$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacc904c-1b37-47ce-8475-8ff1a9bf6126.roa File: bacc904c-1b37-47ce-8475-8ff1a9bf6126.roa (raw, json) Hash identifier: 1XXEvGNM+FFTvoA6AkLBq0TngRBj8aCBcAY/6KxYyoo= Subject key identifier: 94:6C:5C:0F:B7:9F:DA:D7:C2:E1:AA:17:D6:BE:1B:78:5D:B0:F9:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68DD752B603EE02FF25E199092E63F856680A318 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacc904c-1b37-47ce-8475-8ff1a9bf6126.roa Signing time: Mon 16 Jun 2025 17:50:16 +0000 ROA not before: Mon 16 Jun 2025 17:50:16 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.71.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:dd:75:2b:60:3e:e0:2f:f2:5e:19:90:92:e6:3f:85:66:80:a3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:50:16 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=095c2ac2df09c465dfebb84bbda93e92d872e627d43233b6a9acd8267d341f09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4f:38:34:4e:22:a2:48:08:7a:40:4b:c4:22: 86:76:57:d4:6e:63:06:48:1c:0f:3f:ed:7e:f1:7f: dd:20:b8:6a:2f:08:8f:62:e2:80:b1:ec:1d:6a:af: 0d:44:b4:5a:4d:df:49:2d:58:ee:49:81:4d:9a:9c: 33:44:b5:61:23:7b:c9:c7:7d:ba:b1:9d:fc:35:61: 2a:62:e3:c8:47:f1:c7:57:f1:d1:c0:fa:07:73:00: 91:88:91:a1:bf:4b:c3:8a:f0:1e:bc:f4:6c:b2:b2: a1:99:bc:ad:3d:dc:41:e3:87:f2:4c:55:67:70:27: ff:f5:c1:04:51:27:76:b6:2b:b5:2e:ef:fb:ca:58: df:77:7e:0c:66:76:91:36:54:64:65:6d:9b:d5:03: 8c:ff:8d:6c:56:31:75:cc:ca:e2:10:a3:ac:88:dd: a6:e1:d9:b1:f9:16:38:79:86:52:ba:87:f0:66:bd: 7d:4a:0c:3a:bf:7d:98:2b:85:fb:70:0b:eb:b9:f3: 16:a6:b2:0a:c6:5c:83:8b:99:bf:1e:08:ef:4d:f3: 1f:08:c0:45:69:60:c0:aa:e1:8e:2a:0d:d3:d7:f2: f3:c2:7f:e1:b3:4b:e7:04:a3:7a:17:42:07:58:bb: ff:42:04:56:0a:59:ae:2c:11:f2:b4:3d:fb:40:f6: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:6C:5C:0F:B7:9F:DA:D7:C2:E1:AA:17:D6:BE:1B:78:5D:B0:F9:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacc904c-1b37-47ce-8475-8ff1a9bf6126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.71.68.0/22 Signature Algorithm: sha256WithRSAEncryption 27:a3:1c:1a:18:56:0a:d5:99:97:ab:1d:42:d9:88:02:a4:ff: ed:0d:cd:11:c0:f4:f2:ea:0f:8d:2c:ea:20:95:49:f2:34:af: 05:e5:26:37:1e:79:48:fa:b5:1e:4f:6d:cb:7c:cd:75:5c:ba: c1:e8:89:c5:e5:64:f9:ac:ab:4e:67:3f:18:2b:2e:35:e0:cd: fc:46:d1:b8:6b:04:31:b7:3c:21:25:2a:bf:97:92:09:f9:ed: 72:fb:cc:39:b3:fc:16:6b:20:e3:fc:01:da:47:10:7e:4e:e1: 38:5e:2f:2f:ed:73:4d:48:28:fe:1f:34:fb:9b:19:34:c3:ad: 33:f5:0e:50:3f:cc:10:87:fd:d8:20:ee:16:d7:ec:dd:2c:d9: 91:69:82:ff:cb:6a:a1:7c:27:ed:6f:fa:72:40:f7:fa:61:7a: 49:78:cf:73:48:e3:fd:c6:09:5e:70:5a:26:92:f4:ae:d1:aa: 73:5e:57:7b:b4:7c:2f:e5:0d:80:e0:5d:03:2e:3b:24:2a:39: dd:ec:3a:bc:25:f7:03:53:6d:68:a6:7d:e0:59:66:4c:7f:4c: 35:f4:a5:e1:75:d1:b0:46:30:5b:93:6d:37:f7:6a:b4:5b:a6: 88:e6:4f:0e:c9:dc:23:0c:4c:88:8b:42:71:81:d7:78:19:b1: 47:bb:9d:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaN11K2A+4C/yXhmQkuY/hWaAoxgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc1MDE2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTVjMmFjMmRmMDljNDY1ZGZlYmI4NGJiZGE5M2U5MmQ4 NzJlNjI3ZDQzMjMzYjZhOWFjZDgyNjdkMzQxZjA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCCTzg0TiKiSAh6QEvEIoZ2V9RuYwZIHA8/7X7xf90guGov CI9i4oCx7B1qrw1EtFpN30ktWO5JgU2anDNEtWEje8nHfbqxnfw1YSpi48hH8cdX 8dHA+gdzAJGIkaG/S8OK8B689GyysqGZvK093EHjh/JMVWdwJ//1wQRRJ3a2K7Uu 7/vKWN93fgxmdpE2VGRlbZvVA4z/jWxWMXXMyuIQo6yI3abh2bH5Fjh5hlK6h/Bm vX1KDDq/fZgrhftwC+u58xamsgrGXIOLmb8eCO9N8x8IwEVpYMCq4Y4qDdPX8vPC f+GzS+cEo3oXQgdYu/9CBFYKWa4sEfK0PftA9lK5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlGxcD7ef2tfC4aoX1r4beF2w+dIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhY2M5MDRjLTFiMzctNDdjZS04NDc1LThmZjFhOWJmNjEyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjR0QwDQYJKoZIhvcNAQELBQADggEBACejHBoYVgrVmZerHULZiAKk/+0N zRHA9PLqD40s6iCVSfI0rwXlJjceeUj6tR5Pbct8zXVcusHoicXlZPmsq05nPxgr LjXgzfxG0bhrBDG3PCElKr+Xkgn57XL7zDmz/BZrIOP8AdpHEH5O4TheLy/tc01I KP4fNPubGTTDrTP1DlA/zBCH/dgg7hbX7N0s2ZFpgv/LaqF8J+1v+nJA9/phekl4 z3NI4/3GCV5wWiaS9K7RqnNeV3u0fC/lDYDgXQMuOyQqOd3sOrwl9wNTbWimfeBZ Zkx/TDX0peF10bBGMFuTbTf3arRbpojmTw7J3CMMTIiLQnGB13gZsUe7nd0= -----END CERTIFICATE-----Generated at Sun Jun 29 07:18:18 2025 by rpki-client