$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6ec0a0c-97be-4f26-a04d-d2ce7503a61e.roa File: f6ec0a0c-97be-4f26-a04d-d2ce7503a61e.roa (raw, json) Hash identifier: cO7bFlglqW+ksZcL4tmwVdx5qyyi4iIW16H3i376VuU= Subject key identifier: 0B:B4:B8:C2:47:58:45:77:AA:3C:D6:98:68:73:92:A8:E5:E9:AB:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 79F1A28C35C291271E0AB26E8210FF3FB544C8F7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6ec0a0c-97be-4f26-a04d-d2ce7503a61e.roa Signing time: Mon 30 Jun 2025 15:51:42 +0000 ROA not before: Mon 30 Jun 2025 15:51:42 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:f1:a2:8c:35:c2:91:27:1e:0a:b2:6e:82:10:ff:3f:b5:44:c8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 15:51:42 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=eaa01a4bb02b96a827d14a9be0c73240baf049a4a98cef1e9a12b2d078dac8ff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:18:6c:92:cf:f3:08:b4:77:ba:8e:0e:5d:e1: 10:c8:36:7e:34:b4:d6:74:61:8b:39:db:4e:e0:5c: a9:e7:1a:49:b9:6a:60:66:06:e3:ad:8a:bc:bf:c3: 19:a3:04:39:fe:29:53:e5:61:9c:fa:6c:ea:64:8b: 3a:f8:cd:c7:2f:67:1e:57:dd:8a:22:44:4b:51:67: 18:46:7f:f1:61:56:bc:79:e3:aa:82:11:b7:ca:fb: 27:86:ef:f9:d4:65:ed:a7:a0:5d:76:5f:b3:eb:2a: b9:72:ba:42:36:a1:be:aa:94:79:e8:17:f6:e8:e4: aa:93:a3:5e:98:16:44:81:e1:03:7f:67:e4:32:4e: 01:e9:e5:ca:df:d2:ad:85:46:d9:4e:83:43:c0:71: 9a:35:3f:78:24:f8:4a:43:7a:84:f1:da:62:e1:5f: 30:66:3b:f0:0b:30:e3:92:6d:0a:fe:fb:ac:68:b2: 39:85:7a:36:3c:62:36:af:16:9b:f9:a9:ca:50:46: cc:1b:0f:17:c9:c8:6d:a9:42:f3:ea:fb:1d:0e:84: 6f:e9:c4:0d:cc:2b:ff:28:57:19:a9:17:4d:c0:c6: d9:95:d9:e2:d4:83:5d:6b:f7:4e:4f:87:90:8d:37: 06:2c:ab:94:5c:02:62:94:d5:d7:b4:4a:cf:cc:50: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B4:B8:C2:47:58:45:77:AA:3C:D6:98:68:73:92:A8:E5:E9:AB:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f6ec0a0c-97be-4f26-a04d-d2ce7503a61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.248.0/23 Signature Algorithm: sha256WithRSAEncryption 53:9c:6c:9a:2a:9f:e9:c9:9a:72:f6:64:0f:38:3a:d6:c9:a4: a9:1f:3b:89:2c:6a:3c:96:f8:a4:55:8c:23:bc:23:3b:95:23: 12:80:6d:e7:79:ad:ad:a9:db:d8:f7:bc:3e:7e:6d:9b:4c:e9: 48:4f:d2:33:eb:a8:8e:78:d3:38:85:78:a0:92:c5:7a:92:00: 01:67:eb:f7:92:3d:b5:05:a9:99:71:b0:b8:2c:fe:c0:4b:b2: 15:e9:cf:fe:fb:e0:66:78:5e:06:95:25:6f:3d:9d:e6:90:76: 10:e5:f9:23:64:c7:e6:f6:45:56:46:92:32:b6:d5:f8:70:ed: ac:0c:38:21:ad:6f:fd:84:bc:3b:27:3a:3a:f8:93:c0:48:03: 37:58:ae:e3:65:e5:5a:26:55:fc:90:4c:03:45:bb:86:17:df: d0:1d:61:15:7f:60:5b:ec:fd:59:84:8c:17:b1:3c:bf:c1:dc: 75:7f:00:03:64:00:20:5c:a0:f2:c0:d7:76:72:c1:8d:4c:61: 00:62:7a:81:45:a5:fd:82:7b:70:57:52:78:31:6c:5d:13:b7: 29:14:c4:3d:9f:98:84:94:90:3d:2a:db:ef:ac:78:52:34:41: 59:18:7c:be:8f:a7:0b:fd:54:f5:9c:f8:ee:bf:84:83:49:75: 2e:2f:b6:29 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUefGijDXCkSceCrJughD/P7VEyPcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTU1MTQyWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWEwMWE0YmIwMmI5NmE4MjdkMTRhOWJlMGM3MzI0MGJh ZjA0OWE0YTk4Y2VmMWU5YTEyYjJkMDc4ZGFjOGZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJGGySz/MItHe6jg5d4RDINn40tNZ0YYs5207gXKnnGkm5 amBmBuOtiry/wxmjBDn+KVPlYZz6bOpkizr4zccvZx5X3YoiREtRZxhGf/FhVrx5 46qCEbfK+yeG7/nUZe2noF12X7PrKrlyukI2ob6qlHnoF/bo5KqTo16YFkSB4QN/ Z+QyTgHp5crf0q2FRtlOg0PAcZo1P3gk+EpDeoTx2mLhXzBmO/ALMOOSbQr++6xo sjmFejY8YjavFpv5qcpQRswbDxfJyG2pQvPq+x0OhG/pxA3MK/8oVxmpF03AxtmV 2eLUg11r905Ph5CNNwYsq5RcAmKU1de0Ss/MUHjlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC7S4wkdYRXeqPNaYaHOSqOXpq9AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y2ZWMwYTBjLTk3YmUtNGYyNi1hMDRkLWQyY2U3NTAzYTYxZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3PgwDQYJKoZIhvcNAQELBQADggEBAFOcbJoqn+nJmnL2ZA84OtbJpKkf O4ksajyW+KRVjCO8IzuVIxKAbed5ra2p29j3vD5+bZtM6UhP0jPrqI540ziFeKCS xXqSAAFn6/eSPbUFqZlxsLgs/sBLshXpz/774GZ4XgaVJW89neaQdhDl+SNkx+b2 RVZGkjK21fhw7awMOCGtb/2EvDsnOjr4k8BIAzdYruNl5VomVfyQTANFu4YX39Ad YRV/YFvs/VmEjBexPL/B3HV/AANkACBcoPLA13ZywY1MYQBieoFFpf2Ce3BXUngx bF0TtykUxD2fmISUkD0q2++seFI0QVkYfL6Ppwv9VPWc+O6/hINJdS4vtik= -----END CERTIFICATE-----Generated at Tue Jul 1 06:15:36 2025 by rpki-client