$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38a72a6d-74c3-41da-89f7-a78af4804967.roa File: 38a72a6d-74c3-41da-89f7-a78af4804967.roa (raw, json) Hash identifier: 5L7ZyEZRB78TePh2mN2W69MACywypDiNQcUz+wcjm5Y= Subject key identifier: A7:1E:F9:72:B0:EC:A3:5E:F0:59:EC:7F:6B:16:1C:FC:67:51:D8:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3FE84977A33BC45E9A1D178B45162FB8EDBA1878 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38a72a6d-74c3-41da-89f7-a78af4804967.roa Signing time: Mon 09 Jun 2025 19:21:13 +0000 ROA not before: Mon 09 Jun 2025 19:21:13 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.82.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e8:49:77:a3:3b:c4:5e:9a:1d:17:8b:45:16:2f:b8:ed:ba:18:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 19:21:13 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=dcdeb83e3a52c80cc9161c00980f5b4dbd9e95910b3f8590bc6b4ddf268f37fe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:36:87:8e:e4:68:f6:ea:35:06:6e:5d:d4:3d: 67:e8:cd:7e:12:a4:90:cc:0c:84:a7:27:0b:1d:bd: b2:39:53:01:b7:e1:5a:01:c8:2f:9f:3e:2c:19:6b: 97:a6:c2:c3:ee:a7:ad:ed:dc:54:85:da:82:12:65: ec:07:be:3d:89:27:65:09:ed:ec:7d:9f:f2:61:0d: b1:34:f0:22:b3:bc:ce:df:d7:e3:39:99:18:f7:0b: b7:21:f0:27:04:df:7b:43:d5:eb:bd:ca:83:6d:18: 56:2e:00:4d:d6:a0:fd:f3:c0:0d:4f:3f:a4:10:d2: 88:99:37:d6:42:3a:6b:e2:ff:44:51:0c:a1:d8:6c: 19:5a:a1:16:ec:26:93:3e:78:df:23:21:f5:f3:82: 19:a0:04:04:b0:11:07:7a:9c:04:a1:b3:77:8e:19: 04:d6:ff:26:a7:e9:c0:81:06:53:ad:8c:7a:86:da: 2b:7d:8c:3f:ad:0c:21:26:53:a2:81:c5:1a:24:90: 8d:ff:96:de:0f:ad:1a:df:ac:a4:3b:b1:b8:c0:84: 65:07:35:77:28:48:55:93:29:62:84:ba:04:b7:79: f4:93:b0:5e:b3:a9:0b:0f:37:b8:bd:8b:b3:66:0f: 3f:87:9f:00:9b:2a:28:2a:e1:b9:a1:d7:e7:78:ca: be:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:1E:F9:72:B0:EC:A3:5E:F0:59:EC:7F:6B:16:1C:FC:67:51:D8:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/38a72a6d-74c3-41da-89f7-a78af4804967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.82.131.0/24 Signature Algorithm: sha256WithRSAEncryption 44:1e:a1:8a:e9:24:81:9c:ee:f1:17:8a:10:db:6c:40:8f:0f: 98:14:86:d1:b5:74:a7:57:15:a5:e7:b9:44:72:9d:41:2a:8e: 6b:2a:47:ac:ca:aa:4d:35:a5:2c:dd:71:ab:c8:dc:d4:9d:9e: f2:8f:23:e7:e5:44:86:0e:62:0a:2d:33:79:41:90:92:20:c7: f6:b2:b9:7c:88:c1:0f:08:cf:cd:31:b2:cc:14:ce:23:38:8c: 7e:d1:9e:33:f3:3d:b6:9b:08:c3:35:47:51:59:c8:e3:7e:6d: f2:cd:c8:17:13:74:b7:04:6a:1a:de:76:19:2a:1e:cb:ea:51: 96:0f:0f:e5:56:40:98:45:7a:e6:4f:c5:ab:5b:e3:7e:e1:4f: 33:bf:56:50:92:f2:14:bb:aa:b2:1d:36:4c:82:ca:d4:34:ed: 70:e7:c0:2a:48:1d:fc:49:0a:9e:a1:9b:25:79:6c:cb:6d:6f: 23:5d:ef:41:5f:8d:6f:fe:0c:3a:39:96:f4:5c:2e:cc:b4:a7: 96:78:c8:02:3f:88:a1:67:ef:ea:5f:e9:48:d0:2d:8e:7c:13: 77:23:58:ea:7c:7e:f5:2e:8c:39:4c:5b:89:09:d5:fc:dc:e3: 4b:01:c9:4d:41:b6:8d:f0:43:51:54:8a:c3:c2:06:18:95:f7: e6:84:16:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP+hJd6M7xF6aHReLRRYvuO26GHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTkyMTEzWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkY2RlYjgzZTNhNTJjODBjYzkxNjFjMDA5ODBmNWI0ZGJk OWU5NTkxMGIzZjg1OTBiYzZiNGRkZjI2OGYzN2ZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLNoeO5Gj26jUGbl3UPWfozX4SpJDMDISnJwsdvbI5UwG3 4VoByC+fPiwZa5emwsPup63t3FSF2oISZewHvj2JJ2UJ7ex9n/JhDbE08CKzvM7f 1+M5mRj3C7ch8CcE33tD1eu9yoNtGFYuAE3WoP3zwA1PP6QQ0oiZN9ZCOmvi/0RR DKHYbBlaoRbsJpM+eN8jIfXzghmgBASwEQd6nAShs3eOGQTW/yan6cCBBlOtjHqG 2it9jD+tDCEmU6KBxRokkI3/lt4PrRrfrKQ7sbjAhGUHNXcoSFWTKWKEugS3efST sF6zqQsPN7i9i7NmDz+HnwCbKigq4bmh1+d4yr7nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpx75crDso17wWex/axYc/GdR2O8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4YTcyYTZkLTc0YzMtNDFkYS04OWY3LWE3OGFmNDgwNDk2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2UoMwDQYJKoZIhvcNAQELBQADggEBAEQeoYrpJIGc7vEXihDbbECPD5gU htG1dKdXFaXnuURynUEqjmsqR6zKqk01pSzdcavI3NSdnvKPI+flRIYOYgotM3lB kJIgx/ayuXyIwQ8Iz80xsswUziM4jH7RnjPzPbabCMM1R1FZyON+bfLNyBcTdLcE ahredhkqHsvqUZYPD+VWQJhFeuZPxatb437hTzO/VlCS8hS7qrIdNkyCytQ07XDn wCpIHfxJCp6hmyV5bMttbyNd70FfjW/+DDo5lvRcLsy0p5Z4yAI/iKFn7+pf6UjQ LY58E3cjWOp8fvUujDlMW4kJ1fzc40sByU1Bto3wQ1FUisPCBhiV9+aEFrc= -----END CERTIFICATE-----Generated at Sun Jun 29 05:10:20 2025 by rpki-client