$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d1eba5c-3d88-4fe4-8c15-8fb7795ca002.roa File: 7d1eba5c-3d88-4fe4-8c15-8fb7795ca002.roa (raw, json) Hash identifier: m8R4avr9a75Xnb6u7E+UfT6lU00C5t6CTvYxLB5VuLQ= Subject key identifier: 93:A1:4E:18:19:AB:89:DE:96:3A:87:FF:42:EB:A3:5F:2B:1F:BC:AA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70322586CF39072A72B2D86A29F9001D033EB7E2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d1eba5c-3d88-4fe4-8c15-8fb7795ca002.roa Signing time: Tue 20 May 2025 16:31:22 +0000 ROA not before: Tue 20 May 2025 16:31:22 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:32:25:86:cf:39:07:2a:72:b2:d8:6a:29:f9:00:1d:03:3e:b7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 16:31:22 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=f344d6efe8853b44c309ac6f329a18e287f8b0792117b38691639d8c643be97f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bc:34:24:e0:fe:61:44:f7:66:4f:0b:d6:7b: f8:51:ce:20:65:09:d6:6d:34:92:96:c0:d2:32:e6: 32:c5:5c:2f:5c:ef:ed:63:b0:23:b5:50:d1:39:45: d0:54:11:94:b9:9a:f2:41:c8:cb:6a:71:ad:17:30: 6d:32:d6:7b:c5:c0:93:58:e5:d8:86:27:df:d3:46: e0:5a:7a:6d:33:98:b5:a6:78:da:24:3f:76:7f:43: f8:75:04:ed:17:e4:84:15:50:7a:02:94:69:13:a5: c8:4f:d1:8c:27:3b:9d:f5:76:8b:5f:63:e1:dd:0f: 4a:ee:97:03:97:b5:db:93:d1:d2:73:fd:ab:dc:b7: 0d:10:d3:c1:0e:e7:f8:0d:9a:fd:8d:41:ed:2c:f1: 5b:ce:68:8c:d8:37:24:d0:a4:da:42:04:3a:59:f6: 84:45:ab:8f:8a:1a:55:f0:4c:10:17:bb:20:de:6f: c8:9d:86:a7:49:a1:ac:ef:e5:41:13:7c:5a:b1:54: c2:b4:47:13:32:8d:48:8a:f4:f6:75:f5:7d:f2:9c: 34:38:03:a0:34:ec:69:8b:16:b7:05:90:9c:83:b1: 82:4c:0c:b6:01:dc:8b:19:46:88:d9:e6:f1:36:d5: 78:40:1a:cb:b5:af:1b:c1:d1:8c:97:07:24:f0:d8: a8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A1:4E:18:19:AB:89:DE:96:3A:87:FF:42:EB:A3:5F:2B:1F:BC:AA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d1eba5c-3d88-4fe4-8c15-8fb7795ca002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption a5:c3:da:b7:84:3f:a8:7c:c3:7a:5a:d4:9b:a8:81:5f:75:eb: ad:9f:aa:e9:b1:48:d9:3b:80:9f:a9:ca:60:ef:ec:f8:a7:8e: c3:6f:b7:3b:2e:bf:b1:f6:0e:f0:1c:c8:4d:4f:32:68:8d:63: ea:e6:80:db:9a:aa:f5:0c:b7:4e:46:5d:37:fd:b1:4f:05:33: d5:da:c2:f3:69:ab:11:61:27:c1:f1:3a:00:da:b9:d2:9b:3d: bf:5a:42:14:03:c7:de:8f:25:83:7f:87:e1:81:64:3b:a9:ea: dd:c1:a5:50:cf:8d:20:67:b3:47:cf:c1:b6:4b:4d:76:5c:bd: 6d:ea:7e:45:61:c7:1f:7e:09:1f:7d:da:9c:1d:55:2b:48:79: cd:0b:44:b8:02:c0:79:45:c0:58:30:7e:35:d1:8d:85:bd:7d: 7a:a9:6b:10:33:d3:da:1c:05:58:70:db:36:f1:bd:50:2f:93: c8:65:df:92:95:18:0f:4c:95:77:a6:ee:b2:30:e4:d0:2d:10: 98:18:41:af:3d:99:a1:46:65:ee:b4:b5:11:2b:af:22:0a:de: 4c:f1:65:fb:fa:9d:2b:e9:dc:9d:a9:1b:fc:cc:12:35:2d:e5: 9a:0c:44:91:c3:66:d3:23:43:ea:c7:d8:81:f2:06:0f:f7:8c: 49:47:76:77 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcDIlhs85BypysthqKfkAHQM+t+IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTYzMTIyWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzQ0ZDZlZmU4ODUzYjQ0YzMwOWFjNmYzMjlhMThlMjg3 ZjhiMDc5MjExN2IzODY5MTYzOWQ4YzY0M2JlOTdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOvDQk4P5hRPdmTwvWe/hRziBlCdZtNJKWwNIy5jLFXC9c 7+1jsCO1UNE5RdBUEZS5mvJByMtqca0XMG0y1nvFwJNY5diGJ9/TRuBaem0zmLWm eNokP3Z/Q/h1BO0X5IQVUHoClGkTpchP0YwnO531dotfY+HdD0rulwOXtduT0dJz /avctw0Q08EO5/gNmv2NQe0s8VvOaIzYNyTQpNpCBDpZ9oRFq4+KGlXwTBAXuyDe b8idhqdJoazv5UETfFqxVMK0RxMyjUiK9PZ19X3ynDQ4A6A07GmLFrcFkJyDsYJM DLYB3IsZRojZ5vE21XhAGsu1rxvB0YyXByTw2KipAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUk6FOGBmrid6WOof/QuujXysfvKowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkMWViYTVjLTNkODgtNGZlNC04YzE1LThmYjc3OTVjYTAwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASZjANBgkqhkiG9w0BAQsFAAOCAQEApcPat4Q/qHzDelrUm6iBX3XrrZ+q 6bFI2TuAn6nKYO/s+KeOw2+3Oy6/sfYO8BzITU8yaI1j6uaA25qq9Qy3TkZdN/2x TwUz1drC82mrEWEnwfE6ANq50ps9v1pCFAPH3o8lg3+H4YFkO6nq3cGlUM+NIGez R8/BtktNdly9bep+RWHHH34JH33anB1VK0h5zQtEuALAeUXAWDB+NdGNhb19eqlr EDPT2hwFWHDbNvG9UC+TyGXfkpUYD0yVd6busjDk0C0QmBhBrz2ZoUZl7rS1ESuv IgreTPFl+/qdK+ncnakb/MwSNS3lmgxEkcNm0yND6sfYgfIGD/eMSUd2dw== -----END CERTIFICATE-----Generated at Sat Jun 14 05:47:31 2025 by rpki-client