$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c78f7e2a-8a5b-4c99-9544-75171506f464.roa File: c78f7e2a-8a5b-4c99-9544-75171506f464.roa (raw, json) Hash identifier: C6R7chobI//kQavZGGN7E5SftXa07iLQXydg7RbHP8U= Subject key identifier: DE:78:EE:70:56:C9:77:79:41:92:64:73:66:95:E4:E9:B3:39:66:9F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A84F10F7A700EF9A44564ED8AF84993AB0816F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c78f7e2a-8a5b-4c99-9544-75171506f464.roa Signing time: Mon 16 Jun 2025 17:40:15 +0000 ROA not before: Mon 16 Jun 2025 17:40:15 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.159.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:84:f1:0f:7a:70:0e:f9:a4:45:64:ed:8a:f8:49:93:ab:08:16:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:40:15 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=dc7590e502bad31d4aa5ce35b604eaa37a6e64cc9ed440e60438f71087d93172, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:28:68:02:8c:f4:1f:ef:e4:26:3c:b0:1f:9b: 3d:0f:55:7b:26:b3:b7:ae:6a:1c:e7:1b:f5:d6:7e: ba:c0:63:6f:b9:96:fa:89:47:5d:66:f0:18:0e:03: 78:9d:52:3e:6a:bf:7c:98:3d:44:36:ac:d2:84:cb: fe:e3:68:e0:2c:f4:07:05:93:67:5b:6d:de:ad:16: 5d:9f:31:27:92:c1:f2:6f:d7:1d:7b:b0:29:47:32: d0:20:12:73:8c:e1:7c:50:b0:9d:21:e4:44:07:d8: 82:74:7c:97:b7:f9:fc:fd:a9:37:cf:51:c5:88:9a: 3c:81:aa:3b:84:3b:52:aa:15:17:0c:03:f2:06:97: f0:91:83:3f:c4:a5:13:f9:de:2e:92:e9:9f:84:48: 82:f7:58:24:64:61:cd:06:ac:af:1c:45:4c:50:3c: 19:62:0b:4d:70:d4:55:9e:c8:05:30:87:e2:2e:6d: 22:e7:ec:0b:00:34:20:03:5d:31:bf:3e:78:38:f1: 4e:99:a7:66:b0:cc:01:eb:be:2c:fd:0e:b7:10:e0: d8:35:49:9f:25:30:a7:8d:c5:c4:25:d8:72:fe:f9: f6:db:3b:5f:32:b3:f2:ca:3a:6a:4a:2d:50:81:0b: a8:df:40:9f:80:e6:ea:3b:f7:bb:b3:f1:fd:6a:f0: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:78:EE:70:56:C9:77:79:41:92:64:73:66:95:E4:E9:B3:39:66:9F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c78f7e2a-8a5b-4c99-9544-75171506f464.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.159.206.0/23 Signature Algorithm: sha256WithRSAEncryption 75:a5:ca:97:f5:cf:94:82:41:22:de:0e:9a:ae:ea:f7:49:1e: cf:5b:10:90:db:2b:75:e9:c8:c8:33:bc:1f:dd:f2:c9:e7:45: 00:0a:2d:6a:54:63:1a:12:aa:cd:24:47:00:11:0c:59:4d:b5: 9b:c6:3e:c7:42:6c:91:e5:cf:b2:1b:8e:8d:64:94:5c:8c:d5: 7c:94:ae:48:6a:2e:a0:d9:55:35:59:40:b1:89:c6:13:0c:f9: 2e:c0:50:3e:3d:cf:db:8a:a6:d3:c7:e3:45:39:c9:c4:d8:1b: c3:a7:14:94:36:f4:3d:37:00:30:7a:09:d6:89:9d:6e:43:1d: 40:48:91:23:cb:8f:ea:6e:55:1e:ff:eb:1b:7f:ac:f1:6e:3e: 67:1f:4a:ab:15:b1:7a:dc:1a:2d:cf:88:a1:0d:6e:b6:fc:bc: f2:dd:9c:50:8d:6c:ae:38:1d:d7:0e:4f:29:f1:f2:cb:16:e4: 42:7a:be:a8:55:4b:a6:d8:d6:0b:06:53:a0:fd:7a:44:82:e1: 9d:6c:4b:76:e5:3c:6e:84:f3:dc:75:b3:bd:33:b9:1b:5d:2e: 6f:7e:96:8e:f6:07:e4:62:4c:06:a8:f6:c1:db:8c:6d:f9:18: 18:39:80:2f:29:46:ac:ba:28:5d:9a:cc:29:9a:f8:6c:92:6a: 6f:7a:4a:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaoTxD3pwDvmkRWTtivhJk6sIFvgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc0MDE1WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzc1OTBlNTAyYmFkMzFkNGFhNWNlMzViNjA0ZWFhMzdh NmU2NGNjOWVkNDQwZTYwNDM4ZjcxMDg3ZDkzMTcyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHKGgCjPQf7+QmPLAfmz0PVXsms7euahznG/XWfrrAY2+5 lvqJR11m8BgOA3idUj5qv3yYPUQ2rNKEy/7jaOAs9AcFk2dbbd6tFl2fMSeSwfJv 1x17sClHMtAgEnOM4XxQsJ0h5EQH2IJ0fJe3+fz9qTfPUcWImjyBqjuEO1KqFRcM A/IGl/CRgz/EpRP53i6S6Z+ESIL3WCRkYc0GrK8cRUxQPBliC01w1FWeyAUwh+Iu bSLn7AsANCADXTG/Png48U6Zp2awzAHrviz9DrcQ4Ng1SZ8lMKeNxcQl2HL++fbb O18ys/LKOmpKLVCBC6jfQJ+A5uo797uz8f1q8IchAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3njucFbJd3lBkmRzZpXk6bM5Zp8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3OGY3ZTJhLThhNWItNGM5OS05NTQ0LTc1MTcxNTA2ZjQ2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjn84wDQYJKoZIhvcNAQELBQADggEBAHWlypf1z5SCQSLeDpqu6vdJHs9b EJDbK3XpyMgzvB/d8snnRQAKLWpUYxoSqs0kRwARDFlNtZvGPsdCbJHlz7Ibjo1k lFyM1XyUrkhqLqDZVTVZQLGJxhMM+S7AUD49z9uKptPH40U5ycTYG8OnFJQ29D03 ADB6CdaJnW5DHUBIkSPLj+puVR7/6xt/rPFuPmcfSqsVsXrcGi3PiKENbrb8vPLd nFCNbK44HdcOTynx8ssW5EJ6vqhVS6bY1gsGU6D9ekSC4Z1sS3blPG6E89x1s70z uRtdLm9+lo72B+RiTAao9sHbjG35GBg5gC8pRqy6KF2azCma+GySam96Suk= -----END CERTIFICATE-----Generated at Sun Jun 29 03:40:29 2025 by rpki-client