$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ddac45-6ff3-44c5-b626-9a354eb9d483.roa File: 00ddac45-6ff3-44c5-b626-9a354eb9d483.roa (raw, json) Hash identifier: E8IUzsTzS7y/2Gx2r548oYVoIwHGrQHu8YaVfmx04dE= Subject key identifier: E1:8F:41:23:00:58:9B:C2:1D:ED:8F:43:51:8F:C8:FB:C1:9A:D6:DA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30FD718664217725192609DB5AD2D5E87D92329A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ddac45-6ff3-44c5-b626-9a354eb9d483.roa Signing time: Mon 30 Jun 2025 16:00:26 +0000 ROA not before: Mon 30 Jun 2025 16:00:26 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.248.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fd:71:86:64:21:77:25:19:26:09:db:5a:d2:d5:e8:7d:92:32:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:00:26 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=01377a9f4b28f607eb14982d48330390f31d9426d8148546d7a90cbb4c6c5fe6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6c:80:6d:78:2a:d8:d3:86:de:a1:95:ba:ee: 50:28:00:b7:b2:66:2c:4c:85:8e:a0:ab:77:2b:d1: cf:86:b0:4d:70:87:f8:2f:6a:e4:8d:e1:bc:45:60: fc:d6:d7:70:3c:c9:09:dc:ce:37:70:e1:2d:f8:56: b1:ad:04:48:80:d6:79:9a:d1:4d:da:1e:54:90:c6: af:ff:5f:7f:a6:a5:63:93:05:5f:2c:23:28:ba:c7: 64:7b:d8:a1:e4:83:f0:9a:07:13:45:ae:f1:d1:f6: 1c:02:9b:30:7d:b1:2a:4b:3b:df:a0:75:f1:4c:8a: bc:d2:c3:59:5d:c5:71:81:0a:82:1a:c3:fb:f1:43: 89:59:d6:30:2b:1b:71:6d:6f:a9:4a:0e:ee:d3:c0: 7d:c4:61:1d:7b:80:99:0d:34:fc:69:d8:61:eb:05: 2f:75:b3:88:8f:a3:0f:12:2b:19:3d:f4:5c:27:06: 03:5e:9f:a0:9d:53:7d:c1:3b:75:cb:ac:a1:55:84: 5f:60:59:ff:40:2b:68:20:f9:fd:a4:82:ec:e9:20: 99:7c:94:ed:57:b7:b0:f4:5b:7a:d0:68:3b:94:03: ed:ad:f9:cd:cf:8b:f3:77:1b:63:fc:bd:a6:e5:79: 10:50:f4:30:8b:75:b6:e8:3d:da:72:e4:1e:00:71: 92:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8F:41:23:00:58:9B:C2:1D:ED:8F:43:51:8F:C8:FB:C1:9A:D6:DA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ddac45-6ff3-44c5-b626-9a354eb9d483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.248.128.0/18 Signature Algorithm: sha256WithRSAEncryption 13:42:e4:33:a6:5c:f4:35:18:63:c0:d9:1f:ef:fb:42:21:bb: 99:b5:f3:dd:d2:68:a3:34:e5:25:5f:61:da:55:4b:d2:7d:73: c8:d8:1f:31:8f:1a:ed:97:86:ec:f1:07:9a:69:7c:46:da:e4: e3:f4:bc:77:70:e6:67:e0:1d:83:60:d0:0d:1c:e3:c3:3a:2a: f1:f7:aa:1f:fe:b6:d9:f5:79:4a:ba:02:26:54:52:d6:63:6b: 6a:c3:8c:6b:ac:dc:22:14:a9:ad:b5:21:7a:29:0e:7d:81:3a: a0:2c:62:42:f7:a3:3c:5a:1a:d0:ee:12:97:03:a0:a9:a0:31: f6:2a:15:1d:aa:9d:95:98:6b:75:e9:70:5a:20:bd:9f:d8:36: 29:14:77:35:45:30:5d:72:36:01:40:a1:03:fa:27:82:0b:98: 13:7f:e5:24:90:9e:80:12:b9:f2:cd:81:ed:40:2c:60:1d:5a: c0:2b:04:dc:7b:5d:06:c8:e3:a0:2a:14:bd:eb:68:db:09:47: b5:89:60:f2:a6:a3:28:bd:65:32:ee:c5:cf:0b:c1:f4:d3:87: 25:9e:14:0f:be:cc:eb:1e:8b:a5:2a:77:4a:55:1f:49:eb:9e: e2:73:93:98:39:74:9f:e9:37:a5:71:cb:d2:fd:56:cb:1d:d2: f5:55:35:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMP1xhmQhdyUZJgnbWtLV6H2SMpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYwMDI2WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMTM3N2E5ZjRiMjhmNjA3ZWIxNDk4MmQ0ODMzMDM5MGYz MWQ5NDI2ZDgxNDg1NDZkN2E5MGNiYjRjNmM1ZmU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCybIBteCrY04beoZW67lAoALeyZixMhY6gq3cr0c+GsE1w h/gvauSN4bxFYPzW13A8yQnczjdw4S34VrGtBEiA1nma0U3aHlSQxq//X3+mpWOT BV8sIyi6x2R72KHkg/CaBxNFrvHR9hwCmzB9sSpLO9+gdfFMirzSw1ldxXGBCoIa w/vxQ4lZ1jArG3Ftb6lKDu7TwH3EYR17gJkNNPxp2GHrBS91s4iPow8SKxk99Fwn BgNen6CdU33BO3XLrKFVhF9gWf9AK2gg+f2kguzpIJl8lO1Xt7D0W3rQaDuUA+2t +c3Pi/N3G2P8vableRBQ9DCLdbboPdpy5B4AcZJnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4Y9BIwBYm8Id7Y9DUY/I+8Ga1towHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwZGRhYzQ1LTZmZjMtNDRjNS1iNjI2LTlhMzU0ZWI5ZDQ4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYD+IAwDQYJKoZIhvcNAQELBQADggEBABNC5DOmXPQ1GGPA2R/v+0Ihu5m1 893SaKM05SVfYdpVS9J9c8jYHzGPGu2XhuzxB5ppfEba5OP0vHdw5mfgHYNg0A0c 48M6KvH3qh/+ttn1eUq6AiZUUtZja2rDjGus3CIUqa21IXopDn2BOqAsYkL3ozxa GtDuEpcDoKmgMfYqFR2qnZWYa3XpcFogvZ/YNikUdzVFMF1yNgFAoQP6J4ILmBN/ 5SSQnoASufLNge1ALGAdWsArBNx7XQbI46AqFL3raNsJR7WJYPKmoyi9ZTLuxc8L wfTThyWeFA++zOsei6Uqd0pVH0nrnuJzk5g5dJ/pN6Vxy9L9Vssd0vVVNSQ= -----END CERTIFICATE-----Generated at Mon Jun 30 23:08:08 2025 by rpki-client