$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24aeafda-b7b1-4a9d-8bdf-3482feb88280.roa File: 24aeafda-b7b1-4a9d-8bdf-3482feb88280.roa (raw, json) Hash identifier: u7w8raeu05kHYYCjA7E4ZBZRa8kC2qSpS7gY0IYVaBo= Subject key identifier: 9D:FD:E7:C0:0A:C3:6C:DA:F5:10:43:58:7B:1E:EF:BF:D4:65:56:05 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11488944D90EA52FFBD93ED27040C6FB4BE1E6BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24aeafda-b7b1-4a9d-8bdf-3482feb88280.roa Signing time: Mon 30 Jun 2025 16:21:44 +0000 ROA not before: Mon 30 Jun 2025 16:21:44 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:48:89:44:d9:0e:a5:2f:fb:d9:3e:d2:70:40:c6:fb:4b:e1:e6:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:21:44 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=f4c3eaf732b5ea5a46f36e1fd6dbf68036e97eca96f8a36eae01083d0228c9ae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:6e:ec:46:a2:bf:5d:72:24:c0:d8:1f:c4: 6e:54:ad:6d:a6:b5:fb:d8:9b:f9:2a:98:b1:67:be: 83:78:cd:91:b9:96:05:ff:49:c2:c0:33:01:94:90: 33:67:33:a3:d6:9c:a0:37:5e:62:a9:c2:57:2a:e4: ac:c6:00:b4:1a:bf:63:1b:6a:5a:fa:d9:8c:4c:0f: 86:f9:8d:2e:e2:8f:99:83:6e:cb:66:72:49:38:01: 7f:c9:f4:e1:90:31:a8:3a:90:5a:0b:43:00:c8:d9: b2:5e:a7:13:b9:9e:64:a5:8b:0d:c0:e6:73:41:08: 4b:ad:a4:c2:22:d1:98:46:da:42:88:59:f6:d8:a2: 35:b8:96:f2:76:16:49:6b:bc:53:bd:83:14:f3:3e: 67:f9:fb:65:d7:75:9e:e6:c6:ce:ee:27:76:f9:5b: 03:74:9a:b7:5f:da:8f:0d:22:b7:25:a2:51:5f:a5: 75:75:5d:59:d7:26:91:4d:d9:bb:ec:7f:43:4a:26: ca:72:67:c9:be:17:0c:86:f7:ed:f7:fa:50:7c:fd: bb:13:03:dc:5f:17:46:fe:7c:bb:12:92:16:0e:73: 9f:e1:33:ac:ba:0b:be:7b:88:3e:e0:0a:ee:ac:8e: 37:81:63:53:87:fa:62:30:fd:aa:7c:f1:59:39:45: 3b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FD:E7:C0:0A:C3:6C:DA:F5:10:43:58:7B:1E:EF:BF:D4:65:56:05 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/24aeafda-b7b1-4a9d-8bdf-3482feb88280.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.142.0/23 Signature Algorithm: sha256WithRSAEncryption 29:e4:85:a7:e0:6f:14:00:4f:23:bc:0f:44:07:ff:19:39:cb: 25:3d:84:73:d6:d1:f2:b9:14:02:38:23:d2:e7:61:0d:d4:69: 76:b5:d8:42:f2:c3:b1:9d:58:e7:a0:63:1d:86:a5:37:93:f1: 22:87:a6:50:0c:87:03:32:9a:44:6d:b3:c0:9e:09:62:72:6f: 20:b1:8a:14:36:09:c4:6a:b9:c9:0d:2d:f8:8a:c2:fb:ab:82: 14:5a:44:60:0d:7d:65:8d:86:19:db:0f:a9:3a:ae:12:b8:a0: 78:b9:94:a6:f7:b3:7f:9e:8e:0f:74:3e:2e:04:e4:62:ce:46: 61:88:84:e7:81:bb:d7:53:77:f3:7e:11:35:41:ae:8a:0c:31: d0:d4:ce:f0:a3:41:d6:b6:14:96:00:bb:1b:54:53:bf:f4:62: 7d:85:e6:3b:09:5d:b5:18:d8:5f:80:55:8f:fc:b2:4a:fd:6e: 67:74:ca:b8:42:6c:4f:68:9f:01:e0:85:f7:c8:ab:b2:83:bf: 1b:0c:37:3c:fc:e6:87:ee:c0:1c:bd:ab:7c:00:f0:fa:4f:46: 72:6b:fc:8b:7e:e1:17:93:aa:0d:17:b4:67:03:4e:71:68:a3: 03:06:fe:3a:81:20:f4:a8:31:b5:82:b7:10:37:70:0a:71:09: 9f:65:d9:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEUiJRNkOpS/72T7ScEDG+0vh5rowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYyMTQ0WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGMzZWFmNzMyYjVlYTVhNDZmMzZlMWZkNmRiZjY4MDM2 ZTk3ZWNhOTZmOGEzNmVhZTAxMDgzZDAyMjhjOWFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyiG7sRqK/XXIkwNgfxG5UrW2mtfvYm/kqmLFnvoN4zZG5 lgX/ScLAMwGUkDNnM6PWnKA3XmKpwlcq5KzGALQav2Mbalr62YxMD4b5jS7ij5mD bstmckk4AX/J9OGQMag6kFoLQwDI2bJepxO5nmSliw3A5nNBCEutpMIi0ZhG2kKI WfbYojW4lvJ2FklrvFO9gxTzPmf5+2XXdZ7mxs7uJ3b5WwN0mrdf2o8NIrclolFf pXV1XVnXJpFN2bvsf0NKJspyZ8m+FwyG9+33+lB8/bsTA9xfF0b+fLsSkhYOc5/h M6y6C757iD7gCu6sjjeBY1OH+mIw/ap88Vk5RTvBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnf3nwArDbNr1EENYex7vv9RlVgUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0YWVhZmRhLWI3YjEtNGE5ZC04YmRmLTM0ODJmZWI4ODI4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvI4wDQYJKoZIhvcNAQELBQADggEBACnkhafgbxQATyO8D0QH/xk5yyU9 hHPW0fK5FAI4I9LnYQ3UaXa12ELyw7GdWOegYx2GpTeT8SKHplAMhwMymkRts8Ce CWJybyCxihQ2CcRquckNLfiKwvurghRaRGANfWWNhhnbD6k6rhK4oHi5lKb3s3+e jg90Pi4E5GLORmGIhOeBu9dTd/N+ETVBrooMMdDUzvCjQda2FJYAuxtUU7/0Yn2F 5jsJXbUY2F+AVY/8skr9bmd0yrhCbE9onwHghffIq7KDvxsMNzz85ofuwBy9q3wA 8PpPRnJr/It+4ReTqg0XtGcDTnFoowMG/jqBIPSoMbWCtxA3cApxCZ9l2e0= -----END CERTIFICATE-----Generated at Mon Jun 30 23:48:57 2025 by rpki-client