$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6e79f2e-17cf-44da-b6d3-3a50d94571fd.roa File: b6e79f2e-17cf-44da-b6d3-3a50d94571fd.roa (raw, json) Hash identifier: gCxt2015t/4Ujw/BdiO50tKuqFibwGvpQtCODZ3BwnY= Subject key identifier: A6:F5:FD:32:F0:21:9D:95:42:D6:B0:26:48:60:BE:51:F9:21:55:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 57D2F640C77084A0AFD27523EB3826D7D5C86CBA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6e79f2e-17cf-44da-b6d3-3a50d94571fd.roa Signing time: Tue 20 May 2025 16:20:23 +0000 ROA not before: Tue 20 May 2025 16:20:23 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 398378 IP address blocks: 161.188.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d2:f6:40:c7:70:84:a0:af:d2:75:23:eb:38:26:d7:d5:c8:6c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 16:20:23 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=164e7ee502cf83a0aad77493cc92bba0f93260454f68f1b16810a32a42baa893, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:37:36:ab:46:d4:46:29:e6:37:3d:8f:c8:39: e6:44:83:17:5b:ba:87:d5:96:26:06:f2:fd:9a:02: 9f:9a:27:ca:0e:4d:6d:3a:22:45:a0:b0:99:9b:ae: a4:fd:46:23:01:61:79:a4:12:a2:8f:ce:74:99:53: 5e:a6:4d:f9:b8:19:97:2e:42:04:26:ce:61:5d:94: 75:9a:68:7b:c2:f0:39:ee:84:cd:45:4b:c0:53:5f: 24:f0:47:3b:90:16:00:a5:b3:5a:c2:8c:ed:56:5a: 02:5f:93:64:69:d0:b5:be:5a:25:3b:9d:81:da:21: 71:bc:94:70:c2:a6:cf:b7:5e:f2:97:68:b1:72:98: 30:8e:01:d8:60:fd:38:1a:b0:5a:14:bc:66:0a:48: 7e:3e:0c:23:ba:6b:19:ab:79:a0:0b:8c:2b:ff:98: 2b:5d:97:45:e8:f9:dd:8a:4c:0c:89:00:77:c0:be: 15:39:9c:2d:48:9a:6e:17:0a:58:7e:4b:77:da:90: 89:d6:e2:e9:f9:d2:46:f2:39:2c:eb:11:18:c1:94: 80:b3:a3:a8:48:0b:fe:ab:93:3c:5e:78:29:2d:17: 8f:14:8f:db:b1:6d:4a:43:71:58:9b:c9:1e:31:c5: 81:b4:46:1a:79:23:14:a6:09:a1:be:14:9d:15:37: ab:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F5:FD:32:F0:21:9D:95:42:D6:B0:26:48:60:BE:51:F9:21:55:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b6e79f2e-17cf-44da-b6d3-3a50d94571fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.138.0/23 Signature Algorithm: sha256WithRSAEncryption 44:cf:09:44:aa:54:b1:05:b1:b0:7b:0f:46:5b:aa:a0:bf:c6: d2:1e:be:25:07:7d:d7:b3:5e:02:f0:c9:c0:95:9b:ff:45:ca: 1b:ef:d9:ed:62:4a:c1:b2:31:0a:80:b2:32:43:b5:96:d9:84: 0e:e8:9b:25:98:52:ba:e8:27:c1:95:02:0f:d1:a3:f8:16:91: 00:ba:e9:8c:51:e5:18:3a:e7:48:2e:5e:43:62:27:33:04:f7: 40:63:1d:6b:2f:8f:b5:fe:9d:dd:5f:7d:64:19:32:e8:3b:bd: 37:51:d8:3b:fe:01:19:f5:12:60:19:5c:a9:d7:c1:75:be:e4: 18:34:0c:a0:6d:f6:39:a3:74:5f:8c:8c:31:84:47:75:81:1b: 79:d2:a4:96:c5:f2:24:e1:35:3b:ad:d9:fc:30:c2:86:3f:e5: da:e7:ec:ff:c1:f5:90:31:a5:06:2f:d6:b8:4a:af:00:c9:ca: 91:43:bb:43:46:de:33:51:c3:2e:23:ee:28:37:b6:47:73:cb: 12:e8:1f:7d:aa:c4:e5:92:c7:60:55:f8:a7:47:fe:26:ce:a8: 84:49:93:ca:17:06:05:f1:5f:52:ad:7b:0e:e4:e2:3a:b4:8e: e3:f3:69:e6:77:65:fe:2a:66:6a:9a:e6:56:11:25:8f:d6:ba: 63:87:f8:a6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV9L2QMdwhKCv0nUj6zgm19XIbLowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTYyMDIzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjRlN2VlNTAyY2Y4M2EwYWFkNzc0OTNjYzkyYmJhMGY5 MzI2MDQ1NGY2OGYxYjE2ODEwYTMyYTQyYmFhODkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiNzarRtRGKeY3PY/IOeZEgxdbuofVliYG8v2aAp+aJ8oO TW06IkWgsJmbrqT9RiMBYXmkEqKPznSZU16mTfm4GZcuQgQmzmFdlHWaaHvC8Dnu hM1FS8BTXyTwRzuQFgCls1rCjO1WWgJfk2Rp0LW+WiU7nYHaIXG8lHDCps+3XvKX aLFymDCOAdhg/TgasFoUvGYKSH4+DCO6axmreaALjCv/mCtdl0Xo+d2KTAyJAHfA vhU5nC1Imm4XClh+S3fakInW4un50kbyOSzrERjBlICzo6hIC/6rkzxeeCktF48U j9uxbUpDcVibyR4xxYG0Rhp5IxSmCaG+FJ0VN6t9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpvX9MvAhnZVC1rAmSGC+UfkhVagwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I2ZTc5ZjJlLTE3Y2YtNDRkYS1iNmQzLTNhNTBkOTQ1NzFmZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvIowDQYJKoZIhvcNAQELBQADggEBAETPCUSqVLEFsbB7D0ZbqqC/xtIe viUHfdezXgLwycCVm/9Fyhvv2e1iSsGyMQqAsjJDtZbZhA7omyWYUrroJ8GVAg/R o/gWkQC66YxR5Rg650guXkNiJzME90BjHWsvj7X+nd1ffWQZMug7vTdR2Dv+ARn1 EmAZXKnXwXW+5Bg0DKBt9jmjdF+MjDGER3WBG3nSpJbF8iThNTut2fwwwoY/5drn 7P/B9ZAxpQYv1rhKrwDJypFDu0NG3jNRwy4j7ig3tkdzyxLoH32qxOWSx2BV+KdH /ibOqIRJk8oXBgXxX1Ktew7k4jq0juPzaeZ3Zf4qZmqa5lYRJY/WumOH+KY= -----END CERTIFICATE-----Generated at Sun Jun 15 06:12:46 2025 by rpki-client