$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9101b05f-09c9-4a5c-b608-681b4bc85846.roa File: 9101b05f-09c9-4a5c-b608-681b4bc85846.roa (raw, json) Hash identifier: 7S6rQx6WJzx7EXAVKWKtiF7sOCXXnDk6rP9uznXFLRk= Subject key identifier: 82:56:D5:48:41:2B:3C:56:9C:72:8E:4E:F6:54:55:2D:2C:AF:B5:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D03D2EB0AD4E56DF80CE0671187A8216F534541 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9101b05f-09c9-4a5c-b608-681b4bc85846.roa Signing time: Mon 02 Jun 2025 16:00:33 +0000 ROA not before: Mon 02 Jun 2025 16:00:33 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.233.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:03:d2:eb:0a:d4:e5:6d:f8:0c:e0:67:11:87:a8:21:6f:53:45:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 2 16:00:33 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=7485a8b7bfc9fb8f848edb9b00a43410bc398a37006d46f4b74f9b78e6bb7d42, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:52:fc:fb:4a:d5:65:b8:f9:2e:e0:1c:83:c3: 30:a8:d3:aa:76:29:4d:ec:66:1d:1e:a5:ab:f9:cd: 76:bd:87:67:a0:08:67:df:c9:18:bd:89:03:51:f6: ae:dc:21:f3:ce:b3:8f:52:9d:e6:7d:33:41:39:62: ea:0b:4c:f1:59:41:9b:a2:70:9a:cc:38:e6:68:a3: dd:37:b7:ad:0a:17:68:20:01:08:1f:9c:ed:57:a1: 7d:42:d2:e8:d6:74:74:f2:dc:91:43:48:21:ec:65: 44:75:08:39:8f:b9:ef:b3:06:b8:c5:17:b5:35:c4: f5:76:ff:48:45:69:34:f5:5b:d9:8f:1e:cb:74:6a: 44:2d:ff:5c:cc:01:a7:cd:32:f3:9e:22:4a:76:d4: 20:50:35:81:93:8a:78:62:18:35:d5:12:ca:c9:1e: 79:93:c6:ce:d6:db:3d:a2:27:68:1c:7e:8c:2a:51: 97:ee:20:90:7e:60:7d:f0:5c:b0:d5:6a:08:8a:95: 6d:4d:38:ab:7f:f6:56:c1:0e:69:6a:18:06:9c:ca: 43:aa:9b:ce:9b:7f:a7:31:b3:6a:48:b5:07:71:ac: d2:8c:e6:25:3f:8d:e3:20:7b:e5:f8:26:66:c4:cd: ea:c8:42:26:ee:15:a8:a8:84:00:16:79:af:13:8e: d7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:56:D5:48:41:2B:3C:56:9C:72:8E:4E:F6:54:55:2D:2C:AF:B5:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9101b05f-09c9-4a5c-b608-681b4bc85846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.233.52.0/24 Signature Algorithm: sha256WithRSAEncryption ac:0f:c1:97:1f:d5:32:35:cd:84:87:77:32:5c:38:d5:9a:15: 60:de:86:4e:b5:31:fa:6e:b9:eb:51:26:6f:92:c5:e5:5c:bb: c0:97:21:e2:4f:33:4e:4c:3d:15:dd:67:a3:8e:c3:59:5e:e8: c2:c4:34:71:f6:59:7e:ad:ec:f2:42:86:16:07:1f:ce:b2:9b: 32:0a:5d:f9:ce:11:53:20:67:99:98:6b:31:63:b5:7b:95:e6: 99:6d:92:6c:0d:53:32:32:08:0b:e8:ec:9e:23:b6:8c:0c:a4: 8c:0e:52:8e:7f:a1:bd:fb:2a:ce:f9:f4:34:72:90:99:4b:df: 17:d4:5c:94:3b:9e:d6:09:4a:18:7f:4a:43:a5:5c:4d:2d:55: 8c:2d:f9:46:a3:89:8d:75:78:b6:3e:40:f9:b2:7e:14:02:11: 2c:31:85:7a:29:80:b3:b2:c2:06:f9:f0:7b:3f:79:de:4c:00: dc:70:c2:68:ff:de:08:11:5e:76:84:ef:1c:d7:7c:a3:71:4b: 9c:55:12:dd:98:b7:9b:b4:f5:d2:d9:bf:71:53:6b:c9:77:39: 69:7d:a3:84:61:5c:5d:c2:17:62:d0:13:e5:67:dc:12:98:7b: 4f:d2:c9:66:40:e8:a6:a3:50:39:01:be:40:df:c5:5c:dd:a6: 2a:74:03:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPQPS6wrU5W34DOBnEYeoIW9TRUEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAyMTYwMDMzWhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDg1YThiN2JmYzlmYjhmODQ4ZWRiOWIwMGE0MzQxMGJj Mzk4YTM3MDA2ZDQ2ZjRiNzRmOWI3OGU2YmI3ZDQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtUvz7StVluPku4ByDwzCo06p2KU3sZh0epav5zXa9h2eg CGffyRi9iQNR9q7cIfPOs49SneZ9M0E5YuoLTPFZQZuicJrMOOZoo903t60KF2gg AQgfnO1XoX1C0ujWdHTy3JFDSCHsZUR1CDmPue+zBrjFF7U1xPV2/0hFaTT1W9mP Hst0akQt/1zMAafNMvOeIkp21CBQNYGTinhiGDXVEsrJHnmTxs7W2z2iJ2gcfowq UZfuIJB+YH3wXLDVagiKlW1NOKt/9lbBDmlqGAacykOqm86bf6cxs2pItQdxrNKM 5iU/jeMge+X4JmbEzerIQibuFaiohAAWea8TjtdfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUglbVSEErPFacco5O9lRVLSyvteQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxMDFiMDVmLTA5YzktNGE1Yy1iNjA4LTY4MWI0YmM4NTg0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN6TQwDQYJKoZIhvcNAQELBQADggEBAKwPwZcf1TI1zYSHdzJcONWaFWDe hk61MfpuuetRJm+SxeVcu8CXIeJPM05MPRXdZ6OOw1le6MLENHH2WX6t7PJChhYH H86ymzIKXfnOEVMgZ5mYazFjtXuV5pltkmwNUzIyCAvo7J4jtowMpIwOUo5/ob37 Ks759DRykJlL3xfUXJQ7ntYJShh/SkOlXE0tVYwt+UajiY11eLY+QPmyfhQCESwx hXopgLOywgb58Hs/ed5MANxwwmj/3ggRXnaE7xzXfKNxS5xVEt2Yt5u09dLZv3FT a8l3OWl9o4RhXF3CF2LQE+Vn3BKYe0/SyWZA6KajUDkBvkDfxVzdpip0Ax4= -----END CERTIFICATE-----Generated at Sat Jun 14 05:51:41 2025 by rpki-client