$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb5b6ba3-f48c-4ecd-9710-f56300cb993c.roa File: bb5b6ba3-f48c-4ecd-9710-f56300cb993c.roa (raw, json) Hash identifier: SMF8uRxHpyv1L6TPF2rCuO4Xv3qrRrII/pR6PNf+Z18= Subject key identifier: 65:C2:3A:6D:A1:D9:70:D4:6B:9E:A8:82:3D:65:3B:66:A9:4E:97:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 65D8525A15E989C046EEF8AE3C1D2497D40A9398 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb5b6ba3-f48c-4ecd-9710-f56300cb993c.roa Signing time: Tue 03 Jun 2025 16:11:36 +0000 ROA not before: Tue 03 Jun 2025 16:11:36 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d8:52:5a:15:e9:89:c0:46:ee:f8:ae:3c:1d:24:97:d4:0a:93:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 16:11:36 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=2863fae1fc5a001c327fb0ac8c171ba4bb508af641428d39fc33ff0d287e798f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:72:d0:06:12:4f:39:7c:da:3e:50:3e:a3: 81:62:e5:59:98:1b:11:5f:30:95:b4:cc:40:af:db: 4f:5a:c1:f1:fd:9d:a2:4a:9f:c8:9c:1c:5d:c4:b2: 7f:80:df:33:24:8d:ce:37:c5:d0:b9:79:a8:68:1e: 10:30:b4:75:af:c0:d2:ae:4d:c1:36:bc:a8:54:c8: f9:f7:19:a7:41:46:67:56:d4:38:3d:83:a1:49:42: 55:05:21:fd:7f:92:7c:12:3d:a5:f5:e1:31:b1:d0: 06:05:50:94:da:f8:1b:d7:15:d8:86:ca:ba:ca:38: 26:08:06:79:89:25:f2:b0:6f:5a:5f:27:26:39:64: c0:58:67:c3:c3:b8:9a:15:24:a5:9d:9c:b5:0e:93: eb:39:24:0b:01:37:54:85:7b:23:d3:97:73:1c:84: 9a:d3:52:4f:a9:f5:3e:cc:83:2a:46:a2:be:29:8e: 25:0c:1b:48:de:fd:2a:ff:fc:d2:ff:4a:3d:e6:2e: 8c:72:78:10:c2:88:8d:ba:45:b4:b6:ff:f5:3e:cd: ce:8d:aa:3c:46:9b:b7:6a:25:1a:9b:3e:98:fe:35: 4f:cc:d7:18:90:fd:07:05:6e:12:e5:9b:ea:32:1a: c1:08:71:69:fc:2e:6c:fe:d2:1f:84:b8:c8:86:9c: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:3A:6D:A1:D9:70:D4:6B:9E:A8:82:3D:65:3B:66:A9:4E:97:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb5b6ba3-f48c-4ecd-9710-f56300cb993c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.240.0/20 Signature Algorithm: sha256WithRSAEncryption 6e:85:23:08:a4:de:30:5a:07:d3:01:dd:33:35:39:b7:e0:ad: aa:c6:52:a2:9e:71:c0:c9:4b:39:ec:07:d0:31:79:c2:5a:be: ed:93:06:77:72:84:7f:f1:c0:c1:de:62:7f:4e:42:e2:0f:ae: 71:c5:11:fe:50:45:5c:61:aa:3e:c8:10:03:e5:32:2c:81:0a: fb:20:5a:80:75:7f:f1:2a:41:d1:41:c9:b6:35:9e:f6:58:81: 73:9b:fe:ac:17:08:62:fa:11:36:a3:c0:0a:ab:ab:e1:07:11: bf:d7:b8:6b:f2:0b:ad:1c:d3:9f:0a:9d:12:d3:70:d5:87:05: 42:ee:07:67:af:b5:be:ca:47:e2:26:24:83:92:8b:58:2e:2d: ad:a2:0f:b9:9d:af:df:10:85:2e:0e:6e:07:a8:d8:02:ed:d9: 14:3b:0c:06:9e:c1:b1:02:a5:fd:4a:18:89:e2:8a:b1:92:f6: 8e:19:93:27:fc:8e:29:37:d2:5a:7c:55:84:80:da:d2:9f:14: a2:18:ab:04:9f:43:3f:4e:d8:30:bb:ef:e1:4b:51:fb:f7:51: 7c:c5:3c:2f:6b:6a:1a:9a:52:88:bb:ec:cb:9d:47:91:38:59: 31:6b:ff:f0:54:fc:26:38:23:f1:f9:96:31:38:16:57:e7:37: d9:8d:46:b2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZdhSWhXpicBG7viuPB0kl9QKk5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTYxMTM2WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyODYzZmFlMWZjNWEwMDFjMzI3ZmIwYWM4YzE3MWJhNGJi NTA4YWY2NDE0MjhkMzlmYzMzZmYwZDI4N2U3OThmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOXHLQBhJPOXzaPlA+o4Fi5VmYGxFfMJW0zECv209awfH9 naJKn8icHF3Esn+A3zMkjc43xdC5eahoHhAwtHWvwNKuTcE2vKhUyPn3GadBRmdW 1Dg9g6FJQlUFIf1/knwSPaX14TGx0AYFUJTa+BvXFdiGyrrKOCYIBnmJJfKwb1pf JyY5ZMBYZ8PDuJoVJKWdnLUOk+s5JAsBN1SFeyPTl3MchJrTUk+p9T7MgypGor4p jiUMG0je/Sr//NL/Sj3mLoxyeBDCiI26RbS2//U+zc6NqjxGm7dqJRqbPpj+NU/M 1xiQ/QcFbhLlm+oyGsEIcWn8Lmz+0h+EuMiGnCfLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZcI6baHZcNRrnqiCPWU7ZqlOlwkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiNWI2YmEzLWY0OGMtNGVjZC05NzEwLWY1NjMwMGNiOTkzYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ21vAwDQYJKoZIhvcNAQELBQADggEBAG6FIwik3jBaB9MB3TM1ObfgrarG UqKeccDJSznsB9AxecJavu2TBndyhH/xwMHeYn9OQuIPrnHFEf5QRVxhqj7IEAPl MiyBCvsgWoB1f/EqQdFBybY1nvZYgXOb/qwXCGL6ETajwAqrq+EHEb/XuGvyC60c 058KnRLTcNWHBULuB2evtb7KR+ImJIOSi1guLa2iD7mdr98QhS4Obgeo2ALt2RQ7 DAaewbECpf1KGIniirGS9o4Zkyf8jik30lp8VYSA2tKfFKIYqwSfQz9O2DC77+FL Ufv3UXzFPC9rahqaUoi77MudR5E4WTFr//BU/CY4I/H5ljE4FlfnN9mNRrI= -----END CERTIFICATE-----Generated at Sat Jun 14 05:42:19 2025 by rpki-client