$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e2d78ba-a86b-42fd-8788-a7f126ab3091.roa File: 7e2d78ba-a86b-42fd-8788-a7f126ab3091.roa (raw, json) Hash identifier: zfdfSSFOV4wSIBDpXVeKZjHwDmdIGzBRjYPalFZs09E= Subject key identifier: 9B:C8:FA:21:92:01:17:24:FE:E6:5E:9C:46:C5:CD:6F:3B:C1:A6:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B701932D30ABCA163140DDA78960D657523EDE0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e2d78ba-a86b-42fd-8788-a7f126ab3091.roa Signing time: Wed 04 Jun 2025 00:50:09 +0000 ROA not before: Wed 04 Jun 2025 00:50:09 +0000 ROA not after: Wed 09 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:70:19:32:d3:0a:bc:a1:63:14:0d:da:78:96:0d:65:75:23:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 4 00:50:09 2025 GMT Not After : Jul 9 23:59:59 2025 GMT Subject: serialNumber=a6c67b010190d900db3fcdb9063b9c61011f67afa52dad4731ae34a9d4061698, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e3:92:2e:fa:42:fe:e5:e7:6b:34:31:bd:0a: 17:2e:a9:c1:6b:d9:53:29:6c:5c:d4:d9:c5:59:67: 3f:0e:5a:d9:73:32:85:b0:a0:94:a8:37:d5:e0:b3: 87:5e:f5:53:5d:60:57:d7:70:49:75:36:b4:f2:12: 42:34:98:b7:05:26:bb:93:2b:3c:26:8b:88:48:1e: b1:bd:59:e1:1d:50:c1:ad:9c:cf:c0:b9:48:ac:31: 5b:de:43:e0:34:bd:09:dc:9e:ea:fe:f0:7f:6d:65: 0a:46:0c:1c:0e:ef:f4:fb:79:f2:e0:2c:1a:3f:3f: 3f:54:91:6f:8b:00:e9:a4:76:bc:bf:9d:88:fa:5b: 04:67:3a:d5:cc:8b:e7:d4:b2:05:ee:22:32:1d:96: 23:d0:1b:a3:af:df:d8:c5:39:c4:31:9f:cf:ab:07: af:f7:ed:af:df:f6:df:74:e2:c3:4b:c5:b2:63:39: 87:61:0e:a8:c3:9f:e2:d5:5e:55:78:b4:ef:15:65: 12:08:7d:e8:41:c6:4e:2e:c5:8e:7c:fd:d8:76:3a: 7b:a9:7a:8d:6e:93:19:0d:23:5f:f0:cd:ce:f7:81: b8:b8:71:65:60:e6:06:cd:2c:7a:86:71:32:11:f3: 6e:98:22:32:05:ff:0a:e4:27:35:8f:bb:95:ee:a7: 0b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:FA:21:92:01:17:24:FE:E6:5E:9C:46:C5:CD:6F:3B:C1:A6:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7e2d78ba-a86b-42fd-8788-a7f126ab3091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.170.0/23 Signature Algorithm: sha256WithRSAEncryption af:d2:29:f5:c4:d7:07:95:c9:53:30:ca:38:03:41:f0:8e:aa: 5a:a7:83:c3:6e:72:51:4b:80:5b:54:43:99:f3:6a:95:d8:1f: 5a:4f:b3:47:54:4f:01:36:23:6c:89:00:1f:67:0b:58:cf:ab: d1:78:ea:80:26:c6:01:2e:d9:13:2c:8b:fd:41:82:20:17:60: 60:f1:4e:45:a7:ed:f0:da:96:3b:ad:4b:f5:fa:a1:f6:39:b3: 69:1b:e1:a8:9d:72:62:d9:a0:4c:70:ab:6a:ed:0d:08:54:b2: 56:0f:7d:32:75:e5:a8:08:03:f5:99:71:ae:bb:5f:97:23:16: c2:35:dd:d6:ad:19:bf:99:24:08:df:d0:39:d3:bf:a1:b3:3c: 1d:0b:21:db:2f:da:77:f7:1e:ab:a4:34:06:f0:90:86:9e:18: 48:97:b4:b2:bd:a6:50:fb:57:8d:78:e7:fa:60:ac:ac:51:13: 64:0d:0b:32:44:e3:b9:b8:0a:60:51:21:16:3b:2a:d0:fe:a8: fe:67:6a:15:01:90:94:55:a1:be:6d:d2:15:5e:83:45:41:b6: 04:52:48:e6:6b:b5:8a:57:08:0c:e2:f7:d8:af:2e:56:ec:ea: 74:8f:88:cf:13:d8:f0:a3:5f:9d:71:d4:3e:57:30:b5:f6:48: df:e1:68:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS3AZMtMKvKFjFA3aeJYNZXUj7eAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA0MDA1MDA5WhcNMjUwNzA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNmM2N2IwMTAxOTBkOTAwZGIzZmNkYjkwNjNiOWM2MTAx MWY2N2FmYTUyZGFkNDczMWFlMzRhOWQ0MDYxNjk4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy45Iu+kL+5edrNDG9ChcuqcFr2VMpbFzU2cVZZz8OWtlz MoWwoJSoN9Xgs4de9VNdYFfXcEl1NrTyEkI0mLcFJruTKzwmi4hIHrG9WeEdUMGt nM/AuUisMVveQ+A0vQncnur+8H9tZQpGDBwO7/T7efLgLBo/Pz9UkW+LAOmkdry/ nYj6WwRnOtXMi+fUsgXuIjIdliPQG6Ov39jFOcQxn8+rB6/37a/f9t904sNLxbJj OYdhDqjDn+LVXlV4tO8VZRIIfehBxk4uxY58/dh2Onupeo1ukxkNI1/wzc73gbi4 cWVg5gbNLHqGcTIR826YIjIF/wrkJzWPu5XupwubAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUm8j6IZIBFyT+5l6cRsXNbzvBpvAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdlMmQ3OGJhLWE4NmItNDJmZC04Nzg4LWE3ZjEyNmFiMzA5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvKowDQYJKoZIhvcNAQELBQADggEBAK/SKfXE1weVyVMwyjgDQfCOqlqn g8NuclFLgFtUQ5nzapXYH1pPs0dUTwE2I2yJAB9nC1jPq9F46oAmxgEu2RMsi/1B giAXYGDxTkWn7fDaljutS/X6ofY5s2kb4aidcmLZoExwq2rtDQhUslYPfTJ15agI A/WZca67X5cjFsI13datGb+ZJAjf0DnTv6GzPB0LIdsv2nf3HqukNAbwkIaeGEiX tLK9plD7V4145/pgrKxRE2QNCzJE47m4CmBRIRY7KtD+qP5nahUBkJRVob5t0hVe g0VBtgRSSOZrtYpXCAzi99ivLlbs6nSPiM8T2PCjX51x1D5XMLX2SN/haJ4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:41 2025 by rpki-client