$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/223e524d-e479-447f-b741-e8c4b9c91a6b.roa File: 223e524d-e479-447f-b741-e8c4b9c91a6b.roa (raw, json) Hash identifier: n/qtheIOfugmh6BE4IbJBWjBVilQZUDIQjVTJzn2mIo= Subject key identifier: 6D:25:EE:97:49:6C:D9:3B:A0:89:A9:4D:A5:37:BC:FD:43:33:0E:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 680D5833A691EFDFB2D720451363A3615B2A71BE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/223e524d-e479-447f-b741-e8c4b9c91a6b.roa Signing time: Fri 13 Jun 2025 17:40:28 +0000 ROA not before: Fri 13 Jun 2025 17:40:28 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.248.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0d:58:33:a6:91:ef:df:b2:d7:20:45:13:63:a3:61:5b:2a:71:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 13 17:40:28 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=29d0aa98e1b72b068cb23478f3ba70a5e63b6045396a8bfb5e6c847da400a719, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:00:4c:6a:4b:cf:8c:70:a3:24:6a:8f:cf:35: 20:a0:77:1e:a8:41:39:54:7d:ee:40:2e:78:37:c6: d3:b8:23:df:36:03:fb:5c:b4:ca:0d:e0:9a:43:cd: cd:6c:f9:e3:39:05:1d:1a:39:7a:25:54:6c:33:7d: fc:ba:79:06:53:1c:b9:52:3f:6e:84:e1:67:00:1c: d9:a5:84:fc:04:27:c0:51:9d:c0:ab:27:8f:98:1a: 0a:73:a3:17:ed:04:29:41:64:83:6a:12:63:8b:14: 40:98:26:d1:22:9f:87:87:59:4b:1f:77:36:76:c1: 6d:9d:2c:24:1a:83:69:34:dd:c0:c6:4e:62:a2:86: 05:a1:3b:33:ea:dc:51:0b:08:7a:9f:3a:95:90:46: 2a:97:de:fb:9b:03:fe:5b:65:16:e5:21:86:9f:5d: a3:60:cb:b1:7f:73:f4:1c:3c:33:5c:b8:8d:cb:fc: d6:01:27:1e:76:b0:03:57:c8:38:a6:e0:93:94:71: b7:7a:01:47:6c:5d:c5:94:40:7b:a1:43:ea:85:b2: 5b:03:00:b0:75:b0:bd:95:62:d6:47:f0:13:be:16: e4:07:cc:8a:89:a3:55:8d:ef:b3:cf:4d:f5:da:1e: fa:ba:11:aa:67:ec:e4:f1:ae:6f:ea:a0:97:01:d1: cc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:25:EE:97:49:6C:D9:3B:A0:89:A9:4D:A5:37:BC:FD:43:33:0E:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/223e524d-e479-447f-b741-e8c4b9c91a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.248.32.0/20 Signature Algorithm: sha256WithRSAEncryption 70:7b:14:eb:60:b5:ee:9a:e9:3e:9d:9e:97:6e:96:50:fd:a1: 63:2b:22:7d:84:34:e4:2c:81:5c:c7:77:0e:56:ee:ff:df:89: 58:66:b8:64:83:26:fd:ba:89:44:6e:e8:bd:fe:aa:bd:1c:8d: d8:0a:b2:eb:e3:f9:9e:4f:0a:0d:38:f5:fe:8a:99:9d:54:0c: bf:d1:5c:79:07:07:45:f6:fb:86:8d:66:0f:7b:bc:ff:41:65: 0d:c2:bb:15:d6:f5:16:b9:89:9b:29:8c:74:21:50:75:a9:f4: 0d:54:f1:a9:ef:2f:7c:d4:8d:cf:96:03:ff:d2:49:84:95:97: 62:25:de:e3:3b:ec:51:d8:4d:4a:52:54:08:07:94:10:ac:07: 2a:3c:6d:2e:eb:4d:95:4d:a2:17:10:89:7f:24:25:79:cf:d7: 7a:a5:a3:d2:ba:bd:44:46:cc:c6:dc:cb:4b:7f:a3:f1:27:3e: b1:bf:ec:7e:64:75:40:0e:00:95:b0:5f:a3:8d:c5:88:65:80: 1f:7b:ff:4a:0e:54:ba:40:f2:9f:7c:ab:b5:61:52:16:4c:19: 50:51:3a:11:ea:19:e7:1f:89:a1:87:4b:54:d6:63:91:22:80: 48:19:a2:84:ab:f4:bd:04:50:7e:b8:e1:1b:52:b4:d3:0e:e5: e5:83:a1:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaA1YM6aR79+y1yBFE2OjYVsqcb4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjEzMTc0MDI4WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOWQwYWE5OGUxYjcyYjA2OGNiMjM0NzhmM2JhNzBhNWU2 M2I2MDQ1Mzk2YThiZmI1ZTZjODQ3ZGE0MDBhNzE5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVAExqS8+McKMkao/PNSCgdx6oQTlUfe5ALng3xtO4I982 A/tctMoN4JpDzc1s+eM5BR0aOXolVGwzffy6eQZTHLlSP26E4WcAHNmlhPwEJ8BR ncCrJ4+YGgpzoxftBClBZINqEmOLFECYJtEin4eHWUsfdzZ2wW2dLCQag2k03cDG TmKihgWhOzPq3FELCHqfOpWQRiqX3vubA/5bZRblIYafXaNgy7F/c/QcPDNcuI3L /NYBJx52sANXyDim4JOUcbd6AUdsXcWUQHuhQ+qFslsDALB1sL2VYtZH8BO+FuQH zIqJo1WN77PPTfXaHvq6Eapn7OTxrm/qoJcB0cx/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbSXul0ls2TugialNpTe8/UMzDmMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyM2U1MjRkLWU0NzktNDQ3Zi1iNzQxLWU4YzRiOWM5MWE2Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQN+CAwDQYJKoZIhvcNAQELBQADggEBAHB7FOtgte6a6T6dnpdullD9oWMr In2ENOQsgVzHdw5W7v/fiVhmuGSDJv26iURu6L3+qr0cjdgKsuvj+Z5PCg049f6K mZ1UDL/RXHkHB0X2+4aNZg97vP9BZQ3CuxXW9Ra5iZspjHQhUHWp9A1U8anvL3zU jc+WA//SSYSVl2Il3uM77FHYTUpSVAgHlBCsByo8bS7rTZVNohcQiX8kJXnP13ql o9K6vURGzMbcy0t/o/EnPrG/7H5kdUAOAJWwX6ONxYhlgB97/0oOVLpA8p98q7Vh UhZMGVBROhHqGecfiaGHS1TWY5EigEgZooSr9L0EUH644RtStNMO5eWDoQM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:03 2025 by rpki-client