$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03385998-22b5-4e32-87e7-aa136287512d.roa File: 03385998-22b5-4e32-87e7-aa136287512d.roa (raw, json) Hash identifier: XhGEvD766pLgPLoGPhZTxa66b/vH6ZQiKfX3e33J3i4= Subject key identifier: 8C:7C:04:13:C4:A4:B8:3B:CF:2A:B7:8A:BC:24:EA:AA:A8:30:EA:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 01ECCB30DBD6C5B1782B7CE4F3F5B98DA8DF498F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03385998-22b5-4e32-87e7-aa136287512d.roa Signing time: Tue 20 May 2025 17:10:22 +0000 ROA not before: Tue 20 May 2025 17:10:22 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.220.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ec:cb:30:db:d6:c5:b1:78:2b:7c:e4:f3:f5:b9:8d:a8:df:49:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 17:10:22 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=74d92fa6ff56b3ac55a113ba53240a5d52598b580b01657797294cfe60078563, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:88:ec:80:47:b8:80:fa:08:24:17:a3:c6: 47:4c:43:04:80:5b:78:1c:d7:88:ec:1e:78:f7:3f: fb:a7:e7:68:96:8f:fa:4b:6f:95:4a:59:9d:2e:b2: c4:20:08:7b:95:cb:39:05:ca:c1:c8:f6:9e:63:e8: fb:8a:13:d3:8c:24:42:7d:3f:34:71:88:49:92:05: dc:ca:59:57:ae:ef:c1:8e:32:05:72:0c:5c:61:87: bc:32:b8:a3:7c:9c:ec:ab:48:d8:9c:17:0b:35:e4: c8:9c:fb:95:99:92:eb:e2:fb:df:6b:be:d1:4a:28: 56:58:2d:24:fc:a1:9c:7e:bc:20:e7:9a:78:3b:5d: 55:1d:0b:fc:23:f2:89:23:1f:76:57:a1:33:52:a0: 6a:63:9a:a6:9c:0a:ff:87:2e:cd:b7:1e:c0:1a:06: ed:ad:d3:27:37:0b:d7:48:97:95:2c:df:47:57:51: 3f:3d:11:8e:c2:28:78:a2:11:b4:ba:e7:03:36:24: e9:9a:f1:c0:0c:9a:35:90:0a:b3:ad:16:3d:5d:26: 2e:c4:63:37:60:f4:3b:cf:54:0c:c3:ee:81:5e:d9: a8:7d:ba:d9:81:85:31:7d:0a:bd:a2:47:b8:87:d4: 1c:44:2f:9d:e4:6d:d2:96:07:18:71:b4:4a:39:62: ee:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7C:04:13:C4:A4:B8:3B:CF:2A:B7:8A:BC:24:EA:AA:A8:30:EA:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03385998-22b5-4e32-87e7-aa136287512d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.220.1.0/24 Signature Algorithm: sha256WithRSAEncryption 08:01:d9:dd:17:95:7e:b8:4a:aa:41:9f:b6:99:b7:ab:b9:6d: 50:df:cd:d5:83:e0:7d:dc:d5:e1:f4:24:db:99:32:54:75:ca: c2:21:c6:11:85:24:5f:98:5a:4f:9c:06:c1:02:94:3f:ce:6f: 15:7c:6c:b4:2c:13:81:f7:d0:e0:fc:72:50:df:82:34:e9:37: 82:2c:89:40:47:b0:fb:49:f0:1a:f4:bf:9b:d1:e6:7c:47:ae: 92:ef:0e:c4:3f:50:52:9f:2f:2d:28:a3:04:f4:32:53:1e:f9: 0f:0d:ea:6b:9c:e6:4c:fd:88:49:fa:1d:d5:f1:b6:53:6a:23: 56:cd:83:94:53:cc:87:c4:30:c1:d2:f8:1f:cc:7f:4a:5b:58: ca:e9:ba:db:a7:f5:02:ec:df:d1:fd:d0:8c:fb:cd:98:93:af: dc:5c:a2:98:93:b4:bf:0e:3f:bd:33:58:19:61:8f:25:9e:92: 88:c3:b8:fe:b7:20:cb:c9:1e:1a:24:12:e0:48:12:02:0f:de: a4:f4:2a:11:8b:ad:db:32:8f:e9:69:5b:50:c5:d4:82:04:0b: f7:ff:ae:3a:8d:d3:62:76:84:7c:1a:0a:d9:71:b2:a0:5c:81: 50:67:4b:5c:99:99:51:63:95:0e:39:7f:c7:ef:02:6d:9c:c1: de:b1:54:a1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAezLMNvWxbF4K3zk8/W5jajfSY8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTcxMDIyWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NGQ5MmZhNmZmNTZiM2FjNTVhMTEzYmE1MzI0MGE1ZDUy NTk4YjU4MGIwMTY1Nzc5NzI5NGNmZTYwMDc4NTYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCva4jsgEe4gPoIJBejxkdMQwSAW3gc14jsHnj3P/un52iW j/pLb5VKWZ0ussQgCHuVyzkFysHI9p5j6PuKE9OMJEJ9PzRxiEmSBdzKWVeu78GO MgVyDFxhh7wyuKN8nOyrSNicFws15Mic+5WZkuvi+99rvtFKKFZYLST8oZx+vCDn mng7XVUdC/wj8okjH3ZXoTNSoGpjmqacCv+HLs23HsAaBu2t0yc3C9dIl5Us30dX UT89EY7CKHiiEbS65wM2JOma8cAMmjWQCrOtFj1dJi7EYzdg9DvPVAzD7oFe2ah9 utmBhTF9Cr2iR7iH1BxEL53kbdKWBxhxtEo5Yu5tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjHwEE8SkuDvPKreKvCTqqqgw6sowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAzMzg1OTk4LTIyYjUtNGUzMi04N2U3LWFhMTM2Mjg3NTEyZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA23AEwDQYJKoZIhvcNAQELBQADggEBAAgB2d0XlX64SqpBn7aZt6u5bVDf zdWD4H3c1eH0JNuZMlR1ysIhxhGFJF+YWk+cBsEClD/ObxV8bLQsE4H30OD8clDf gjTpN4IsiUBHsPtJ8Br0v5vR5nxHrpLvDsQ/UFKfLy0oowT0MlMe+Q8N6muc5kz9 iEn6HdXxtlNqI1bNg5RTzIfEMMHS+B/Mf0pbWMrputun9QLs39H90Iz7zZiTr9xc opiTtL8OP70zWBlhjyWekojDuP63IMvJHhokEuBIEgIP3qT0KhGLrdsyj+lpW1DF 1IIEC/f/rjqN02J2hHwaCtlxsqBcgVBnS1yZmVFjlQ45f8fvAm2cwd6xVKE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:15 2025 by rpki-client