$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfda84bd-9c44-4294-9d5e-075e13790699.roa File: bfda84bd-9c44-4294-9d5e-075e13790699.roa (raw, json) Hash identifier: Do1ONZJf4DCCbVW9myFmqxXPb4p1V/Nxylgmro0KTBU= Subject key identifier: B6:5D:52:CB:F0:52:D7:87:1C:95:8F:3C:45:6A:BB:53:D9:36:75:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31D63B573D0663A8CC3631DA99691E5B981ED8A4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfda84bd-9c44-4294-9d5e-075e13790699.roa Signing time: Mon 09 Jun 2025 18:30:19 +0000 ROA not before: Mon 09 Jun 2025 18:30:19 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.255.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d6:3b:57:3d:06:63:a8:cc:36:31:da:99:69:1e:5b:98:1e:d8:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:30:19 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=20d52b45fefdbc04ce6c5b5b50aac2427134d1fa0c34253ef3bdbf26218ee6a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1d:fb:2b:33:90:0b:a1:83:4b:a5:77:05:b1: 82:57:28:8f:3b:98:d7:25:36:55:81:ec:9a:95:ba: 70:18:6e:ff:cf:f2:71:61:97:71:36:1e:f7:c2:72: d4:0e:70:a6:f1:f5:74:fd:20:80:00:b9:49:d1:b1: 22:64:7e:e8:a7:3a:fc:92:38:54:3c:b4:e9:67:9f: 28:ef:2d:10:67:8f:ce:ab:c2:11:8d:6d:de:5c:76: 91:49:29:b0:7a:f6:c2:dc:30:99:09:00:f9:87:72: 67:20:ce:e3:70:7d:bb:87:2e:d6:3f:f3:2a:bb:bb: 59:8b:d8:a8:66:ee:20:f1:73:ad:b5:4b:85:e7:6a: b5:18:ea:5a:db:13:38:3d:cb:17:2e:1d:e1:1f:b1: 6d:f4:42:4d:b4:87:9c:15:3e:20:86:5f:fb:ee:68: 11:62:92:32:10:59:0a:c0:1e:db:af:c6:49:9c:6b: 56:c4:0e:55:4e:55:d2:86:47:18:d5:c2:6f:3a:ad: 76:2a:3f:67:13:b7:e5:ec:44:c0:8b:8e:38:34:6c: 9b:06:fd:5b:16:76:02:61:97:52:14:55:87:43:9a: 1a:13:f1:32:58:df:65:85:ad:b9:c0:60:8c:19:07: 07:3a:a1:bc:5c:dc:7f:37:7f:d4:4a:1a:36:37:1f: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:5D:52:CB:F0:52:D7:87:1C:95:8F:3C:45:6A:BB:53:D9:36:75:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfda84bd-9c44-4294-9d5e-075e13790699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.255.120.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:bf:61:ea:14:60:c2:80:6d:11:b6:d2:6e:25:76:41:19:22: 7b:6f:02:42:e3:14:24:6d:31:9f:e7:1c:35:7f:fc:12:49:35: 65:17:cd:42:a2:ee:4c:a2:92:ad:72:60:09:87:d7:de:f2:08: b3:5c:d4:93:19:43:8a:67:f9:fd:45:ed:35:68:5b:b4:0b:6c: 7e:53:3c:5b:65:73:be:b2:7e:80:8e:85:8c:57:1a:92:71:67: 2e:75:c9:14:a2:24:18:f8:04:64:10:67:78:1d:de:3d:0a:7c: da:b2:08:eb:0c:74:81:03:ee:33:93:18:fd:39:e1:1b:8e:93: e2:77:2e:e6:41:74:a1:61:cf:8a:49:d2:93:e0:c8:bf:4e:0d: 5e:3e:bb:33:b5:93:12:93:e3:33:1b:6e:31:29:13:b4:4c:c1: f5:e9:63:98:0b:dd:fd:9c:c3:0e:96:24:3d:34:1d:a9:14:59: f5:0e:bd:59:6d:98:ad:39:99:76:a6:88:80:cb:e4:5c:f9:19: 48:fe:da:60:73:eb:ab:09:e4:18:87:41:e4:80:98:e6:ac:3d: 36:ee:4f:a8:dd:e1:70:e5:54:42:7f:24:6e:a5:a5:dc:00:f7: 79:24:81:a5:bd:04:75:3a:1d:60:d9:60:0e:3d:10:4e:9a:7d: 7d:90:c5:00 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMdY7Vz0GY6jMNjHamWkeW5ge2KQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgzMDE5WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGQ1MmI0NWZlZmRiYzA0Y2U2YzViNWI1MGFhYzI0Mjcx MzRkMWZhMGMzNDI1M2VmM2JkYmYyNjIxOGVlNmEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+HfsrM5ALoYNLpXcFsYJXKI87mNclNlWB7JqVunAYbv/P 8nFhl3E2HvfCctQOcKbx9XT9IIAAuUnRsSJkfuinOvySOFQ8tOlnnyjvLRBnj86r whGNbd5cdpFJKbB69sLcMJkJAPmHcmcgzuNwfbuHLtY/8yq7u1mL2Khm7iDxc621 S4XnarUY6lrbEzg9yxcuHeEfsW30Qk20h5wVPiCGX/vuaBFikjIQWQrAHtuvxkmc a1bEDlVOVdKGRxjVwm86rXYqP2cTt+XsRMCLjjg0bJsG/VsWdgJhl1IUVYdDmhoT 8TJY32WFrbnAYIwZBwc6obxc3H83f9RKGjY3HzIJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtl1Sy/BS14cclY88RWq7U9k2dRMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JmZGE4NGJkLTljNDQtNDI5NC05ZDVlLTA3NWUxMzc5MDY5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2/3gwDQYJKoZIhvcNAQELBQADggEBAH+/YeoUYMKAbRG20m4ldkEZIntv AkLjFCRtMZ/nHDV//BJJNWUXzUKi7kyikq1yYAmH197yCLNc1JMZQ4pn+f1F7TVo W7QLbH5TPFtlc76yfoCOhYxXGpJxZy51yRSiJBj4BGQQZ3gd3j0KfNqyCOsMdIED 7jOTGP054RuOk+J3LuZBdKFhz4pJ0pPgyL9ODV4+uzO1kxKT4zMbbjEpE7RMwfXp Y5gL3f2cww6WJD00HakUWfUOvVltmK05mXamiIDL5Fz5GUj+2mBz66sJ5BiHQeSA mOasPTbuT6jd4XDlVEJ/JG6lpdwA93kkgaW9BHU6HWDZYA49EE6afX2QxQA= -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:12 2025 by rpki-client