$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5448a2b7-3770-48bc-856f-a34d7d51e778.roa File: 5448a2b7-3770-48bc-856f-a34d7d51e778.roa (raw, json) Hash identifier: a+3qczqB9sGTZSq51ZnwxPedt+jlos8SrkiTAUDlIZI= Subject key identifier: 50:17:4A:90:29:02:A9:3C:50:6C:AB:D0:9A:DA:CF:D3:6B:64:30:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A1D23E70A291AFFE31AEB829F05447CBDCDEDD9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5448a2b7-3770-48bc-856f-a34d7d51e778.roa Signing time: Thu 26 Jun 2025 20:23:51 +0000 ROA not before: Thu 26 Jun 2025 20:23:51 +0000 ROA not after: Thu 31 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.102.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:1d:23:e7:0a:29:1a:ff:e3:1a:eb:82:9f:05:44:7c:bd:cd:ed:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 26 20:23:51 2025 GMT Not After : Jul 31 23:59:59 2025 GMT Subject: serialNumber=7f5b7ef17bd4976290760c3c062da9fdbb027b9516409f5f42c1d4f7e678729d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:8f:4f:bc:52:f5:97:46:dd:1e:37:1a:47: 29:90:f0:71:4f:c2:9d:1b:e5:8c:37:29:e5:b0:3b: 54:3b:f7:6d:5c:99:ce:2a:6e:4e:dc:28:4c:19:6e: 06:ca:99:cd:f1:07:be:20:ad:33:6b:16:12:c5:a3: f0:2f:71:fa:aa:80:f3:90:50:e2:da:dd:ae:a1:0d: 80:1c:99:57:2a:ae:e4:3b:2c:76:53:02:b0:f4:2e: da:81:1c:3d:7c:32:a7:1e:7f:33:a2:92:42:43:38: b5:1b:55:75:0f:b1:77:66:66:a2:68:1d:1a:b5:1c: 9b:5a:33:01:10:c6:e3:6d:0d:3d:9e:45:58:dc:fa: b8:8b:61:ac:bb:1f:4c:01:47:5c:51:16:b1:a9:68: fc:78:94:c1:dc:2c:d4:71:ef:61:a5:6c:3f:09:ff: 4e:f0:e8:4d:f6:b4:56:26:73:21:e6:07:a4:65:1e: 0c:07:2f:e5:31:a9:bc:7d:c1:ca:a9:ae:e3:0f:54: c2:77:2a:3c:7a:39:bf:92:5e:bb:0f:bf:92:3d:77: ae:ef:03:0a:9d:18:47:41:14:15:f8:00:3c:d7:be: 2d:1e:66:6e:5c:8a:10:82:75:25:cc:2a:e4:7a:9b: e7:6f:e3:dc:0c:c8:c8:74:d2:d6:c5:ad:b9:c5:a6: 32:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:17:4A:90:29:02:A9:3C:50:6C:AB:D0:9A:DA:CF:D3:6B:64:30:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5448a2b7-3770-48bc-856f-a34d7d51e778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.102.50.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:47:2f:60:24:fe:d7:6a:c2:20:ec:60:f1:96:b7:44:6c:ae: bf:1c:00:fb:fa:bd:3c:33:f9:9c:b6:bd:98:fd:96:82:1d:c2: 2f:08:d1:8b:04:71:31:99:fd:e0:66:0a:5c:b1:a3:ef:0a:aa: 03:73:9d:02:0c:3d:b0:44:b9:8e:0d:dc:e9:93:a0:05:d0:69: 23:62:16:cf:2a:ea:7e:03:c0:b6:c6:82:2e:c9:74:30:0e:d6: 2a:44:d4:f4:6a:bb:57:58:f3:ab:7c:31:bf:c5:1c:c0:f2:e0: 15:56:a4:82:3b:e2:15:4e:83:b2:2f:7d:6f:d7:a2:89:4c:d6: bc:31:60:54:85:a0:09:7f:a2:23:25:1b:a1:cb:71:87:ae:7a: b6:71:fe:6f:e5:86:d8:f2:84:bc:c8:8f:a9:a8:c2:49:2d:f1: 8c:18:0f:7a:a3:61:41:43:8b:ce:c8:74:a9:5f:8a:39:2c:1f: 53:c2:a1:a1:96:c6:81:fd:f5:26:5b:65:7a:5e:74:41:df:74: ae:81:0f:76:8a:d8:0b:33:48:c1:98:76:96:e7:74:46:87:91: cc:11:a7:2a:b3:81:b6:12:18:ec:c9:f0:95:c5:37:99:87:b1: 6e:1b:4a:c8:23:0b:70:00:0a:77:34:bf:c8:d0:be:45:7f:4a: b4:87:61:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWh0j5wopGv/jGuuCnwVEfL3N7dkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI2MjAyMzUxWhcNMjUwNzMxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZjViN2VmMTdiZDQ5NzYyOTA3NjBjM2MwNjJkYTlmZGJi MDI3Yjk1MTY0MDlmNWY0MmMxZDRmN2U2Nzg3MjlkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJ849PvFL1l0bdHjcaRymQ8HFPwp0b5Yw3KeWwO1Q7921c mc4qbk7cKEwZbgbKmc3xB74grTNrFhLFo/AvcfqqgPOQUOLa3a6hDYAcmVcqruQ7 LHZTArD0LtqBHD18MqcefzOikkJDOLUbVXUPsXdmZqJoHRq1HJtaMwEQxuNtDT2e RVjc+riLYay7H0wBR1xRFrGpaPx4lMHcLNRx72GlbD8J/07w6E32tFYmcyHmB6Rl HgwHL+Uxqbx9wcqpruMPVMJ3Kjx6Ob+SXrsPv5I9d67vAwqdGEdBFBX4ADzXvi0e Zm5cihCCdSXMKuR6m+dv49wMyMh00tbFrbnFpjLxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUBdKkCkCqTxQbKvQmtrP02tkMNcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0NDhhMmI3LTM3NzAtNDhiYy04NTZmLWEzNGQ3ZDUxZTc3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDZjIwDQYJKoZIhvcNAQELBQADggEBAApHL2Ak/tdqwiDsYPGWt0Rsrr8c APv6vTwz+Zy2vZj9loIdwi8I0YsEcTGZ/eBmClyxo+8KqgNznQIMPbBEuY4N3OmT oAXQaSNiFs8q6n4DwLbGgi7JdDAO1ipE1PRqu1dY86t8Mb/FHMDy4BVWpII74hVO g7IvfW/XoolM1rwxYFSFoAl/oiMlG6HLcYeuerZx/m/lhtjyhLzIj6mowkkt8YwY D3qjYUFDi87IdKlfijksH1PCoaGWxoH99SZbZXpedEHfdK6BD3aK2AszSMGYdpbn dEaHkcwRpyqzgbYSGOzJ8JXFN5mHsW4bSsgjC3AACnc0v8jQvkV/SrSHYZA= -----END CERTIFICATE-----Generated at Sun Jun 29 07:29:12 2025 by rpki-client