$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23ed9b1-7c11-4acd-9bd6-eca133154091.roa File: d23ed9b1-7c11-4acd-9bd6-eca133154091.roa (raw, json) Hash identifier: Ft6pemZzwV0KA+7JCQ+4tKlIwObTCPbjuolWSRlXyYc= Subject key identifier: 3C:1D:3B:B2:FE:88:F4:A7:78:8E:13:7E:77:C9:71:BB:22:72:4A:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1294534FCE39D32277DECAA572ACEB45B258FEEB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23ed9b1-7c11-4acd-9bd6-eca133154091.roa Signing time: Tue 03 Jun 2025 16:21:44 +0000 ROA not before: Tue 03 Jun 2025 16:21:44 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.219.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:94:53:4f:ce:39:d3:22:77:de:ca:a5:72:ac:eb:45:b2:58:fe:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 16:21:44 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=35b9362135b30803351556763d638e4f9783eefd0ade5813c8ff8b9854a4d3af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ed:77:12:a1:d6:8e:93:fd:0a:b6:56:27:2f: 40:64:cf:98:31:58:95:2d:aa:5b:6d:2e:77:77:2b: 9e:32:5d:f2:22:96:8c:da:98:8b:0d:b4:16:35:17: 54:d3:a5:ba:1f:20:8c:4c:d9:a2:be:dc:d9:50:98: b6:dc:0b:18:b7:82:66:ac:a2:ac:74:b8:06:11:4b: a2:39:16:42:cc:10:1f:72:bb:5c:b8:73:61:40:09: 5d:e1:e2:6c:9c:c3:78:82:43:0d:ba:51:80:51:58: 7f:36:48:7b:ae:14:fe:ae:2f:48:33:1e:c5:13:6c: c9:5f:c7:3c:7c:41:02:5c:bc:b7:6f:eb:4a:c1:b6: 12:02:23:0b:57:8e:05:f8:b6:e2:64:a8:fb:4b:fb: c9:5e:04:c8:30:d4:de:8a:b7:64:3c:ee:2a:c3:5e: a1:21:6b:a0:8e:d3:0e:1f:1e:a0:03:87:da:30:35: 6a:02:6c:f5:af:4d:24:43:35:ed:f2:30:5d:43:4f: 18:43:dd:01:0b:a7:80:f7:70:b5:f6:6e:da:a8:93: ed:59:7d:dd:e3:86:c3:2b:b4:30:18:66:98:50:6f: 99:86:1d:67:e9:95:de:5c:41:f4:aa:83:39:83:97: dc:b3:fd:52:62:fa:86:a9:3c:2a:61:76:50:fd:a2: 79:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1D:3B:B2:FE:88:F4:A7:78:8E:13:7E:77:C9:71:BB:22:72:4A:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d23ed9b1-7c11-4acd-9bd6-eca133154091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.219.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:91:00:f2:90:3a:79:a7:49:18:c0:57:6d:43:a6:f9:6f:75: 5b:5e:40:22:33:b1:0f:16:0f:0e:f8:b8:90:7c:57:c5:e3:12: 7f:fa:cf:f7:55:ea:24:04:1c:56:03:be:88:61:1b:f6:95:a4: e6:2b:a0:e1:84:ac:57:59:e1:5b:a3:ce:b4:68:e0:cb:8a:c8: 50:78:bf:51:0a:09:ec:c0:b6:a8:d7:b8:c5:02:c9:ea:8b:55: 98:42:f3:3d:b9:ed:d9:fe:98:87:8a:62:05:c0:b2:4d:d9:2b: 63:1b:29:71:fb:63:45:dc:28:bc:4f:97:17:10:85:be:8d:75: c9:f5:a4:25:19:8d:f8:a5:45:de:0b:6f:7a:cb:3c:19:f8:33: 1b:ff:49:af:1a:f5:1e:5d:20:ed:b2:50:89:a7:dd:39:b9:16: 0e:99:ea:75:3b:53:f9:e4:1c:de:e8:73:ba:6a:d8:31:e8:ea: 2e:dd:be:e2:81:1d:47:36:e9:f1:22:ad:54:97:3d:aa:6d:7a: ed:ca:48:b9:d2:db:ef:19:fb:39:a2:1d:ff:6c:32:72:fb:b4: 9f:aa:81:fd:71:9c:f3:fb:cd:52:45:e9:34:ea:de:66:11:64: 30:b5:b6:55:d0:b3:63:4d:36:75:b8:09:1e:26:ee:7e:0f:ca: a1:42:2f:c6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEpRTT8450yJ33sqlcqzrRbJY/uswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTYyMTQ0WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNWI5MzYyMTM1YjMwODAzMzUxNTU2NzYzZDYzOGU0Zjk3 ODNlZWZkMGFkZTU4MTNjOGZmOGI5ODU0YTRkM2FmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu7XcSodaOk/0KtlYnL0Bkz5gxWJUtqlttLnd3K54yXfIi lozamIsNtBY1F1TTpbofIIxM2aK+3NlQmLbcCxi3gmasoqx0uAYRS6I5FkLMEB9y u1y4c2FACV3h4mycw3iCQw26UYBRWH82SHuuFP6uL0gzHsUTbMlfxzx8QQJcvLdv 60rBthICIwtXjgX4tuJkqPtL+8leBMgw1N6Kt2Q87irDXqEha6CO0w4fHqADh9ow NWoCbPWvTSRDNe3yMF1DTxhD3QELp4D3cLX2btqok+1Zfd3jhsMrtDAYZphQb5mG HWfpld5cQfSqgzmDl9yz/VJi+oapPCphdlD9onnPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUPB07sv6I9Kd4jhN+d8lxuyJySjMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyM2VkOWIxLTdjMTEtNGFjZC05YmQ2LWVjYTEzMzE1NDA5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA22zANBgkqhkiG9w0BAQsFAAOCAQEAmJEA8pA6eadJGMBXbUOm+W91W15A IjOxDxYPDvi4kHxXxeMSf/rP91XqJAQcVgO+iGEb9pWk5iug4YSsV1nhW6POtGjg y4rIUHi/UQoJ7MC2qNe4xQLJ6otVmELzPbnt2f6Yh4piBcCyTdkrYxspcftjRdwo vE+XFxCFvo11yfWkJRmN+KVF3gtvess8GfgzG/9Jrxr1Hl0g7bJQiafdObkWDpnq dTtT+eQc3uhzumrYMejqLt2+4oEdRzbp8SKtVJc9qm167cpIudLb7xn7OaId/2wy cvu0n6qB/XGc8/vNUkXpNOreZhFkMLW2VdCzY002dbgJHibufg/KoUIvxg== -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:43 2025 by rpki-client