$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5073d0aa-0177-41f1-9cc7-32ddf8130b6a.roa File: 5073d0aa-0177-41f1-9cc7-32ddf8130b6a.roa (raw, json) Hash identifier: 3R6HjQqS3mYIIxLkH1g9qaRujrNUc7lhsEdQx/CRLBI= Subject key identifier: C6:EF:C2:FD:D7:C4:AB:F1:3E:02:6E:4D:8E:D6:F9:2A:BF:E1:B2:75 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C546A3D2298BEA739956430CF06DA437C0C7B31 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5073d0aa-0177-41f1-9cc7-32ddf8130b6a.roa Signing time: Mon 19 May 2025 19:21:51 +0000 ROA not before: Mon 19 May 2025 19:21:51 +0000 ROA not after: Mon 23 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:54:6a:3d:22:98:be:a7:39:95:64:30:cf:06:da:43:7c:0c:7b:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 19 19:21:51 2025 GMT Not After : Jun 23 23:59:59 2025 GMT Subject: serialNumber=df1c819aa3959cf10b1a881f4cff0651b269376bcfd485ee16b32961156353c3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:db:88:5f:fe:dc:8f:f3:59:21:1e:07:e4: a7:88:40:ff:93:e7:76:d3:20:1a:4a:81:84:58:27: 09:46:de:1b:01:c2:2e:ff:3e:54:fa:fc:a5:97:ab: 4d:95:5d:ca:21:f5:e8:af:48:cf:8f:10:57:d1:e4: af:29:f8:7d:f7:d9:37:f7:f6:0f:99:6a:69:96:2f: c7:cc:cb:f5:b4:90:2f:bf:5e:76:e9:8f:bc:cb:3e: 99:05:a1:fd:6b:17:81:e7:7e:a2:9c:c4:2a:f7:24: b6:47:f4:77:1c:7f:f2:2e:e3:f5:68:86:ac:74:ed: 5f:75:61:31:48:4e:2e:11:d8:4d:90:0c:6e:08:19: 1d:13:6e:91:71:5c:51:94:9c:41:a3:53:a0:bc:c7: a4:b7:70:cd:15:fa:eb:20:67:0f:35:b6:5e:ea:fa: 4d:1e:f3:da:e3:43:a5:35:78:a6:b6:e9:8b:b5:9b: 1e:1f:f5:fa:7b:b4:28:31:bc:ba:bb:be:71:6a:e2: 9e:fe:84:5b:05:46:65:19:6d:de:71:31:a9:a8:cc: c8:6d:72:35:da:7f:bc:f0:92:87:44:f6:e3:a0:77: d4:c5:03:8a:c7:7a:e5:71:ff:13:be:a7:75:cd:91: 1f:dd:68:56:dd:27:19:52:2a:cd:6f:58:18:6f:70: 55:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EF:C2:FD:D7:C4:AB:F1:3E:02:6E:4D:8E:D6:F9:2A:BF:E1:B2:75 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5073d0aa-0177-41f1-9cc7-32ddf8130b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.16.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:d4:21:f3:73:e8:a8:b6:bb:04:ab:51:04:a8:46:fd:68:57: dd:fc:de:8e:db:f1:34:b7:83:97:9b:50:3a:47:09:0c:be:6b: ba:e0:e7:82:a3:ba:a5:29:fa:4c:de:88:b3:8c:d4:a6:62:dc: 72:d1:7b:fd:c9:ae:87:9c:63:e0:2b:6d:87:4b:55:38:49:37: 6e:c3:0b:e0:77:94:71:47:73:ca:80:78:21:62:a0:13:bd:15: c4:29:6a:cb:00:39:45:bd:8a:b8:32:b0:c6:1d:9d:b8:f3:ea: 64:4b:98:70:27:20:90:38:db:b3:a2:48:3e:b3:d8:76:49:ac: b9:1d:78:79:05:bd:f9:64:01:85:3a:5f:07:60:d7:45:33:bb: 72:ae:dc:2a:5e:02:57:0b:ab:c0:f0:ea:b5:c9:b3:2f:08:0a: b1:49:74:88:3f:89:4b:da:00:8e:2f:de:c3:4d:76:b5:f1:a4: 53:a6:eb:3f:95:83:36:0f:98:11:fb:75:13:8c:9e:50:aa:9c: e4:86:b6:0c:bd:fc:44:44:72:bc:1e:43:79:e0:1e:4e:b0:5d: 62:9f:4b:d9:ef:14:2e:04:1f:67:1e:b7:94:68:b5:30:e7:76: c5:a3:92:d7:a3:3b:46:73:d3:ff:ce:35:0d:8a:20:b2:34:5e: dd:22:d0:47 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbFRqPSKYvqc5lWQwzwbaQ3wMezEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTE5MTkyMTUxWhcNMjUwNjIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjFjODE5YWEzOTU5Y2YxMGIxYTg4MWY0Y2ZmMDY1MWIy NjkzNzZiY2ZkNDg1ZWUxNmIzMjk2MTE1NjM1M2MzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+Q9uIX/7cj/NZIR4H5KeIQP+T53bTIBpKgYRYJwlG3hsB wi7/PlT6/KWXq02VXcoh9eivSM+PEFfR5K8p+H332Tf39g+ZammWL8fMy/W0kC+/ Xnbpj7zLPpkFof1rF4HnfqKcxCr3JLZH9Hccf/Iu4/Vohqx07V91YTFITi4R2E2Q DG4IGR0TbpFxXFGUnEGjU6C8x6S3cM0V+usgZw81tl7q+k0e89rjQ6U1eKa26Yu1 mx4f9fp7tCgxvLq7vnFq4p7+hFsFRmUZbd5xMamozMhtcjXaf7zwkodE9uOgd9TF A4rHeuVx/xO+p3XNkR/daFbdJxlSKs1vWBhvcFWrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxu/C/dfEq/E+Am5Njtb5Kr/hsnUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUwNzNkMGFhLTAxNzctNDFmMS05Y2M3LTMyZGRmODEzMGI2YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ27xAwDQYJKoZIhvcNAQELBQADggEBAAvUIfNz6Ki2uwSrUQSoRv1oV938 3o7b8TS3g5ebUDpHCQy+a7rg54KjuqUp+kzeiLOM1KZi3HLRe/3JroecY+ArbYdL VThJN27DC+B3lHFHc8qAeCFioBO9FcQpassAOUW9irgysMYdnbjz6mRLmHAnIJA4 27OiSD6z2HZJrLkdeHkFvflkAYU6Xwdg10Uzu3Ku3CpeAlcLq8Dw6rXJsy8ICrFJ dIg/iUvaAI4v3sNNdrXxpFOm6z+VgzYPmBH7dROMnlCqnOSGtgy9/EREcrweQ3ng Hk6wXWKfS9nvFC4EH2cet5RotTDndsWjktejO0Zz0//ONQ2KILI0Xt0i0Ec= -----END CERTIFICATE-----Generated at Mon Jun 2 16:29:49 2025 by rpki-client