$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b17116c-609c-4d5e-b09f-12982da60607.roa File: 0b17116c-609c-4d5e-b09f-12982da60607.roa (raw, json) Hash identifier: W+Sk+jIOtumkEbBYGSEVIqmBmn8E1tW+bMXa+T4lK64= Subject key identifier: 84:2B:5F:14:65:56:FD:35:2A:9A:D6:07:BF:4B:F8:3D:E5:39:56:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4FF3A708C41EEBFDA9BE6163FF588D7AD29722 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b17116c-609c-4d5e-b09f-12982da60607.roa Signing time: Mon 09 Jun 2025 18:30:57 +0000 ROA not before: Mon 09 Jun 2025 18:30:57 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.244.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f3:a7:08:c4:1e:eb:fd:a9:be:61:63:ff:58:8d:7a:d2:97:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:30:57 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=535e26a58967481d92eac2dad643ebc0e437f53028cfee95636b1f6427f20ad7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:fe:b6:3d:71:24:81:30:b6:a1:78:8e:a1: 7a:d2:e0:cb:1b:b7:1b:e5:ef:a3:78:c5:bd:0b:c1: b3:9f:b6:14:aa:f4:4e:e9:f4:a9:12:a1:90:65:0f: 76:97:42:3b:82:1c:26:dc:55:b6:23:3e:5d:7b:b9: e8:d8:35:12:04:16:09:6f:2d:54:3f:ee:1f:40:b4: a4:15:79:4e:d4:69:b3:88:24:4b:14:44:77:a9:c4: af:ee:f0:6b:47:a0:a9:4f:9f:cb:14:75:f6:88:9f: 17:65:9e:f2:34:93:c9:64:49:89:d1:b6:c6:1e:74: d9:21:43:a0:d4:a7:f9:8b:e0:e0:56:40:ed:c4:42: 8f:7d:b1:4c:cd:1c:93:30:d6:ea:27:8f:92:e2:20: 76:21:6a:35:ca:0c:98:76:54:ca:58:40:20:39:0c: b1:89:81:f6:97:02:62:f9:8c:65:a1:e0:ae:f0:1d: 62:5b:b9:0d:dd:33:19:3b:9e:b7:4f:a0:37:9a:59: d0:dd:53:67:76:6b:78:e1:e6:48:3b:10:cc:84:05: 4e:39:46:34:2d:a0:51:f5:f5:3f:73:1b:ad:9e:6e: 50:47:0d:01:97:73:71:3e:24:56:5c:c0:fa:f4:80: 02:d3:40:ce:3b:ee:c9:3a:d0:0f:a3:d5:07:9b:9f: 48:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:2B:5F:14:65:56:FD:35:2A:9A:D6:07:BF:4B:F8:3D:E5:39:56:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0b17116c-609c-4d5e-b09f-12982da60607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.244.80.0/21 Signature Algorithm: sha256WithRSAEncryption 73:25:3b:7e:b8:a0:a8:a1:5d:7e:30:6d:a9:8f:85:6d:d7:c7: 66:46:c6:09:ad:36:18:df:04:e3:d0:9d:91:82:63:79:8c:52: 78:99:0d:10:c3:4d:52:98:fb:58:87:6d:12:aa:b4:4b:14:11: 59:f0:e8:04:d7:d1:55:ef:97:f9:7e:33:f1:f3:c9:39:ab:e8: 78:78:33:e0:ee:e5:75:63:1f:32:44:03:25:7d:26:e4:47:df: 72:96:38:54:54:43:5a:1e:64:e0:1e:53:61:49:fe:6b:c1:de: 7f:22:ff:1c:5f:f8:93:ef:a2:fe:f9:87:22:f3:48:2c:76:5f: 9f:1f:f7:0a:56:76:e1:c7:e5:3e:79:5b:31:6f:c0:54:55:5d: 63:59:9e:6e:74:0f:23:eb:90:e3:0c:f1:9a:0e:70:bf:fa:24: 8e:a3:c9:4f:bc:38:3d:a9:83:a4:b5:60:10:fa:a6:fa:14:8a: 38:d1:86:24:5f:92:f7:fd:c0:68:09:a7:f4:43:48:22:c0:44: bf:65:fc:7c:55:f3:1c:51:a6:22:15:02:ef:a8:83:50:ca:2f: 87:b2:41:b0:f8:9e:88:10:71:8b:c1:ec:6a:64:95:93:b6:b7: 84:96:74:d6:6b:40:20:6f:f1:08:75:d7:47:9e:af:e5:a4:ed: 2e:2f:9b:bf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITT/OnCMQe6/2pvmFj/1iNetKXIjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MDkxODMwNTdaFw0yNTA3MTQyMzU5NTla MHoxSTBHBgNVBAUTQDUzNWUyNmE1ODk2NzQ4MWQ5MmVhYzJkYWQ2NDNlYmMwZTQz N2Y1MzAyOGNmZWU5NTYzNmIxZjY0MjdmMjBhZDcxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMBV/rY9cSSBMLaheI6hetLgyxu3G+Xvo3jFvQvBs5+2FKr0 Tun0qRKhkGUPdpdCO4IcJtxVtiM+XXu56Ng1EgQWCW8tVD/uH0C0pBV5TtRps4gk SxREd6nEr+7wa0egqU+fyxR19oifF2We8jSTyWRJidG2xh502SFDoNSn+Yvg4FZA 7cRCj32xTM0ckzDW6iePkuIgdiFqNcoMmHZUylhAIDkMsYmB9pcCYvmMZaHgrvAd Ylu5Dd0zGTuet0+gN5pZ0N1TZ3ZreOHmSDsQzIQFTjlGNC2gUfX1P3MbrZ5uUEcN AZdzcT4kVlzA+vSAAtNAzjvuyTrQD6PVB5ufSNMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSEK18UZVb9NSqa1ge/S/g95TlWRTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMGIxNzExNmMtNjA5Yy00ZDVlLWIwOWYtMTI5ODJkYTYwNjA3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAzb0UDANBgkqhkiG9w0BAQsFAAOCAQEAcyU7frigqKFdfjBtqY+FbdfHZkbG Ca02GN8E49CdkYJjeYxSeJkNEMNNUpj7WIdtEqq0SxQRWfDoBNfRVe+X+X4z8fPJ OavoeHgz4O7ldWMfMkQDJX0m5EffcpY4VFRDWh5k4B5TYUn+a8HefyL/HF/4k++i /vmHIvNILHZfnx/3ClZ24cflPnlbMW/AVFVdY1mebnQPI+uQ4wzxmg5wv/okjqPJ T7w4PamDpLVgEPqm+hSKONGGJF+S9/3AaAmn9ENIIsBEv2X8fFXzHFGmIhUC76iD UMovh7JBsPieiBBxi8HsamSVk7a3hJZ01mtAIG/xCHXXR56v5aTtLi+bvw== -----END CERTIFICATE-----Generated at Sat Jun 14 05:48:32 2025 by rpki-client