$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa File: 102caa67-f908-4605-9862-ab28b2ff2cd5.roa (raw, json) Hash identifier: ei54oO7cZ1bzDu0wMIjH4ZqE6Xfa5Q21YtaFYxnMIRI= Subject key identifier: 1C:DB:C2:BF:04:71:AE:C1:F9:9B:6C:CB:6C:30:E5:DE:0D:DC:34:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DE81985DEB74BB45043C14FA476090BFF7D5517 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa Signing time: Mon 09 Jun 2025 18:31:47 +0000 ROA not before: Mon 09 Jun 2025 18:31:47 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e8:19:85:de:b7:4b:b4:50:43:c1:4f:a4:76:09:0b:ff:7d:55:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:31:47 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=0055634b4e8f4964074668309b5cb5dc9210ed23fba6cfc8742109ca7426a72f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:9e:98:59:39:ff:8f:31:26:ab:ec:21:af: ea:89:2e:bb:8b:b7:f1:00:6f:4a:e8:22:fb:fb:d4: c8:be:cb:a1:f0:2d:29:5e:1f:44:70:b5:33:2e:2c: 01:cf:3f:11:04:3e:4c:59:3b:02:c5:94:30:7b:4a: 71:dd:73:a3:3b:16:5e:f1:87:89:eb:90:b5:4b:aa: 0f:29:0a:2b:2f:80:83:54:f8:09:e5:d2:4e:2d:f7: 8b:8e:ae:f9:5f:d4:88:a3:fb:7d:af:92:d3:e6:6e: 56:4c:bd:9c:83:b2:4c:f8:10:ab:57:79:f0:40:53: ce:5e:d4:05:98:db:72:47:c5:02:ad:95:b8:d5:92: 5e:c5:23:d7:20:10:e4:17:a8:9b:77:e4:e7:6e:03: 93:04:57:2d:c1:ed:ce:e1:f6:ef:70:e7:32:df:ae: 23:32:64:20:b2:95:bc:6a:4d:34:43:a7:a2:05:24: 19:3c:3c:c0:50:28:64:59:74:d6:a4:e2:3f:55:e4: 75:42:d2:f2:e5:a4:f8:1a:86:3d:af:bb:50:34:77: 33:f3:16:e2:c2:ed:16:3b:4c:49:a0:7a:b6:cd:9d: d1:a1:2d:46:85:3b:7b:84:96:66:b7:aa:2a:0f:92: 80:98:b3:18:75:57:74:2c:d9:06:f8:a0:45:79:e2: 1e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:DB:C2:BF:04:71:AE:C1:F9:9B:6C:CB:6C:30:E5:DE:0D:DC:34:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/102caa67-f908-4605-9862-ab28b2ff2cd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.0.0/21 Signature Algorithm: sha256WithRSAEncryption 80:12:ea:3c:e6:8e:24:6d:29:ca:c7:fb:ca:53:24:e2:4a:42: 7b:69:5a:0c:f2:cc:c9:4b:30:18:27:3d:90:17:9b:9d:25:b5: e0:3c:2c:e4:47:79:c6:ad:a4:04:71:13:82:69:16:c8:2c:59: 6e:41:ec:d8:07:fa:21:bd:c6:e0:c2:73:80:5f:ae:75:40:a2: d9:ee:e3:ec:e5:b0:de:98:bd:d2:d9:fe:83:66:f6:0c:e9:bf: e2:18:9c:38:da:bd:af:e4:b4:3f:bf:9c:c2:04:f0:ef:fb:6f: 0e:00:b2:0b:e6:e5:32:fc:47:f4:95:2b:d8:52:d4:42:a1:a0: d7:70:dd:a9:5e:0b:e0:a6:d5:89:c6:20:2a:c6:05:90:ab:76: ec:3a:d3:79:ed:75:55:2b:9e:5a:55:c8:3a:06:06:ce:4f:49: 9e:15:4f:83:5b:a5:49:ef:a9:80:cc:7d:4f:5e:99:15:44:c9: 2f:2c:a5:98:0a:75:b1:da:7c:84:92:01:8d:55:35:ee:8d:dc: 47:c0:09:d4:00:24:23:d8:85:d9:17:6e:b8:02:7a:d4:9b:5f: 19:f2:c6:df:c5:45:c6:ae:7a:20:2d:2f:e9:6f:bb:e3:e0:12: e0:ab:e1:d5:a9:e1:c0:55:33:21:32:f4:9d:83:c9:4f:77:75: 52:4b:07:c7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULegZhd63S7RQQ8FPpHYJC/99VRcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgzMTQ3WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDU1NjM0YjRlOGY0OTY0MDc0NjY4MzA5YjVjYjVkYzky MTBlZDIzZmJhNmNmYzg3NDIxMDljYTc0MjZhNzJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEap6YWTn/jzEmq+whr+qJLruLt/EAb0roIvv71Mi+y6Hw LSleH0RwtTMuLAHPPxEEPkxZOwLFlDB7SnHdc6M7Fl7xh4nrkLVLqg8pCisvgINU +Anl0k4t94uOrvlf1Iij+32vktPmblZMvZyDskz4EKtXefBAU85e1AWY23JHxQKt lbjVkl7FI9cgEOQXqJt35OduA5MEVy3B7c7h9u9w5zLfriMyZCCylbxqTTRDp6IF JBk8PMBQKGRZdNak4j9V5HVC0vLlpPgahj2vu1A0dzPzFuLC7RY7TEmgerbNndGh LUaFO3uElma3qioPkoCYsxh1V3Qs2Qb4oEV54h7DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHNvCvwRxrsH5m2zLbDDl3g3cNB8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEwMmNhYTY3LWY5MDgtNDYwNS05ODYyLWFiMjhiMmZmMmNkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM28AAwDQYJKoZIhvcNAQELBQADggEBAIAS6jzmjiRtKcrH+8pTJOJKQntp WgzyzMlLMBgnPZAXm50lteA8LORHecatpARxE4JpFsgsWW5B7NgH+iG9xuDCc4Bf rnVAotnu4+zlsN6YvdLZ/oNm9gzpv+IYnDjava/ktD+/nMIE8O/7bw4Asgvm5TL8 R/SVK9hS1EKhoNdw3aleC+Cm1YnGICrGBZCrduw603ntdVUrnlpVyDoGBs5PSZ4V T4NbpUnvqYDMfU9emRVEyS8spZgKdbHafISSAY1VNe6N3EfACdQAJCPYhdkXbrgC etSbXxnyxt/FRcaueiAtL+lvu+PgEuCr4dWp4cBVMyEy9J2DyU93dVJLB8c= -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:13 2025 by rpki-client