$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa File: 3623dc19-022a-4a7a-8a6b-a47be66dff37.roa (raw, json) Hash identifier: fHT11b+1Wy2aZOCHh7+nxz/tIMwoV+n4f86DcRGNvuI= Subject key identifier: A2:5B:8F:6D:AC:BE:93:FA:19:34:56:74:D3:76:AB:1B:53:4D:1B:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 798E97DF9C9D663E74F6EA5B70FF51DD3D9D6C54 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa Signing time: Mon 09 Jun 2025 18:20:18 +0000 ROA not before: Mon 09 Jun 2025 18:20:18 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.251.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8e:97:df:9c:9d:66:3e:74:f6:ea:5b:70:ff:51:dd:3d:9d:6c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:20:18 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=e5b00c48789c65fa4d7f6f6d48ab26c66a60be2ee1ce0e99c912674ce6a48737, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5d:61:a2:73:33:22:a0:fd:8a:02:e9:f8:8b: 79:7a:53:fb:a5:6d:0c:91:f7:01:6b:0a:8a:24:1c: fa:86:f2:b1:8e:9e:26:2d:81:67:e0:e9:ff:5a:22: 4e:52:11:de:93:b4:97:3c:73:e8:1b:53:a9:d0:7f: 42:95:ee:65:11:42:0d:16:05:1c:e1:a0:09:94:cf: b4:c2:5c:cb:03:78:e7:5d:24:62:a0:5d:73:d0:8f: 4c:2b:85:ff:13:bf:c3:08:d2:c8:8f:95:4b:7e:43: 19:cd:4c:c8:ec:9f:c6:ac:70:6a:de:a4:58:ce:f9: 90:bc:99:5a:19:b5:cd:c8:3d:7c:ff:96:e3:ad:10: 79:2e:da:9b:58:fb:f2:28:3d:38:4b:51:60:82:f4: d5:72:0d:19:9a:84:5d:85:bb:93:7f:bb:78:60:d1: db:22:1e:83:cd:21:19:bd:10:3e:4c:30:52:fc:3f: 83:db:89:32:df:83:20:4b:94:f8:a1:2c:b1:bd:8e: 7e:64:c6:f0:15:be:c0:5a:c5:9a:5c:38:8d:74:80: 85:91:bd:83:dd:ff:b0:67:6f:4b:da:10:ed:84:58: 72:a1:48:c6:cc:b8:d4:43:d3:0b:bb:f8:ae:74:7e: 61:d1:72:cf:af:07:94:ce:a1:bf:b6:f4:6b:3c:6e: a9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5B:8F:6D:AC:BE:93:FA:19:34:56:74:D3:76:AB:1B:53:4D:1B:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3623dc19-022a-4a7a-8a6b-a47be66dff37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.251.252.0/23 Signature Algorithm: sha256WithRSAEncryption a5:38:9b:fa:cc:20:9f:4d:bc:50:9a:98:50:e7:c5:e9:52:21: 67:d6:28:68:26:5c:94:4c:79:10:c2:45:c6:79:71:70:da:71: 8e:21:0c:a5:b1:0d:24:a7:75:ab:f3:c7:40:fb:c3:69:49:16: 37:a8:6f:8b:7c:9a:97:25:6b:14:23:9b:03:4d:c8:e9:5f:99: cf:11:fa:00:0b:e8:b5:23:86:7c:05:46:b6:94:08:34:a3:f7: 42:ee:44:02:a8:ce:47:9b:e1:9d:01:c4:19:46:89:69:e8:be: f7:7c:b9:d4:bf:cd:e8:22:7b:c2:8a:41:0e:8f:aa:ef:a5:a6: b3:ed:f1:4a:d4:b2:b4:9e:c8:2c:a7:1c:be:97:02:f0:64:83: 03:36:64:9d:fe:d4:c0:30:02:49:f1:ee:a5:09:e2:1d:92:e5: 41:cb:8b:db:54:cc:b7:60:ff:0f:eb:7f:15:58:56:58:4a:99: 9f:d4:d2:1d:59:42:4e:1c:2e:22:2e:ac:52:90:17:64:7d:89: c8:66:b0:4f:fa:5f:39:c8:44:08:44:ca:90:09:84:cb:e7:51: 80:50:41:7c:a5:16:c6:2c:8b:7f:1b:fe:73:a8:0d:da:e1:4c: 4e:5e:b2:52:d5:f8:5d:97:ec:09:94:e2:01:ec:71:54:2e:f0: 3e:02:c2:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUeY6X35ydZj509upbcP9R3T2dbFQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgyMDE4WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWIwMGM0ODc4OWM2NWZhNGQ3ZjZmNmQ0OGFiMjZjNjZh NjBiZTJlZTFjZTBlOTljOTEyNjc0Y2U2YTQ4NzM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGXWGiczMioP2KAun4i3l6U/ulbQyR9wFrCookHPqG8rGO niYtgWfg6f9aIk5SEd6TtJc8c+gbU6nQf0KV7mURQg0WBRzhoAmUz7TCXMsDeOdd JGKgXXPQj0wrhf8Tv8MI0siPlUt+QxnNTMjsn8ascGrepFjO+ZC8mVoZtc3IPXz/ luOtEHku2ptY+/IoPThLUWCC9NVyDRmahF2Fu5N/u3hg0dsiHoPNIRm9ED5MMFL8 P4PbiTLfgyBLlPihLLG9jn5kxvAVvsBaxZpcOI10gIWRvYPd/7Bnb0vaEO2EWHKh SMbMuNRD0wu7+K50fmHRcs+vB5TOob+29Gs8bqn/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoluPbay+k/oZNFZ003arG1NNG1gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM2MjNkYzE5LTAyMmEtNGE3YS04YTZiLWE0N2JlNjZkZmYzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2+/wwDQYJKoZIhvcNAQELBQADggEBAKU4m/rMIJ9NvFCamFDnxelSIWfW KGgmXJRMeRDCRcZ5cXDacY4hDKWxDSSndavzx0D7w2lJFjeob4t8mpclaxQjmwNN yOlfmc8R+gAL6LUjhnwFRraUCDSj90LuRAKozkeb4Z0BxBlGiWnovvd8udS/zegi e8KKQQ6Pqu+lprPt8UrUsrSeyCynHL6XAvBkgwM2ZJ3+1MAwAknx7qUJ4h2S5UHL i9tUzLdg/w/rfxVYVlhKmZ/U0h1ZQk4cLiIurFKQF2R9ichmsE/6XznIRAhEypAJ hMvnUYBQQXylFsYsi38b/nOoDdrhTE5eslLV+F2X7AmU4gHscVQu8D4Cwss= -----END CERTIFICATE-----Generated at Sat Jun 14 05:53:49 2025 by rpki-client