$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f847c21e-23f9-4beb-aa8d-9db0dc4cf4d3.roa File: f847c21e-23f9-4beb-aa8d-9db0dc4cf4d3.roa (raw, json) Hash identifier: 9JZgBmO9BRxuOuRS2oRKKVLOciXwBx+4+WxAsfJMYXU= Subject key identifier: 97:68:56:CA:55:F4:3E:DC:6D:88:21:AE:AD:F6:2F:3A:EB:AF:19:35 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E203BC0BD6A2B909CEC28188AF7E710DA94436D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f847c21e-23f9-4beb-aa8d-9db0dc4cf4d3.roa Signing time: Mon 16 Jun 2025 18:50:20 +0000 ROA not before: Mon 16 Jun 2025 18:50:20 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.80.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:20:3b:c0:bd:6a:2b:90:9c:ec:28:18:8a:f7:e7:10:da:94:43:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:50:20 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=641afcc1e98ee59df8e559fe5dca13000de1aeab7458aa6285b83aa0bb486faa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:52:74:a0:77:39:79:25:2f:42:91:2c:9b: 70:0e:06:96:31:2e:4c:c2:34:7d:82:17:ec:b3:bc: 85:f1:b6:b5:d5:bc:dd:19:af:fe:6c:d1:0b:89:06: 6e:1d:2e:34:f1:74:4e:54:1e:9c:6c:fd:9b:bd:65: 95:d1:3f:6a:d6:b6:6a:d0:8b:aa:6a:dd:3c:ac:7f: 39:e5:91:1d:b1:e3:7e:a5:1a:7a:17:e7:19:9c:ca: b4:f7:e1:a5:9a:c3:fc:18:e6:b1:69:f4:c3:5b:27: 31:7f:1c:37:64:b8:f3:06:cd:6c:56:a2:f6:ed:e4: 38:ab:c7:87:68:9a:46:c2:89:61:2e:0c:c6:66:60: 44:7f:87:a7:46:47:d2:70:3f:4d:6e:84:1a:5a:47: 5b:1a:5f:8a:f9:1d:b5:47:c8:95:1f:48:3e:ab:ff: 08:f4:ae:33:03:e6:3e:4f:03:61:3e:45:42:e3:ca: d3:30:9f:29:01:ed:20:34:3c:ea:c9:71:23:5c:75: d5:83:32:9e:61:d7:95:98:a0:65:48:17:11:be:e6: 6e:59:3d:3b:db:4f:58:95:35:74:80:45:5f:41:5d: 41:35:71:76:c5:f1:a1:4c:84:a1:3d:8b:09:22:b9: 24:09:c7:30:c7:2f:3e:ed:61:9d:12:85:e4:20:5a: 8d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:68:56:CA:55:F4:3E:DC:6D:88:21:AE:AD:F6:2F:3A:EB:AF:19:35 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f847c21e-23f9-4beb-aa8d-9db0dc4cf4d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.80.0.0/15 Signature Algorithm: sha256WithRSAEncryption 2d:61:70:7d:e4:52:52:ad:c2:0d:8f:c9:41:b7:3c:49:52:e6: d3:f7:d5:b7:dd:1f:54:ce:3b:4d:ad:d0:61:c4:c7:7b:13:91: 46:4f:c6:92:87:88:4b:36:3f:7c:a8:01:ad:45:73:8e:09:c7: 27:68:f0:96:49:bf:51:31:3f:a7:5b:c9:a5:75:f7:43:e2:79: de:3a:cb:69:50:1a:9e:58:bc:b4:48:15:37:32:11:97:39:41: 0b:cb:64:05:34:3e:86:7e:01:72:47:b4:9a:4a:79:ef:f9:a2: 38:d8:d9:ac:ab:95:bf:ff:41:e8:aa:a1:13:47:4a:12:d5:3a: 58:7c:8b:62:3e:47:6e:62:57:2d:5f:72:7d:33:1e:1b:b9:75: e8:02:82:92:eb:58:85:02:a6:8d:b9:d4:ca:2f:b3:b6:d3:65: d4:b7:e5:36:29:46:9e:e3:ae:ae:3d:de:02:26:2a:93:db:95: 2c:40:f2:bf:c5:11:56:e8:c3:1a:28:c2:38:f3:15:2d:19:e2: 9f:55:7c:0b:fb:da:e8:34:73:cd:dc:68:ef:e2:8e:c9:91:c5: 7c:cb:e3:c5:04:53:21:c3:f3:bd:8a:7b:96:cb:d1:26:29:99: cf:54:51:f2:5c:d8:8a:1f:7b:57:62:8a:7a:a7:7e:87:44:53: d8:b4:b6:87 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbiA7wL1qK5Cc7CgYivfnENqUQ20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTg1MDIwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDFhZmNjMWU5OGVlNTlkZjhlNTU5ZmU1ZGNhMTMwMDBk ZTFhZWFiNzQ1OGFhNjI4NWI4M2FhMGJiNDg2ZmFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC60lJ0oHc5eSUvQpEsm3AOBpYxLkzCNH2CF+yzvIXxtrXV vN0Zr/5s0QuJBm4dLjTxdE5UHpxs/Zu9ZZXRP2rWtmrQi6pq3TysfznlkR2x436l GnoX5xmcyrT34aWaw/wY5rFp9MNbJzF/HDdkuPMGzWxWovbt5Dirx4domkbCiWEu DMZmYER/h6dGR9JwP01uhBpaR1saX4r5HbVHyJUfSD6r/wj0rjMD5j5PA2E+RULj ytMwnykB7SA0POrJcSNcddWDMp5h15WYoGVIFxG+5m5ZPTvbT1iVNXSARV9BXUE1 cXbF8aFMhKE9iwkiuSQJxzDHLz7tYZ0SheQgWo0NAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUl2hWylX0PtxtiCGurfYvOuuvGTUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4NDdjMjFlLTIzZjktNGJlYi1hYThkLTlkYjBkYzRjZjRkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2UDANBgkqhkiG9w0BAQsFAAOCAQEALWFwfeRSUq3CDY/JQbc8SVLm0/fV t90fVM47Ta3QYcTHexORRk/GkoeISzY/fKgBrUVzjgnHJ2jwlkm/UTE/p1vJpXX3 Q+J53jrLaVAanli8tEgVNzIRlzlBC8tkBTQ+hn4Bcke0mkp57/miONjZrKuVv/9B 6KqhE0dKEtU6WHyLYj5HbmJXLV9yfTMeG7l16AKCkutYhQKmjbnUyi+zttNl1Lfl NilGnuOurj3eAiYqk9uVLEDyv8URVujDGijCOPMVLRnin1V8C/va6DRzzdxo7+KO yZHFfMvjxQRTIcPzvYp7lsvRJimZz1RR8lzYih97V2KKeqd+h0RT2LS2hw== -----END CERTIFICATE-----Generated at Sat Jun 28 23:55:31 2025 by rpki-client