$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6261a64a-33d7-4d7c-9f80-23989306452c.roa File: 6261a64a-33d7-4d7c-9f80-23989306452c.roa (raw, json) Hash identifier: XuUKX57JsMiKR4jmg4UNN4DH91xQF2NB6xb3nEdmOHM= Subject key identifier: 69:7B:51:62:D9:78:B3:77:C5:77:1E:39:0E:75:82:DA:5C:BF:77:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 60F2F6DCA225C7E12E48446632A893FEDD28E052 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6261a64a-33d7-4d7c-9f80-23989306452c.roa Signing time: Mon 09 Jun 2025 18:00:45 +0000 ROA not before: Mon 09 Jun 2025 18:00:45 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.233.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:f2:f6:dc:a2:25:c7:e1:2e:48:44:66:32:a8:93:fe:dd:28:e0:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:00:45 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=be08904a3e6c782fe00cfd597219dcd7aac4d4cdaaf9a9a81daf6adcdd57aeff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0e:49:77:45:99:82:59:89:08:37:4a:1b:0d: bc:66:69:8f:89:82:15:58:2b:56:4e:a0:c3:1d:cc: d0:15:cb:f3:34:9a:5b:e8:62:9c:2d:58:26:e4:3b: 29:5d:25:c2:38:1c:44:a3:dd:02:59:44:d7:ee:ed: a1:9a:3f:a2:9c:4f:b8:75:d3:f3:e1:7c:f9:44:0f: aa:ca:76:db:62:87:77:86:4f:07:32:03:73:50:5b: 5a:b5:9e:72:a4:8c:bb:d9:b8:da:d3:6e:a2:3f:01: 17:45:a3:e4:2a:b6:dd:c9:2b:75:8f:9d:47:f7:60: 3f:75:9d:f9:d6:6f:0b:2b:72:c3:6c:8d:c6:c8:d7: ba:d3:ac:98:ba:0d:3a:85:ce:25:43:70:06:51:96: a3:91:7b:ec:39:0a:be:cb:8e:03:26:85:47:d2:43: 79:be:5b:6d:90:e5:71:33:8b:9e:c7:ae:50:83:4d: bc:f6:4c:4d:da:0f:8a:9a:1e:89:a0:cd:2f:c1:8e: 8b:1c:21:a5:54:85:2d:45:7b:fd:32:17:41:78:9c: 60:84:a6:43:e2:10:f4:5c:aa:d2:f6:4e:0e:4a:23: f1:04:0a:c5:b3:ef:86:3a:a2:e2:b5:01:2e:ad:4a: 87:2b:f8:1b:17:65:56:de:36:c7:ff:d9:96:15:e7: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:7B:51:62:D9:78:B3:77:C5:77:1E:39:0E:75:82:DA:5C:BF:77:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6261a64a-33d7-4d7c-9f80-23989306452c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.233.128.0/17 Signature Algorithm: sha256WithRSAEncryption 31:90:94:46:22:ac:d7:c5:52:e7:0c:ff:5e:ee:c4:24:eb:f8: cd:22:03:08:80:fb:da:00:df:0a:9d:46:2c:fa:be:04:42:d7: c2:3a:0a:40:7f:92:52:ec:32:9c:dc:b4:be:f7:83:a8:11:ff: 55:22:30:ad:47:19:d4:aa:7b:2c:3f:27:1f:6f:13:1c:ef:18: 61:22:1a:00:03:77:28:aa:5c:41:6b:ad:7f:90:44:00:05:d8: a6:f1:33:7b:6f:4b:18:41:06:be:80:6f:cd:73:67:91:20:94: f5:2e:71:bd:51:be:42:22:be:22:af:2a:7a:4f:86:e8:8e:ed: 68:1a:c1:f5:ce:71:b0:76:20:be:4e:d7:ad:27:f8:3c:5f:90: be:18:13:4e:c3:43:29:1a:f5:f3:3d:fd:8e:42:d4:6d:e1:28: 8f:2c:52:66:3e:e2:5e:e6:b5:98:bd:6e:66:7c:a4:02:6f:58: 70:20:23:6e:10:33:f8:9d:28:de:89:1e:4d:f7:d9:53:19:17: a7:d1:a0:2a:81:22:70:fb:5d:50:1b:26:d2:33:d2:98:be:f9: 31:ea:2a:eb:7a:f7:76:f8:41:fb:f0:97:bf:08:c2:68:a1:b6: c0:71:3e:3c:f8:15:fa:aa:95:e9:b5:ef:ed:e0:92:b8:f8:25: e1:47:d7:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYPL23KIlx+EuSERmMqiT/t0o4FIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgwMDQ1WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZTA4OTA0YTNlNmM3ODJmZTAwY2ZkNTk3MjE5ZGNkN2Fh YzRkNGNkYWFmOWE5YTgxZGFmNmFkY2RkNTdhZWZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHDkl3RZmCWYkIN0obDbxmaY+JghVYK1ZOoMMdzNAVy/M0 mlvoYpwtWCbkOyldJcI4HESj3QJZRNfu7aGaP6KcT7h10/PhfPlED6rKdttih3eG TwcyA3NQW1q1nnKkjLvZuNrTbqI/ARdFo+Qqtt3JK3WPnUf3YD91nfnWbwsrcsNs jcbI17rTrJi6DTqFziVDcAZRlqORe+w5Cr7LjgMmhUfSQ3m+W22Q5XEzi57HrlCD Tbz2TE3aD4qaHomgzS/BjoscIaVUhS1Fe/0yF0F4nGCEpkPiEPRcqtL2Tg5KI/EE CsWz74Y6ouK1AS6tSocr+BsXZVbeNsf/2ZYV59bnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaXtRYtl4s3fFdx45DnWC2ly/d/QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYyNjFhNjRhLTMzZDctNGQ3Yy05ZjgwLTIzOTg5MzA2NDUyYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc26YAwDQYJKoZIhvcNAQELBQADggEBADGQlEYirNfFUucM/17uxCTr+M0i AwiA+9oA3wqdRiz6vgRC18I6CkB/klLsMpzctL73g6gR/1UiMK1HGdSqeyw/Jx9v ExzvGGEiGgADdyiqXEFrrX+QRAAF2KbxM3tvSxhBBr6Ab81zZ5EglPUucb1RvkIi viKvKnpPhuiO7WgawfXOcbB2IL5O160n+DxfkL4YE07DQyka9fM9/Y5C1G3hKI8s UmY+4l7mtZi9bmZ8pAJvWHAgI24QM/idKN6JHk332VMZF6fRoCqBInD7XVAbJtIz 0pi++THqKut693b4Qfvwl78IwmihtsBxPjz4Ffqqlem17+3gkrj4JeFH16s= -----END CERTIFICATE-----Generated at Sat Jun 14 05:52:51 2025 by rpki-client