$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d2d4fc1-b25b-4a21-9546-ea0aa37cd60e.roa File: 1d2d4fc1-b25b-4a21-9546-ea0aa37cd60e.roa (raw, json) Hash identifier: Zw1rv1IecdVh1lv1MiJhQx2gHFBHh3UCyPzx2/bF46s= Subject key identifier: 16:A6:54:71:35:D7:B4:C3:D5:6B:C2:AC:B3:C0:CB:F7:D3:AD:3F:AA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0634B020F63845C685317B41C7A312E5BD25D015 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d2d4fc1-b25b-4a21-9546-ea0aa37cd60e.roa Signing time: Fri 13 Jun 2025 17:51:23 +0000 ROA not before: Fri 13 Jun 2025 17:51:23 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.209.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:34:b0:20:f6:38:45:c6:85:31:7b:41:c7:a3:12:e5:bd:25:d0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 13 17:51:23 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=f0562d4079af1ba960d64c7042e0c0f72adc4f7b8541ffcc70187575a3fb31b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:4e:a7:4f:26:6a:c9:3a:80:f1:b6:fe:2e: 2a:26:6d:c7:79:52:83:07:71:83:40:fa:68:08:20: fd:23:0f:a1:26:af:0c:65:fb:f5:d5:0f:9d:a4:04: d2:76:cd:d6:b4:a9:7e:02:bf:cf:ac:e1:23:1c:6a: 27:6a:c0:5d:11:3d:80:b1:a8:43:ef:84:97:a2:4e: fe:ee:62:19:b6:a9:7d:a0:14:16:5f:49:ab:83:76: 2a:61:eb:0b:de:64:e8:40:c7:d2:47:93:ca:0b:7b: 18:4b:0f:b5:12:a2:50:1e:58:c1:1a:3c:97:cb:25: 74:d2:32:47:45:1b:52:f5:01:ef:f8:2d:53:3e:78: 0a:36:b9:24:03:12:c2:fa:cd:8d:d2:b1:85:b8:77: 42:75:e1:d7:10:6a:d9:9b:2e:09:e8:7c:fe:e0:e5: 7f:18:a6:23:77:e9:a9:86:4b:54:85:af:e4:c2:5f: 42:f4:95:ce:82:aa:50:62:0b:68:44:ab:64:23:2a: f7:5a:e9:04:c0:4a:3f:d9:aa:6d:2d:f6:ca:66:38: 64:86:51:a5:c4:37:66:ba:02:d2:2a:e4:74:1b:34: d1:d7:54:30:db:c7:89:05:a8:45:e4:6d:40:c6:f4: ad:fb:1a:17:d4:c1:d2:74:60:b2:7e:7d:16:58:ec: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A6:54:71:35:D7:B4:C3:D5:6B:C2:AC:B3:C0:CB:F7:D3:AD:3F:AA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d2d4fc1-b25b-4a21-9546-ea0aa37cd60e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.209.0.0/16 Signature Algorithm: sha256WithRSAEncryption ac:ff:dc:b4:a6:59:ab:af:ff:80:1a:06:ff:fb:69:bc:f4:07: 05:91:62:f4:a8:77:00:01:c3:2f:fe:3e:43:fa:28:07:52:b3: d6:e3:47:75:e9:76:d0:9e:4b:df:89:d9:92:49:63:8d:85:d4: be:f4:52:b3:62:c9:72:e3:01:5a:f4:dd:ac:5b:ac:87:89:13: 16:93:39:48:16:ca:57:f0:c4:bb:e8:64:b9:2e:c0:4f:2d:b0: 01:4f:ca:92:d6:46:2b:ee:ec:9f:25:b3:22:17:40:22:d9:18: c8:90:ad:6f:5d:fe:b9:c6:b6:cd:a2:5c:6a:84:e3:20:12:57: 5e:cf:43:6c:eb:2c:58:8d:af:16:24:fe:68:ee:89:6c:36:98: 86:0d:01:dc:67:9d:4e:80:15:4c:13:8f:48:4b:a2:0b:8c:09: 6d:ea:de:89:f8:48:e0:eb:3c:ae:bb:de:3f:40:6a:9f:a2:4a: cd:37:2a:1a:36:51:ec:73:cc:43:1f:f1:5d:88:93:c6:2b:b0: 3c:03:35:58:55:94:60:b8:f4:3e:44:17:57:e0:d7:59:79:eb: e8:57:80:91:53:d9:fa:1b:c2:8b:c8:e9:c9:da:66:03:68:1f: d2:86:fa:d2:b3:d9:67:ad:8f:42:4a:75:39:50:4d:96:7e:69: 42:dc:67:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBjSwIPY4RcaFMXtBx6MS5b0l0BUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjEzMTc1MTIzWhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMDU2MmQ0MDc5YWYxYmE5NjBkNjRjNzA0MmUwYzBmNzJh ZGM0ZjdiODU0MWZmY2M3MDE4NzU3NWEzZmIzMWIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgx06nTyZqyTqA8bb+Liombcd5UoMHcYNA+mgIIP0jD6Em rwxl+/XVD52kBNJ2zda0qX4Cv8+s4SMcaidqwF0RPYCxqEPvhJeiTv7uYhm2qX2g FBZfSauDdiph6wveZOhAx9JHk8oLexhLD7USolAeWMEaPJfLJXTSMkdFG1L1Ae/4 LVM+eAo2uSQDEsL6zY3SsYW4d0J14dcQatmbLgnofP7g5X8YpiN36amGS1SFr+TC X0L0lc6CqlBiC2hEq2QjKvda6QTASj/Zqm0t9spmOGSGUaXEN2a6AtIq5HQbNNHX VDDbx4kFqEXkbUDG9K37GhfUwdJ0YLJ+fRZY7DPHAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUFqZUcTXXtMPVa8Kss8DL99OtP6owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFkMmQ0ZmMxLWIyNWItNGEyMS05NTQ2LWVhMGFhMzdjZDYwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP0TANBgkqhkiG9w0BAQsFAAOCAQEArP/ctKZZq6//gBoG//tpvPQHBZFi 9Kh3AAHDL/4+Q/ooB1Kz1uNHdel20J5L34nZkkljjYXUvvRSs2LJcuMBWvTdrFus h4kTFpM5SBbKV/DEu+hkuS7ATy2wAU/KktZGK+7snyWzIhdAItkYyJCtb13+uca2 zaJcaoTjIBJXXs9DbOssWI2vFiT+aO6JbDaYhg0B3GedToAVTBOPSEuiC4wJbere ifhI4Os8rrveP0Bqn6JKzTcqGjZR7HPMQx/xXYiTxiuwPAM1WFWUYLj0PkQXV+DX WXnr6FeAkVPZ+hvCi8jpydpmA2gf0ob60rPZZ62PQkp1OVBNln5pQtxn/w== -----END CERTIFICATE-----Generated at Sat Jun 14 05:50:30 2025 by rpki-client