$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b23d8d2b-7d77-4cdd-9344-8036c8f0fd09.roa File: b23d8d2b-7d77-4cdd-9344-8036c8f0fd09.roa (raw, json) Hash identifier: qJLjRHEzMmdn+w8KpU/Wu8rhITU2w1HJY/GUZP2dEa4= Subject key identifier: B3:AC:87:8A:17:3D:93:65:D2:A9:95:23:97:A3:80:67:BE:76:19:32 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 774D5F9EEBFE818853E0E257D7A80C06C13173CF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b23d8d2b-7d77-4cdd-9344-8036c8f0fd09.roa Signing time: Fri 11 Jul 2025 17:40:16 +0000 ROA not before: Fri 11 Jul 2025 17:40:16 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.74.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4d:5f:9e:eb:fe:81:88:53:e0:e2:57:d7:a8:0c:06:c1:31:73:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:40:16 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=8fb9711e423fa0481fa47a7932c3a2104207149814dbaf643c2b84294da3c4ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:f3:a9:24:1e:08:8e:99:de:9b:d9:f7:20: af:70:cb:1d:1c:23:49:a3:fc:8f:39:b0:f0:96:1a: 28:78:48:23:b2:d0:4b:7c:5e:28:f6:7f:be:05:89: f6:b5:45:a6:fe:64:fe:12:98:a3:a8:e6:92:27:ba: ff:c5:79:48:d8:46:42:99:4b:ce:7b:f4:a1:0d:5e: d3:ed:84:fb:a2:34:b2:30:31:f7:66:0d:c9:4d:e3: cb:8c:71:d0:15:28:d6:78:a6:f0:80:00:bf:ba:b3: 6a:3d:07:22:a5:74:4a:14:d3:9b:48:db:a5:e7:bf: 74:16:88:8d:da:78:a9:07:a7:9d:a2:79:72:6b:44: 82:72:a2:53:62:29:37:e5:c4:0e:76:a7:85:17:03: b9:55:c6:32:61:db:e5:14:12:99:19:4d:7f:1c:d6: 26:c7:76:4e:d4:fc:2b:47:e9:f6:79:69:ad:9b:e8: 60:d9:51:45:58:b7:de:73:bf:9f:cc:16:9b:32:23: 8c:a2:24:07:07:22:27:d4:cc:ea:6a:d8:06:21:e6: ce:96:13:fe:8e:15:6d:87:cb:77:96:8c:64:d4:e6: 77:ec:e1:23:51:48:74:b8:e8:86:1e:2a:51:67:db: 42:6a:1b:a3:a1:44:7c:6b:45:1c:2e:af:63:80:c4: 9a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:AC:87:8A:17:3D:93:65:D2:A9:95:23:97:A3:80:67:BE:76:19:32 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b23d8d2b-7d77-4cdd-9344-8036c8f0fd09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.74.128.0/17 Signature Algorithm: sha256WithRSAEncryption 9d:49:1b:d1:db:a8:61:37:e9:ae:47:ee:7a:2d:86:a2:1b:5d: 01:bb:c1:6c:02:4c:53:35:a1:6f:96:01:27:4f:f9:b6:b6:65: 4a:ff:11:35:41:80:17:3c:c7:ce:2a:82:11:68:9c:26:07:bc: 54:af:98:b0:43:3c:98:0d:c0:4f:7c:5c:b6:f7:1f:be:70:6c: c2:da:0b:55:18:8b:97:cf:9f:0a:09:06:ab:b0:e2:33:27:35: 90:4e:58:2c:cf:ac:c7:d8:19:a5:4d:6a:92:3f:b5:4d:03:d4: 18:dd:90:12:ff:83:52:d2:b0:3e:d1:72:be:c0:32:81:2e:29: 94:bd:80:89:d9:e2:55:95:d4:e8:97:95:84:49:33:2d:f4:90: f9:eb:27:bf:96:62:9e:e0:87:86:44:b0:38:29:e6:2c:9b:9a: 16:4a:5a:4b:b6:43:32:bb:24:d9:03:72:74:4f:6f:2e:35:f8: 61:e8:d4:89:8c:32:f3:3e:2a:bc:ce:90:1d:6c:56:79:cd:f7: 90:fe:f9:30:b1:b1:f0:c4:d8:8c:74:c5:af:68:aa:18:20:06: be:86:81:de:9e:89:8f:0d:0d:41:a9:8b:48:39:17:bc:5f:7b: bc:4d:75:40:82:6a:fe:db:09:41:a3:98:dd:42:d1:b0:0e:e1: e4:dd:43:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUd01fnuv+gYhT4OJX16gMBsExc88wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTc0MDE2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZmI5NzExZTQyM2ZhMDQ4MWZhNDdhNzkzMmMzYTIxMDQy MDcxNDk4MTRkYmFmNjQzYzJiODQyOTRkYTNjNGVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKG/OpJB4Ijpnem9n3IK9wyx0cI0mj/I85sPCWGih4SCOy 0Et8Xij2f74Fifa1Rab+ZP4SmKOo5pInuv/FeUjYRkKZS8579KENXtPthPuiNLIw MfdmDclN48uMcdAVKNZ4pvCAAL+6s2o9ByKldEoU05tI26Xnv3QWiI3aeKkHp52i eXJrRIJyolNiKTflxA52p4UXA7lVxjJh2+UUEpkZTX8c1ibHdk7U/CtH6fZ5aa2b 6GDZUUVYt95zv5/MFpsyI4yiJAcHIifUzOpq2AYh5s6WE/6OFW2Hy3eWjGTU5nfs 4SNRSHS46IYeKlFn20JqG6OhRHxrRRwur2OAxJoxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUs6yHihc9k2XSqZUjl6OAZ752GTIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyM2Q4ZDJiLTdkNzctNGNkZC05MzQ0LTgwMzZjOGYwZmQwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2SoAwDQYJKoZIhvcNAQELBQADggEBAJ1JG9HbqGE36a5H7nothqIbXQG7 wWwCTFM1oW+WASdP+ba2ZUr/ETVBgBc8x84qghFonCYHvFSvmLBDPJgNwE98XLb3 H75wbMLaC1UYi5fPnwoJBquw4jMnNZBOWCzPrMfYGaVNapI/tU0D1BjdkBL/g1LS sD7Rcr7AMoEuKZS9gInZ4lWV1OiXlYRJMy30kPnrJ7+WYp7gh4ZEsDgp5iybmhZK Wku2QzK7JNkDcnRPby41+GHo1ImMMvM+KrzOkB1sVnnN95D++TCxsfDE2Ix0xa9o qhggBr6Ggd6eiY8NDUGpi0g5F7xfe7xNdUCCav7bCUGjmN1C0bAO4eTdQ9w= -----END CERTIFICATE-----Generated at Mon Aug 4 21:42:28 2025 by rpki-client