$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ef0e876-c3e5-444a-bb43-52d3548a12da.roa File: 0ef0e876-c3e5-444a-bb43-52d3548a12da.roa (raw, json) Hash identifier: ov/oy5hOuYdhcn4uDtNVaes0QYs9sd+jdT7Rlg1AROo= Subject key identifier: 4F:EE:F1:6D:E3:D1:F8:65:2F:34:4A:82:D6:0D:A3:43:CD:15:B9:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6521F811BC34D4958EE64EE2C869050479B6A76C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ef0e876-c3e5-444a-bb43-52d3548a12da.roa Signing time: Fri 04 Jul 2025 15:31:43 +0000 ROA not before: Fri 04 Jul 2025 15:31:43 +0000 ROA not after: Fri 08 Aug 2025 23:59:59 +0000 asID: 7224 IP address blocks: 3.2.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:21:f8:11:bc:34:d4:95:8e:e6:4e:e2:c8:69:05:04:79:b6:a7:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 4 15:31:43 2025 GMT Not After : Aug 8 23:59:59 2025 GMT Subject: serialNumber=0fb99d1d24aef31ebf3ee1a597665c64b5dfe7c31d23d88b62e1edb561d2c69a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:45:27:75:74:8f:8e:ff:3e:7f:61:e2:c1: b3:e3:d5:38:92:44:e7:7c:54:6a:a4:d7:5c:c2:8e: d9:8e:85:81:1e:f8:d4:94:9a:27:c2:ea:81:21:51: 1e:e7:09:b0:bb:c1:f5:fd:26:90:68:46:5b:8d:66: 44:9e:24:e9:a3:52:46:22:dc:92:ce:08:4f:c9:01: 13:05:48:9c:dc:32:a7:e6:8e:d4:ba:0f:77:0d:ad: 77:f7:d9:e8:68:33:91:d6:50:f5:71:de:56:9c:f1: 7f:50:dd:97:af:ff:8b:28:2a:ab:e1:5a:06:72:82: 7b:ff:0a:59:00:01:b1:f1:72:ca:da:21:43:09:3c: 20:08:4c:0b:4a:1e:4a:42:a9:87:26:fa:88:9d:e2: 56:0c:c7:64:6b:b5:7b:05:9c:4f:6b:3c:a9:f8:84: ef:4c:a1:fe:e8:a3:3e:58:a7:9b:ce:68:9c:34:e7: 24:ad:7c:74:38:bb:6e:c6:e1:e3:02:8a:f7:70:b1: b0:fb:13:12:51:25:f5:4f:b4:bf:10:0d:1d:97:8b: d8:77:34:8f:c2:2e:67:a8:4b:84:52:03:9d:5a:0a: 6e:c5:de:6b:e1:93:59:7c:dd:4a:6a:62:7a:35:26: 06:c9:e4:7e:c3:1f:a8:ae:68:7b:30:08:e2:89:5e: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EE:F1:6D:E3:D1:F8:65:2F:34:4A:82:D6:0D:A3:43:CD:15:B9:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ef0e876-c3e5-444a-bb43-52d3548a12da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.18.0/24 Signature Algorithm: sha256WithRSAEncryption 82:fd:01:88:c7:f1:81:36:38:7c:73:ed:b7:2e:e8:eb:22:af: a6:df:04:2b:b6:3b:d3:01:f9:d3:47:ae:75:a3:bd:35:00:cb: 83:4f:d0:c9:c3:54:5b:64:37:93:8f:a6:d7:0b:64:fd:33:04: 07:bc:50:19:e2:79:f8:d6:ad:3b:8a:b8:b3:f5:2b:2f:90:9d: ad:2c:74:91:44:a5:94:6e:bd:e5:41:cc:1d:54:c4:72:2e:9e: ee:d3:cf:bd:ee:35:0b:4b:23:2a:0e:51:5a:01:07:e1:3b:f8: e9:c5:fa:36:74:36:8a:c5:06:d6:22:eb:63:3f:60:8b:96:df: 6b:18:7d:8d:1f:4f:9b:6f:df:28:f3:74:b0:ff:84:e2:24:fe: 67:ce:17:f6:d5:03:26:4b:92:28:fb:c6:90:ba:9d:34:71:16: 01:5c:cd:ea:65:d6:13:c4:66:90:db:84:d5:f7:d9:a2:d7:30: ff:07:99:b8:02:e8:17:86:81:16:f6:01:8f:6b:c6:27:3b:cb: 25:c9:73:ad:bc:f2:11:44:c7:dc:a3:cb:ab:af:19:d1:4e:f7: 67:12:bb:b7:b3:74:39:e3:4a:8a:8d:34:60:04:cc:ae:b7:71: e4:47:f9:4a:23:9f:79:4b:3a:16:81:25:cd:39:91:75:69:a5: 3f:e9:c6:a8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZSH4Ebw01JWO5k7iyGkFBHm2p2wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzA0MTUzMTQzWhcNMjUwODA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmI5OWQxZDI0YWVmMzFlYmYzZWUxYTU5NzY2NWM2NGI1 ZGZlN2MzMWQyM2Q4OGI2MmUxZWRiNTYxZDJjNjlhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6iEUndXSPjv8+f2HiwbPj1TiSROd8VGqk11zCjtmOhYEe +NSUmifC6oEhUR7nCbC7wfX9JpBoRluNZkSeJOmjUkYi3JLOCE/JARMFSJzcMqfm jtS6D3cNrXf32ehoM5HWUPVx3lac8X9Q3Zev/4soKqvhWgZygnv/ClkAAbHxcsra IUMJPCAITAtKHkpCqYcm+oid4lYMx2RrtXsFnE9rPKn4hO9Mof7ooz5Yp5vOaJw0 5yStfHQ4u27G4eMCivdwsbD7ExJRJfVPtL8QDR2Xi9h3NI/CLmeoS4RSA51aCm7F 3mvhk1l83UpqYno1JgbJ5H7DH6iuaHswCOKJXt/PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUT+7xbePR+GUvNEqC1g2jQ80VuScwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlZjBlODc2LWMzZTUtNDQ0YS1iYjQzLTUyZDM1NDhhMTJkYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAhIwDQYJKoZIhvcNAQELBQADggEBAIL9AYjH8YE2OHxz7bcu6Osir6bf BCu2O9MB+dNHrnWjvTUAy4NP0MnDVFtkN5OPptcLZP0zBAe8UBniefjWrTuKuLP1 Ky+Qna0sdJFEpZRuveVBzB1UxHIunu7Tz73uNQtLIyoOUVoBB+E7+OnF+jZ0NorF BtYi62M/YIuW32sYfY0fT5tv3yjzdLD/hOIk/mfOF/bVAyZLkij7xpC6nTRxFgFc zepl1hPEZpDbhNX32aLXMP8HmbgC6BeGgRb2AY9rxic7yyXJc6288hFEx9yjy6uv GdFO92cSu7ezdDnjSoqNNGAEzK63ceRH+Uojn3lLOhaBJc05kXVppT/pxqg= -----END CERTIFICATE-----Generated at Mon Jul 21 05:42:02 2025 by rpki-client