$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1551918-4421-4db1-80cc-19364f773f88.roa File: c1551918-4421-4db1-80cc-19364f773f88.roa (raw, json) Hash identifier: 8/D0BCqA4hO1rnmy8/AFlCOe2y2BAREspMnaTQ0l6fU= Subject key identifier: 22:76:AA:FD:28:B6:BE:1D:8C:48:BB:83:61:A4:85:FB:FD:07:99:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 250298262F75CF8D980FABACC30021EE24C14EBB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1551918-4421-4db1-80cc-19364f773f88.roa Signing time: Tue 29 Jul 2025 17:21:36 +0000 ROA not before: Tue 29 Jul 2025 17:21:36 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.245.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:02:98:26:2f:75:cf:8d:98:0f:ab:ac:c3:00:21:ee:24:c1:4e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 17:21:36 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=356989532c4ecc559910d617f09ad706b6985e80075dfcc6cfa98a45d8072396, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:14:8d:47:d5:11:30:af:79:a7:f9:1d:90: 7a:19:d7:4e:90:b0:e1:49:88:4a:24:8f:50:ba:f6: 8b:db:91:11:e3:e7:96:eb:af:80:da:21:a7:48:fb: 33:38:23:d0:6b:97:9a:9e:60:9e:38:6b:d8:a4:8f: c5:48:fa:23:65:e7:5a:ad:0b:a9:96:5b:77:11:c8: 6a:ad:91:03:d9:d6:2b:91:8e:fa:63:75:1c:28:5a: a4:d0:4a:53:f6:b2:68:8b:1a:df:d9:57:6e:fd:be: 4d:a4:1e:7a:95:a5:c9:23:1a:22:14:0e:ef:6e:75: db:00:84:49:9a:24:ae:fa:58:06:49:40:fb:3e:e1: a6:95:9f:b3:00:02:f2:5c:61:4f:3f:2f:2c:50:f0: b7:16:48:4e:74:7b:bb:28:39:65:5c:f8:03:d4:62: 4e:cf:f5:7b:5b:b2:d3:cf:2e:3d:99:e4:9d:f3:c3: 65:f4:c3:91:f0:89:82:16:7c:55:75:6c:c2:cc:a3: 34:b7:8a:e2:20:db:4f:82:aa:e0:97:ff:4e:5d:68: 2e:3d:e6:52:f1:f9:81:3e:8d:88:fd:24:76:e5:25: 7c:e8:05:b3:4d:11:f1:21:92:12:30:f5:ae:2d:33: 40:03:1a:c1:ee:56:e4:a2:02:86:7c:a4:30:c7:a1: 1e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:76:AA:FD:28:B6:BE:1D:8C:48:BB:83:61:A4:85:FB:FD:07:99:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1551918-4421-4db1-80cc-19364f773f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.245.172.0/22 Signature Algorithm: sha256WithRSAEncryption b2:7d:88:1e:74:fc:89:6f:bb:c7:22:91:57:e2:29:53:b0:02: 7c:48:4a:5e:0d:89:ae:5f:04:5a:30:d8:97:92:cd:67:14:60: db:2d:6e:74:52:aa:a4:0b:70:9c:0f:51:b0:be:4e:0c:8e:2d: d5:28:52:c5:e2:e2:e1:b1:82:a2:21:f5:d4:06:3c:f7:4d:89: e1:a0:33:e3:ce:0d:02:d7:f0:6b:54:94:53:7d:8c:17:41:9c: 46:94:fd:11:74:5d:fe:14:ee:0d:8a:88:b4:dc:06:ff:d1:fe: f6:ff:ce:6d:4e:a3:5c:b9:ad:bb:f6:06:6e:a7:ad:36:de:5a: ea:bb:91:b1:2a:3a:8b:9a:eb:d0:bc:92:5d:be:8e:ed:b1:d7: ec:73:22:35:ca:65:d2:3e:58:7a:e3:66:63:a7:71:4c:c7:eb: 06:82:90:49:ad:7f:c1:f0:2d:c4:95:8d:ba:40:97:2f:c7:62: c4:2c:41:70:b9:7a:b6:da:4b:c1:47:52:ba:1c:d9:b5:72:ad: 99:6b:f1:18:f8:d0:27:91:d9:47:1e:cb:fe:20:4e:f6:4a:f1: 1f:56:0d:d2:24:48:ec:a9:2c:b8:b8:fe:dc:07:65:eb:cf:ea: ed:f4:62:b5:0b:a7:6e:cc:d0:c4:22:dd:07:07:70:b6:30:0f: b9:a0:a9:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJQKYJi91z42YD6uswwAh7iTBTrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTcyMTM2WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTY5ODk1MzJjNGVjYzU1OTkxMGQ2MTdmMDlhZDcwNmI2 OTg1ZTgwMDc1ZGZjYzZjZmE5OGE0NWQ4MDcyMzk2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChsRSNR9URMK95p/kdkHoZ106QsOFJiEokj1C69ovbkRHj 55brr4DaIadI+zM4I9Brl5qeYJ44a9ikj8VI+iNl51qtC6mWW3cRyGqtkQPZ1iuR jvpjdRwoWqTQSlP2smiLGt/ZV279vk2kHnqVpckjGiIUDu9uddsAhEmaJK76WAZJ QPs+4aaVn7MAAvJcYU8/LyxQ8LcWSE50e7soOWVc+APUYk7P9XtbstPPLj2Z5J3z w2X0w5HwiYIWfFV1bMLMozS3iuIg20+CquCX/05daC495lLx+YE+jYj9JHblJXzo BbNNEfEhkhIw9a4tM0ADGsHuVuSiAoZ8pDDHoR5xAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUInaq/Si2vh2MSLuDYaSF+/0HmQEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MxNTUxOTE4LTQ0MjEtNGRiMS04MGNjLTE5MzY0Zjc3M2Y4OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI29awwDQYJKoZIhvcNAQELBQADggEBALJ9iB50/Ilvu8cikVfiKVOwAnxI Sl4Nia5fBFow2JeSzWcUYNstbnRSqqQLcJwPUbC+TgyOLdUoUsXi4uGxgqIh9dQG PPdNieGgM+PODQLX8GtUlFN9jBdBnEaU/RF0Xf4U7g2KiLTcBv/R/vb/zm1Oo1y5 rbv2Bm6nrTbeWuq7kbEqOoua69C8kl2+ju2x1+xzIjXKZdI+WHrjZmOncUzH6waC kEmtf8HwLcSVjbpAly/HYsQsQXC5erbaS8FHUroc2bVyrZlr8Rj40CeR2Ucey/4g TvZK8R9WDdIkSOypLLi4/twHZevP6u30YrULp27M0MQi3QcHcLYwD7mgqYU= -----END CERTIFICATE-----Generated at Tue Aug 5 17:17:38 2025 by rpki-client