$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0658af40-23bb-4a20-a311-4ad46f286bc8.roa File: 0658af40-23bb-4a20-a311-4ad46f286bc8.roa (raw, json) Hash identifier: klVTrB5ByOndaSam8iuEHBTHaiOZsC2XcW+tmrJO9EQ= Subject key identifier: D0:FE:D0:C3:67:CB:A9:F8:CB:1E:B0:D8:D0:4F:C2:26:2E:C9:C7:51 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 737C44A3637CA7BBCE2B6ADA1B6C389ED7D668FA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0658af40-23bb-4a20-a311-4ad46f286bc8.roa Signing time: Mon 09 Jun 2025 17:51:57 +0000 ROA not before: Mon 09 Jun 2025 17:51:57 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.235.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7c:44:a3:63:7c:a7:bb:ce:2b:6a:da:1b:6c:38:9e:d7:d6:68:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 17:51:57 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=da7d9db54b2ba47341cf782867e59f9c02d0dcf6e79b4daa44a03b17bfbb1f32, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:ea:e4:8e:0b:a0:15:fe:41:4b:76:ea:88: 95:cf:59:e4:54:78:2b:8a:a3:af:bc:fd:ea:24:0b: a5:2b:f2:e0:b8:7a:b2:39:d9:e0:f3:3d:be:0a:4c: 1b:2b:cc:7d:00:91:ce:d4:a6:eb:f7:eb:11:28:f5: a0:aa:4e:ad:54:26:0a:0c:ca:8e:e8:0e:95:19:07: ba:ba:a0:7e:b4:c7:35:b9:c6:22:b3:87:e4:9a:41: 10:f6:55:2c:ef:93:07:5f:dc:e7:12:81:d3:58:ec: d2:b7:de:d2:8e:3b:71:1e:4d:d3:ec:41:f8:1d:71: d9:ed:c6:5a:77:3d:4e:cc:5c:bc:39:e9:82:57:05: 83:6c:30:f0:3b:62:2e:8c:2d:79:ad:4e:f5:9e:f8: b3:7e:d1:40:1d:59:12:3d:4b:ef:7e:43:1e:a9:1a: 5a:12:d8:b3:0f:52:bd:2e:fa:fc:f6:a7:fb:24:a3: 40:ec:dc:12:9b:50:5d:3d:27:12:8c:2e:60:43:75: ae:35:fc:73:6c:35:42:ba:67:88:f1:38:35:72:60: 60:22:48:b5:e3:4d:18:1d:62:a5:17:c3:b2:91:27: 8b:f4:bd:4f:ae:01:5c:5b:94:37:4e:0d:25:45:8f: 77:8a:73:89:11:51:dc:3d:5b:ee:ad:97:8e:85:7b: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FE:D0:C3:67:CB:A9:F8:CB:1E:B0:D8:D0:4F:C2:26:2E:C9:C7:51 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0658af40-23bb-4a20-a311-4ad46f286bc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.235.128.0/18 Signature Algorithm: sha256WithRSAEncryption 6c:89:25:f1:d0:45:00:d4:81:9f:40:b6:8c:a9:9d:93:d7:e8: 93:99:3a:e7:eb:9e:9d:9e:27:8d:2c:71:78:17:40:69:49:d2: 2d:08:8e:19:06:77:1b:c2:40:87:e0:ec:ff:d1:eb:63:af:d0: ac:cc:74:e4:37:f9:e8:24:31:0f:bd:0f:26:35:9e:8e:bf:c9: 3a:5e:ca:e1:fc:2f:aa:f4:c1:98:db:5e:72:77:61:ce:00:b3: 58:51:80:38:96:87:8b:65:f9:3f:0b:08:dd:94:67:3e:c8:25: d5:bd:08:9b:69:a7:53:a4:c4:52:55:4b:5e:eb:77:63:cf:3a: 34:c8:02:06:64:d5:9a:8e:2b:28:42:3d:fb:0f:a3:94:48:cc: bf:32:dc:8e:12:48:8c:f1:74:44:66:4c:26:27:c9:5c:55:ae: ff:21:d8:e9:8b:08:6d:5b:bb:11:0c:40:73:62:3e:8b:ff:75: 1a:22:c4:11:c2:4c:fe:e3:65:8d:a3:db:21:1c:3e:37:93:20: 21:85:52:cf:77:18:ab:28:e7:57:5c:6a:4c:ba:cb:df:78:76: 29:f2:e4:4f:d3:58:12:00:7a:3e:74:1b:1a:0c:6c:6d:50:e8: 3f:74:57:a4:93:05:57:75:c5:73:b6:e4:b6:0d:eb:37:0d:2b: aa:69:aa:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc3xEo2N8p7vOK2raG2w4ntfWaPowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTc1MTU3WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkYTdkOWRiNTRiMmJhNDczNDFjZjc4Mjg2N2U1OWY5YzAy ZDBkY2Y2ZTc5YjRkYWE0NGEwM2IxN2JmYmIxZjMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjD+rkjgugFf5BS3bqiJXPWeRUeCuKo6+8/eokC6Ur8uC4 erI52eDzPb4KTBsrzH0Akc7Upuv36xEo9aCqTq1UJgoMyo7oDpUZB7q6oH60xzW5 xiKzh+SaQRD2VSzvkwdf3OcSgdNY7NK33tKOO3EeTdPsQfgdcdntxlp3PU7MXLw5 6YJXBYNsMPA7Yi6MLXmtTvWe+LN+0UAdWRI9S+9+Qx6pGloS2LMPUr0u+vz2p/sk o0Ds3BKbUF09JxKMLmBDda41/HNsNUK6Z4jxODVyYGAiSLXjTRgdYqUXw7KRJ4v0 vU+uAVxblDdODSVFj3eKc4kRUdw9W+6tl46Fe2oJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0P7Qw2fLqfjLHrDY0E/CJi7Jx1EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA2NThhZjQwLTIzYmItNGEyMC1hMzExLTRhZDQ2ZjI4NmJjOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY264AwDQYJKoZIhvcNAQELBQADggEBAGyJJfHQRQDUgZ9AtoypnZPX6JOZ Oufrnp2eJ40scXgXQGlJ0i0IjhkGdxvCQIfg7P/R62Ov0KzMdOQ3+egkMQ+9DyY1 no6/yTpeyuH8L6r0wZjbXnJ3Yc4As1hRgDiWh4tl+T8LCN2UZz7IJdW9CJtpp1Ok xFJVS17rd2PPOjTIAgZk1ZqOKyhCPfsPo5RIzL8y3I4SSIzxdERmTCYnyVxVrv8h 2OmLCG1buxEMQHNiPov/dRoixBHCTP7jZY2j2yEcPjeTICGFUs93GKso51dcaky6 y994diny5E/TWBIAej50GxoMbG1Q6D90V6STBVd1xXO25LYN6zcNK6ppqvs= -----END CERTIFICATE-----Generated at Sun Jun 15 08:56:57 2025 by rpki-client