$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1c79ce6-6180-4275-84de-5d5acaa3a373.roa File: b1c79ce6-6180-4275-84de-5d5acaa3a373.roa (raw, json) Hash identifier: aiuGykUydpQOzp8LE2z1gtalJLnzJqECIVpVLd3FZ44= Subject key identifier: AB:94:B1:80:D2:0C:92:A4:6D:1F:F0:A2:91:69:A8:F3:05:39:D0:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73FF2F6D4F4BD8E1AFD9503C2C146FEE96A820C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1c79ce6-6180-4275-84de-5d5acaa3a373.roa Signing time: Tue 05 Aug 2025 16:21:11 +0000 ROA not before: Tue 05 Aug 2025 16:21:11 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.196.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ff:2f:6d:4f:4b:d8:e1:af:d9:50:3c:2c:14:6f:ee:96:a8:20:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 16:21:11 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=0aceffdbbfe133d0db604c289745d3e058d6953506366106cf30098c46da16eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dd:d4:9c:e7:58:cb:84:f0:62:53:e2:00:e4: 85:3f:9f:5a:d8:a1:fc:5e:12:e6:fb:0b:48:c6:34: 83:ff:60:d9:7e:14:54:a1:f4:57:65:be:b5:cd:d3: 76:f9:e7:08:d7:d6:c8:5d:35:bc:d8:8e:5e:21:ee: 16:44:29:c9:45:c8:2a:b2:38:9b:ee:1d:ae:74:a9: d4:4e:02:af:5f:39:ef:73:d0:0a:52:91:be:0e:b4: c5:59:99:08:41:62:93:53:e7:b6:20:1f:81:20:99: df:9f:35:e7:f6:7d:39:81:06:35:13:e7:5b:5e:a7: 6c:26:fa:89:90:7b:df:a5:5c:dd:bb:6b:ad:49:ef: f3:7c:94:32:73:80:e6:87:8a:23:d6:d0:00:f2:d6: 1e:10:7c:44:f6:3e:1e:dc:4e:84:d3:80:53:c9:fa: 17:bf:37:c9:a6:7e:07:c7:17:97:6f:6d:9e:4c:f4: 1f:40:12:f1:cd:b5:93:4f:bf:fa:23:39:2e:01:3e: 95:2d:a1:2c:70:a2:a5:2c:f5:31:8b:07:ce:b0:27: 82:df:12:20:3a:3f:b4:21:70:63:96:f8:24:9a:8a: 7e:e1:0e:fa:6c:81:e7:4a:30:d3:0f:e3:f5:12:e6: ef:bd:4c:d2:7c:0c:e9:54:e9:4b:2c:f7:69:58:bd: 5d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:94:B1:80:D2:0C:92:A4:6D:1F:F0:A2:91:69:A8:F3:05:39:D0:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1c79ce6-6180-4275-84de-5d5acaa3a373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.196.0.0/15 Signature Algorithm: sha256WithRSAEncryption 8b:f5:32:b5:dd:6f:0f:08:f6:95:77:ea:dc:49:55:54:bc:50: 04:55:09:b0:0e:93:5a:8e:4b:08:50:20:2f:65:90:45:82:47: 97:40:2d:7e:d0:ac:12:1a:0a:51:af:eb:16:fd:5b:b9:ca:a5: 1d:f8:c8:81:1d:f8:80:1d:4f:63:ca:b8:2f:8b:72:ae:69:6c: ec:5b:c6:44:a6:2a:e2:63:2f:2e:34:f4:80:cf:ce:d7:aa:c3: 32:ef:6e:cd:9c:a1:91:c3:6d:65:c2:a6:b6:29:30:fb:81:a5: f1:6a:db:1a:6a:ed:42:ae:5a:0e:73:2a:65:74:57:aa:a6:22: 81:eb:83:af:db:a5:13:b8:5a:4c:3b:8b:43:20:c7:4d:dc:74: 3c:a2:d7:d5:40:55:38:ec:aa:b9:d8:eb:27:25:5e:5a:00:ae: 87:6c:79:c0:3e:21:11:2e:d0:c4:10:1f:22:f3:aa:31:cb:b4: a9:54:47:9b:64:21:bc:cb:b8:26:9f:a6:a0:fc:fe:8e:9e:e0: 96:f9:6f:65:14:fe:9c:4c:c5:90:80:4a:34:77:f1:63:9f:c3: 30:eb:e3:b0:d6:83:e6:a5:7a:01:b4:8e:07:6b:6f:ac:f4:4c: 21:f9:3c:36:dc:2d:f8:5f:e3:74:f0:78:1d:78:9c:8e:45:d8: 8d:c3:71:44 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUc/8vbU9L2OGv2VA8LBRv7paoIMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTYyMTExWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWNlZmZkYmJmZTEzM2QwZGI2MDRjMjg5NzQ1ZDNlMDU4 ZDY5NTM1MDYzNjYxMDZjZjMwMDk4YzQ2ZGExNmViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDR3dSc51jLhPBiU+IA5IU/n1rYofxeEub7C0jGNIP/YNl+ FFSh9FdlvrXN03b55wjX1shdNbzYjl4h7hZEKclFyCqyOJvuHa50qdROAq9fOe9z 0ApSkb4OtMVZmQhBYpNT57YgH4Egmd+fNef2fTmBBjUT51tep2wm+omQe9+lXN27 a61J7/N8lDJzgOaHiiPW0ADy1h4QfET2Ph7cToTTgFPJ+he/N8mmfgfHF5dvbZ5M 9B9AEvHNtZNPv/ojOS4BPpUtoSxwoqUs9TGLB86wJ4LfEiA6P7QhcGOW+CSain7h DvpsgedKMNMP4/US5u+9TNJ8DOlU6Uss92lYvV0dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUq5SxgNIMkqRtH/CikWmo8wU50EYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxYzc5Y2U2LTYxODAtNDI3NS04NGRlLTVkNWFjYWEzYTM3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwESxDANBgkqhkiG9w0BAQsFAAOCAQEAi/Uytd1vDwj2lXfq3ElVVLxQBFUJ sA6TWo5LCFAgL2WQRYJHl0AtftCsEhoKUa/rFv1bucqlHfjIgR34gB1PY8q4L4ty rmls7FvGRKYq4mMvLjT0gM/O16rDMu9uzZyhkcNtZcKmtikw+4Gl8WrbGmrtQq5a DnMqZXRXqqYigeuDr9ulE7haTDuLQyDHTdx0PKLX1UBVOOyqudjrJyVeWgCuh2x5 wD4hES7QxBAfIvOqMcu0qVRHm2QhvMu4Jp+moPz+jp7glvlvZRT+nEzFkIBKNHfx Y5/DMOvjsNaD5qV6AbSOB2tvrPRMIfk8Ntwt+F/jdPB4HXicjkXYjcNxRA== -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:17 2025 by rpki-client