$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8bf7830-38e5-48bd-b3b3-2957dd31fe3b.roa File: a8bf7830-38e5-48bd-b3b3-2957dd31fe3b.roa (raw, json) Hash identifier: JND9PGiiybkJvpvlK/S6Yyf6rrNA+/lGHeTMN56WLCg= Subject key identifier: BD:D4:A1:07:6E:7C:3B:4E:1B:03:A5:61:F7:8C:5A:3E:80:3D:7B:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7FF2368B079628321DCC4E4D0809CCB281CDD254 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8bf7830-38e5-48bd-b3b3-2957dd31fe3b.roa Signing time: Mon 09 Jun 2025 15:51:01 +0000 ROA not before: Mon 09 Jun 2025 15:51:01 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.156.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:f2:36:8b:07:96:28:32:1d:cc:4e:4d:08:09:cc:b2:81:cd:d2:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 15:51:01 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=ab5a3f0d965fd35507070fcc8fc0310984006ac4bd08650b567f367f67af8aa1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:f8:57:6d:a0:2c:5f:00:be:fc:14:89:9b: 40:f3:b4:50:91:70:90:93:36:d0:74:b2:fa:06:ed: f8:e7:ab:07:de:3a:bf:ce:21:9d:ce:eb:ce:2a:16: 59:45:b4:cc:f0:ab:30:0f:d3:f9:78:c6:19:9e:66: 05:6d:39:4b:97:a2:5b:8b:10:f2:c6:5b:c2:8e:48: 2c:8b:bf:81:bb:5a:87:db:8c:40:22:90:6f:50:21: fc:1c:4d:94:4c:07:49:80:f3:24:fa:53:a7:5f:06: 96:a5:da:14:0e:db:0f:52:f5:74:fe:19:20:01:13: e0:44:dc:15:5f:87:52:6d:03:63:00:cd:14:4a:72: dc:7d:25:18:0d:03:21:4a:ec:05:1b:05:de:67:c9: e2:55:59:7d:88:e1:c6:65:16:38:16:9e:6e:2e:c9: ce:37:28:6e:c9:6d:2f:d7:15:ee:e3:aa:7e:09:5c: 69:ae:97:9b:94:a8:7f:26:c9:28:54:a3:06:91:36: 15:58:77:77:57:b7:9a:4e:a1:93:75:a6:50:49:a2: 55:b3:36:bb:2a:c3:2a:83:0c:fc:60:ec:0b:fa:4e: a8:0c:3f:90:3b:77:d8:7c:86:42:ab:1c:d1:66:c2: 3a:b9:fa:6b:fb:c6:96:82:f8:bf:1e:9d:9f:a4:1e: 25:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:A1:07:6E:7C:3B:4E:1B:03:A5:61:F7:8C:5A:3E:80:3D:7B:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8bf7830-38e5-48bd-b3b3-2957dd31fe3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.156.2.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:01:56:8e:53:e4:ab:f3:2a:91:14:7e:63:f3:ab:78:8d:e5: 0e:aa:99:ba:00:da:30:e5:34:bf:87:8c:1b:6c:71:84:78:3e: 6e:5a:d6:de:41:ee:25:90:7f:de:7b:26:9e:1f:62:a0:46:65: 3f:12:e4:67:01:82:0b:3f:cb:5f:e4:ed:ce:03:0f:97:d4:5f: 21:46:10:3f:e8:e1:4b:24:69:fe:9d:ab:8e:a3:79:cf:51:95: 1b:56:55:0c:73:aa:3f:16:a5:ba:b9:05:b4:2c:9e:7e:02:54: c0:80:ed:b7:4e:cc:65:e8:6c:7d:df:7e:1b:b5:36:3f:31:80: 5d:9e:d2:ff:09:be:73:0c:e1:7d:4e:84:2e:69:03:ac:9a:a0: 7a:70:76:f7:20:cd:81:8c:04:33:2e:b9:05:01:bc:dd:76:4f: 8e:7a:00:9e:8c:5f:83:08:c9:c8:95:06:4b:b3:51:97:ea:4f: fb:1e:d0:7c:03:6b:7b:2e:13:38:9b:25:fa:57:cc:70:c1:77: 10:87:1f:f5:e2:0a:57:0e:bd:9a:fc:c5:94:51:49:9a:a8:0a: c3:c3:4a:3f:72:b4:ce:ed:59:35:35:91:19:97:ef:55:d1:67: ad:aa:f7:33:d1:4a:d1:7e:d2:e8:d5:6b:5c:28:82:b6:79:58: f1:3f:dc:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf/I2iweWKDIdzE5NCAnMsoHN0lQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTU1MTAxWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjVhM2YwZDk2NWZkMzU1MDcwNzBmY2M4ZmMwMzEwOTg0 MDA2YWM0YmQwODY1MGI1NjdmMzY3ZjY3YWY4YWExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCd0fhXbaAsXwC+/BSJm0DztFCRcJCTNtB0svoG7fjnqwfe Or/OIZ3O684qFllFtMzwqzAP0/l4xhmeZgVtOUuXoluLEPLGW8KOSCyLv4G7Wofb jEAikG9QIfwcTZRMB0mA8yT6U6dfBpal2hQO2w9S9XT+GSABE+BE3BVfh1JtA2MA zRRKctx9JRgNAyFK7AUbBd5nyeJVWX2I4cZlFjgWnm4uyc43KG7JbS/XFe7jqn4J XGmul5uUqH8myShUowaRNhVYd3dXt5pOoZN1plBJolWzNrsqwyqDDPxg7Av6TqgM P5A7d9h8hkKrHNFmwjq5+mv7xpaC+L8enZ+kHiVxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUvdShB258O04bA6Vh94xaPoA9e78wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E4YmY3ODMwLTM4ZTUtNDhiZC1iM2IzLTI5NTdkZDMxZmUzYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2nAIwDQYJKoZIhvcNAQELBQADggEBAEsBVo5T5KvzKpEUfmPzq3iN5Q6q mboA2jDlNL+HjBtscYR4Pm5a1t5B7iWQf957Jp4fYqBGZT8S5GcBggs/y1/k7c4D D5fUXyFGED/o4Uskaf6dq46jec9RlRtWVQxzqj8Wpbq5BbQsnn4CVMCA7bdOzGXo bH3ffhu1Nj8xgF2e0v8JvnMM4X1OhC5pA6yaoHpwdvcgzYGMBDMuuQUBvN12T456 AJ6MX4MIyciVBkuzUZfqT/se0HwDa3suEzibJfpXzHDBdxCHH/XiClcOvZr8xZRR SZqoCsPDSj9ytM7tWTU1kRmX71XRZ62q9zPRStF+0ujVa1wogrZ5WPE/3PI= -----END CERTIFICATE-----Generated at Sun Jun 15 00:01:24 2025 by rpki-client