$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9862be9d-30f5-4ec8-96ab-ba0ad5333a1d.roa File: 9862be9d-30f5-4ec8-96ab-ba0ad5333a1d.roa (raw, json) Hash identifier: L34BfbS6kr6AngP2fFlm3ysfr/uhScTScHcehnk0rhw= Subject key identifier: 24:79:40:E7:08:D5:C1:6E:13:08:FC:D6:EC:FB:9D:60:30:A8:B4:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1EB745C9CB1538B404AFE582D21AC3D48F8A42B9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9862be9d-30f5-4ec8-96ab-ba0ad5333a1d.roa Signing time: Sat 28 Jun 2025 00:41:24 +0000 ROA not before: Sat 28 Jun 2025 00:41:24 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.70.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b7:45:c9:cb:15:38:b4:04:af:e5:82:d2:1a:c3:d4:8f:8a:42:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 28 00:41:24 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=868af31553e41f886ef87c19bb970304bb431a03186f5992609677fee3006b6a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:48:15:a4:ea:92:0c:ec:30:a7:3c:03:3d:99: d0:16:d4:3f:5f:02:e3:f1:30:b6:90:7d:17:e8:9f: ce:fb:51:3a:2e:64:da:0e:85:55:6e:60:4c:4d:98: a0:d6:2e:14:3b:24:94:28:ed:22:6a:20:39:35:bd: 10:af:68:32:be:9a:c4:e0:a6:d7:e6:7c:a1:9f:1b: 81:ab:c6:6f:a1:2e:39:59:a8:a1:e9:76:89:5e:57: 30:94:e3:c6:c4:0f:de:9c:90:cb:2f:16:24:45:75: e7:cd:e8:eb:f6:46:c9:70:25:ee:d1:ff:da:81:9c: 72:9c:ba:72:da:db:f8:07:e4:bb:13:96:14:88:fd: 21:b4:60:4d:36:55:7f:fb:38:82:19:c3:7a:42:88: c0:98:ff:55:dd:7f:e7:a5:77:5e:e0:b6:36:fc:92: 91:d7:b7:16:fa:ca:a4:e7:f3:09:68:d2:9b:9e:cb: b8:a4:f7:79:24:df:91:87:7d:79:cb:8a:14:12:45: 38:1d:14:9a:17:77:44:ea:69:b2:bf:76:a0:50:7c: 4c:f2:69:9a:1c:49:13:5e:23:8b:19:16:3f:10:14: 2c:af:c2:ab:b8:1b:52:3f:3e:c3:75:29:5c:b7:d0: 64:ab:97:fc:a0:5e:b2:09:ab:c7:67:cb:67:b8:9e: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:79:40:E7:08:D5:C1:6E:13:08:FC:D6:EC:FB:9D:60:30:A8:B4:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9862be9d-30f5-4ec8-96ab-ba0ad5333a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.70.0/23 Signature Algorithm: sha256WithRSAEncryption 36:f2:ff:ac:4b:df:09:05:f7:d9:c1:9b:84:45:e0:17:88:a5: b4:db:9d:e9:78:4b:54:76:37:26:53:fb:ad:0f:d7:51:8c:f7: e8:b8:61:a7:1b:ab:6c:97:a1:53:81:fd:05:2d:86:6f:0c:85: fc:f7:c0:9d:7f:30:72:bb:db:ad:e4:55:94:88:30:aa:ce:79: be:d1:53:8e:c9:a3:6c:c1:8a:9a:bc:c5:99:f8:1e:82:92:12: 05:72:8e:16:a6:7d:67:90:0c:4a:7a:75:bb:63:8c:1e:5f:8a: 16:70:ba:c9:9c:a6:74:cd:34:a3:24:17:74:64:10:a9:39:87: 08:d3:03:4b:42:2d:36:e8:dc:1e:44:1c:22:ed:fa:9a:e2:16: 78:3c:e5:eb:95:b6:e5:0d:94:64:d7:e4:c7:de:a3:41:ec:94: eb:fd:c8:a0:97:39:52:68:b8:ff:dc:00:be:81:82:7f:fa:81: 4f:01:dd:db:ab:4f:20:1c:67:4f:af:48:a0:a7:ad:de:07:ea: 1b:39:77:04:21:bd:68:1f:bb:7f:c8:af:73:ff:26:48:71:33: 4f:a4:17:5b:f1:00:e8:e8:01:a7:f3:4d:c5:d3:65:85:fd:b8: 20:4c:b7:79:aa:67:7c:a4:23:77:39:7f:e4:06:58:6b:c9:0b: ad:7e:f0:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHrdFycsVOLQEr+WC0hrD1I+KQrkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI4MDA0MTI0WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NjhhZjMxNTUzZTQxZjg4NmVmODdjMTliYjk3MDMwNGJi NDMxYTAzMTg2ZjU5OTI2MDk2NzdmZWUzMDA2YjZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRSBWk6pIM7DCnPAM9mdAW1D9fAuPxMLaQfRfon877UTou ZNoOhVVuYExNmKDWLhQ7JJQo7SJqIDk1vRCvaDK+msTgptfmfKGfG4Grxm+hLjlZ qKHpdoleVzCU48bED96ckMsvFiRFdefN6Ov2RslwJe7R/9qBnHKcunLa2/gH5LsT lhSI/SG0YE02VX/7OIIZw3pCiMCY/1Xdf+eld17gtjb8kpHXtxb6yqTn8wlo0pue y7ik93kk35GHfXnLihQSRTgdFJoXd0TqabK/dqBQfEzyaZocSRNeI4sZFj8QFCyv wqu4G1I/PsN1KVy30GSrl/ygXrIJq8dny2e4nj0rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJHlA5wjVwW4TCPzW7PudYDCotBgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk4NjJiZTlkLTMwZjUtNGVjOC05NmFiLWJhMGFkNTMzM2ExZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPsUYwDQYJKoZIhvcNAQELBQADggEBADby/6xL3wkF99nBm4RF4BeIpbTb nel4S1R2NyZT+60P11GM9+i4Yacbq2yXoVOB/QUthm8Mhfz3wJ1/MHK7263kVZSI MKrOeb7RU47Jo2zBipq8xZn4HoKSEgVyjhamfWeQDEp6dbtjjB5fihZwusmcpnTN NKMkF3RkEKk5hwjTA0tCLTbo3B5EHCLt+priFng85euVtuUNlGTX5Mfeo0HslOv9 yKCXOVJouP/cAL6Bgn/6gU8B3durTyAcZ0+vSKCnrd4H6hs5dwQhvWgfu3/Ir3P/ JkhxM0+kF1vxAOjoAafzTcXTZYX9uCBMt3mqZ3ykI3c5f+QGWGvJC61+8Nw= -----END CERTIFICATE-----Generated at Sun Jun 29 03:54:07 2025 by rpki-client