$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a4a2cc1-04c9-40ee-84c3-a2d90b0453aa.roa File: 3a4a2cc1-04c9-40ee-84c3-a2d90b0453aa.roa (raw, json) Hash identifier: euHNn+i2+zITVw3JAtHpCSqF3fxXhnTssGEtfj2g00g= Subject key identifier: 45:7E:E5:DE:8A:66:A8:28:A5:B7:E5:BF:D7:30:3B:87:DB:BF:A4:87 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5549B1000EDCC2B7405666F821431C28261D171D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a4a2cc1-04c9-40ee-84c3-a2d90b0453aa.roa Signing time: Mon 09 Jun 2025 15:51:06 +0000 ROA not before: Mon 09 Jun 2025 15:51:06 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.151.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:49:b1:00:0e:dc:c2:b7:40:56:66:f8:21:43:1c:28:26:1d:17:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 15:51:06 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=73f0723730a9e7be28b03695751fd84bf6d866e52a3a4c54e8acd0ead6252d4a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:7f:c3:b0:cc:65:4a:7a:33:78:8a:81:01: e2:df:45:e2:ec:9e:0f:d3:68:b8:36:23:f9:98:6d: 05:0a:14:12:4e:79:8a:05:04:5b:79:7d:f7:c6:ab: c9:09:e8:9f:46:04:20:f0:ed:f4:71:9f:8d:b0:01: 84:ac:a8:c1:88:45:eb:bd:8e:5f:ed:0c:20:df:a8: 22:e9:d4:be:9b:25:70:1b:0b:60:d5:a0:e2:1d:68: 5d:4e:c6:14:1b:80:7c:c7:61:db:6e:84:b9:70:2a: 1f:98:85:c7:d7:a3:6f:af:d0:20:10:1a:c7:d4:4d: 00:6c:b0:eb:28:f0:77:71:d9:23:6c:88:3a:2c:47: 89:01:c3:e0:e9:55:84:9f:3d:32:0c:cd:29:9e:a6: c6:bf:98:68:4b:fb:03:c5:f3:4d:ea:eb:07:6f:ab: 3c:3a:98:41:4d:1c:0f:d3:c3:8c:89:8a:25:00:c6: 80:c6:c0:75:2c:f3:d9:04:3b:b5:00:f9:62:38:34: 71:99:ea:c1:07:18:b6:4c:f4:46:bc:17:78:49:8e: 54:eb:84:5b:7f:74:a5:27:0c:34:c8:bb:89:03:fc: 58:f5:d8:4b:42:a8:8e:8a:86:ba:25:01:c8:c5:b7: 86:86:a7:44:cc:42:25:5e:46:1a:1c:e1:9f:da:4b: f3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7E:E5:DE:8A:66:A8:28:A5:B7:E5:BF:D7:30:3B:87:DB:BF:A4:87 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3a4a2cc1-04c9-40ee-84c3-a2d90b0453aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.151.248.0/21 Signature Algorithm: sha256WithRSAEncryption 26:c2:bd:33:d6:31:ed:83:c8:fb:4f:16:a5:fd:cd:6d:6e:b4: 26:ea:2c:cd:05:30:44:f8:bf:f7:1d:d1:e7:50:54:21:bb:fd: 66:28:ad:ed:d6:b0:58:e5:10:52:fe:93:4b:6d:d1:f1:e8:d4: f0:4b:e8:17:ba:a6:4f:50:61:8d:f4:c4:3f:d3:a2:e7:55:63: 1f:ff:f2:f5:b6:d6:1c:7c:1b:0d:f2:de:49:09:b7:54:1c:a2: fd:b7:7f:c9:f9:d0:d6:64:19:17:fd:ba:e7:ec:62:a0:5d:c1: 98:04:70:6f:45:4e:0a:b2:14:12:ac:24:07:e6:2d:64:03:da: 19:7d:c8:97:eb:f9:80:c3:f0:8f:f1:9a:9b:3e:b8:f5:7f:a7: 45:06:a8:ce:48:4c:29:09:72:83:2f:7b:b2:47:e7:e9:47:c1: 4c:a2:7e:74:1f:a7:30:ae:ef:ad:19:37:85:04:c1:8f:42:78: 80:b5:44:f8:51:95:d2:9f:cd:1c:ee:a2:32:b3:74:be:9f:e8: 81:3f:35:a6:b4:52:47:3f:d0:78:86:4a:b4:c8:4e:f2:4b:b3: 3a:41:fb:11:e2:3f:07:ec:8d:32:1f:30:8e:ff:72:5a:66:87: f5:b6:0a:6d:0e:9b:2b:b7:8b:41:3d:1b:c5:78:57:39:78:59: ac:88:75:41 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVUmxAA7cwrdAVmb4IUMcKCYdFx0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTU1MTA2WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3M2YwNzIzNzMwYTllN2JlMjhiMDM2OTU3NTFmZDg0YmY2 ZDg2NmU1MmEzYTRjNTRlOGFjZDBlYWQ2MjUyZDRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx73/DsMxlSnozeIqBAeLfReLsng/TaLg2I/mYbQUKFBJO eYoFBFt5fffGq8kJ6J9GBCDw7fRxn42wAYSsqMGIReu9jl/tDCDfqCLp1L6bJXAb C2DVoOIdaF1OxhQbgHzHYdtuhLlwKh+YhcfXo2+v0CAQGsfUTQBssOso8Hdx2SNs iDosR4kBw+DpVYSfPTIMzSmepsa/mGhL+wPF803q6wdvqzw6mEFNHA/Tw4yJiiUA xoDGwHUs89kEO7UA+WI4NHGZ6sEHGLZM9Ea8F3hJjlTrhFt/dKUnDDTIu4kD/Fj1 2EtCqI6KhrolAcjFt4aGp0TMQiVeRhoc4Z/aS/MpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURX7l3opmqCilt+W/1zA7h9u/pIcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhNGEyY2MxLTA0YzktNDBlZS04NGMzLWEyZDkwYjA0NTNhYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2l/gwDQYJKoZIhvcNAQELBQADggEBACbCvTPWMe2DyPtPFqX9zW1utCbq LM0FMET4v/cd0edQVCG7/WYore3WsFjlEFL+k0tt0fHo1PBL6Be6pk9QYY30xD/T oudVYx//8vW21hx8Gw3y3kkJt1Qcov23f8n50NZkGRf9uufsYqBdwZgEcG9FTgqy FBKsJAfmLWQD2hl9yJfr+YDD8I/xmps+uPV/p0UGqM5ITCkJcoMve7JH5+lHwUyi fnQfpzCu760ZN4UEwY9CeIC1RPhRldKfzRzuojKzdL6f6IE/Naa0Ukc/0HiGSrTI TvJLszpB+xHiPwfsjTIfMI7/clpmh/W2Cm0Omyu3i0E9G8V4Vzl4WayIdUE= -----END CERTIFICATE-----Generated at Sat Jun 14 05:52:51 2025 by rpki-client