$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71125bc2-755d-45ec-b689-05bfd289cfe7.roa File: 71125bc2-755d-45ec-b689-05bfd289cfe7.roa (raw, json) Hash identifier: SOWb/bccX0lZm9x34S40WObAwgW0/2CO3u3G7oqsx2c= Subject key identifier: C6:10:3B:8F:89:23:83:B8:B5:0C:04:31:64:95:90:B9:1C:C2:39:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1278237719FCA7DC5380F03F1F21AF607145E428 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71125bc2-755d-45ec-b689-05bfd289cfe7.roa Signing time: Tue 29 Jul 2025 17:50:15 +0000 ROA not before: Tue 29 Jul 2025 17:50:15 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.254.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:78:23:77:19:fc:a7:dc:53:80:f0:3f:1f:21:af:60:71:45:e4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 17:50:15 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=7455dacec8bc9cb40b537a86a763df0f6e8b6445eabccd1cabadc21af8b040e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:66:16:ce:9f:5f:6d:6b:85:9d:d1:ca:a8:28: ef:75:af:8a:ce:50:71:bd:f3:f9:a3:a9:f1:35:eb: e2:8f:74:8b:48:30:2a:be:af:02:82:6b:fe:78:cc: 3f:4b:75:cc:18:7c:73:2a:45:5a:80:d6:a2:84:f6: 14:42:ad:bd:8f:5b:6b:f1:b7:76:a4:fa:e5:32:99: f4:f0:33:14:49:ca:89:49:d3:84:7d:a1:6c:31:d7: e9:6f:68:b1:7c:9b:d9:00:fc:e9:94:dd:ce:73:16: ac:a2:90:6f:8f:2f:10:e5:cd:d1:a1:f9:7f:65:7e: 7f:49:b8:c4:4b:52:3b:fa:3c:a5:49:6d:8e:5a:d2: 66:34:e0:2c:4a:59:e0:04:4c:53:0b:8b:0c:b3:5d: f2:71:f7:84:a1:54:34:15:93:d5:7a:e1:19:7f:05: 7c:a9:c3:f5:51:3d:84:9b:fb:7e:ec:47:e9:ba:60: f3:3c:e0:c3:5e:d7:7d:f2:ea:0b:04:70:89:aa:ea: e9:4e:4d:14:75:bd:15:7e:ba:15:59:46:40:a5:6b: bd:bd:16:af:36:50:f3:30:bf:f2:02:cc:b5:2a:de: e3:fb:92:6f:1b:2a:49:57:3c:92:aa:2f:e8:c9:fb: 10:59:95:4d:61:c1:ab:d0:f3:95:ae:c6:2b:53:a7: 8c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:10:3B:8F:89:23:83:B8:B5:0C:04:31:64:95:90:B9:1C:C2:39:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71125bc2-755d-45ec-b689-05bfd289cfe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.254.96.0/20 Signature Algorithm: sha256WithRSAEncryption a9:01:e9:f2:e6:ea:ec:fc:06:da:74:ae:b8:64:5b:4e:0b:f6: a5:69:c7:d5:2a:ee:96:e3:25:db:1b:4b:30:a8:d2:f9:ec:48: 61:35:cb:76:ee:05:2e:7a:e2:69:3f:b3:9b:32:d7:b9:91:8c: 4c:23:b3:79:6f:1e:a1:db:79:0a:a8:25:18:16:a7:68:33:a8: d9:be:2a:72:7e:92:1c:ae:81:24:5c:08:b8:22:04:69:8a:6b: 88:24:97:4f:f6:ad:f0:f0:da:d4:8c:9b:f8:f4:2a:c4:11:f3: a5:b3:0a:d1:0d:3b:cc:51:d7:ae:47:54:1e:1e:a3:14:b6:a5: b6:ca:4c:7b:33:32:d6:66:5a:9c:d3:7c:28:12:55:05:52:bd: 7d:ad:fa:30:4b:be:e1:32:28:1e:41:75:2b:8f:7e:e9:93:ce: af:b0:f9:76:4f:49:de:f3:e3:c3:16:76:f0:d9:c7:df:3a:a5: 7e:3a:bd:c0:dc:70:1a:69:5c:75:7b:f9:c1:98:68:16:79:94: bb:3c:5c:9c:3e:79:7c:2e:54:2c:75:58:a8:65:38:2c:da:50: 15:cd:bc:2a:1a:f7:b5:54:dd:6b:ee:76:6c:78:34:ca:9e:65: 1d:af:70:c4:b4:3d:ca:f8:9c:84:ad:7f:ae:e0:9f:b4:81:1f: 15:9e:ca:13 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEngjdxn8p9xTgPA/HyGvYHFF5CgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTc1MDE1WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDU1ZGFjZWM4YmM5Y2I0MGI1MzdhODZhNzYzZGYwZjZl OGI2NDQ1ZWFiY2NkMWNhYmFkYzIxYWY4YjA0MGU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRZhbOn19ta4Wd0cqoKO91r4rOUHG98/mjqfE16+KPdItI MCq+rwKCa/54zD9LdcwYfHMqRVqA1qKE9hRCrb2PW2vxt3ak+uUymfTwMxRJyolJ 04R9oWwx1+lvaLF8m9kA/OmU3c5zFqyikG+PLxDlzdGh+X9lfn9JuMRLUjv6PKVJ bY5a0mY04CxKWeAETFMLiwyzXfJx94ShVDQVk9V64Rl/BXypw/VRPYSb+37sR+m6 YPM84MNe133y6gsEcImq6ulOTRR1vRV+uhVZRkCla729Fq82UPMwv/ICzLUq3uP7 km8bKklXPJKqL+jJ+xBZlU1hwavQ85WuxitTp4wdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxhA7j4kjg7i1DAQxZJWQuRzCOfAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcxMTI1YmMyLTc1NWQtNDVlYy1iNjg5LTA1YmZkMjg5Y2ZlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2/mAwDQYJKoZIhvcNAQELBQADggEBAKkB6fLm6uz8Btp0rrhkW04L9qVp x9Uq7pbjJdsbSzCo0vnsSGE1y3buBS564mk/s5sy17mRjEwjs3lvHqHbeQqoJRgW p2gzqNm+KnJ+khyugSRcCLgiBGmKa4gkl0/2rfDw2tSMm/j0KsQR86WzCtENO8xR 165HVB4eoxS2pbbKTHszMtZmWpzTfCgSVQVSvX2t+jBLvuEyKB5BdSuPfumTzq+w +XZPSd7z48MWdvDZx986pX46vcDccBppXHV7+cGYaBZ5lLs8XJw+eXwuVCx1WKhl OCzaUBXNvCoa97VU3Wvudmx4NMqeZR2vcMS0Pcr4nIStf67gn7SBHxWeyhM= -----END CERTIFICATE-----Generated at Mon Aug 4 22:21:06 2025 by rpki-client