$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa File: 6f43e432-64c2-4e7b-9ec8-122af31247c8.roa (raw, json) Hash identifier: 4xEi3OYfn60txR1Uqsv8h+XxUt0EDhTpEIpMw7/GnPw= Subject key identifier: DF:F6:E5:17:58:39:51:42:0B:83:22:59:D6:61:27:A1:CC:23:DA:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3B038E8C77CE7CCEDAB138486DBF84C1139651BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa Signing time: Wed 21 May 2025 00:21:34 +0000 ROA not before: Wed 21 May 2025 00:21:34 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.248.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:03:8e:8c:77:ce:7c:ce:da:b1:38:48:6d:bf:84:c1:13:96:51:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:21:34 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=f118fd5b9a27a1df790d390b88d374eab91d14856a566b05e06b70561d1959a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b0:74:52:68:ec:8c:32:c5:4b:7e:12:ae:59: 4e:c3:9f:5f:49:00:94:fe:85:5f:58:4f:a7:10:e2: 8b:1c:86:df:08:b9:8a:e6:c2:c1:04:f4:d7:27:2d: e4:c0:16:7b:58:10:84:51:41:81:fb:c4:b4:da:63: 47:e6:bd:ed:d4:a3:38:17:b7:1d:b6:2a:a6:3f:03: e7:76:df:eb:dd:d6:44:d1:a0:e9:d3:23:29:02:9e: e8:d1:f5:e2:96:ff:e9:75:95:52:ca:ba:d8:70:63: 8d:1a:4c:99:27:2e:0f:c1:15:32:37:0f:06:d3:cf: d2:24:ea:55:b5:d2:62:32:5a:70:e7:fb:bd:39:46: d7:70:c1:5a:52:ef:28:2d:27:ea:16:5f:78:46:3a: 65:01:10:8f:50:cc:8b:cf:0c:41:40:ad:41:c5:af: 7d:19:b7:6f:58:17:76:61:f8:f3:d2:6f:b6:34:63: 32:50:b8:38:ff:80:a1:ef:f6:66:cd:33:d6:89:32: 71:30:1a:d8:fa:b5:fe:39:f7:f5:c8:a8:28:f1:9f: fc:0d:c9:ce:18:4d:93:bd:7f:5b:a9:b9:2e:ad:5c: ee:a5:81:1b:78:f6:40:d3:d7:79:3d:ee:42:b3:47: 35:0b:12:1b:a0:3c:32:3b:93:46:fb:b4:a5:06:ab: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F6:E5:17:58:39:51:42:0B:83:22:59:D6:61:27:A1:CC:23:DA:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f43e432-64c2-4e7b-9ec8-122af31247c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.248.0.0/14 Signature Algorithm: sha256WithRSAEncryption 8f:6d:89:da:1b:a4:33:5f:d8:be:86:47:da:d7:fd:00:d6:77: cf:09:c3:05:42:80:c2:2f:34:90:c1:67:7f:e7:c5:73:ba:96: 2b:50:0b:25:11:d5:37:ab:f7:f8:23:10:02:46:67:34:ab:37: a8:52:cc:38:84:4c:8f:78:21:43:c4:61:b5:5a:0d:04:29:92: d3:2f:76:8e:f0:bd:98:81:eb:c4:c1:5e:a3:a6:95:4d:64:6d: 90:80:c0:a0:47:d2:b1:a5:fd:37:1f:70:00:4d:44:42:da:75: 86:6f:15:e8:1e:c8:05:12:5e:21:de:e2:8d:d1:0f:6e:23:10: c1:d7:88:21:84:2d:28:5f:03:a6:e8:aa:d7:50:a4:58:f9:c3: 5b:e1:8d:7a:83:5f:ef:83:8f:e8:26:16:1e:da:0a:2a:9a:91: c0:e7:5f:0d:a2:01:db:cf:d4:72:1e:a0:11:32:96:c7:bf:74: 01:ed:2d:32:39:40:20:98:1c:1d:5b:cd:2b:7e:d9:38:4e:60: e5:47:77:27:dd:82:2a:cf:be:41:62:4b:57:3b:12:f8:62:80: fc:af:3c:93:7c:67:ff:b4:d6:23:38:3b:d8:fa:8e:dc:57:f0: 7f:4c:0c:6b:34:71:b9:4a:f8:1c:17:fb:f6:9c:3d:39:19:98: 83:d1:8f:40 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOwOOjHfOfM7asThIbb+EwROWUbswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDAyMTM0WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTE4ZmQ1YjlhMjdhMWRmNzkwZDM5MGI4OGQzNzRlYWI5 MWQxNDg1NmE1NjZiMDVlMDZiNzA1NjFkMTk1OWEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClsHRSaOyMMsVLfhKuWU7Dn19JAJT+hV9YT6cQ4oscht8I uYrmwsEE9NcnLeTAFntYEIRRQYH7xLTaY0fmve3UozgXtx22KqY/A+d23+vd1kTR oOnTIykCnujR9eKW/+l1lVLKuthwY40aTJknLg/BFTI3DwbTz9Ik6lW10mIyWnDn +705RtdwwVpS7ygtJ+oWX3hGOmUBEI9QzIvPDEFArUHFr30Zt29YF3Zh+PPSb7Y0 YzJQuDj/gKHv9mbNM9aJMnEwGtj6tf459/XIqCjxn/wNyc4YTZO9f1upuS6tXO6l gRt49kDT13k97kKzRzULEhugPDI7k0b7tKUGq44FAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3/blF1g5UUILgyJZ1mEnocwj2sUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZmNDNlNDMyLTY0YzItNGU3Yi05ZWM4LTEyMmFmMzEyNDdjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIS+DANBgkqhkiG9w0BAQsFAAOCAQEAj22J2hukM1/YvoZH2tf9ANZ3zwnD BUKAwi80kMFnf+fFc7qWK1ALJRHVN6v3+CMQAkZnNKs3qFLMOIRMj3ghQ8RhtVoN BCmS0y92jvC9mIHrxMFeo6aVTWRtkIDAoEfSsaX9Nx9wAE1EQtp1hm8V6B7IBRJe Id7ijdEPbiMQwdeIIYQtKF8Dpuiq11CkWPnDW+GNeoNf74OP6CYWHtoKKpqRwOdf DaIB28/Uch6gETKWx790Ae0tMjlAIJgcHVvNK37ZOE5g5Ud3J92CKs++QWJLVzsS +GKA/K88k3xn/7TWIzg72PqO3Ffwf0wMazRxuUr4HBf79pw9ORmYg9GPQA== -----END CERTIFICATE-----Generated at Fri Jun 6 04:11:56 2025 by rpki-client