$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/405b820b-b215-481d-b277-af3bc2649f64.roa File: 405b820b-b215-481d-b277-af3bc2649f64.roa (raw, json) Hash identifier: arF60OetkYd//VxbyWZh3VOXPsvcH3cUL471WKXa2Pw= Subject key identifier: 72:94:68:C8:2F:20:12:0C:E5:38:F7:94:5D:8A:60:D0:8E:A3:80:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32943E7489DB7DE11EBA0CAB573829D7DA9A18C3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/405b820b-b215-481d-b277-af3bc2649f64.roa Signing time: Tue 03 Jun 2025 16:10:53 +0000 ROA not before: Tue 03 Jun 2025 16:10:53 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.215.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:94:3e:74:89:db:7d:e1:1e:ba:0c:ab:57:38:29:d7:da:9a:18:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 16:10:53 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=51d8685fd3805fb31c3c53e972251ad073476b2071ce29b8f10178884b869f7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:2c:02:61:28:a6:ab:05:6e:c6:1c:f2:b8: 4e:a5:46:e3:5d:a8:5a:14:07:8e:af:3d:1d:a0:ad: e5:c6:06:af:3a:e6:1d:4a:7b:97:b4:ca:50:62:be: c8:88:96:32:3b:d4:a6:fb:10:ce:92:cd:c3:ce:6f: ce:88:e3:11:ae:59:45:a8:75:a7:0f:11:63:c6:07: 93:c3:40:88:23:f9:36:8e:53:52:c9:69:cc:d9:82: 71:38:fb:ef:5f:dd:cb:35:d7:88:1a:47:84:64:63: 5f:ea:59:9e:8b:4a:91:2e:f5:de:a4:13:05:ae:f8: 88:04:c8:6b:8c:b8:ee:6e:08:7f:56:62:b0:16:ea: eb:64:20:67:96:28:0e:cb:f7:fd:96:da:b7:80:89: 87:1b:4f:d2:66:88:fa:12:9b:ca:5b:3b:cb:f6:3b: d1:43:51:b5:ce:e1:2a:fb:cd:34:ad:f4:e3:12:51: 6e:6c:44:2b:48:38:4d:82:42:34:fd:f6:54:22:b7: 33:96:61:bf:03:c6:3f:ad:47:b6:ab:e0:c9:8d:5e: 63:a8:6d:b5:f8:3f:5f:b3:64:85:b0:b1:99:35:04: ce:99:7a:18:05:3b:f8:67:fc:58:a8:1d:a3:02:93: 80:3d:91:e5:9c:30:f6:8f:d0:11:50:e2:b1:de:32: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:94:68:C8:2F:20:12:0C:E5:38:F7:94:5D:8A:60:D0:8E:A3:80:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/405b820b-b215-481d-b277-af3bc2649f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.215.32.0/19 Signature Algorithm: sha256WithRSAEncryption 3d:af:d0:0b:c0:a1:dc:43:96:27:4d:f0:01:43:22:ab:b0:a2: a8:df:92:5a:49:d2:cd:c1:40:e9:02:09:75:c1:a6:58:10:24: eb:2d:d1:3a:0f:cd:1e:0c:4a:19:0f:ad:b3:d3:b3:f3:82:d6: a2:81:05:71:08:04:f2:68:ec:bb:94:f4:82:ec:77:c5:07:db: 31:dc:42:b3:ca:39:9b:a5:b2:a9:2a:72:54:40:c7:d8:16:e8: e1:eb:4d:01:08:64:37:05:7c:58:a5:ac:71:b4:20:fb:c8:20: f5:8d:e4:ea:4a:91:c6:4c:da:4e:47:ad:6d:0a:f5:d4:28:2e: 7c:de:4d:6f:96:ec:1a:90:d9:b7:6a:99:9d:75:c2:3b:a2:92: 05:dd:51:24:c8:2b:36:b3:2f:40:33:8a:88:91:8e:c0:75:22: ca:4d:67:75:df:22:d2:c5:47:58:a7:fe:14:1b:14:98:62:a7: 35:2c:77:e4:5b:e7:18:08:5b:40:43:fa:40:1c:90:99:e9:04: c3:27:37:ef:86:65:62:23:a4:d8:39:35:54:7a:03:ff:5a:d4: 01:3b:88:69:a5:97:b5:f8:2e:2c:e8:08:ec:2d:c9:3c:be:5f: 0f:6a:56:20:5c:2b:df:30:f1:27:0c:ad:69:98:ad:4d:2d:3b: 5f:fd:eb:fd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMpQ+dInbfeEeugyrVzgp19qaGMMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTYxMDUzWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWQ4Njg1ZmQzODA1ZmIzMWMzYzUzZTk3MjI1MWFkMDcz NDc2YjIwNzFjZTI5YjhmMTAxNzg4ODRiODY5ZjdmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCW+SwCYSimqwVuxhzyuE6lRuNdqFoUB46vPR2greXGBq86 5h1Ke5e0ylBivsiIljI71Kb7EM6SzcPOb86I4xGuWUWodacPEWPGB5PDQIgj+TaO U1LJaczZgnE4++9f3cs114gaR4RkY1/qWZ6LSpEu9d6kEwWu+IgEyGuMuO5uCH9W YrAW6utkIGeWKA7L9/2W2reAiYcbT9JmiPoSm8pbO8v2O9FDUbXO4Sr7zTSt9OMS UW5sRCtIOE2CQjT99lQitzOWYb8Dxj+tR7ar4MmNXmOobbX4P1+zZIWwsZk1BM6Z ehgFO/hn/FioHaMCk4A9keWcMPaP0BFQ4rHeMnjHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcpRoyC8gEgzlOPeUXYpg0I6jgGgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwNWI4MjBiLWIyMTUtNDgxZC1iMjc3LWFmM2JjMjY0OWY2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU21yAwDQYJKoZIhvcNAQELBQADggEBAD2v0AvAodxDlidN8AFDIquwoqjf klpJ0s3BQOkCCXXBplgQJOst0ToPzR4MShkPrbPTs/OC1qKBBXEIBPJo7LuU9ILs d8UH2zHcQrPKOZulsqkqclRAx9gW6OHrTQEIZDcFfFilrHG0IPvIIPWN5OpKkcZM 2k5HrW0K9dQoLnzeTW+W7BqQ2bdqmZ11wjuikgXdUSTIKzazL0AzioiRjsB1IspN Z3XfItLFR1in/hQbFJhipzUsd+Rb5xgIW0BD+kAckJnpBMMnN++GZWIjpNg5NVR6 A/9a1AE7iGmll7X4LizoCOwtyTy+Xw9qViBcK98w8ScMrWmYrU0tO1/96/0= -----END CERTIFICATE-----Generated at Sat Jun 14 06:04:18 2025 by rpki-client