$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbf8def4-92b5-466a-9a7a-6d29bbde6faf.roa File: fbf8def4-92b5-466a-9a7a-6d29bbde6faf.roa (raw, json) Hash identifier: D8KMkETHe/V5GG+lHzFnpQ9xRGib/SRYz3Kn4PYqGnM= Subject key identifier: 86:15:F7:48:92:B6:25:E0:7A:ED:AA:0F:10:87:AE:99:83:60:77:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4309EFAEFCBDB26CC5ED4ABEE4FDA0845DCD05CA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbf8def4-92b5-466a-9a7a-6d29bbde6faf.roa Signing time: Mon 09 Jun 2025 16:30:14 +0000 ROA not before: Mon 09 Jun 2025 16:30:14 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.204.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:09:ef:ae:fc:bd:b2:6c:c5:ed:4a:be:e4:fd:a0:84:5d:cd:05:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:30:14 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=f6e47a308aa7e177a772b875d028827f61ff342649c5709b8ef403055252521b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:87:e6:c6:b8:15:50:4e:a4:eb:0b:90:61: c1:25:d8:58:1c:36:3d:9b:43:d8:6e:64:76:28:43: 02:b1:21:33:01:cd:ab:21:67:60:62:6f:94:b7:10: d6:4a:b6:99:c8:8a:3f:d5:a2:12:4d:bc:fb:62:80: 5b:8d:9e:36:25:0e:48:d8:97:0d:9f:77:44:6c:42: 0f:f2:d2:b2:7f:26:77:60:37:c7:b4:51:7c:a4:97: 8d:6c:73:66:19:83:6c:1e:39:5d:0e:7c:59:3e:8e: 43:ab:ad:fa:ba:44:17:d6:e8:39:f0:26:fd:c0:27: 04:d7:72:65:f8:7d:70:64:b2:d8:f2:2f:2d:1c:a3: 9f:9e:ca:20:f8:ab:d5:15:5f:eb:46:71:f8:72:e7: 13:b6:25:ea:05:9a:31:c9:09:32:f5:f5:25:2e:56: 3a:a7:d0:b2:e1:21:cb:f0:8f:b1:e0:b1:de:5c:36: 76:b9:c7:e2:fd:96:9a:3b:e4:e4:01:d0:31:6b:41: 24:77:55:44:7c:d1:03:56:7d:e1:ae:d6:2f:53:44: 41:e4:68:4e:ae:20:a2:2b:ac:36:ed:9f:2b:d0:3a: f6:57:74:9a:22:4f:4f:6b:76:86:b9:4b:72:d3:56: e3:da:ce:ca:fa:e9:fd:b9:72:14:91:21:a9:6c:f3: f8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:15:F7:48:92:B6:25:E0:7A:ED:AA:0F:10:87:AE:99:83:60:77:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbf8def4-92b5-466a-9a7a-6d29bbde6faf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.204.50.0/23 Signature Algorithm: sha256WithRSAEncryption 47:90:b3:6d:bf:70:67:36:ee:21:66:cc:81:c9:5b:91:cc:5a: 33:0b:e0:f6:40:af:bb:af:44:7c:73:fa:05:37:62:0f:8a:72: 6c:d2:02:7d:2f:4d:b5:fe:6a:f0:4e:bc:99:76:9c:1f:53:50: 12:f2:5c:e2:fc:3f:37:58:88:d0:35:e7:27:c3:6a:55:e9:80: 36:ac:ba:2a:24:f8:c4:b1:7f:16:c9:4c:3b:ce:d2:4a:99:db: dc:07:5d:65:ef:a9:d0:0a:b9:ec:ac:0a:d3:ea:84:29:48:6d: dd:95:17:53:6b:6f:4a:e0:13:51:30:07:4a:29:dd:27:e3:e2: 73:6d:83:77:7e:f7:16:d5:a0:04:9f:96:be:05:98:aa:dc:aa: 4e:5d:79:70:be:dc:6b:f1:10:7a:a4:6a:7b:f9:bd:e5:ae:c0: 26:1d:8d:89:0f:17:fa:f8:24:e2:e3:49:4b:f9:c3:92:a2:ce: a6:fe:f3:b3:96:0a:e6:bc:81:27:72:39:35:b0:0f:d7:73:8d: e0:01:37:6f:cd:64:48:c4:74:58:4d:29:c6:2b:9a:8e:14:04: 48:b6:42:85:06:00:65:d3:30:6c:8f:b9:48:75:31:df:5d:24: 4f:0e:0f:fa:e9:e0:5f:53:f7:a5:5f:9b:9e:9b:3d:82:53:6f: 38:f8:b7:04 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQwnvrvy9smzF7Uq+5P2ghF3NBcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYzMDE0WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmU0N2EzMDhhYTdlMTc3YTc3MmI4NzVkMDI4ODI3ZjYx ZmYzNDI2NDljNTcwOWI4ZWY0MDMwNTUyNTI1MjFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7pofmxrgVUE6k6wuQYcEl2FgcNj2bQ9huZHYoQwKxITMB zashZ2Bib5S3ENZKtpnIij/VohJNvPtigFuNnjYlDkjYlw2fd0RsQg/y0rJ/Jndg N8e0UXykl41sc2YZg2weOV0OfFk+jkOrrfq6RBfW6DnwJv3AJwTXcmX4fXBkstjy Ly0co5+eyiD4q9UVX+tGcfhy5xO2JeoFmjHJCTL19SUuVjqn0LLhIcvwj7Hgsd5c Nna5x+L9lpo75OQB0DFrQSR3VUR80QNWfeGu1i9TREHkaE6uIKIrrDbtnyvQOvZX dJoiT09rdoa5S3LTVuPazsr66f25chSRIals8/gRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhhX3SJK2JeB67aoPEIeumYNgdwEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZiZjhkZWY0LTkyYjUtNDY2YS05YTdhLTZkMjliYmRlNmZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2zDIwDQYJKoZIhvcNAQELBQADggEBAEeQs22/cGc27iFmzIHJW5HMWjML 4PZAr7uvRHxz+gU3Yg+KcmzSAn0vTbX+avBOvJl2nB9TUBLyXOL8PzdYiNA15yfD alXpgDasuiok+MSxfxbJTDvO0kqZ29wHXWXvqdAKueysCtPqhClIbd2VF1Nrb0rg E1EwB0op3Sfj4nNtg3d+9xbVoASflr4FmKrcqk5deXC+3GvxEHqkanv5veWuwCYd jYkPF/r4JOLjSUv5w5Kizqb+87OWCua8gSdyOTWwD9dzjeABN2/NZEjEdFhNKcYr mo4UBEi2QoUGAGXTMGyPuUh1Md9dJE8OD/rp4F9T96Vfm56bPYJTbzj4twQ= -----END CERTIFICATE-----Generated at Sat Jun 14 23:43:58 2025 by rpki-client