$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3573d87e-0c7b-4d14-9c04-8769fa10d63d.roa File: 3573d87e-0c7b-4d14-9c04-8769fa10d63d.roa (raw, json) Hash identifier: viSvdUrAwMuH3i0ddf8ZiF6dP5LUaPAF1SJLR7Adyxs= Subject key identifier: 9C:48:C4:BE:49:E0:D7:72:91:AF:B6:64:D5:DC:97:7C:42:26:CC:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E0ECD0331D666A67404053D2D9A3D06F57A7523 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3573d87e-0c7b-4d14-9c04-8769fa10d63d.roa Signing time: Mon 09 Jun 2025 16:01:32 +0000 ROA not before: Mon 09 Jun 2025 16:01:32 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.145.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:0e:cd:03:31:d6:66:a6:74:04:05:3d:2d:9a:3d:06:f5:7a:75:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:01:32 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=4d74a3ba037e2cf843f4dcf855a208ffb6344809aea010604d472d67d6fad7b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:7c:5b:19:42:37:40:f7:67:23:8e:cd:11: be:4d:f6:bb:86:5c:49:34:a9:29:19:be:78:c8:dd: c3:ac:0b:5f:3f:23:3a:13:13:9f:36:3c:56:0e:99: 52:f8:33:64:ea:22:21:a9:92:b5:ad:3a:58:86:43: 33:a7:97:31:9a:cc:14:8a:2d:3b:fc:ab:34:4d:77: 15:64:3a:33:36:24:fb:bd:61:2f:22:c8:73:c4:6b: 7d:72:20:58:50:89:a3:4a:d2:06:38:c0:8d:b5:64: 23:8b:6c:cf:d4:a1:a8:dc:4e:cd:fe:16:61:ff:3d: 73:31:a1:09:a4:59:5c:55:bc:7c:48:b1:8d:9a:cf: 93:7b:bd:39:48:cc:2b:1f:d1:b7:da:60:94:1d:c8: 24:38:98:8b:69:a3:20:88:c0:28:12:4a:0c:66:9b: c6:ef:5d:f5:88:35:1d:70:08:74:c3:e1:75:21:e5: ab:a5:09:22:ec:d6:1d:45:9c:d4:21:e6:94:3d:75: 3c:db:a9:5d:c7:b4:55:96:ed:3c:bb:1d:2f:85:25: a8:24:dc:2c:91:65:a8:fc:d2:10:51:46:59:b0:7d: 7a:b4:44:6d:25:78:d6:3e:84:ec:92:9f:9c:e1:36: 0d:36:e7:3b:08:1d:ca:22:77:76:cb:ef:f2:b1:8e: 7b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:48:C4:BE:49:E0:D7:72:91:AF:B6:64:D5:DC:97:7C:42:26:CC:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3573d87e-0c7b-4d14-9c04-8769fa10d63d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.145.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7a:34:2a:cc:a9:b3:6a:fe:bb:ba:4a:01:4c:ee:83:fe:22:e9: 54:79:bb:9f:40:9c:5c:e6:67:9e:7c:f4:1c:4b:e6:d7:7a:33: de:e8:2d:31:fd:83:b6:70:05:0c:b4:74:4f:25:d6:11:83:12: 04:aa:f9:b1:0d:4a:5b:37:79:02:14:a4:d1:fb:2e:d1:4d:be: 11:6b:6d:e4:98:c6:a1:59:d4:28:ae:81:b9:e2:47:c6:45:32: cd:16:52:8c:2b:b8:f7:a0:b8:b4:87:18:63:bf:e2:ed:c5:74: 9a:cb:ef:9d:b8:c5:77:a0:81:70:1b:d2:0e:8c:02:6a:99:11: f2:df:1c:e2:14:ae:2e:1c:f1:19:2f:33:ab:e4:8f:cd:e4:56: 8c:c5:91:2c:86:a6:ff:81:f7:64:fd:77:cd:96:1d:e0:f1:09: 14:03:61:fa:0b:9b:b8:e9:c2:2e:c5:41:18:90:d9:f8:37:6e: d2:59:8b:b3:b5:0c:66:fd:e0:1b:5b:8f:f6:1b:fe:f3:d8:67: 5c:f3:8b:55:83:d2:7f:62:07:71:07:6f:3d:68:6e:80:2e:56: 5b:5b:dd:8f:5d:e1:94:45:a2:70:41:5d:97:e1:d2:00:8b:37: 2e:fb:04:20:ba:38:f2:6c:7d:5c:ab:ae:05:6d:0c:54:48:00: 62:f4:de:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbg7NAzHWZqZ0BAU9LZo9BvV6dSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYwMTMyWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDc0YTNiYTAzN2UyY2Y4NDNmNGRjZjg1NWEyMDhmZmI2 MzQ0ODA5YWVhMDEwNjA0ZDQ3MmQ2N2Q2ZmFkN2IyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7u3xbGUI3QPdnI47NEb5N9ruGXEk0qSkZvnjI3cOsC18/ IzoTE582PFYOmVL4M2TqIiGpkrWtOliGQzOnlzGazBSKLTv8qzRNdxVkOjM2JPu9 YS8iyHPEa31yIFhQiaNK0gY4wI21ZCOLbM/UoajcTs3+FmH/PXMxoQmkWVxVvHxI sY2az5N7vTlIzCsf0bfaYJQdyCQ4mItpoyCIwCgSSgxmm8bvXfWINR1wCHTD4XUh 5aulCSLs1h1FnNQh5pQ9dTzbqV3HtFWW7Ty7HS+FJagk3CyRZaj80hBRRlmwfXq0 RG0leNY+hOySn5zhNg025zsIHcoid3bL7/KxjnuxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnEjEvkng13KRr7Zk1dyXfEImzKkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1NzNkODdlLTBjN2ItNGQxNC05YzA0LTg3NjlmYTEwZDYzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2kUAwDQYJKoZIhvcNAQELBQADggEBAHo0Ksyps2r+u7pKAUzug/4i6VR5 u59AnFzmZ5589BxL5td6M97oLTH9g7ZwBQy0dE8l1hGDEgSq+bENSls3eQIUpNH7 LtFNvhFrbeSYxqFZ1CiugbniR8ZFMs0WUowruPeguLSHGGO/4u3FdJrL7524xXeg gXAb0g6MAmqZEfLfHOIUri4c8RkvM6vkj83kVozFkSyGpv+B92T9d82WHeDxCRQD YfoLm7jpwi7FQRiQ2fg3btJZi7O1DGb94Btbj/Yb/vPYZ1zzi1WD0n9iB3EHbz1o boAuVltb3Y9d4ZRFonBBXZfh0gCLNy77BCC6OPJsfVyrrgVtDFRIAGL03q0= -----END CERTIFICATE-----Generated at Sat Jun 14 05:51:43 2025 by rpki-client