$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa File: a926660f-724f-4d66-b9f3-dd5b25efa483.roa (raw, json) Hash identifier: DIDS5/cO9PSOqQdNpE5DuTrVdgAw5+cV0ch2Lg01AWk= Subject key identifier: 99:D0:A1:35:DF:70:93:A6:2D:8B:C3:95:6B:92:93:96:BD:BA:95:11 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BF066AABEBE6AC4AD49472FA7F81C659FC8A748 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa Signing time: Sat 31 May 2025 00:20:17 +0000 ROA not before: Sat 31 May 2025 00:20:17 +0000 ROA not after: Sat 05 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f0:66:aa:be:be:6a:c4:ad:49:47:2f:a7:f8:1c:65:9f:c8:a7:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 31 00:20:17 2025 GMT Not After : Jul 5 23:59:59 2025 GMT Subject: serialNumber=6ea760b8e867bc520c23853c379364070c58664c0de0da75e7aa6c10b7e12961, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:67:a5:c3:0a:20:cb:07:22:c3:c0:dd:aa:f3: 53:7a:68:0c:a9:a3:5a:82:4a:08:fb:6c:02:20:5c: ac:c1:16:13:92:43:8e:a7:5c:78:6d:47:aa:01:f5: 7d:1f:47:1a:96:53:d9:0e:6c:22:ce:53:8e:4c:58: 6b:62:85:27:3c:49:82:db:6a:c0:99:4b:49:76:6a: 98:0a:83:80:62:e9:ff:73:e6:5e:53:f7:2a:c4:ea: df:32:a6:fc:da:01:76:d3:1b:f8:ec:fc:91:91:76: 39:2f:3a:13:a8:8d:ce:c1:10:c2:84:c4:b6:22:93: d8:31:2c:13:a2:3e:65:16:2e:52:09:25:85:3f:e4: ed:b2:1d:48:42:ad:bc:d9:56:40:58:85:c3:28:d0: 91:9d:33:f5:81:72:c0:3d:3c:f0:2b:7a:f0:6e:e5: b6:fe:c5:34:72:8d:b5:46:ea:78:3e:2a:09:5d:ef: 59:de:ed:6a:15:cb:46:c2:93:46:92:ec:62:fa:ef: 72:18:09:67:82:15:4e:2d:29:f1:68:0a:85:93:76: d3:c7:b2:d1:93:4b:40:86:16:3b:2b:6c:74:e3:32: db:c3:d1:59:7d:c1:3a:f2:0d:27:90:eb:82:61:47: ae:97:08:52:45:8a:70:bb:a4:87:0f:55:f7:23:df: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D0:A1:35:DF:70:93:A6:2D:8B:C3:95:6B:92:93:96:BD:BA:95:11 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.104.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:0a:8c:78:69:1a:1b:96:ab:24:33:b8:32:9f:55:64:f5:97: b4:a5:a3:1b:a9:a9:bc:ba:d6:66:94:5a:b2:1d:2d:d6:52:00: ec:67:cf:78:c6:82:cf:ca:6c:08:53:4e:61:8e:d9:d0:ab:95: f7:9e:53:61:38:53:af:65:45:af:bd:39:7a:30:e2:db:3b:ce: c3:64:f8:a9:fe:69:0a:5d:28:4f:3f:0d:af:e3:83:51:b7:b8: 88:56:1c:39:0f:7e:ab:dd:cb:82:f8:be:36:4e:5d:fd:4b:15: df:0a:f3:08:4a:03:9b:5e:5b:63:0c:b4:46:1e:c6:13:e3:1a: 56:39:6d:df:68:40:11:9a:25:8e:16:4e:eb:f7:09:3d:f7:69: c4:bb:65:a3:ac:41:12:e4:c5:c4:fb:90:56:b0:f7:58:d1:e7: cd:b1:28:30:d4:81:b5:e9:b8:46:99:6c:38:ce:25:16:80:d8: 99:34:7c:4d:72:da:b1:02:42:cf:c4:b8:a7:57:18:ed:42:c4: 44:98:5f:6d:3f:ad:73:c5:8e:1c:fb:1e:03:3f:96:43:fa:cd: 9b:03:4c:e2:51:57:bb:d8:59:89:9c:20:db:28:ac:56:5b:a5: c6:b1:50:f5:b1:64:0e:f9:22:83:4b:19:5f:33:d8:fc:29:11: 9c:6e:a2:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK/Bmqr6+asStSUcvp/gcZZ/Ip0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTMxMDAyMDE3WhcNMjUwNzA1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZWE3NjBiOGU4NjdiYzUyMGMyMzg1M2MzNzkzNjQwNzBj NTg2NjRjMGRlMGRhNzVlN2FhNmMxMGI3ZTEyOTYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhZ6XDCiDLByLDwN2q81N6aAypo1qCSgj7bAIgXKzBFhOS Q46nXHhtR6oB9X0fRxqWU9kObCLOU45MWGtihSc8SYLbasCZS0l2apgKg4Bi6f9z 5l5T9yrE6t8ypvzaAXbTG/js/JGRdjkvOhOojc7BEMKExLYik9gxLBOiPmUWLlIJ JYU/5O2yHUhCrbzZVkBYhcMo0JGdM/WBcsA9PPArevBu5bb+xTRyjbVG6ng+Kgld 71ne7WoVy0bCk0aS7GL673IYCWeCFU4tKfFoCoWTdtPHstGTS0CGFjsrbHTjMtvD 0Vl9wTryDSeQ64JhR66XCFJFinC7pIcPVfcj3w5/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmdChNd9wk6Yti8OVa5KTlr26lREwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5MjY2NjBmLTcyNGYtNGQ2Ni1iOWYzLWRkNWIyNWVmYTQ4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPtWgwDQYJKoZIhvcNAQELBQADggEBAFoKjHhpGhuWqyQzuDKfVWT1l7Sl oxupqby61maUWrIdLdZSAOxnz3jGgs/KbAhTTmGO2dCrlfeeU2E4U69lRa+9OXow 4ts7zsNk+Kn+aQpdKE8/Da/jg1G3uIhWHDkPfqvdy4L4vjZOXf1LFd8K8whKA5te W2MMtEYexhPjGlY5bd9oQBGaJY4WTuv3CT33acS7ZaOsQRLkxcT7kFaw91jR582x KDDUgbXpuEaZbDjOJRaA2Jk0fE1y2rECQs/EuKdXGO1CxESYX20/rXPFjhz7HgM/ lkP6zZsDTOJRV7vYWYmcINsorFZbpcaxUPWxZA75IoNLGV8z2PwpEZxuosk= -----END CERTIFICATE-----Generated at Sat Jun 14 05:46:39 2025 by rpki-client