$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c60e92f3-45b1-4285-87d2-09beb0833f3d.roa File: c60e92f3-45b1-4285-87d2-09beb0833f3d.roa (raw, json) Hash identifier: GBYy96tG0r+Rp6uYcK/nyKJbUyroCxu9tEjyFy+UAPc= Subject key identifier: 84:A5:CA:83:A9:54:A3:4A:0E:AF:66:19:4B:B8:E4:10:F0:C1:09:28 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 22A426B63564020F0D350A6CE7D731AB8A2C2747 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c60e92f3-45b1-4285-87d2-09beb0833f3d.roa Signing time: Tue 29 Jul 2025 15:41:59 +0000 ROA not before: Tue 29 Jul 2025 15:41:59 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.202.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:a4:26:b6:35:64:02:0f:0d:35:0a:6c:e7:d7:31:ab:8a:2c:27:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:41:59 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=000498f38ce6f65155e3e6c5435c207637861d39935b6891ecca5de735db7879, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:93:7b:e4:a1:21:da:4f:ed:d7:bf:c6:c6:08: 15:0e:b4:67:0a:cd:6f:1e:e4:c1:ce:24:d4:40:0d: 78:1f:47:42:c5:34:8d:8d:74:1d:c0:de:10:31:dd: 0b:a6:3a:07:2a:73:59:06:19:e0:6d:64:5c:dd:7a: d7:ec:46:92:b6:43:0a:6f:0f:96:d4:c4:62:3e:f2: 8e:11:24:90:d4:20:9e:01:df:25:0a:d4:e5:9e:8d: b0:ca:9a:a6:78:fd:ee:09:14:4a:84:37:19:5d:b1: 00:15:56:67:db:28:e5:68:f4:27:e1:7a:33:e2:96: 22:46:d1:d8:13:06:a8:36:7d:ed:c4:01:af:11:13: de:6f:0f:57:14:51:dd:75:5c:8e:df:cd:20:cb:dd: e2:ba:3e:04:1e:cb:c0:0f:85:27:66:1a:50:9d:b5: 47:be:f5:b4:7e:d1:61:ca:52:0e:62:57:c5:e1:a6: d4:ee:bb:cc:02:5f:0c:30:b6:75:cd:c2:58:c2:cd: bc:dd:f4:e2:c8:e4:08:90:28:d9:ce:e2:d4:e8:bf: f3:c3:79:98:ae:7e:49:4c:f6:35:1d:fb:b2:cc:c3: c8:f4:43:7e:1e:26:da:0f:9e:04:84:13:f5:97:ae: 7d:f5:59:0a:08:7c:97:b1:fb:12:cd:28:53:3a:35: fd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A5:CA:83:A9:54:A3:4A:0E:AF:66:19:4B:B8:E4:10:F0:C1:09:28 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c60e92f3-45b1-4285-87d2-09beb0833f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.202.2.0/23 Signature Algorithm: sha256WithRSAEncryption 8a:e8:c7:aa:c1:de:cb:9d:22:68:17:e4:74:5c:5d:8e:1f:b9: ae:1d:35:d8:76:2b:7c:67:18:56:be:32:bb:52:a5:c0:c7:c3: 95:9b:b8:66:a4:16:0f:64:ab:73:71:41:61:63:90:ad:1f:e8: c5:ff:98:95:f2:a1:74:b7:ec:2b:fc:23:0b:13:1b:78:f3:4f: e7:db:e9:c0:1d:a6:27:c0:ed:8b:7e:7f:08:a8:04:07:ae:bf: 7c:a4:7d:78:23:6a:4d:4f:a7:bc:13:9b:ec:27:71:27:4b:45: a0:a3:55:f2:0a:5c:79:c0:46:a8:1c:73:48:22:e9:3e:9b:d6: 79:4a:32:e5:3e:4d:6d:77:32:96:54:1a:56:d7:24:75:58:fe: 95:81:c1:71:ca:dc:93:1e:5a:77:71:53:45:e7:2d:23:7e:0a: e0:7b:2f:81:88:cc:ec:7b:46:a7:95:ab:2d:3a:c5:93:73:b2: 3f:f3:f4:89:9c:cf:f4:68:17:6a:e0:28:22:40:51:44:b0:af: 37:80:a5:3d:2c:f1:ad:61:e2:73:f5:87:1a:32:09:23:3c:e6: 7e:84:77:38:cc:da:03:77:86:4a:3f:7d:8b:a2:5f:f4:5d:08: 89:8c:52:14:15:23:cd:01:bb:24:93:a2:9c:1e:7d:8e:2b:33: 4a:fb:15:0e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIqQmtjVkAg8NNQps59cxq4osJ0cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTU0MTU5WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDA0OThmMzhjZTZmNjUxNTVlM2U2YzU0MzVjMjA3NjM3 ODYxZDM5OTM1YjY4OTFlY2NhNWRlNzM1ZGI3ODc5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDek3vkoSHaT+3Xv8bGCBUOtGcKzW8e5MHOJNRADXgfR0LF NI2NdB3A3hAx3QumOgcqc1kGGeBtZFzdetfsRpK2QwpvD5bUxGI+8o4RJJDUIJ4B 3yUK1OWejbDKmqZ4/e4JFEqENxldsQAVVmfbKOVo9CfhejPiliJG0dgTBqg2fe3E Aa8RE95vD1cUUd11XI7fzSDL3eK6PgQey8APhSdmGlCdtUe+9bR+0WHKUg5iV8Xh ptTuu8wCXwwwtnXNwljCzbzd9OLI5AiQKNnO4tTov/PDeZiufklM9jUd+7LMw8j0 Q34eJtoPngSEE/WXrn31WQoIfJex+xLNKFM6Nf2jAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhKXKg6lUo0oOr2YZS7jkEPDBCSgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M2MGU5MmYzLTQ1YjEtNDI4NS04N2QyLTA5YmViMDgzM2YzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2ygIwDQYJKoZIhvcNAQELBQADggEBAIrox6rB3sudImgX5HRcXY4fua4d Ndh2K3xnGFa+MrtSpcDHw5WbuGakFg9kq3NxQWFjkK0f6MX/mJXyoXS37Cv8IwsT G3jzT+fb6cAdpifA7Yt+fwioBAeuv3ykfXgjak1Pp7wTm+wncSdLRaCjVfIKXHnA Rqgcc0gi6T6b1nlKMuU+TW13MpZUGlbXJHVY/pWBwXHK3JMeWndxU0XnLSN+CuB7 L4GIzOx7RqeVqy06xZNzsj/z9Imcz/RoF2rgKCJAUUSwrzeApT0s8a1h4nP1hxoy CSM85n6EdzjM2gN3hko/fYuiX/RdCImMUhQVI80BuySTopwefY4rM0r7FQ4= -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:12 2025 by rpki-client