$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c857cc4-21ac-4a34-a632-5ba94b580b89.roa File: 4c857cc4-21ac-4a34-a632-5ba94b580b89.roa (raw, json) Hash identifier: R5hAcAcr4b9+BrdXtZfX0ZgStts952gqFUGZNqYR70w= Subject key identifier: C2:A1:08:74:ED:9E:F7:27:7F:52:81:99:A5:F7:17:6B:11:18:CB:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4188FC189E260A57F42C3A95F3434987669A1683 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c857cc4-21ac-4a34-a632-5ba94b580b89.roa Signing time: Mon 16 Jun 2025 17:40:26 +0000 ROA not before: Mon 16 Jun 2025 17:40:26 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.155.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:88:fc:18:9e:26:0a:57:f4:2c:3a:95:f3:43:49:87:66:9a:16:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:40:26 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=6a03f728803db06cc8fb98e16394b1b000ba4489f533a8a7f8a20b30410011d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:36:e1:ce:6d:df:48:0e:24:35:3e:f1:60:8a: 34:41:50:f7:05:08:dc:85:21:21:9e:29:2c:a0:6b: df:d0:ae:2b:25:13:db:d0:ff:bc:bf:13:54:14:2c: af:8d:63:5a:48:ac:ce:79:48:06:de:c5:c0:b0:5a: fa:6d:c6:43:90:08:f8:5e:aa:7c:02:35:a8:dd:40: 3a:a7:4f:1e:3d:6a:c3:0d:f4:2f:6c:22:13:e3:64: 78:1d:7b:86:d9:4e:9f:d4:6b:58:d3:ef:1a:3f:f3: db:00:e6:65:85:9e:59:af:11:44:91:f0:f1:dd:fb: 60:80:c7:6c:97:4a:44:51:4f:8c:30:79:ee:ad:b1: eb:bc:b3:ee:02:78:c1:eb:94:56:a2:9d:49:c9:e8: 34:57:10:5d:81:68:69:f8:e5:6f:d3:3a:aa:ad:6f: 38:61:0c:16:b7:2e:35:8b:75:9c:fe:68:87:ac:71: 4f:b3:43:a5:3b:04:98:4a:32:f9:49:17:2c:20:d4: f5:a7:6a:bf:69:3e:b8:8d:a0:de:ba:b4:8d:85:1c: 42:7e:cf:78:4f:05:4b:19:9d:0a:12:00:89:ba:57: 22:f8:26:31:54:f1:13:eb:16:8a:5c:84:4c:a5:1c: c5:82:5c:11:14:ef:13:22:7b:d1:cd:0f:99:74:91: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A1:08:74:ED:9E:F7:27:7F:52:81:99:A5:F7:17:6B:11:18:CB:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c857cc4-21ac-4a34-a632-5ba94b580b89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.155.0.0/17 Signature Algorithm: sha256WithRSAEncryption 16:3c:6b:6d:06:86:b2:01:bb:dd:26:eb:3f:80:85:af:e8:b7: a5:8e:0e:d1:c5:df:f5:52:d2:be:f6:8a:f5:e2:d0:ed:20:a8: 7c:87:b4:97:ec:cb:93:46:b8:9f:de:e4:28:85:3b:5c:a2:df: 2f:d4:82:13:36:0a:31:ef:f3:03:35:53:4e:36:5e:65:57:e6: 85:22:62:54:ac:10:e8:86:45:d4:cf:3a:be:51:29:1c:2f:ed: 35:9f:9e:09:75:06:5c:9a:7a:cc:d9:4f:de:94:25:af:b8:ca: ff:de:36:93:41:1c:3a:11:76:dc:dc:b3:9d:b2:26:e1:ce:d0: 8a:b2:e4:ce:6e:ca:c0:f9:f1:c9:bb:ec:23:7c:3d:47:00:d9: 78:75:0f:42:10:56:47:e3:ca:8e:a8:71:2f:9e:db:30:c8:44: b6:3c:5c:14:fe:e8:b2:60:b1:ed:40:d3:55:91:b3:1a:86:dd: ce:68:be:cb:55:3d:4d:63:c3:33:ae:3e:9d:ee:45:83:14:9e: 29:f1:8f:08:01:d7:b2:e3:43:af:9a:b1:68:33:39:ee:d5:b4: 1a:76:66:f0:cf:31:a4:34:0f:25:37:c1:28:8a:52:ea:36:0b: a9:8b:bd:33:1c:77:cb:ce:fe:53:81:bc:38:ea:25:af:11:01: 5d:68:40:78 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQYj8GJ4mClf0LDqV80NJh2aaFoMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc0MDI2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTAzZjcyODgwM2RiMDZjYzhmYjk4ZTE2Mzk0YjFiMDAw YmE0NDg5ZjUzM2E4YTdmOGEyMGIzMDQxMDAxMWQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoNuHObd9IDiQ1PvFgijRBUPcFCNyFISGeKSyga9/Qrisl E9vQ/7y/E1QULK+NY1pIrM55SAbexcCwWvptxkOQCPheqnwCNajdQDqnTx49asMN 9C9sIhPjZHgde4bZTp/Ua1jT7xo/89sA5mWFnlmvEUSR8PHd+2CAx2yXSkRRT4ww ee6tseu8s+4CeMHrlFainUnJ6DRXEF2BaGn45W/TOqqtbzhhDBa3LjWLdZz+aIes cU+zQ6U7BJhKMvlJFywg1PWnar9pPriNoN66tI2FHEJ+z3hPBUsZnQoSAIm6VyL4 JjFU8RPrFopchEylHMWCXBEU7xMie9HND5l0kX8nAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwqEIdO2e9yd/UoGZpfcXaxEYyxYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjODU3Y2M0LTIxYWMtNGEzNC1hNjMyLTViYTk0YjU4MGI4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcjmwAwDQYJKoZIhvcNAQELBQADggEBABY8a20GhrIBu90m6z+Aha/ot6WO DtHF3/VS0r72ivXi0O0gqHyHtJfsy5NGuJ/e5CiFO1yi3y/UghM2CjHv8wM1U042 XmVX5oUiYlSsEOiGRdTPOr5RKRwv7TWfngl1BlyaeszZT96UJa+4yv/eNpNBHDoR dtzcs52yJuHO0Iqy5M5uysD58cm77CN8PUcA2Xh1D0IQVkfjyo6ocS+e2zDIRLY8 XBT+6LJgse1A01WRsxqG3c5ovstVPU1jwzOuPp3uRYMUninxjwgB17LjQ6+asWgz Oe7VtBp2ZvDPMaQ0DyU3wSiKUuo2C6mLvTMcd8vO/lOBvDjqJa8RAV1oQHg= -----END CERTIFICATE-----Generated at Sun Jun 29 04:34:45 2025 by rpki-client