$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa File: 6f43e432-64c2-4e7b-9ec8-122af31247c8.roa (raw, json) Hash identifier: YnJB2iGWGAZ5mLAazSENy49hS/BukPWDBIbb6C9xwUY= Subject key identifier: 2B:BE:A3:39:3A:79:FF:9D:3D:DF:C8:58:C2:33:41:27:2B:31:11:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C941880EC3AE7859143D17712A8A3A9DF8E9121 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa Signing time: Fri 11 Jul 2025 16:30:18 +0000 ROA not before: Fri 11 Jul 2025 16:30:18 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.248.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:94:18:80:ec:3a:e7:85:91:43:d1:77:12:a8:a3:a9:df:8e:91:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 16:30:18 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=94a80534b2641a526540ba44ba9b8b7866f71fb3e4bf178afb0a5ae2d7f8aa39, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:02:bc:65:67:d9:b6:b5:c2:d1:60:4a:a8: e4:02:9b:27:08:7d:f9:1c:c1:65:d8:e4:2a:82:64: 74:06:3d:e0:7d:ce:01:68:ad:7e:f8:df:41:b4:93: da:3b:1d:a8:55:d0:ae:92:74:65:cd:15:51:43:c3: 4c:5c:a9:55:2f:ff:99:f2:0c:dc:ca:6d:03:48:e8: 28:b6:99:4d:35:21:d7:a6:e7:f6:10:2f:35:aa:eb: 03:26:93:2a:b9:5d:12:5b:b3:40:a6:85:19:1c:05: 50:a6:ab:80:23:1c:43:db:76:df:b0:08:f8:f2:23: 7e:6f:ab:03:0a:09:5a:52:c5:c2:b5:d4:42:34:96: 18:66:2f:88:f1:d7:27:b0:ee:ae:d7:a6:a9:05:c4: 25:97:3b:d3:d0:9a:ae:e8:5c:9d:b5:91:82:e2:a7: 8c:1e:23:8d:b0:9c:14:f7:4c:70:d0:a1:e5:8a:83: cb:a5:ac:5d:78:da:72:fc:3d:5b:c6:ba:3b:df:e5: bd:13:b6:df:e1:b1:d2:7b:fa:df:76:0c:59:33:60: 29:32:37:2b:31:43:22:6a:5b:f3:5a:26:de:70:3c: 76:3b:2c:bb:f3:29:a8:2a:15:ff:c4:4c:78:47:3f: 56:a1:7b:66:95:96:f6:62:b0:bc:d4:60:c4:fe:9a: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BE:A3:39:3A:79:FF:9D:3D:DF:C8:58:C2:33:41:27:2B:31:11:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.248.0.0/14 Signature Algorithm: sha256WithRSAEncryption 34:7e:a6:fc:11:b2:c3:18:28:43:33:b0:e0:8d:3a:0e:8c:f0: 19:fa:75:38:3b:d4:bc:d5:03:48:75:3b:fd:25:4a:2b:b0:ec: 31:5c:be:e5:90:d2:d6:69:3e:cf:10:36:26:fd:b5:86:f9:5a: 20:09:80:cd:de:cc:0a:2b:c0:f1:b5:0c:63:49:08:29:cb:54: c2:55:75:2e:85:af:da:21:09:be:49:2d:09:aa:fa:ba:ce:f0: cd:5a:30:2d:29:fd:d9:9c:39:b9:1c:0d:63:85:bc:e5:50:5b: 6e:a8:71:04:aa:c4:2d:54:1d:4c:55:03:55:6a:24:ff:06:e5: e1:fb:2f:0e:84:27:1b:c9:c4:36:b9:83:74:cc:4f:51:d9:d4: cf:41:68:e4:ed:b8:99:38:ef:2b:cc:76:e5:37:1c:b4:86:11: 62:aa:3e:72:a3:03:d4:6a:72:99:54:fe:27:69:24:7f:c3:06: fe:36:c8:03:65:9a:92:68:fb:30:d2:fd:de:0e:59:74:50:6f: 23:3c:ae:14:61:eb:aa:51:fe:d6:35:d0:b3:dd:16:f1:cf:58: c8:89:b4:30:18:2a:38:16:21:ac:92:1e:56:f8:75:f3:83:3b: f5:e7:9d:be:c2:f7:d5:23:e8:0e:ac:f4:dc:91:ca:7a:5d:8c: 3f:c1:4f:99 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPJQYgOw654WRQ9F3Eqijqd+OkSEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTYzMDE4WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NGE4MDUzNGIyNjQxYTUyNjU0MGJhNDRiYTliOGI3ODY2 ZjcxZmIzZTRiZjE3OGFmYjBhNWFlMmQ3ZjhhYTM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqlwK8ZWfZtrXC0WBKqOQCmycIffkcwWXY5CqCZHQGPeB9 zgForX7430G0k9o7HahV0K6SdGXNFVFDw0xcqVUv/5nyDNzKbQNI6Ci2mU01Idem 5/YQLzWq6wMmkyq5XRJbs0CmhRkcBVCmq4AjHEPbdt+wCPjyI35vqwMKCVpSxcK1 1EI0lhhmL4jx1yew7q7XpqkFxCWXO9PQmq7oXJ21kYLip4weI42wnBT3THDQoeWK g8ulrF142nL8PVvGujvf5b0Ttt/hsdJ7+t92DFkzYCkyNysxQyJqW/NaJt5wPHY7 LLvzKagqFf/ETHhHP1ahe2aVlvZisLzUYMT+msfFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUK76jOTp5/50938hYwjNBJysxEZ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZmNDNlNDMyLTY0YzItNGU3Yi05ZWM4LTEyMmFmMzEyNDdjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIS+DANBgkqhkiG9w0BAQsFAAOCAQEANH6m/BGywxgoQzOw4I06DozwGfp1 ODvUvNUDSHU7/SVKK7DsMVy+5ZDS1mk+zxA2Jv21hvlaIAmAzd7MCivA8bUMY0kI KctUwlV1LoWv2iEJvkktCar6us7wzVowLSn92Zw5uRwNY4W85VBbbqhxBKrELVQd TFUDVWok/wbl4fsvDoQnG8nENrmDdMxPUdnUz0Fo5O24mTjvK8x25TcctIYRYqo+ cqMD1GpymVT+J2kkf8MG/jbIA2Wakmj7MNL93g5ZdFBvIzyuFGHrqlH+1jXQs90W 8c9YyIm0MBgqOBYhrJIeVvh184M79eedvsL31SPoDqz03JHKel2MP8FPmQ== -----END CERTIFICATE-----Generated at Tue Aug 5 08:24:13 2025 by rpki-client