$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa File: bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa (raw, json) Hash identifier: R3K9tLiygBYCRm/g6lQ0CEEhb+9WxvJEWmrozstbde4= Subject key identifier: 83:B3:2E:A6:77:D9:F1:B8:18:7D:78:6B:2A:96:52:1F:9C:19:C4:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 69AA6F750933FE45BFE4688125B8D55E83214A85 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa Signing time: Mon 16 Jun 2025 17:21:39 +0000 ROA not before: Mon 16 Jun 2025 17:21:39 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.208.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:aa:6f:75:09:33:fe:45:bf:e4:68:81:25:b8:d5:5e:83:21:4a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:21:39 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=bbc6d5aee7334d656bc8e4efbb9268d4bd0655876350908e6c4a7b3ad8cab077, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:83:3c:7f:5f:75:9c:3e:a4:7f:bb:f5:f1:60: a8:fb:a3:85:e2:45:ad:f5:9e:8a:0b:f2:07:6e:9c: 45:6e:20:1c:dc:a2:2f:52:18:48:98:d5:e9:96:2b: 4a:1f:d9:7a:5b:20:13:34:ff:51:2d:20:7c:da:20: ce:ca:af:22:d4:db:7f:81:d5:54:05:a6:0d:93:1e: 9b:8b:83:54:0c:ea:74:18:41:08:69:11:fe:fa:aa: ff:d8:75:e8:90:dd:9a:6b:56:5d:4f:b6:ba:91:86: ef:a0:ed:5a:b2:46:72:4e:e5:0c:77:5b:18:44:60: 19:41:2e:b8:3b:8a:41:d7:43:5d:f6:c6:cf:8d:6f: e5:9c:a0:ce:87:17:b6:bb:a2:ce:53:0e:f2:ee:1c: ab:62:36:7e:17:10:6b:7b:f9:fe:11:2b:0d:0f:ee: 5e:f0:7a:49:de:d6:1c:76:95:12:cf:0e:62:5a:c4: ce:81:13:b3:bf:37:9e:25:b2:f4:55:21:05:11:a6: 3f:3c:f5:68:de:2a:3c:8d:fb:d9:e3:d0:58:0b:82: c3:61:09:0e:0f:69:72:52:e7:ad:8d:3a:6f:50:b6: 28:27:45:a1:98:72:da:76:e5:2a:aa:46:73:e5:07: a4:0f:62:c8:bb:de:a3:42:f0:ad:64:19:66:7f:e2: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B3:2E:A6:77:D9:F1:B8:18:7D:78:6B:2A:96:52:1F:9C:19:C4:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb3edb19-9dc8-4fb1-80a7-e7d90b77a937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.208.0.0/13 Signature Algorithm: sha256WithRSAEncryption 9a:81:ff:32:cf:aa:3e:4e:c2:97:af:31:05:e7:21:fa:c9:54: e2:bb:10:1e:2a:83:34:c6:67:f7:51:f8:65:f6:cd:2a:75:3c: 1a:01:22:ae:f1:2a:3b:b2:90:ac:bf:da:97:c7:ed:c8:6e:3d: 19:b1:4a:e9:4f:69:80:85:23:88:6f:03:4f:3a:b3:99:05:c3: 41:ec:6c:b6:5f:9d:c9:f3:c9:fa:2d:1c:96:9a:e4:8c:74:9d: db:35:0d:e6:4a:95:e0:b0:42:32:a0:aa:18:d4:25:b6:72:3b: 1c:b7:c3:f9:af:3f:03:e3:44:2a:ff:a5:66:19:0a:cb:86:39: c1:2b:c0:ac:de:f4:ea:3f:3d:7e:7a:7b:ba:1f:86:8a:75:9d: 54:31:6f:5b:bb:0d:47:e4:50:2e:68:72:2e:da:a2:6d:97:16: c6:7e:6f:d5:c9:67:8c:3e:c4:35:64:d5:46:95:2e:19:92:2f: c3:ed:eb:15:ff:6d:95:1b:d5:db:8c:02:4d:67:09:26:7f:72: 83:bf:01:b3:47:51:ba:5a:a5:24:d3:19:df:94:9a:31:74:a5: 62:f9:66:79:76:a7:7c:f3:cc:09:d6:6e:c3:9a:61:68:0f:cd: e2:6a:10:0d:5f:47:20:3e:4d:f3:3f:08:04:d3:54:05:ce:e7: 33:89:aa:39 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaapvdQkz/kW/5GiBJbjVXoMhSoUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTcyMTM5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYmM2ZDVhZWU3MzM0ZDY1NmJjOGU0ZWZiYjkyNjhkNGJk MDY1NTg3NjM1MDkwOGU2YzRhN2IzYWQ4Y2FiMDc3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKgzx/X3WcPqR/u/XxYKj7o4XiRa31nooL8gdunEVuIBzc oi9SGEiY1emWK0of2XpbIBM0/1EtIHzaIM7KryLU23+B1VQFpg2THpuLg1QM6nQY QQhpEf76qv/YdeiQ3ZprVl1PtrqRhu+g7VqyRnJO5Qx3WxhEYBlBLrg7ikHXQ132 xs+Nb+WcoM6HF7a7os5TDvLuHKtiNn4XEGt7+f4RKw0P7l7wekne1hx2lRLPDmJa xM6BE7O/N54lsvRVIQURpj889WjeKjyN+9nj0FgLgsNhCQ4PaXJS562NOm9Qtign RaGYctp25SqqRnPlB6QPYsi73qNC8K1kGWZ/4snTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUg7MupnfZ8bgYfXhrKpZSH5wZxEkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiM2VkYjE5LTlkYzgtNGZiMS04MGE3LWU3ZDkwYjc3YTkzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMS0DANBgkqhkiG9w0BAQsFAAOCAQEAmoH/Ms+qPk7Cl68xBech+slU4rsQ HiqDNMZn91H4ZfbNKnU8GgEirvEqO7KQrL/al8ftyG49GbFK6U9pgIUjiG8DTzqz mQXDQexstl+dyfPJ+i0clprkjHSd2zUN5kqV4LBCMqCqGNQltnI7HLfD+a8/A+NE Kv+lZhkKy4Y5wSvArN706j89fnp7uh+GinWdVDFvW7sNR+RQLmhyLtqibZcWxn5v 1clnjD7ENWTVRpUuGZIvw+3rFf9tlRvV24wCTWcJJn9yg78Bs0dRulqlJNMZ35Sa MXSlYvlmeXanfPPMCdZuw5phaA/N4moQDV9HID5N8z8IBNNUBc7nM4mqOQ== -----END CERTIFICATE-----Generated at Sun Jun 29 05:10:24 2025 by rpki-client