$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/541e9fa5-3694-4272-bbe1-dbf9e5ad3356.roa File: 541e9fa5-3694-4272-bbe1-dbf9e5ad3356.roa (raw, json) Hash identifier: QGRYb1XYoq+HGVFisyWkgaN4d55j7BX9Em2AH3cr07c= Subject key identifier: D0:E9:01:A4:D1:78:4B:F7:3B:D4:C8:93:E0:D4:51:7E:9F:9C:41:D5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 40B32C7BCCF66F992F7057A66147A8A0311C129B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/541e9fa5-3694-4272-bbe1-dbf9e5ad3356.roa Signing time: Tue 03 Jun 2025 16:00:17 +0000 ROA not before: Tue 03 Jun 2025 16:00:17 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.184.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b3:2c:7b:cc:f6:6f:99:2f:70:57:a6:61:47:a8:a0:31:1c:12:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 16:00:17 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=2fc28d5aecb37d09a329746e736991c4800c165048165e42de0a03770757c7a4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:65:81:37:40:08:62:b4:44:1d:34:27:3c: 69:ee:66:8f:d3:e1:2c:37:da:8f:5d:23:c5:97:8d: 26:d1:87:c8:41:fe:16:03:54:18:69:be:d4:0b:cb: e9:5e:1d:ea:b0:5d:84:91:14:69:4b:0f:92:8f:cf: bf:3e:b6:30:ff:ef:f4:01:4d:bf:26:16:d3:37:84: 42:b7:ce:46:ac:f4:01:6c:b0:d2:9f:ed:06:67:ef: d1:cb:22:e9:fe:60:0d:7e:6f:4d:c4:9e:0b:c4:28: 52:72:20:e3:2b:32:c5:14:eb:72:cc:36:d4:7b:f1: 7a:78:12:45:f8:67:64:f0:61:44:3f:29:59:92:a9: 00:ac:1a:f7:d0:22:a7:70:9d:dd:2e:ef:3c:a8:ca: ed:28:a0:6d:1a:ca:8c:68:21:ee:b7:d2:e9:58:2c: 22:e0:e7:25:80:f7:81:de:27:1a:bc:ae:33:ec:4a: 2d:f7:3d:92:e4:a5:3a:e0:c5:cd:75:1c:52:95:49: 28:0b:cf:01:bf:90:44:6a:68:13:66:0b:ef:c7:84: 0e:0d:b2:0e:c3:d8:7f:e2:09:a8:24:e9:4e:79:62: 8c:96:16:21:45:b1:f5:bb:1c:12:e5:48:48:11:52: 62:58:31:e5:95:f6:98:4e:23:ca:c4:0b:71:c8:93: 37:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E9:01:A4:D1:78:4B:F7:3B:D4:C8:93:E0:D4:51:7E:9F:9C:41:D5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/541e9fa5-3694-4272-bbe1-dbf9e5ad3356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.184.64.0/18 Signature Algorithm: sha256WithRSAEncryption 40:ef:16:10:3a:a2:27:e8:bf:59:f5:14:96:3f:f3:ad:08:d1: b3:ac:53:c5:78:79:a8:be:a1:23:bf:67:f4:fb:34:d6:de:e3: 04:c8:9a:04:d4:bc:43:c9:7b:62:23:92:99:67:8b:32:d7:d4: 4d:03:22:45:88:47:a9:52:07:15:ec:0c:3f:da:12:de:dc:ec: 8b:4b:34:24:bb:f0:2b:9f:54:d9:f0:f4:dd:2e:0b:72:ce:c1: 3b:61:46:24:2a:d3:ba:a3:04:26:b3:3c:ad:66:0b:25:e3:ff: ff:e9:e8:50:18:38:e6:83:97:00:74:49:65:b8:16:d3:7e:85: e2:29:f4:e8:2c:7d:d5:b2:b7:42:5d:29:68:15:26:13:10:86: 3b:51:22:ee:c6:a8:d4:87:c5:1e:e3:84:ac:64:3b:e0:5f:89: 1f:c4:be:10:8b:80:be:63:e0:84:35:2b:f6:90:72:b8:5b:6e: 29:d9:c0:ad:2c:e8:91:a3:b8:67:3e:c0:5f:91:4e:1a:70:b7: 61:61:e7:9b:d1:cd:4f:14:88:81:c0:bc:9a:d3:c5:10:8a:9f: fb:12:8c:e7:43:3b:a2:86:9d:2b:67:4c:40:a1:5c:ed:1b:47: 10:93:1c:c9:38:50:91:62:05:84:8d:83:4e:3c:fb:01:65:b1: b9:3f:ac:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQLMse8z2b5kvcFemYUeooDEcEpswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTYwMDE3WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZmMyOGQ1YWVjYjM3ZDA5YTMyOTc0NmU3MzY5OTFjNDgw MGMxNjUwNDgxNjVlNDJkZTBhMDM3NzA3NTdjN2E0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKNGWBN0AIYrREHTQnPGnuZo/T4Sw32o9dI8WXjSbRh8hB /hYDVBhpvtQLy+leHeqwXYSRFGlLD5KPz78+tjD/7/QBTb8mFtM3hEK3zkas9AFs sNKf7QZn79HLIun+YA1+b03EngvEKFJyIOMrMsUU63LMNtR78Xp4EkX4Z2TwYUQ/ KVmSqQCsGvfQIqdwnd0u7zyoyu0ooG0ayoxoIe630ulYLCLg5yWA94HeJxq8rjPs Si33PZLkpTrgxc11HFKVSSgLzwG/kERqaBNmC+/HhA4Nsg7D2H/iCagk6U55YoyW FiFFsfW7HBLlSEgRUmJYMeWV9phOI8rEC3HIkzfxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0OkBpNF4S/c71MiT4NRRfp+cQdUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU0MWU5ZmE1LTM2OTQtNDI3Mi1iYmUxLWRiZjllNWFkMzM1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2uEAwDQYJKoZIhvcNAQELBQADggEBAEDvFhA6oifov1n1FJY/860I0bOs U8V4eai+oSO/Z/T7NNbe4wTImgTUvEPJe2IjkplnizLX1E0DIkWIR6lSBxXsDD/a Et7c7ItLNCS78CufVNnw9N0uC3LOwTthRiQq07qjBCazPK1mCyXj///p6FAYOOaD lwB0SWW4FtN+heIp9OgsfdWyt0JdKWgVJhMQhjtRIu7GqNSHxR7jhKxkO+BfiR/E vhCLgL5j4IQ1K/aQcrhbbinZwK0s6JGjuGc+wF+RThpwt2Fh55vRzU8UiIHAvJrT xRCKn/sSjOdDO6KGnStnTEChXO0bRxCTHMk4UJFiBYSNg048+wFlsbk/rFU= -----END CERTIFICATE-----Generated at Sat Jun 14 05:54:54 2025 by rpki-client