$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e690b1b-cefe-4803-a01d-0f6431b95b9d.roa File: 0e690b1b-cefe-4803-a01d-0f6431b95b9d.roa (raw, json) Hash identifier: lZ4G5sWGz/dfoEKQamAP0HCuYlAk56YsS7/7cq8gU8Q= Subject key identifier: B0:FA:37:1C:2F:3A:28:B9:6D:0C:1F:01:52:BB:BD:75:8D:5F:1E:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 041EDAF9731A4A164253F7342CE471052E3FB463 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e690b1b-cefe-4803-a01d-0f6431b95b9d.roa Signing time: Mon 09 Jun 2025 16:41:14 +0000 ROA not before: Mon 09 Jun 2025 16:41:14 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.206.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:1e:da:f9:73:1a:4a:16:42:53:f7:34:2c:e4:71:05:2e:3f:b4:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:41:14 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=86b121479b2f2062f6bb2d9399d294f51765d87ea0e26d2a8b681a327ce792e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:22:36:a5:9d:51:44:60:5c:82:58:3b:11: 00:b3:02:7f:34:6e:2c:4e:f1:53:61:50:65:a6:b6: e6:e7:69:4e:c1:18:4b:1d:94:a0:11:6c:e1:3c:ab: 95:04:98:5a:62:36:83:8a:2b:2a:1b:b1:1d:4a:1f: 15:d4:d7:5c:c6:53:a4:4a:95:7b:b4:df:ad:03:ac: 23:e7:66:46:28:f6:a4:df:e2:5c:2d:5f:4f:9c:6d: 70:96:fb:24:83:47:1c:2b:73:d5:17:dc:3c:91:e9: a2:b5:40:0c:97:fb:d3:b1:f8:31:c6:70:a0:14:95: 40:ba:f7:9d:0e:19:98:33:04:c1:05:ef:11:90:9d: f1:2c:ee:4e:c8:5f:e3:bc:d2:a9:81:b5:9b:26:2a: ae:b3:59:74:37:5c:93:0f:e1:e8:38:76:9e:b6:84: b5:03:2b:48:a2:68:36:88:ce:5a:17:6f:37:3f:2a: cd:2b:98:c6:a6:59:ac:98:09:27:d6:1b:b5:a1:7a: df:f7:d3:e6:7a:19:90:79:9a:60:34:32:c3:b4:ba: 76:37:e6:08:0e:e7:16:0b:3b:15:14:b1:fa:81:59: 63:07:d8:91:fe:ec:b0:92:a4:af:ff:2f:bf:56:53: 14:0e:d7:39:61:89:6f:5e:38:83:12:8e:d0:c5:d7: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:FA:37:1C:2F:3A:28:B9:6D:0C:1F:01:52:BB:BD:75:8D:5F:1E:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0e690b1b-cefe-4803-a01d-0f6431b95b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.206.248.0/22 Signature Algorithm: sha256WithRSAEncryption 43:0a:d0:1b:4c:8b:e3:a5:4c:84:b0:c5:df:48:a0:a7:ba:dd: d5:4d:66:6b:a7:9c:4f:b9:5b:97:8c:56:f3:6c:6f:e3:e5:2c: 56:30:ae:ad:42:b9:f0:5b:c3:28:88:5b:eb:65:01:ac:fd:45: b4:0d:8b:83:a4:c5:08:48:19:02:cf:4a:99:b8:26:5a:67:7d: 0d:ef:ff:58:de:23:f6:98:68:48:ec:0e:af:ca:da:2a:90:9d: 55:0d:8d:88:b4:ec:ba:55:ec:ab:9e:cc:39:60:53:58:3c:c2: f2:b0:b3:58:d1:d7:97:6b:d9:e6:f2:7c:f2:39:2d:55:2f:23: b2:cd:c3:80:31:3d:72:5f:80:3b:93:fb:8f:d8:4b:71:cd:01: 9b:af:dd:58:f7:e8:97:2e:e5:87:eb:64:30:80:f3:7f:60:cd: 92:69:6e:4e:04:39:98:17:48:69:0e:27:77:98:a4:e4:a5:94: c2:d7:74:b3:ff:19:09:af:f8:f7:09:9b:cd:c2:d6:f7:16:a5: 60:9f:9c:3e:da:ab:67:4f:48:47:8c:e0:58:fe:33:66:0d:b0: 0d:18:b3:45:0b:1e:69:fb:cc:24:b7:74:66:56:20:ec:12:fe: 12:1c:30:92:24:57:61:0d:fe:bb:a3:a3:3a:a0:1f:13:d4:bc: af:13:e5:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBB7a+XMaShZCU/c0LORxBS4/tGMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTY0MTE0WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NmIxMjE0NzliMmYyMDYyZjZiYjJkOTM5OWQyOTRmNTE3 NjVkODdlYTBlMjZkMmE4YjY4MWEzMjdjZTc5MmUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBnyI2pZ1RRGBcglg7EQCzAn80bixO8VNhUGWmtubnaU7B GEsdlKARbOE8q5UEmFpiNoOKKyobsR1KHxXU11zGU6RKlXu0360DrCPnZkYo9qTf 4lwtX0+cbXCW+ySDRxwrc9UX3DyR6aK1QAyX+9Ox+DHGcKAUlUC6950OGZgzBMEF 7xGQnfEs7k7IX+O80qmBtZsmKq6zWXQ3XJMP4eg4dp62hLUDK0iiaDaIzloXbzc/ Ks0rmMamWayYCSfWG7Whet/30+Z6GZB5mmA0MsO0unY35ggO5xYLOxUUsfqBWWMH 2JH+7LCSpK//L79WUxQO1zlhiW9eOIMSjtDF19bFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsPo3HC86KLltDB8BUru9dY1fHs8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBlNjkwYjFiLWNlZmUtNDgwMy1hMDFkLTBmNjQzMWI5NWI5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI2zvgwDQYJKoZIhvcNAQELBQADggEBAEMK0BtMi+OlTISwxd9IoKe63dVN ZmunnE+5W5eMVvNsb+PlLFYwrq1CufBbwyiIW+tlAaz9RbQNi4OkxQhIGQLPSpm4 JlpnfQ3v/1jeI/aYaEjsDq/K2iqQnVUNjYi07LpV7KuezDlgU1g8wvKws1jR15dr 2ebyfPI5LVUvI7LNw4AxPXJfgDuT+4/YS3HNAZuv3Vj36Jcu5YfrZDCA839gzZJp bk4EOZgXSGkOJ3eYpOSllMLXdLP/GQmv+PcJm83C1vcWpWCfnD7aq2dPSEeM4Fj+ M2YNsA0Ys0ULHmn7zCS3dGZWIOwS/hIcMJIkV2EN/rujozqgHxPUvK8T5Tg= -----END CERTIFICATE-----Generated at Sat Jun 14 05:48:26 2025 by rpki-client