$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4da48ec-e0c8-473f-9009-e253971e8b02.roa File: d4da48ec-e0c8-473f-9009-e253971e8b02.roa (raw, json) Hash identifier: JDVdAYYWCklSF/mIC49Sz+QZA3IFmyQvgHVUxdmzYus= Subject key identifier: 8F:74:D5:BB:7D:A5:DB:ED:F8:03:F5:A4:F8:EA:F4:40:53:D6:53:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4535340926436A63DAEFE420C6DE9680C512BF65 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4da48ec-e0c8-473f-9009-e253971e8b02.roa Signing time: Mon 16 Jun 2025 17:50:18 +0000 ROA not before: Mon 16 Jun 2025 17:50:18 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.72.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:35:34:09:26:43:6a:63:da:ef:e4:20:c6:de:96:80:c5:12:bf:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:50:18 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=b585279a94d55c20dac984b7cce52ef3d68c4bc497d08289384e539f7a09cfc0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:e2:0f:5f:be:05:90:0b:32:4a:39:ab:f0: dc:1b:9e:de:1b:9a:9b:f7:77:40:ab:b1:20:ea:a5: 4e:48:ac:31:4b:b9:8f:28:72:4a:f4:30:44:fe:8a: af:e7:12:ef:27:4c:56:de:e6:db:21:fe:4b:44:82: 3c:66:92:dd:47:40:aa:4c:8f:86:f7:d7:44:3a:c6: 59:94:33:22:b7:ab:8c:20:5c:3c:8b:82:38:f9:f0: 0d:80:69:32:1a:43:f8:a7:18:d1:31:6e:db:07:43: d6:4c:2a:5d:e3:fb:33:f9:91:ec:96:aa:0f:67:ac: aa:67:40:ca:a9:38:29:c3:da:0f:26:b0:3e:ba:52: b8:98:73:89:6a:38:37:c3:57:74:71:1d:47:e6:1c: 92:07:cb:96:04:e2:fd:80:a9:c6:31:55:f3:b4:96: 34:4d:21:e6:3b:81:5a:0a:cf:7f:9e:b8:90:f3:37: 9e:85:d2:ee:6f:10:83:e7:6e:b7:c3:d8:95:6a:3c: df:01:c2:a0:f8:32:db:f8:c6:6d:71:74:5f:95:c3: e3:41:9c:94:f9:3b:79:a0:36:68:c7:49:bb:4e:eb: 07:86:c3:6b:09:9f:40:70:0a:d2:5d:00:fe:46:65: 27:cf:ab:7a:58:5c:00:d5:76:8d:69:38:44:20:20: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:74:D5:BB:7D:A5:DB:ED:F8:03:F5:A4:F8:EA:F4:40:53:D6:53:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4da48ec-e0c8-473f-9009-e253971e8b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.72.0.0/13 Signature Algorithm: sha256WithRSAEncryption a2:5b:55:c3:11:06:6d:a4:c5:68:55:6a:17:54:36:7b:eb:59: 8c:41:a8:d0:c5:91:e0:47:dd:53:40:ee:80:4a:9a:d9:28:5a: 1a:ab:bc:e5:3e:5a:30:25:ac:18:82:8e:72:b0:c2:24:eb:b3: 8b:2e:9a:d3:26:40:22:05:24:85:ef:e8:c2:17:1b:f4:cc:ec: 45:1f:a2:c0:c5:5d:93:42:34:dc:04:03:ca:7c:4a:af:08:6b: af:53:c6:d7:72:42:c6:94:b5:dc:12:49:2f:49:cd:82:4f:6d: a9:65:62:bd:54:80:80:06:48:7d:04:db:11:92:6f:49:e2:34: 2f:91:cb:a3:9a:57:7e:4c:9b:9a:31:08:53:6e:b0:ce:5d:a3: f3:f9:03:3e:1d:93:b7:9a:92:3e:c5:37:1a:b4:75:8e:8d:57: 72:9e:e0:12:af:17:a8:3c:0a:97:ed:12:d5:74:78:e4:b1:f5: e7:27:8c:30:0a:32:e7:1f:b1:cf:80:32:d5:48:ef:1a:50:24: 4a:bf:a1:7d:f4:60:f4:86:e5:2a:53:a5:9d:91:48:ed:95:d4: 9b:33:b5:33:3a:d4:5c:56:19:8b:17:ba:9d:f9:8f:75:f9:98: 15:08:15:ad:52:09:99:68:2b:a7:37:94:ac:44:16:38:ff:e7: 25:7c:07:57 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURTU0CSZDamPa7+Qgxt6WgMUSv2UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc1MDE4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNTg1Mjc5YTk0ZDU1YzIwZGFjOTg0YjdjY2U1MmVmM2Q2 OGM0YmM0OTdkMDgyODkzODRlNTM5ZjdhMDljZmMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZDOIPX74FkAsySjmr8Nwbnt4bmpv3d0CrsSDqpU5IrDFL uY8ockr0MET+iq/nEu8nTFbe5tsh/ktEgjxmkt1HQKpMj4b310Q6xlmUMyK3q4wg XDyLgjj58A2AaTIaQ/inGNExbtsHQ9ZMKl3j+zP5keyWqg9nrKpnQMqpOCnD2g8m sD66UriYc4lqODfDV3RxHUfmHJIHy5YE4v2AqcYxVfO0ljRNIeY7gVoKz3+euJDz N56F0u5vEIPnbrfD2JVqPN8BwqD4Mtv4xm1xdF+Vw+NBnJT5O3mgNmjHSbtO6weG w2sJn0BwCtJdAP5GZSfPq3pYXADVdo1pOEQgIJFBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUj3TVu32l2+34A/Wk+Or0QFPWUzowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q0ZGE0OGVjLWUwYzgtNDczZi05MDA5LWUyNTM5NzFlOGIwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMjSDANBgkqhkiG9w0BAQsFAAOCAQEAoltVwxEGbaTFaFVqF1Q2e+tZjEGo 0MWR4EfdU0DugEqa2ShaGqu85T5aMCWsGIKOcrDCJOuziy6a0yZAIgUkhe/owhcb 9MzsRR+iwMVdk0I03AQDynxKrwhrr1PG13JCxpS13BJJL0nNgk9tqWVivVSAgAZI fQTbEZJvSeI0L5HLo5pXfkybmjEIU26wzl2j8/kDPh2Tt5qSPsU3GrR1jo1Xcp7g Eq8XqDwKl+0S1XR45LH15yeMMAoy5x+xz4Ay1UjvGlAkSr+hffRg9IblKlOlnZFI 7ZXUmzO1MzrUXFYZixe6nfmPdfmYFQgVrVIJmWgrpzeUrEQWOP/nJXwHVw== -----END CERTIFICATE-----Generated at Sun Jun 29 07:39:35 2025 by rpki-client