$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3118401e-426b-4833-b671-0716f93fb236.roa File: 3118401e-426b-4833-b671-0716f93fb236.roa (raw, json) Hash identifier: zcplPnJ67qBmAeFg4BScAi0EiBM1P0mUrEPHwg+GbkQ= Subject key identifier: 2B:5D:74:29:A9:A7:09:3E:BC:28:01:B8:09:F7:89:AE:F6:DC:C9:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B860B66F484180FDC66ECBCDE68558E6BBE954B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3118401e-426b-4833-b671-0716f93fb236.roa Signing time: Tue 03 Jun 2025 15:00:22 +0000 ROA not before: Tue 03 Jun 2025 15:00:22 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.214.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:86:0b:66:f4:84:18:0f:dc:66:ec:bc:de:68:55:8e:6b:be:95:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:00:22 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=f509c8176eb1fbc5d572e0e9f4da524d960d58739c5281f7a0c7fe26bf3fd2b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:ef:37:24:90:a2:9b:cd:2e:4e:2a:c2:ef: 2c:bb:5a:71:e7:b8:40:f4:d3:dc:09:90:4b:03:93: b6:c7:40:25:f6:39:bc:64:98:3f:70:72:1d:1f:ff: 16:8a:42:31:13:64:36:be:c1:e6:50:5c:ae:fe:c7: 40:33:e8:40:f9:81:7f:ab:2b:99:41:70:43:eb:73: 20:1e:20:4b:de:6e:08:04:e8:74:26:cc:eb:c4:53: 8b:6d:cb:75:32:0e:16:65:d7:1a:54:75:12:69:fd: 07:c2:96:46:e0:9c:b0:dc:a3:58:21:ac:21:82:88: d4:ac:eb:60:69:d3:b7:20:bc:d3:49:f5:a3:58:6d: 48:fd:6c:2c:7b:3d:83:51:8a:36:0b:67:a6:9c:fa: 1d:6c:e0:2d:e2:3d:c1:17:76:44:ce:b9:de:c7:09: 71:74:33:8d:0d:4d:b7:78:57:0e:ad:a8:c0:3f:9f: b6:4a:bd:c4:3d:64:dc:f9:cd:e3:65:13:e1:0a:12: cc:ea:6a:aa:d9:2d:68:0f:d4:ce:d6:0a:54:31:f9: c5:b3:0a:5c:3e:19:93:b4:a2:86:29:63:b5:2a:b3: 8e:42:cd:93:95:9d:fc:85:15:05:02:e6:c3:fa:b1: 44:41:b6:10:e4:21:da:88:2b:49:c4:bf:18:26:f1: f9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5D:74:29:A9:A7:09:3E:BC:28:01:B8:09:F7:89:AE:F6:DC:C9:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3118401e-426b-4833-b671-0716f93fb236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.214.0.0/15 Signature Algorithm: sha256WithRSAEncryption 85:6c:ee:dc:7d:fb:77:67:88:c5:4b:e4:6c:51:9d:99:07:4a: 33:de:20:62:2e:97:85:b3:d4:10:ea:e0:8f:d6:50:ce:3b:d1: df:9c:39:65:12:f0:dc:64:75:7a:41:cc:9f:db:47:7f:ec:6f: fe:35:47:13:9b:51:29:ce:06:6c:98:a4:0d:72:32:16:a0:76: 97:b6:15:2b:9f:9f:16:c2:eb:54:cd:80:42:52:4f:09:81:33: 38:55:3f:ec:b6:7b:08:b3:ac:32:c0:65:b1:8e:5b:56:f4:d5: dc:e5:30:eb:a5:4b:db:dc:89:3c:c5:b1:c8:78:59:18:ff:d2: 3b:3a:b7:9d:0a:36:29:31:45:23:19:19:19:18:a0:9d:e3:00: a9:3e:8a:e9:c5:ea:bc:98:e0:b0:3a:0d:0b:c8:84:3e:25:af: a1:fc:af:8f:65:8a:90:af:0b:d2:2c:77:62:bb:d2:23:a9:d2: 3f:38:02:5b:a6:60:b8:85:76:4c:7b:24:5c:6e:12:b5:7b:04: 12:72:4c:8d:1e:d0:b7:87:93:bb:a7:30:d0:b5:d3:a2:cc:3e: e3:a3:dd:0b:98:c5:24:cc:66:ad:86:8a:57:2f:e7:d1:b6:b7: 96:e4:11:71:89:fc:35:19:ae:56:ca:0b:77:23:25:de:32:7e: a3:8d:55:b5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUa4YLZvSEGA/cZuy83mhVjmu+lUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUwMDIyWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNTA5YzgxNzZlYjFmYmM1ZDU3MmUwZTlmNGRhNTI0ZDk2 MGQ1ODczOWM1MjgxZjdhMGM3ZmUyNmJmM2ZkMmIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcb+83JJCim80uTirC7yy7WnHnuED009wJkEsDk7bHQCX2 ObxkmD9wch0f/xaKQjETZDa+weZQXK7+x0Az6ED5gX+rK5lBcEPrcyAeIEvebggE 6HQmzOvEU4tty3UyDhZl1xpUdRJp/QfClkbgnLDco1ghrCGCiNSs62Bp07cgvNNJ 9aNYbUj9bCx7PYNRijYLZ6ac+h1s4C3iPcEXdkTOud7HCXF0M40NTbd4Vw6tqMA/ n7ZKvcQ9ZNz5zeNlE+EKEszqaqrZLWgP1M7WClQx+cWzClw+GZO0ooYpY7Uqs45C zZOVnfyFFQUC5sP6sURBthDkIdqIK0nEvxgm8fnnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUK110KamnCT68KAG4CfeJrvbcyZkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxMTg0MDFlLTQyNmItNDgzMy1iNjcxLTA3MTZmOTNmYjIzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEN1jANBgkqhkiG9w0BAQsFAAOCAQEAhWzu3H37d2eIxUvkbFGdmQdKM94g Yi6XhbPUEOrgj9ZQzjvR35w5ZRLw3GR1ekHMn9tHf+xv/jVHE5tRKc4GbJikDXIy FqB2l7YVK5+fFsLrVM2AQlJPCYEzOFU/7LZ7CLOsMsBlsY5bVvTV3OUw66VL29yJ PMWxyHhZGP/SOzq3nQo2KTFFIxkZGRigneMAqT6K6cXqvJjgsDoNC8iEPiWvofyv j2WKkK8L0ix3YrvSI6nSPzgCW6ZguIV2THskXG4StXsEEnJMjR7Qt4eTu6cw0LXT osw+46PdC5jFJMxmrYaKVy/n0ba3luQRcYn8NRmuVsoLdyMl3jJ+o41VtQ== -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:14 2025 by rpki-client