$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e64b11d0-a635-48c8-a4cb-fc1412f5065a.roa File: e64b11d0-a635-48c8-a4cb-fc1412f5065a.roa (raw, json) Hash identifier: fJ8YvGL9TAV+hOHLxoIC+rDTpx1A+ZuzMnt4DaKNb9s= Subject key identifier: F7:F4:5A:71:AF:57:F2:1E:78:3F:AD:C1:9F:20:0C:B0:B2:EE:E9:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F6D06D3AD5118203DE9A4A424E31B5EC59265DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e64b11d0-a635-48c8-a4cb-fc1412f5065a.roa Signing time: Fri 25 Jul 2025 15:21:20 +0000 ROA not before: Fri 25 Jul 2025 15:21:20 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.249.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6d:06:d3:ad:51:18:20:3d:e9:a4:a4:24:e3:1b:5e:c5:92:65:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 15:21:20 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=403e4d58379ec547ff97f70c574dcbaaaf053df31ddebb233b9573b4debb8bd6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:39:71:28:17:40:67:1e:02:39:bd:b9:cd:72: 08:eb:c8:af:d0:fd:e2:4b:1d:8f:83:a3:6c:55:d4: 1a:21:41:7d:be:a1:bb:5b:aa:4c:a0:b1:21:36:54: 77:ce:58:59:8b:c4:e9:97:d2:48:e2:e6:45:90:6c: d2:a3:e2:36:19:4a:14:e7:59:ee:4b:b4:3d:04:b0: 9f:74:d5:3e:c7:41:75:c9:62:4a:37:38:65:27:44: 31:9a:f5:fc:d5:66:41:65:ae:02:7d:97:36:fa:4c: 33:f0:0c:b0:23:b9:7d:d4:e3:81:b8:57:26:79:03: e4:0c:74:f0:de:c3:96:80:45:ce:0a:ca:ab:96:df: b7:1c:da:03:c5:69:f2:5c:c2:d9:5e:ab:42:b3:ff: 9e:85:5f:2a:11:91:a5:e9:77:95:24:3f:36:a3:78: 5b:5f:67:09:40:61:3d:16:29:b6:5d:9d:d2:e7:02: c6:0a:78:3f:64:32:f1:ef:e6:c1:8a:38:60:dc:ce: e7:67:7f:d7:f7:ee:66:20:31:50:39:6e:21:e5:58: fc:06:75:4d:c6:60:b9:84:24:62:fa:46:55:36:69: 0c:9d:54:90:5f:fc:82:ac:6a:62:17:3e:c4:54:20: f7:bb:7e:80:d4:13:16:f4:0e:d9:fe:49:c5:17:40: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F4:5A:71:AF:57:F2:1E:78:3F:AD:C1:9F:20:0C:B0:B2:EE:E9:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e64b11d0-a635-48c8-a4cb-fc1412f5065a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.249.128.0/18 Signature Algorithm: sha256WithRSAEncryption 94:43:68:71:90:36:a4:e8:9c:34:2c:a2:c6:65:80:69:8d:ed: 18:c2:3e:17:22:21:fe:be:3c:c6:68:08:95:26:b0:8d:86:f3: 12:e8:e3:09:1c:00:0d:45:13:5f:54:27:60:08:f9:76:f4:9a: d0:bf:6a:63:41:4a:68:7f:2c:f7:24:cc:bf:b5:57:96:9a:8e: 7e:e9:a3:03:ee:a1:ee:e1:13:62:08:5d:fb:38:28:3c:21:72: b0:8a:b8:22:76:b9:48:7c:02:eb:b3:1c:d8:06:dc:5f:92:b4: f5:1a:4d:96:5f:a5:ef:33:a4:86:e7:ab:bc:47:ed:8c:16:74: 54:24:e5:90:ef:39:18:21:23:d8:50:50:b4:cb:3d:75:a2:0a: 93:c2:1a:05:77:6f:6f:dc:67:f3:c0:70:da:34:01:14:76:97: f6:46:30:ab:28:26:54:f4:9b:8b:6b:3d:77:30:59:a4:be:d6: 7b:be:66:0e:a8:4c:26:85:df:7b:3a:6e:3b:78:e5:6b:44:f6: a5:48:e6:40:07:f8:99:ab:9f:61:43:2b:ae:73:8c:c4:13:9b: 5a:14:8a:a5:1a:c8:aa:a0:b2:c5:77:46:4c:30:2a:ad:87:d8: 76:f7:2a:17:3f:b5:3a:aa:b7:c0:2c:5e:50:6e:b9:b1:68:73: 23:1c:9f:6e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP20G061RGCA96aSkJOMbXsWSZd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTUyMTIwWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDNlNGQ1ODM3OWVjNTQ3ZmY5N2Y3MGM1NzRkY2JhYWFm MDUzZGYzMWRkZWJiMjMzYjk1NzNiNGRlYmI4YmQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkOXEoF0BnHgI5vbnNcgjryK/Q/eJLHY+Do2xV1BohQX2+ obtbqkygsSE2VHfOWFmLxOmX0kji5kWQbNKj4jYZShTnWe5LtD0EsJ901T7HQXXJ Yko3OGUnRDGa9fzVZkFlrgJ9lzb6TDPwDLAjuX3U44G4VyZ5A+QMdPDew5aARc4K yquW37cc2gPFafJcwtleq0Kz/56FXyoRkaXpd5UkPzajeFtfZwlAYT0WKbZdndLn AsYKeD9kMvHv5sGKOGDczudnf9f37mYgMVA5biHlWPwGdU3GYLmEJGL6RlU2aQyd VJBf/IKsamIXPsRUIPe7foDUExb0Dtn+ScUXQJBHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9/Raca9X8h54P63BnyAMsLLu6YcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2NGIxMWQwLWE2MzUtNDhjOC1hNGNiLWZjMTQxMmY1MDY1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi+YAwDQYJKoZIhvcNAQELBQADggEBAJRDaHGQNqTonDQsosZlgGmN7RjC PhciIf6+PMZoCJUmsI2G8xLo4wkcAA1FE19UJ2AI+Xb0mtC/amNBSmh/LPckzL+1 V5aajn7powPuoe7hE2IIXfs4KDwhcrCKuCJ2uUh8AuuzHNgG3F+StPUaTZZfpe8z pIbnq7xH7YwWdFQk5ZDvORghI9hQULTLPXWiCpPCGgV3b2/cZ/PAcNo0ARR2l/ZG MKsoJlT0m4trPXcwWaS+1nu+Zg6oTCaF33s6bjt45WtE9qVI5kAH+Jmrn2FDK65z jMQTm1oUiqUayKqgssV3RkwwKq2H2Hb3Khc/tTqqt8AsXlBuubFocyMcn24= -----END CERTIFICATE-----Generated at Mon Aug 4 21:30:53 2025 by rpki-client