$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d857bd-56c4-4922-854b-1b39f5f9b43e.roa File: 30d857bd-56c4-4922-854b-1b39f5f9b43e.roa (raw, json) Hash identifier: BE8oXWvWVGrL1ddMZKc4oe19zTe7U0m3/5Jw1/qdQ5w= Subject key identifier: 90:F2:CB:38:5B:5F:AF:AE:3E:8C:7B:DF:99:78:26:34:95:6A:03:B2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1B630A6A18C96D2C19B8DA5C1A340334A2F53FE3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d857bd-56c4-4922-854b-1b39f5f9b43e.roa Signing time: Sat 28 Jun 2025 00:50:15 +0000 ROA not before: Sat 28 Jun 2025 00:50:15 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:63:0a:6a:18:c9:6d:2c:19:b8:da:5c:1a:34:03:34:a2:f5:3f:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 28 00:50:15 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=ae72d16ff690d3351a7165a127f26ccbc2de4f011010f71cf8c206e1a11d4750, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ed:c4:df:e0:cd:be:da:cf:01:f3:3e:ad:a0: 4f:cd:47:36:4e:13:a3:24:aa:d3:b0:ae:70:2f:47: f3:82:30:e9:a2:6d:cb:84:98:70:31:dd:73:d5:e6: d4:39:03:94:6b:3a:00:5c:c1:31:b7:22:3e:fd:5b: af:35:07:02:c1:5d:eb:37:0d:86:e5:04:49:ab:d6: 3f:2b:7d:57:57:3b:97:45:1b:8d:c4:5e:31:f3:2c: 3d:06:54:94:50:83:fc:fe:4c:cb:d5:2f:49:f3:06: fc:c9:7d:28:11:3b:9c:06:00:84:28:96:45:82:11: f9:66:9e:c2:d3:ae:12:97:b2:08:6a:eb:1d:2d:19: a6:6b:74:0b:54:29:ab:03:b5:9e:5c:c7:2a:b0:44: 38:1a:d6:d8:ff:98:a1:e1:43:91:88:4f:ff:cb:35: cd:5b:b9:d7:79:a2:50:36:9b:e8:31:db:2d:e3:35: d8:6d:b7:e0:43:27:cf:0a:8d:4d:ff:8c:a8:de:d0: 0e:bf:ab:28:16:11:fa:f9:23:7b:83:c6:04:89:a5: 48:cd:ce:d0:38:20:71:89:46:f9:cb:a4:1e:af:1a: 39:4c:c3:f7:27:07:29:8d:93:e6:76:e4:66:84:c2: 93:29:50:af:b9:e1:7c:46:49:1f:c6:97:81:f9:26: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F2:CB:38:5B:5F:AF:AE:3E:8C:7B:DF:99:78:26:34:95:6A:03:B2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30d857bd-56c4-4922-854b-1b39f5f9b43e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.2.0/23 Signature Algorithm: sha256WithRSAEncryption 21:20:3c:fe:7e:51:61:49:cc:83:ae:9e:f2:a5:e9:5c:35:ba: 02:ad:25:36:22:ef:ca:a9:c1:fe:85:31:96:83:2e:32:84:e3: 3b:48:1d:ed:66:ec:f0:3d:4e:31:67:08:91:29:4f:49:41:e2: 92:4e:ee:75:5c:e5:3b:ad:24:c6:e9:82:ef:d3:f5:65:da:34: b0:2e:bf:d7:f1:50:df:71:86:18:24:f7:c9:68:fd:4d:45:7c: 68:ff:36:00:d2:d2:ad:10:0b:5a:c9:57:b5:cd:50:e8:5d:9d: 1b:6d:d2:cd:d8:ac:2b:5a:7e:c1:d4:a5:cb:fa:83:a8:6b:7e: 17:3b:7e:f4:67:5e:e1:8d:36:18:ec:f8:f2:27:18:43:ca:47: 78:b9:7e:06:70:74:8c:5d:2d:5a:58:28:48:9b:1f:6f:17:db: c6:f5:c1:15:16:1f:ae:8a:f0:dd:57:9a:f9:06:c8:98:82:0c: 54:df:79:cf:fa:c1:93:a1:2f:70:0a:d7:8c:2e:6c:c9:3e:f6: 1a:e9:0f:6c:47:cb:1b:f0:59:c7:58:81:a9:f3:8f:4c:c7:74: c6:74:5a:a1:a6:7e:1a:da:06:f7:cb:a2:5d:be:73:1f:6a:9f: fe:27:af:56:a2:74:35:15:0e:88:7c:fa:bb:df:9f:1a:b6:c1: 48:e6:93:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG2MKahjJbSwZuNpcGjQDNKL1P+MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI4MDA1MDE1WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTcyZDE2ZmY2OTBkMzM1MWE3MTY1YTEyN2YyNmNjYmMy ZGU0ZjAxMTAxMGY3MWNmOGMyMDZlMWExMWQ0NzUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt7cTf4M2+2s8B8z6toE/NRzZOE6MkqtOwrnAvR/OCMOmi bcuEmHAx3XPV5tQ5A5RrOgBcwTG3Ij79W681BwLBXes3DYblBEmr1j8rfVdXO5dF G43EXjHzLD0GVJRQg/z+TMvVL0nzBvzJfSgRO5wGAIQolkWCEflmnsLTrhKXsghq 6x0tGaZrdAtUKasDtZ5cxyqwRDga1tj/mKHhQ5GIT//LNc1budd5olA2m+gx2y3j Ndhtt+BDJ88KjU3/jKje0A6/qygWEfr5I3uDxgSJpUjNztA4IHGJRvnLpB6vGjlM w/cnBymNk+Z25GaEwpMpUK+54XxGSR/Gl4H5JrY5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkPLLOFtfr64+jHvfmXgmNJVqA7IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMwZDg1N2JkLTU2YzQtNDkyMi04NTRiLTFiMzlmNWY5YjQzZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3AIwDQYJKoZIhvcNAQELBQADggEBACEgPP5+UWFJzIOunvKl6Vw1ugKt JTYi78qpwf6FMZaDLjKE4ztIHe1m7PA9TjFnCJEpT0lB4pJO7nVc5TutJMbpgu/T 9WXaNLAuv9fxUN9xhhgk98lo/U1FfGj/NgDS0q0QC1rJV7XNUOhdnRtt0s3YrCta fsHUpcv6g6hrfhc7fvRnXuGNNhjs+PInGEPKR3i5fgZwdIxdLVpYKEibH28X28b1 wRUWH66K8N1XmvkGyJiCDFTfec/6wZOhL3AK14wubMk+9hrpD2xHyxvwWcdYganz j0zHdMZ0WqGmfhraBvfLol2+cx9qn/4nr1aidDUVDoh8+rvfnxq2wUjmk0U= -----END CERTIFICATE-----Generated at Sun Jun 29 03:03:13 2025 by rpki-client