$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69fbbdce-be3d-4657-adae-30161434011c.roa File: 69fbbdce-be3d-4657-adae-30161434011c.roa (raw, json) Hash identifier: zsWxO1bx5I5KBhfmccEU5xT7kw1F7fi7dDSjgvqZCPg= Subject key identifier: 87:FA:AC:1E:14:FE:56:53:39:41:E4:16:BF:92:2F:E5:EC:7A:1C:42 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4046834247475435EADA14EA9DC4B81FB3539A87 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69fbbdce-be3d-4657-adae-30161434011c.roa Signing time: Tue 05 Aug 2025 16:11:04 +0000 ROA not before: Tue 05 Aug 2025 16:11:04 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.141.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:46:83:42:47:47:54:35:ea:da:14:ea:9d:c4:b8:1f:b3:53:9a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 16:11:04 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=3232f118c833420178a903e951f6048358e2f9ee05e400a50434c342710e4ec8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1d:7a:cb:c6:3c:73:c8:0b:3c:85:cb:9b:02: 56:6b:f0:3f:cf:0d:58:4f:38:a2:f1:59:30:b5:49: 15:4e:6e:51:0d:d3:6e:3f:f1:35:75:c5:14:78:90: 3d:d7:12:5c:5f:3b:19:e6:86:8f:ec:d7:7f:1c:39: 30:43:16:7b:63:f1:17:47:48:67:fe:a8:d9:a5:7f: a6:bf:70:23:07:07:c2:8a:9b:7d:62:70:0e:a4:10: 18:0b:97:49:17:e2:e3:2c:d4:19:57:11:30:cc:74: a2:20:2f:76:20:8d:2a:fe:55:ea:ea:68:e8:d0:91: f8:be:8a:4b:b1:92:f0:fa:2b:f4:a0:8e:64:ca:a0: 06:f5:55:67:b6:65:5e:5f:e1:c4:5f:32:ac:8e:0d: ac:9b:47:c7:20:30:30:a9:62:82:8a:00:0f:0b:d2: 55:4f:56:db:ab:1c:e7:ec:11:bb:80:e1:ce:2b:9e: 6b:6e:ee:7d:25:03:0a:4d:b8:32:94:fd:35:c6:0c: b9:68:56:9a:db:ec:1a:2c:40:d4:a0:c5:c5:38:07: 2f:7f:8e:8e:cc:6a:45:ba:20:e0:c5:e2:28:87:10: d1:ed:7f:ea:18:14:91:42:a7:5a:d6:34:cb:66:e6: 18:10:86:5c:5a:29:ce:fd:f2:3c:9a:96:b4:01:2e: da:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FA:AC:1E:14:FE:56:53:39:41:E4:16:BF:92:2F:E5:EC:7A:1C:42 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/69fbbdce-be3d-4657-adae-30161434011c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.141.0.0/17 Signature Algorithm: sha256WithRSAEncryption 65:fc:64:71:51:b0:cd:16:fc:9a:ee:ad:17:c8:11:fc:8b:8b: 22:e1:2b:f3:a1:8b:2b:9f:fe:98:10:15:a4:2d:d1:1f:f1:d8: 2c:37:ed:4c:19:3b:07:a3:18:66:30:88:68:f8:d0:ac:a5:d4: 3a:10:00:99:d5:d4:8b:bd:47:b8:88:7d:f5:9a:28:b7:b7:51: 82:9f:d4:66:bd:9b:85:95:3d:d8:fd:64:f2:1f:6c:4a:ea:67: d6:64:26:c4:20:0c:83:21:23:ce:e9:84:0d:97:28:bb:b4:92: 72:25:f2:d5:15:17:27:2e:95:61:01:37:b5:62:fb:44:01:09: 12:4f:d4:25:51:0b:80:9a:53:c1:04:28:19:e7:9e:18:69:a1: 9f:40:68:c3:f5:7e:70:2f:6d:08:b3:82:f4:ea:d1:3b:c1:9b: fa:0f:f4:c2:c4:dd:cc:f9:aa:96:b3:39:5f:c7:b4:8c:ab:8b: 50:d0:50:db:a3:02:81:4d:e1:e8:af:ac:72:11:86:66:86:70: 57:54:d1:37:36:6b:55:cb:21:d0:0c:d2:e5:bf:c0:e3:cc:0b: 57:12:1b:b2:c2:87:8e:40:c3:65:e7:f4:ed:a8:1f:7b:75:0d: a3:43:b1:2a:49:45:20:d0:a5:2f:ec:eb:3e:c6:71:90:71:66: 79:d7:7a:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQEaDQkdHVDXq2hTqncS4H7NTmocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTYxMTA0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMjMyZjExOGM4MzM0MjAxNzhhOTAzZTk1MWY2MDQ4MzU4 ZTJmOWVlMDVlNDAwYTUwNDM0YzM0MjcxMGU0ZWM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTHXrLxjxzyAs8hcubAlZr8D/PDVhPOKLxWTC1SRVOblEN 024/8TV1xRR4kD3XElxfOxnmho/s138cOTBDFntj8RdHSGf+qNmlf6a/cCMHB8KK m31icA6kEBgLl0kX4uMs1BlXETDMdKIgL3YgjSr+VerqaOjQkfi+ikuxkvD6K/Sg jmTKoAb1VWe2ZV5f4cRfMqyODaybR8cgMDCpYoKKAA8L0lVPVturHOfsEbuA4c4r nmtu7n0lAwpNuDKU/TXGDLloVprb7BosQNSgxcU4By9/jo7MakW6IODF4iiHENHt f+oYFJFCp1rWNMtm5hgQhlxaKc798jyalrQBLtptAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh/qsHhT+VlM5QeQWv5Iv5ex6HEIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY5ZmJiZGNlLWJlM2QtNDY1Ny1hZGFlLTMwMTYxNDM0MDExYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcSjQAwDQYJKoZIhvcNAQELBQADggEBAGX8ZHFRsM0W/JrurRfIEfyLiyLh K/Ohiyuf/pgQFaQt0R/x2Cw37UwZOwejGGYwiGj40Kyl1DoQAJnV1Iu9R7iIffWa KLe3UYKf1Ga9m4WVPdj9ZPIfbErqZ9ZkJsQgDIMhI87phA2XKLu0knIl8tUVFycu lWEBN7Vi+0QBCRJP1CVRC4CaU8EEKBnnnhhpoZ9AaMP1fnAvbQizgvTq0TvBm/oP 9MLE3cz5qpazOV/HtIyri1DQUNujAoFN4eivrHIRhmaGcFdU0Tc2a1XLIdAM0uW/ wOPMC1cSG7LCh45Aw2Xn9O2oH3t1DaNDsSpJRSDQpS/s6z7GcZBxZnnXelg= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:12 2025 by rpki-client