$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79503e7a-4362-47e1-abb1-87d418dc1d84.roa File: 79503e7a-4362-47e1-abb1-87d418dc1d84.roa (raw, json) Hash identifier: 3XOBGFqMYkKkNywveqOs9xcjYf29RTTwroH10Az/38U= Subject key identifier: 99:89:4A:82:56:99:AC:23:4B:1F:9C:DF:6D:8E:37:B4:4B:AA:A7:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38AED9DF5C64C8CDEEFBE7C1C6B8F7A054F0A341 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79503e7a-4362-47e1-abb1-87d418dc1d84.roa Signing time: Mon 30 Jun 2025 16:31:04 +0000 ROA not before: Mon 30 Jun 2025 16:31:04 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.253.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ae:d9:df:5c:64:c8:cd:ee:fb:e7:c1:c6:b8:f7:a0:54:f0:a3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:31:04 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=df68098ec2263378e97627b5b6886c979dd5c247e971df216e2abb82aee0b395, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:76:c7:50:2a:c3:2a:87:62:bc:ee:eb:93: 2e:05:24:db:b6:f3:54:f3:31:44:a5:af:2e:35:46: ac:c4:01:77:46:18:1c:bd:ff:32:50:b1:29:ff:53: 88:42:98:06:eb:8b:d1:bb:e9:6d:2c:99:cf:b0:02: 2a:82:13:18:39:32:43:67:c8:17:f0:6b:f3:e9:44: 93:9e:2d:2d:d2:dc:31:4c:f9:47:d7:3e:89:9f:ae: 56:2f:85:54:ba:7e:49:43:87:06:f4:f2:45:e6:87: c3:1f:0c:52:8e:c2:d2:c8:22:1f:22:10:70:23:2c: af:ed:ed:ae:c4:6b:5b:1e:53:a4:7b:2b:dd:94:0e: 49:64:30:45:20:3b:4f:44:4a:22:3e:86:2f:35:6c: db:bf:fc:9b:5b:da:d4:e7:ac:ca:55:69:92:31:f1: 92:eb:62:3b:23:94:6f:fd:5f:de:ed:24:e2:96:53: 90:bb:a2:54:59:d3:db:9c:d8:df:9a:5d:a7:6a:ff: 78:f6:e6:13:42:f1:75:c8:8a:b1:20:2f:75:8e:28: b0:ca:31:05:3c:99:98:b1:b5:97:d4:e7:f6:9b:9e: b9:24:fa:95:22:12:5f:7f:dc:e3:17:f2:b2:26:a8: 98:5c:00:3d:48:35:27:f9:0c:1d:02:af:aa:29:de: ec:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:89:4A:82:56:99:AC:23:4B:1F:9C:DF:6D:8E:37:B4:4B:AA:A7:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/79503e7a-4362-47e1-abb1-87d418dc1d84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.253.192.0/18 Signature Algorithm: sha256WithRSAEncryption 73:f0:be:41:13:7d:12:3c:ea:80:ec:85:5d:61:ae:b3:03:48: 88:de:af:43:98:f4:23:2a:a4:a0:68:1b:18:b8:ab:77:e8:6c: e2:3d:cd:ac:ea:02:26:ff:14:74:8b:a3:0d:c1:83:54:da:4a: d4:1f:31:15:fe:7b:e2:87:8f:b2:57:af:0d:2a:51:2c:17:a4: 9e:85:2a:e9:9e:2f:d7:92:3f:c6:9f:2c:a6:87:7a:a8:40:8b: ab:e1:6b:58:92:36:81:93:36:85:ce:ac:1f:cd:58:87:39:0c: 16:10:87:cc:8c:91:12:b3:3f:5a:62:31:90:59:10:fb:e8:f4: 78:e4:a4:59:82:4e:78:f7:1e:bb:db:79:65:e5:9c:91:7a:18: 64:29:b6:8b:6d:58:a6:f1:df:49:13:4e:b2:ee:3d:d1:89:48: 7a:8e:81:c1:f1:ed:8e:28:22:ec:9d:63:56:28:24:72:c6:83: 0c:d6:d2:0d:36:c5:2b:da:a3:6f:03:7c:d3:1f:3c:45:6f:b3: cc:31:02:9b:90:0a:b9:95:dc:87:da:6a:e9:4c:6e:cc:ba:f3: ec:5e:e1:4c:f8:58:0a:20:2d:57:ad:5e:d6:d8:91:58:10:d4: 98:cb:da:47:64:cb:71:97:b4:66:e6:f4:95:7d:48:bb:0b:12: 62:cc:73:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOK7Z31xkyM3u++fBxrj3oFTwo0EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYzMTA0WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZjY4MDk4ZWMyMjYzMzc4ZTk3NjI3YjViNjg4NmM5Nzlk ZDVjMjQ3ZTk3MWRmMjE2ZTJhYmI4MmFlZTBiMzk1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz9XbHUCrDKodivO7rky4FJNu281TzMUSlry41RqzEAXdG GBy9/zJQsSn/U4hCmAbri9G76W0smc+wAiqCExg5MkNnyBfwa/PpRJOeLS3S3DFM +UfXPomfrlYvhVS6fklDhwb08kXmh8MfDFKOwtLIIh8iEHAjLK/t7a7Ea1seU6R7 K92UDklkMEUgO09ESiI+hi81bNu//Jtb2tTnrMpVaZIx8ZLrYjsjlG/9X97tJOKW U5C7olRZ09uc2N+aXadq/3j25hNC8XXIirEgL3WOKLDKMQU8mZixtZfU5/abnrkk +pUiEl9/3OMX8rImqJhcAD1INSf5DB0Cr6op3ux1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmYlKglaZrCNLH5zfbY43tEuqp/QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc5NTAzZTdhLTQzNjItNDdlMS1hYmIxLTg3ZDQxOGRjMWQ4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/cAwDQYJKoZIhvcNAQELBQADggEBAHPwvkETfRI86oDshV1hrrMDSIje r0OY9CMqpKBoGxi4q3fobOI9zazqAib/FHSLow3Bg1TaStQfMRX+e+KHj7JXrw0q USwXpJ6FKumeL9eSP8afLKaHeqhAi6vha1iSNoGTNoXOrB/NWIc5DBYQh8yMkRKz P1piMZBZEPvo9HjkpFmCTnj3HrvbeWXlnJF6GGQptottWKbx30kTTrLuPdGJSHqO gcHx7Y4oIuydY1YoJHLGgwzW0g02xSvao28DfNMfPEVvs8wxApuQCrmV3IfaaulM bsy68+xe4Uz4WAogLVetXtbYkVgQ1JjL2kdky3GXtGbm9JV9SLsLEmLMc+k= -----END CERTIFICATE-----Generated at Mon Jun 30 23:47:29 2025 by rpki-client