$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6919a79-257b-4d69-ba94-143259161ed1.roa File: d6919a79-257b-4d69-ba94-143259161ed1.roa (raw, json) Hash identifier: KWVJ7bSv3GVQ8vybquJ5WtYRUPEH+qjipqB6lpE8ICw= Subject key identifier: 2E:6D:9D:C7:65:92:BF:CC:8B:9C:A2:42:F8:52:FB:77:4D:9C:F9:81 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B709E143A6A2DA9CB0F5191AA89966A05D7EF7D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6919a79-257b-4d69-ba94-143259161ed1.roa Signing time: Tue 29 Jul 2025 18:10:31 +0000 ROA not before: Tue 29 Jul 2025 18:10:31 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.248.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:70:9e:14:3a:6a:2d:a9:cb:0f:51:91:aa:89:96:6a:05:d7:ef:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 18:10:31 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=cc766b4b018d18d819b6e38257f20f1af915492d56d1100ac123acbfa2fbc10e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:97:fb:42:e9:e8:ba:55:74:b9:58:d8:00: ca:4e:c7:93:18:ae:84:8b:d6:1a:dc:de:56:15:64: 7f:06:9a:d5:51:b2:b0:9d:5f:bc:f7:66:23:2b:3f: e6:f1:d0:08:c2:72:a2:84:88:7f:64:53:ac:a5:72: 72:e8:60:1f:1e:8f:08:b9:19:bb:65:ef:55:77:c6: 6c:95:28:d8:60:7d:00:36:e7:6f:04:20:e2:67:a6: eb:0e:ab:59:aa:84:88:99:91:9e:8c:c8:b7:22:69: 1c:47:bc:b0:59:81:e9:e4:d5:72:21:be:e9:d9:f9: 6a:01:c6:72:d6:39:80:3d:96:94:d9:db:58:8e:e2: 97:a1:c2:b5:c0:18:a8:2a:a3:ac:ca:b9:81:2c:64: fb:2e:e8:9d:85:d7:01:12:6d:e0:24:26:cd:b1:48: 89:22:6d:b7:04:be:0d:6e:56:69:ba:97:fd:44:e1: 36:56:30:8f:fd:f2:ea:97:19:54:84:4e:10:5d:5e: 4e:15:69:d7:39:d3:a6:ca:7d:47:36:d1:c5:a2:24: bf:5e:86:5f:8f:c8:35:6c:8a:ad:72:ca:c8:c2:11: 01:82:7e:c2:08:1b:25:8e:86:34:c3:ea:64:25:0a: a3:5f:84:cf:0a:59:ea:f3:05:89:7b:9f:3d:b0:4e: 4c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6D:9D:C7:65:92:BF:CC:8B:9C:A2:42:F8:52:FB:77:4D:9C:F9:81 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6919a79-257b-4d69-ba94-143259161ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.248.0.0/17 Signature Algorithm: sha256WithRSAEncryption 05:dc:53:a7:b6:0c:dc:61:a8:a1:4d:a9:4d:6f:ab:be:2f:3c: 4b:cc:a4:72:1f:51:81:ad:b1:8a:07:f0:4f:ab:c6:7b:4d:0e: 1f:6c:42:a5:74:45:2c:45:b6:30:8f:4a:35:66:28:8a:31:07: 39:e6:37:0c:11:8a:61:93:da:04:5f:5a:c8:d6:77:e2:93:6c: ec:78:9d:ab:0c:6f:c0:6c:37:56:90:e8:e7:2f:c7:3b:f2:fa: da:69:68:a9:aa:53:97:70:19:3d:c5:c3:e6:1a:c5:11:53:cc: 1c:c9:45:c2:fe:b1:65:57:e5:d7:8f:78:10:70:a2:1b:8e:ff: db:83:75:73:50:e7:83:cf:8f:3a:6d:32:d1:20:f0:de:17:72: b3:b0:ac:40:dd:29:f8:0d:09:de:77:6b:a3:ed:02:ac:31:57: bf:ba:2a:fa:3c:d6:94:a5:cc:a1:32:be:a1:1c:ec:8c:d6:c2: 79:a5:1a:1d:dd:ff:31:30:41:15:a3:80:3c:a5:3d:74:5c:f0: d9:ad:16:3d:a8:1c:3d:1e:c4:c3:4b:bb:a5:69:b7:9b:f8:c8: e5:a8:cb:6b:c6:bc:8a:02:de:af:16:51:c8:e7:72:06:43:c0: ea:46:45:8e:d0:ba:f0:9e:1b:a9:0b:74:63:04:9f:3d:64:b3: 35:1f:2c:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUe3CeFDpqLanLD1GRqomWagXX730wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTgxMDMxWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYzc2NmI0YjAxOGQxOGQ4MTliNmUzODI1N2YyMGYxYWY5 MTU0OTJkNTZkMTEwMGFjMTIzYWNiZmEyZmJjMTBlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0hZf7QunoulV0uVjYAMpOx5MYroSL1hrc3lYVZH8GmtVR srCdX7z3ZiMrP+bx0AjCcqKEiH9kU6ylcnLoYB8ejwi5Gbtl71V3xmyVKNhgfQA2 528EIOJnpusOq1mqhIiZkZ6MyLciaRxHvLBZgenk1XIhvunZ+WoBxnLWOYA9lpTZ 21iO4pehwrXAGKgqo6zKuYEsZPsu6J2F1wESbeAkJs2xSIkibbcEvg1uVmm6l/1E 4TZWMI/98uqXGVSEThBdXk4Vadc506bKfUc20cWiJL9ehl+PyDVsiq1yysjCEQGC fsIIGyWOhjTD6mQlCqNfhM8KWerzBYl7nz2wTkxZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULm2dx2WSv8yLnKJC+FL7d02c+YEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2OTE5YTc5LTI1N2ItNGQ2OS1iYTk0LTE0MzI1OTE2MWVkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2+AAwDQYJKoZIhvcNAQELBQADggEBAAXcU6e2DNxhqKFNqU1vq74vPEvM pHIfUYGtsYoH8E+rxntNDh9sQqV0RSxFtjCPSjVmKIoxBznmNwwRimGT2gRfWsjW d+KTbOx4nasMb8BsN1aQ6Ocvxzvy+tppaKmqU5dwGT3Fw+YaxRFTzBzJRcL+sWVX 5dePeBBwohuO/9uDdXNQ54PPjzptMtEg8N4XcrOwrEDdKfgNCd53a6PtAqwxV7+6 Kvo81pSlzKEyvqEc7IzWwnmlGh3d/zEwQRWjgDylPXRc8NmtFj2oHD0exMNLu6Vp t5v4yOWoy2vGvIoC3q8WUcjncgZDwOpGRY7QuvCeG6kLdGMEnz1kszUfLL8= -----END CERTIFICATE-----Generated at Mon Aug 4 21:49:40 2025 by rpki-client