a0:a0:86: 7b:31:73:c8:53:27:d1:a1:f9:8c:dc:3b:9d:cb:19:75:47:37: d8:9f:02:5c:38:1c:22:17:d6:e0:a6:36:41:d0:02:7f:41:d2: 09:40:8c:da:9d:75:37:28:ce:2e:fa:bb:e3:eb:ad:c2:72:33: 54:14:ae:2a:93:9b:81:9d:ad:29:dc:28:18:ef:6b:92:18:66: 52:11:b6:94:a4:d6:65:39:6e:ef:05:21:42:6a:79:4d:71:3f: fa:56:0a:cd:70:48:73:8b:3f:32:17:c0:8e:ba:e2:b2:2b:75: f4:50:9b:c0:37:79:eb:1e:00:d2:fd:50:79:35:51:a0:ec:71: 75:c5:21:00:b3:68:3f:5e:c3:9d:2f:c7:6e:a9:e4:4f:38:63: 23:04:cb:17:3b:06:e3:fc:f5:e7:f2:4d:d3:c7:6c:85:fc:13: 99:9a:a4:5e:27:29:37:44:f1:11:69:d9:72:25:04:d1:b6:1b: 1c:0b:87:0f:19:ef:74:d1:a0:9a:53:74:ee:c5:c9:0f:a2:c0: 51:4e:bf:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZU9avRfNGf9wnsneL1dV6fMI5TowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTUzMTM3WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjFmZGMxOWMwZjQ3ZjdmZWRhNDlhNTFlN2Q1MzhjN2Q2 YmM1OWZkZjA1MjdlN2EzZDU3NmNlY2U4OGM5MTNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCklTBHZmJbkGnQmt4mzp0MN5KxAvIC5mUmVwtEW1NqYm0r +4VznRC6xv9S0YOEhYw5/+OIU0T/Z2FQBLI4zNlLXwWvlGL1n0ILBCBhscib5JQL BY8SA19JmI1lE6TjwgSmyoToOEXT+rpFt8f3Pmemp9Q1aMqsjwqRYQjeRHTQ7fe7 ge2FlgKHq566gLqnhr7GJ8gG+8IS9R+lBrLkmxKNHGCFDEWWacsfWIwSvuH8orro fE7Zt85csiQKgkhJuJx1QyV78bzsAvdv7qyxKRD6NVbtjobj1bK6a7be6rKp4o3e byZD3v+mqcuim/zgQz67KIB23M1NFThe7EO8O3UhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAZHPDE5RtyCbxqUjyQkrctfalLgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU5YzUxNjNiLTMwMTEtNGE5NC05ZThkLTgwZWU1YjlhYThkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi+oAwDQYJKoZIhvcNAQELBQADggEBAJfzVW8J4VYFZ9Y63DinQaZ8xsvO fi2dMZ6RKzSTSsGyDEmc2HkXWAlIO/VjdmikOKrHMqCghnsxc8hTJ9Gh+YzcO53L GXVHN9ifAlw4HCIX1uCmNkHQAn9B0glAjNqddTcozi76u+PrrcJyM1QUriqTm4Gd rSncKBjva5IYZlIRtpSk1mU5bu8FIUJqeU1xP/pWCs1wSHOLPzIXwI664rIrdfRQ m8A3eeseANL9UHk1UaDscXXFIQCzaD9ew50vx26p5E84YyMEyxc7BuP89efyTdPH bIX8E5mapF4nKTdE8RFp2XIlBNG2GxwLhw8Z73TRoJpTdO7FyQ+iwFFOv54= -----END CERTIFICATE-----Generated at Tue Aug 5 08:21:14 2025 by rpki-client