$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e509b26-eb2f-4b8a-8031-d39229950c03.roa File: 1e509b26-eb2f-4b8a-8031-d39229950c03.roa (raw, json) Hash identifier: 8lXYS/3d3PRRufuIb3NaaNv8rSQkrXwZ1W8vapxGnUI= Subject key identifier: DC:E6:D8:21:02:4B:2C:E9:3B:AB:47:E7:C8:83:53:94:72:72:44:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31ABFFD24F6135A9EA825319EDB11AD27E994A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e509b26-eb2f-4b8a-8031-d39229950c03.roa Signing time: Tue 03 Jun 2025 15:40:57 +0000 ROA not before: Tue 03 Jun 2025 15:40:57 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.163.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ab:ff:d2:4f:61:35:a9:ea:82:53:19:ed:b1:1a:d2:7e:99:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:40:57 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=fabe82dafc41de81015ea6433792a72091fa7e93622ab8e34b974d5f065821cc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:c8:cf:10:4c:97:07:ac:d2:70:b6:f3:54: 62:7c:ea:9c:af:5c:16:e5:9f:f0:db:87:f2:3f:34: 6b:9a:08:d8:c7:bc:f8:cc:a9:12:9d:10:1c:60:40: 17:b9:2d:3b:89:f1:c6:bf:bf:3a:d4:52:9b:9e:34: af:38:3d:14:83:94:d0:a6:b3:c0:8b:0b:c9:c6:2e: 2a:18:67:4b:34:3a:54:d2:15:92:c7:ed:5b:fa:3f: 9d:ac:a8:20:3d:d6:e5:df:6f:88:9e:81:db:a6:9f: aa:ef:51:d5:35:32:ba:12:be:0c:22:d8:97:bd:21: f4:8b:82:f8:a7:01:4f:05:34:c4:a7:55:cb:d3:dd: 92:0b:62:ef:01:18:0c:55:44:b7:51:7b:22:97:0b: 95:f6:9b:b0:85:33:9c:88:7d:bc:c2:16:b9:ca:34: 66:7b:ab:a6:85:49:27:27:69:f0:63:06:41:b6:81: 4c:86:e4:42:57:f1:ba:cd:1a:a4:6e:41:91:ce:10: 77:86:6e:f4:61:10:8e:13:bd:5b:b2:53:fb:a4:e8: 8e:84:82:9d:b1:7f:c8:e5:a3:7e:4e:cc:6c:8c:59: 39:1d:e4:29:0a:08:50:58:ea:9e:d6:31:9a:6f:76: 8c:23:9a:a6:ea:7c:95:8a:95:fb:96:79:f8:02:fd: 22:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E6:D8:21:02:4B:2C:E9:3B:AB:47:E7:C8:83:53:94:72:72:44:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e509b26-eb2f-4b8a-8031-d39229950c03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.163.128.0/18 Signature Algorithm: sha256WithRSAEncryption 94:85:7d:94:0e:12:d0:64:92:7b:c2:7d:32:4f:17:c0:37:17: aa:61:38:33:db:ee:95:73:ce:29:6b:e5:6e:bb:ea:fe:dd:fd: 36:02:df:c1:dc:88:d4:ef:75:8a:72:fc:35:81:12:32:d2:a5: b3:1d:c6:e8:a1:6b:49:37:9d:13:2d:d8:92:2f:f3:1f:8e:5f: d0:c6:97:e6:b5:0a:66:ba:da:2b:a9:f6:f2:7b:6c:59:14:d3: bf:cd:dc:04:3d:6d:63:20:5e:c2:67:23:13:de:47:89:14:c7: 12:67:17:a3:f0:73:2a:28:5e:79:23:55:84:88:80:f5:b9:05: d0:41:df:5c:b4:cd:c0:eb:0f:8f:02:1e:2e:fd:50:3c:68:7b: 3f:bc:bc:3b:e0:1f:c3:cb:8a:16:43:e8:05:d6:1e:cd:10:57: 60:17:7c:f5:17:e7:e2:37:2c:ab:68:08:15:d9:75:bf:de:f1: b5:d5:ec:1e:b4:8c:95:0e:0f:e8:94:41:44:74:4e:48:a6:e4: 92:4d:c1:0c:65:ef:9f:33:df:6e:4a:c2:e0:4c:9f:b6:6e:9b: 4f:f3:3c:ba:55:5f:04:48:d4:ef:e9:6c:0e:78:d3:45:5d:6f: 82:9f:6d:27:3c:e1:77:08:8e:44:70:12:37:96:68:26:5b:93: 52:da:7b:4e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITMav/0k9hNanqglMZ7bEa0n6ZSjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MDMxNTQwNTdaFw0yNTA3MDgyMzU5NTla MHoxSTBHBgNVBAUTQGZhYmU4MmRhZmM0MWRlODEwMTVlYTY0MzM3OTJhNzIwOTFm YTdlOTM2MjJhYjhlMzRiOTc0ZDVmMDY1ODIxY2MxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMzKyM8QTJcHrNJwtvNUYnzqnK9cFuWf8NuH8j80a5oI2Me8 +MypEp0QHGBAF7ktO4nxxr+/OtRSm540rzg9FIOU0KazwIsLycYuKhhnSzQ6VNIV ksftW/o/nayoID3W5d9viJ6B26afqu9R1TUyuhK+DCLYl70h9IuC+KcBTwU0xKdV y9Pdkgti7wEYDFVEt1F7IpcLlfabsIUznIh9vMIWuco0ZnurpoVJJydp8GMGQbaB TIbkQlfxus0apG5Bkc4Qd4Zu9GEQjhO9W7JT+6TojoSCnbF/yOWjfk7MbIxZOR3k KQoIUFjqntYxmm92jCOapup8lYqV+5Z5+AL9IpcCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTc5tghAkss6TurR+fIg1OUcnJEvjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMWU1MDliMjYtZWIyZi00YjhhLTgwMzEtZDM5MjI5OTUwYzAzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBjajgDANBgkqhkiG9w0BAQsFAAOCAQEAlIV9lA4S0GSSe8J9Mk8XwDcXqmE4 M9vulXPOKWvlbrvq/t39NgLfwdyI1O91inL8NYESMtKlsx3G6KFrSTedEy3Yki/z H45f0MaX5rUKZrraK6n28ntsWRTTv83cBD1tYyBewmcjE95HiRTHEmcXo/BzKihe eSNVhIiA9bkF0EHfXLTNwOsPjwIeLv1QPGh7P7y8O+Afw8uKFkPoBdYezRBXYBd8 9Rfn4jcsq2gIFdl1v97xtdXsHrSMlQ4P6JRBRHROSKbkkk3BDGXvnzPfbkrC4Eyf tm6bT/M8ulVfBEjU7+lsDnjTRV1vgp9tJzzhdwiORHASN5ZoJluTUtp7Tg== -----END CERTIFICATE-----Generated at Sat Jun 14 23:53:35 2025 by rpki-client