$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de90cad0-090b-43a1-95d8-5566de2bf6b5.roa File: de90cad0-090b-43a1-95d8-5566de2bf6b5.roa (raw, json) Hash identifier: OY9RGXYFoYruQMDMt6q9fcNcNoLWji9VlS3lxtI01Co= Subject key identifier: 27:13:2B:83:B0:B6:CD:DC:E2:6C:98:32:B0:C6:45:DF:66:C7:57:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EFA26497219F69661262569BF7746EF9BBBAF8C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de90cad0-090b-43a1-95d8-5566de2bf6b5.roa Signing time: Mon 30 Jun 2025 17:40:11 +0000 ROA not before: Mon 30 Jun 2025 17:40:11 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.217.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fa:26:49:72:19:f6:96:61:26:25:69:bf:77:46:ef:9b:bb:af:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 17:40:11 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=4e114db602bfd80a4462b7d5445a2ca4d0e2b2d963718fe94d209368bfbc6e9e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:2e:0c:90:49:ac:ec:8b:96:75:10:12:ff: 41:7d:6d:c6:94:56:f4:f8:0f:fa:54:18:35:49:78: 02:f9:ee:b8:53:7a:4b:c5:3c:c9:d5:ff:61:d8:b4: df:7f:89:70:22:b6:d6:ec:0e:f1:ce:d3:3f:79:6e: 31:d1:a9:d0:c2:0e:93:48:e1:f0:8c:3c:47:39:0e: 0b:9b:9f:b2:4a:dd:bc:1e:8c:0a:3b:3a:eb:94:c0: 4f:06:a9:4e:fa:e1:3e:bb:68:e9:ab:4f:39:f0:c3: 7b:aa:84:cb:65:aa:82:76:b7:4b:1d:44:40:84:91: 2f:1f:49:09:ae:4f:29:0c:7f:0a:a5:13:c1:34:2b: d5:27:60:21:67:c5:e1:10:d1:70:e2:05:c8:2e:47: 54:10:b2:0b:24:92:81:f9:64:85:7f:50:46:3d:0b: ca:f6:dd:f8:30:8f:a2:59:6a:06:66:d4:72:0b:dd: fc:f6:9b:f3:0c:cc:29:12:bc:54:2a:54:10:74:4b: bc:71:4f:6a:3e:5d:f9:7a:4f:88:14:e9:6b:10:6d: 25:67:7d:1d:1d:b5:ef:bb:2b:05:83:3c:01:db:a8: da:84:63:e6:4f:4d:93:b8:3a:0c:40:e3:e1:1a:21: 76:4f:4b:bd:89:c6:e1:0b:05:9d:00:5a:d5:1d:f9: 68:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:13:2B:83:B0:B6:CD:DC:E2:6C:98:32:B0:C6:45:DF:66:C7:57:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de90cad0-090b-43a1-95d8-5566de2bf6b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.217.0.0/18 Signature Algorithm: sha256WithRSAEncryption 19:6f:c0:da:a1:a2:24:dc:e7:19:c5:b4:3a:92:14:d7:ba:26: a6:61:48:d3:ea:1e:47:88:c7:13:34:f9:75:9d:16:ce:c1:f0: 0c:21:ad:7d:06:dd:52:ee:5c:b2:45:51:b5:61:a0:70:ec:c9: 47:2a:7a:22:bc:7b:83:2f:3e:ff:45:6b:2f:3e:ef:4b:f1:2d: b6:a5:89:d0:56:50:2b:1a:8e:50:48:f7:9c:76:67:29:3c:2f: 4f:89:cc:02:6b:b7:91:63:b1:cf:18:69:9d:6e:e8:c0:ce:5d: 70:12:0c:56:01:f6:ed:71:06:b8:b9:71:37:a2:81:31:95:f2: 4a:76:3a:a6:36:0f:07:f2:4e:0d:4f:8d:e2:f8:ae:43:c3:29: ca:d3:e6:1c:e3:77:10:ea:29:a9:1d:a9:e0:cd:64:ae:fe:a8: d9:9e:f5:fa:a0:3d:48:cf:13:c6:30:74:e2:ec:a7:d6:a1:54: f1:b9:7a:ee:13:d7:81:29:92:f1:b0:72:cb:9d:cd:09:5a:66: fd:59:e1:e9:85:4e:81:5c:b5:48:5f:0f:86:2c:ac:c4:ef:f4: 2f:81:a4:2d:60:3a:43:1a:5c:d5:f4:d1:66:6d:d7:69:10:ed: d7:55:45:f4:b4:e8:72:3e:a5:d0:fc:15:c7:cb:26:a6:34:1d: 44:62:ec:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTvomSXIZ9pZhJiVpv3dG75u7r4wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTc0MDExWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZTExNGRiNjAyYmZkODBhNDQ2MmI3ZDU0NDVhMmNhNGQw ZTJiMmQ5NjM3MThmZTk0ZDIwOTM2OGJmYmM2ZTllMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9hi4MkEms7IuWdRAS/0F9bcaUVvT4D/pUGDVJeAL57rhT ekvFPMnV/2HYtN9/iXAittbsDvHO0z95bjHRqdDCDpNI4fCMPEc5Dgubn7JK3bwe jAo7OuuUwE8GqU764T67aOmrTznww3uqhMtlqoJ2t0sdRECEkS8fSQmuTykMfwql E8E0K9UnYCFnxeEQ0XDiBcguR1QQsgskkoH5ZIV/UEY9C8r23fgwj6JZagZm1HIL 3fz2m/MMzCkSvFQqVBB0S7xxT2o+Xfl6T4gU6WsQbSVnfR0dte+7KwWDPAHbqNqE Y+ZPTZO4OgxA4+EaIXZPS72JxuELBZ0AWtUd+Wi7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJxMrg7C2zdzibJgysMZF32bHV8wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlOTBjYWQwLTA5MGItNDNhMS05NWQ4LTU1NjZkZTJiZjZiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY22QAwDQYJKoZIhvcNAQELBQADggEBABlvwNqhoiTc5xnFtDqSFNe6JqZh SNPqHkeIxxM0+XWdFs7B8AwhrX0G3VLuXLJFUbVhoHDsyUcqeiK8e4MvPv9Fay8+ 70vxLbalidBWUCsajlBI95x2Zyk8L0+JzAJrt5Fjsc8YaZ1u6MDOXXASDFYB9u1x Bri5cTeigTGV8kp2OqY2DwfyTg1PjeL4rkPDKcrT5hzjdxDqKakdqeDNZK7+qNme 9fqgPUjPE8YwdOLsp9ahVPG5eu4T14EpkvGwcsudzQlaZv1Z4emFToFctUhfD4Ys rMTv9C+BpC1gOkMaXNX00WZt12kQ7ddVRfS06HI+pdD8FcfLJqY0HURi7Lw= -----END CERTIFICATE-----Generated at Mon Jun 30 23:05:21 2025 by rpki-client