$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfed3bf-6387-4d83-a1cb-5c0c88476047.roa File: 5bfed3bf-6387-4d83-a1cb-5c0c88476047.roa (raw, json) Hash identifier: PzsmrsJK0ep/5SYR0jeIFQ01E5MI0CuEUXA3ahes27A= Subject key identifier: A1:C6:B6:2B:11:43:5C:B9:78:76:54:C5:C1:C5:79:8B:AE:F5:09:37 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6AC7B8FEE922D2458F85B3925B6F796CCFDAC926 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfed3bf-6387-4d83-a1cb-5c0c88476047.roa Signing time: Mon 30 Jun 2025 16:10:18 +0000 ROA not before: Mon 30 Jun 2025 16:10:18 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c7:b8:fe:e9:22:d2:45:8f:85:b3:92:5b:6f:79:6c:cf:da:c9:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:10:18 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=4dd9e2c7ba06516952cdcfac1966baca1b0a5485cfd69fd0a48c6ec372220114, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:1c:bb:87:b8:1d:f5:05:7d:b8:0e:73:89: c8:30:09:53:71:8c:1d:5a:28:8d:6a:1d:bf:65:69: d7:41:ee:e3:99:a4:8f:38:70:e6:29:a5:2d:4b:8d: f3:41:11:4f:3d:f9:66:3b:2c:c4:98:96:c0:bb:c2: c3:79:2e:0e:b7:9e:60:c6:ce:d9:86:a3:d6:f7:08: 92:d1:5f:ac:ce:c8:af:b8:66:bb:5e:a9:81:58:df: 19:6c:73:7c:cd:6f:29:1d:c9:2e:15:1f:ca:0c:0a: 2c:6a:a9:cd:2c:9a:9c:75:69:f5:bf:4f:fc:b6:61: c5:28:e2:e5:de:a7:86:9d:4b:97:24:a6:02:84:ad: 4e:e6:ee:03:26:fc:49:47:af:fb:f8:5c:be:a0:42: 95:02:c0:d3:83:93:4e:d2:1c:43:be:fb:9e:98:36: ee:f7:52:59:b8:8c:20:d8:04:94:9b:1b:c2:67:81: 35:2a:10:8d:4e:71:1c:5f:e9:7b:e9:60:fa:83:0e: 20:97:26:33:2b:22:ad:db:82:be:ff:8b:bf:e7:a0: ed:58:a2:39:90:0d:88:8a:d0:90:e3:0a:2f:25:a0: 44:82:63:31:32:2b:f3:b8:c9:86:09:4d:16:66:04: 38:63:84:f0:6d:ce:53:0a:af:fd:cd:97:2d:0f:5f: d3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C6:B6:2B:11:43:5C:B9:78:76:54:C5:C1:C5:79:8B:AE:F5:09:37 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfed3bf-6387-4d83-a1cb-5c0c88476047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 28:0a:24:9b:54:f6:90:be:e0:bf:83:c0:e9:89:d9:e0:2c:89: 87:0e:51:14:a8:86:ba:fe:d0:7f:69:6e:ec:94:97:f5:f3:cd: 20:d5:5a:b2:42:f3:0c:d3:db:ac:13:f0:0d:07:b1:4b:26:1a: bb:10:7e:41:b3:01:6a:93:d5:70:34:0f:47:b5:27:77:77:13: b9:f5:6e:f7:c6:07:9f:9d:98:15:d1:22:c5:63:01:aa:12:be: 44:37:7c:10:5b:57:a1:f7:1d:f2:3f:ea:fe:d1:94:03:73:4c: 3c:6e:15:fe:b9:81:dc:fe:b4:b8:3d:96:ec:bd:ef:c6:58:82: c5:5e:14:ae:0e:aa:52:18:d4:53:79:ba:23:d7:ae:95:4a:72: 10:a0:43:e6:ba:00:ee:d8:6e:01:e8:77:d6:32:31:15:ca:84: db:27:0b:fd:25:54:7a:d8:61:a8:0a:10:5c:0c:23:15:c9:b5: 18:d9:08:ea:5e:0d:91:68:25:c0:f1:63:5e:9a:67:54:7c:1e: bc:98:34:04:cf:10:c1:81:b9:9f:31:92:a9:4c:7a:dd:9e:f7: 78:d8:a4:b0:49:dd:15:a1:3e:f5:7d:9e:f8:66:66:95:53:0e: 62:e7:69:06:aa:02:a0:56:aa:4b:dc:0c:d9:f8:ee:75:ea:78: d6:a0:c9:f8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUase4/uki0kWPhbOSW295bM/aySYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYxMDE4WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGQ5ZTJjN2JhMDY1MTY5NTJjZGNmYWMxOTY2YmFjYTFi MGE1NDg1Y2ZkNjlmZDBhNDhjNmVjMzcyMjIwMTE0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk7xy7h7gd9QV9uA5zicgwCVNxjB1aKI1qHb9laddB7uOZ pI84cOYppS1LjfNBEU89+WY7LMSYlsC7wsN5Lg63nmDGztmGo9b3CJLRX6zOyK+4 ZrteqYFY3xlsc3zNbykdyS4VH8oMCixqqc0smpx1afW/T/y2YcUo4uXep4adS5ck pgKErU7m7gMm/ElHr/v4XL6gQpUCwNODk07SHEO++56YNu73Ulm4jCDYBJSbG8Jn gTUqEI1OcRxf6XvpYPqDDiCXJjMrIq3bgr7/i7/noO1YojmQDYiK0JDjCi8loESC YzEyK/O4yYYJTRZmBDhjhPBtzlMKr/3Nly0PX9OpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoca2KxFDXLl4dlTFwcV5i671CTcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzViZmVkM2JmLTYzODctNGQ4My1hMWNiLTVjMGM4ODQ3NjA0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP3DANBgkqhkiG9w0BAQsFAAOCAQEAKAokm1T2kL7gv4PA6YnZ4CyJhw5R FKiGuv7Qf2lu7JSX9fPNINVaskLzDNPbrBPwDQexSyYauxB+QbMBapPVcDQPR7Un d3cTufVu98YHn52YFdEixWMBqhK+RDd8EFtXofcd8j/q/tGUA3NMPG4V/rmB3P60 uD2W7L3vxliCxV4Urg6qUhjUU3m6I9eulUpyEKBD5roA7thuAeh31jIxFcqE2ycL /SVUethhqAoQXAwjFcm1GNkI6l4NkWglwPFjXppnVHwevJg0BM8QwYG5nzGSqUx6 3Z73eNiksEndFaE+9X2e+GZmlVMOYudpBqoCoFaqS9wM2fjudep41qDJ+A== -----END CERTIFICATE-----Generated at Mon Jun 30 23:54:17 2025 by rpki-client