$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de11f75-3268-4580-baf2-2b859acf1b83.roa File: 8de11f75-3268-4580-baf2-2b859acf1b83.roa (raw, json) Hash identifier: VndAFctoHDB/z955EL0NHDpjf2jbP39MUrCAyfsnCBE= Subject key identifier: 15:EE:3E:13:D8:D4:94:C0:A8:C5:33:CC:A6:1A:A0:DB:81:5B:B7:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1CD241B919C29A90204E25EB6A8F46A5259CF628 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de11f75-3268-4580-baf2-2b859acf1b83.roa Signing time: Mon 16 Jun 2025 18:50:14 +0000 ROA not before: Mon 16 Jun 2025 18:50:14 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.88.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d2:41:b9:19:c2:9a:90:20:4e:25:eb:6a:8f:46:a5:25:9c:f6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:50:14 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=12611e29c9eb735013b7329ef0b13fd80e2473f9908503a0aa7b6184fb745965, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cc:ce:62:74:aa:b5:2a:c9:1d:19:a5:a2:9f: c8:ad:eb:2a:17:7f:1f:2f:96:22:f2:5a:23:a4:7e: 0d:da:e4:b2:cc:dd:b2:f8:ae:c5:34:86:b3:9b:08: 47:52:0a:d2:82:b5:61:f8:1d:f0:fe:0a:10:ab:9f: fa:7b:bf:dc:8a:af:d6:bc:b2:c7:fd:07:cf:b9:e8: b1:de:d6:db:7f:79:51:d0:60:0c:87:6e:d7:29:bc: 89:98:a9:d3:cb:72:5f:bd:29:c8:df:5c:71:e7:3e: 64:88:2a:ee:b6:a6:3c:f1:e7:2d:5a:5a:cc:99:93: c0:b5:50:ec:ee:41:74:0a:af:42:72:09:a1:b2:5c: 61:ed:fe:7a:f2:0e:f0:f7:77:8b:4e:67:ae:bf:fe: ae:79:07:30:6f:a2:9b:e0:64:f6:60:85:07:a5:e6: 94:ca:6a:d0:c7:b8:c0:b0:ce:8d:8b:53:a1:06:36: 7f:15:c6:7e:a4:68:d8:39:b8:75:91:06:3e:27:2e: 4b:c8:b5:9b:e5:2a:46:32:29:e3:d7:68:d2:15:3d: 07:ba:77:af:15:20:aa:b0:9d:64:18:70:87:02:48: e0:cd:cf:5b:22:08:d2:33:ef:5e:0f:ac:b9:74:58: 1b:3a:6a:ed:7b:2f:cd:a5:39:d0:9c:b8:6f:ce:8c: 7f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:EE:3E:13:D8:D4:94:C0:A8:C5:33:CC:A6:1A:A0:DB:81:5B:B7:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8de11f75-3268-4580-baf2-2b859acf1b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.88.0.0/16 Signature Algorithm: sha256WithRSAEncryption 87:47:68:76:f7:33:b6:83:c2:9c:6a:4d:e9:53:20:d1:13:1b: 2b:d2:cd:87:a7:e0:25:5a:5a:ca:0e:ae:05:93:07:ad:42:a8: 89:17:5a:f0:13:3a:3c:2e:7b:33:03:c0:c9:23:a6:d5:0a:49: 9c:80:d3:62:da:30:3e:12:64:10:37:28:62:11:5c:60:d4:da: 21:39:82:98:48:b4:1f:45:76:07:58:08:d6:c0:53:3e:dd:fe: 55:10:4f:f2:68:c3:11:ca:5e:9d:6a:6a:9f:82:1b:42:70:f9: d4:c4:c8:d4:60:33:5b:bc:df:30:6b:70:18:d3:9e:e6:7c:f6: 2b:54:45:f4:bc:b5:14:ad:81:e7:be:13:94:e8:bb:a2:98:7b: 68:c6:ca:f8:a9:43:6b:1c:fe:a9:d5:36:e1:41:c9:11:ad:8a: 9c:35:a2:b7:9d:de:fe:4d:0b:d0:0f:0a:6f:9a:fc:ee:f2:95: db:03:90:db:50:98:6b:52:74:34:2a:8a:b2:5e:28:52:4f:4a: d0:de:e4:4c:16:e4:d4:fa:88:36:bf:98:88:b6:e7:29:e3:e1: f8:be:a5:1d:2d:de:fb:94:d0:3c:10:87:41:a6:09:f0:b4:95: f2:1c:dc:23:46:6a:16:ad:08:e1:d5:8e:78:03:a2:56:09:68: 7e:20:cd:b1 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHNJBuRnCmpAgTiXrao9GpSWc9igwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTg1MDE0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMjYxMWUyOWM5ZWI3MzUwMTNiNzMyOWVmMGIxM2ZkODBl MjQ3M2Y5OTA4NTAzYTBhYTdiNjE4NGZiNzQ1OTY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJzM5idKq1KskdGaWin8it6yoXfx8vliLyWiOkfg3a5LLM 3bL4rsU0hrObCEdSCtKCtWH4HfD+ChCrn/p7v9yKr9a8ssf9B8+56LHe1tt/eVHQ YAyHbtcpvImYqdPLcl+9KcjfXHHnPmSIKu62pjzx5y1aWsyZk8C1UOzuQXQKr0Jy CaGyXGHt/nryDvD3d4tOZ66//q55BzBvopvgZPZghQel5pTKatDHuMCwzo2LU6EG Nn8Vxn6kaNg5uHWRBj4nLkvItZvlKkYyKePXaNIVPQe6d68VIKqwnWQYcIcCSODN z1siCNIz714PrLl0WBs6au17L82lOdCcuG/OjH9rAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFe4+E9jUlMCoxTPMphqg24FbtyAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhkZTExZjc1LTMyNjgtNDU4MC1iYWYyLTJiODU5YWNmMWI4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2WDANBgkqhkiG9w0BAQsFAAOCAQEAh0dodvcztoPCnGpN6VMg0RMbK9LN h6fgJVpayg6uBZMHrUKoiRda8BM6PC57MwPAySOm1QpJnIDTYtowPhJkEDcoYhFc YNTaITmCmEi0H0V2B1gI1sBTPt3+VRBP8mjDEcpenWpqn4IbQnD51MTI1GAzW7zf MGtwGNOe5nz2K1RF9Ly1FK2B574TlOi7oph7aMbK+KlDaxz+qdU24UHJEa2KnDWi t53e/k0L0A8Kb5r87vKV2wOQ21CYa1J0NCqKsl4oUk9K0N7kTBbk1PqINr+YiLbn KePh+L6lHS3e+5TQPBCHQaYJ8LSV8hzcI0ZqFq0I4dWOeAOiVglofiDNsQ== -----END CERTIFICATE-----Generated at Sun Jun 29 00:47:54 2025 by rpki-client