$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa File: 003286f2-c9bd-43a7-b5be-9753eb9aab82.roa (raw, json) Hash identifier: S5iqOakq/w9ZD83OEklu8QBTENG4S64VEO8u7eO2yTg= Subject key identifier: 39:C4:FF:EF:6A:D8:83:43:60:51:C3:B7:26:39:99:93:EE:AB:43:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D2DB7673A617720A2A18BAF4959011E1673343D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa Signing time: Tue 05 Aug 2025 17:31:49 +0000 ROA not before: Tue 05 Aug 2025 17:31:49 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.70.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:2d:b7:67:3a:61:77:20:a2:a1:8b:af:49:59:01:1e:16:73:34:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:31:49 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=6721869840ae9b5420482af7532640241ee090004a1451c6b73f45b196fe38d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4c:a7:e8:d4:8e:1a:8c:94:75:f2:3a:8b:3c: de:b2:8f:7e:5e:bc:4a:34:61:f2:04:3d:17:b9:25: 57:30:4c:c0:39:df:9d:5c:d7:6f:0f:33:6e:50:45: bd:03:a3:5e:28:f9:9f:49:d5:bb:b9:c5:c8:6c:79: 51:35:8b:2a:2e:5e:fa:b1:c5:9f:fd:08:d5:86:f9: 3e:e3:e5:82:e3:5c:64:47:43:36:26:b6:2e:d1:6a: fb:f9:3c:7f:b3:3d:df:db:2b:c5:fa:96:0c:a1:4c: f5:2a:2b:1a:40:e6:5e:51:64:7e:60:f5:f9:92:a1: 96:68:80:d4:e4:ee:5f:bc:1f:5e:6d:88:37:e2:7f: ef:41:cf:7a:ea:32:69:ad:f4:d2:ae:0e:3a:44:e5: 2a:99:d4:e5:d4:42:ba:01:37:92:88:a0:c2:b3:b3: d2:db:8e:3a:c0:4b:59:cb:7b:27:85:72:5b:d6:9b: d0:dc:a6:b5:63:a9:9f:92:6e:45:f3:d6:21:94:9b: 59:fa:cd:a4:d4:1f:f9:f0:7d:52:47:8d:dd:74:83: d6:34:3b:e8:51:aa:06:79:fe:a5:70:75:fd:23:ca: 61:42:71:ca:23:dc:6d:84:c1:00:1a:bd:d4:36:94: 03:7b:3a:a6:5b:14:2d:21:59:32:72:6c:bd:e6:64: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C4:FF:EF:6A:D8:83:43:60:51:C3:B7:26:39:99:93:EE:AB:43:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/003286f2-c9bd-43a7-b5be-9753eb9aab82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.70.0.0/15 Signature Algorithm: sha256WithRSAEncryption 03:7d:e8:03:e5:5b:0b:45:ca:2a:16:2f:01:a2:ae:0f:d1:18: 9c:85:4c:00:38:f6:50:d0:a2:6c:3d:8f:5e:49:5a:5f:f4:56: 3e:ae:fd:84:8c:42:f0:37:54:25:b1:92:b7:9b:2f:f4:3e:b4: b9:12:ee:34:2c:26:7d:ba:34:0a:a9:61:bb:3f:6e:9a:06:2b: 79:c7:80:c5:19:d9:e4:17:0e:2b:d4:fc:3b:55:2f:86:f0:74: 6d:a3:7e:bb:48:dc:8c:93:2b:ac:7f:99:e5:c6:3e:8f:90:2e: 94:d3:9c:1e:94:2c:ec:f6:f5:3f:57:33:13:49:d7:e7:06:95: 16:f9:29:22:8a:bc:6a:79:4a:27:50:eb:f3:39:66:3a:81:a7: 43:f8:5b:3b:27:88:14:6c:43:70:a8:f1:24:c8:68:e7:2a:49: ea:19:ee:86:59:36:4f:b0:5c:ce:e7:d3:48:b8:3e:38:7b:ac: 9a:33:79:62:1b:99:aa:e2:4f:f4:b1:4c:04:79:d7:a2:8d:d1: 6e:19:f4:c9:ef:5d:d0:6f:7c:e3:7c:ef:aa:e4:28:96:ce:c5: 11:75:dc:07:fc:a6:a8:94:06:9e:22:e6:6a:b6:62:5e:80:cf: 84:c6:d9:9c:35:8a:2f:12:2c:16:b3:57:0f:ff:34:28:7a:6f: dd:cc:dc:4f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDS23ZzphdyCioYuvSVkBHhZzND0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTczMTQ5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzIxODY5ODQwYWU5YjU0MjA0ODJhZjc1MzI2NDAyNDFl ZTA5MDAwNGExNDUxYzZiNzNmNDViMTk2ZmUzOGQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtTKfo1I4ajJR18jqLPN6yj35evEo0YfIEPRe5JVcwTMA5 351c128PM25QRb0Do14o+Z9J1bu5xchseVE1iyouXvqxxZ/9CNWG+T7j5YLjXGRH QzYmti7Ravv5PH+zPd/bK8X6lgyhTPUqKxpA5l5RZH5g9fmSoZZogNTk7l+8H15t iDfif+9Bz3rqMmmt9NKuDjpE5SqZ1OXUQroBN5KIoMKzs9LbjjrAS1nLeyeFclvW m9DcprVjqZ+SbkXz1iGUm1n6zaTUH/nwfVJHjd10g9Y0O+hRqgZ5/qVwdf0jymFC ccoj3G2EwQAavdQ2lAN7OqZbFC0hWTJybL3mZEVXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOcT/72rYg0NgUcO3JjmZk+6rQzMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwMzI4NmYyLWM5YmQtNDNhNy1iNWJlLTk3NTNlYjlhYWI4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2RjANBgkqhkiG9w0BAQsFAAOCAQEAA33oA+VbC0XKKhYvAaKuD9EYnIVM ADj2UNCibD2PXklaX/RWPq79hIxC8DdUJbGSt5sv9D60uRLuNCwmfbo0Cqlhuz9u mgYreceAxRnZ5BcOK9T8O1UvhvB0baN+u0jcjJMrrH+Z5cY+j5AulNOcHpQs7Pb1 P1czE0nX5waVFvkpIoq8anlKJ1Dr8zlmOoGnQ/hbOyeIFGxDcKjxJMho5ypJ6hnu hlk2T7BczufTSLg+OHusmjN5YhuZquJP9LFMBHnXoo3Rbhn0ye9d0G9843zvquQo ls7FEXXcB/ymqJQGniLmarZiXoDPhMbZnDWKLxIsFrNXD/80KHpv3czcTw== -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:39 2025 by rpki-client