$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5daea8af-a28e-443c-9709-e53f3fd59433.roa File: 5daea8af-a28e-443c-9709-e53f3fd59433.roa (raw, json) Hash identifier: g0vsN3QI0tO7nWOvJrtaj5rxWhtvBBg0azs8pxuwL2o= Subject key identifier: F3:12:C4:80:0F:3F:5A:59:28:4E:36:CF:B3:D7:B9:C2:E1:F2:3B:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1B903CCDF885217080CA635D155307ACA9743564 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5daea8af-a28e-443c-9709-e53f3fd59433.roa Signing time: Tue 20 May 2025 17:31:57 +0000 ROA not before: Tue 20 May 2025 17:31:57 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.92.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:90:3c:cd:f8:85:21:70:80:ca:63:5d:15:53:07:ac:a9:74:35:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 17:31:57 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=8d56c43026a2c1dfdac3df9d47dc2cc05b266355bf986e9b91cc6cc3dc38160b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ea:f8:3d:c4:8a:ed:4a:0b:a8:a3:31:e4:3a: cc:d5:c4:26:59:5c:7e:b8:c4:5a:0c:24:95:75:58: b1:ea:39:fa:ca:17:a7:b7:f0:58:e7:83:d1:43:ab: 4e:1a:ca:67:5d:7c:09:39:b8:a5:d9:24:ff:50:9c: d8:3c:28:16:80:6b:68:cf:69:4d:9a:36:66:1b:d1: 4d:c0:52:f0:73:36:1c:25:d9:43:c9:e7:65:39:b7: a6:1c:3f:fb:c4:9b:e2:39:69:de:12:fb:a0:a2:2e: 96:05:04:6c:46:0d:fe:85:eb:df:19:06:70:3c:6f: 21:09:ad:26:6f:64:fc:2e:88:e9:a5:09:b3:d0:fe: f1:65:60:e4:bc:43:3a:b9:10:2e:9a:45:65:28:a8: 19:63:e7:6f:12:6a:d9:5a:33:34:4e:42:c0:85:49: 06:99:8a:7c:aa:58:12:ef:73:ae:1e:7a:66:58:a8: 40:53:4b:3c:10:2b:e8:5d:8b:43:52:58:f7:3b:4e: fa:50:46:ea:f3:dd:1e:87:a2:b2:82:fb:21:bf:61: 85:60:00:7a:2b:d5:86:f8:1b:0f:ee:8e:7e:e7:f3: 54:e4:90:ed:ec:35:f7:a8:7f:53:43:45:9e:29:e5: 79:cc:e0:5f:0d:c3:f1:66:55:05:eb:f8:ed:e0:65: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:12:C4:80:0F:3F:5A:59:28:4E:36:CF:B3:D7:B9:C2:E1:F2:3B:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5daea8af-a28e-443c-9709-e53f3fd59433.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.92.192.0/19 Signature Algorithm: sha256WithRSAEncryption 7e:04:bf:6f:0f:59:0d:e0:8a:0b:42:1c:a4:4e:64:27:a9:c1: 34:cd:bf:73:3e:9b:a3:ad:fb:2f:fe:c9:bc:b3:92:76:18:0a: dc:89:61:f9:d3:10:0f:5a:c9:64:b1:9c:6f:1c:aa:d0:2f:d9: 19:69:a4:90:f5:b3:9c:42:3c:d7:3e:f5:c1:39:61:47:61:af: c1:cf:33:eb:e1:ef:2e:09:d8:c8:21:94:4d:f9:a7:7f:28:44: ed:fd:75:db:36:65:1a:4d:b9:e9:5d:cb:14:89:c5:50:47:0b: 0a:f8:0d:d3:98:90:94:ca:e1:d3:cf:a1:7e:9e:e9:59:91:5a: 65:d5:25:12:2f:77:3d:31:69:81:7d:6e:40:8d:f5:71:a0:ef: ca:ed:ce:b2:0d:cb:fa:9e:8c:44:fa:46:f0:da:6c:5e:bb:1e: b0:d8:71:7f:66:ea:6e:97:9d:52:6e:6a:5f:dc:18:f7:40:b9: 02:1f:fb:eb:c8:fb:a1:e2:ec:2b:64:55:42:8d:fb:dc:ec:33: 66:23:cd:76:20:e1:e3:19:d3:a0:52:79:08:be:9c:a5:fb:2f: f5:96:7e:b1:55:5d:d7:03:44:2f:e1:a6:9d:73:17:c6:d4:50: b1:01:84:02:43:5b:77:9d:13:f2:21:3e:40:e6:a4:60:c2:8e: 47:5d:87:58 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUG5A8zfiFIXCAymNdFVMHrKl0NWQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTczMTU3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDU2YzQzMDI2YTJjMWRmZGFjM2RmOWQ0N2RjMmNjMDVi MjY2MzU1YmY5ODZlOWI5MWNjNmNjM2RjMzgxNjBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCs6vg9xIrtSguoozHkOszVxCZZXH64xFoMJJV1WLHqOfrK F6e38Fjng9FDq04aymddfAk5uKXZJP9QnNg8KBaAa2jPaU2aNmYb0U3AUvBzNhwl 2UPJ52U5t6YcP/vEm+I5ad4S+6CiLpYFBGxGDf6F698ZBnA8byEJrSZvZPwuiOml CbPQ/vFlYOS8Qzq5EC6aRWUoqBlj528SatlaMzROQsCFSQaZinyqWBLvc64eemZY qEBTSzwQK+hdi0NSWPc7TvpQRurz3R6HorKC+yG/YYVgAHor1Yb4Gw/ujn7n81Tk kO3sNfeof1NDRZ4p5XnM4F8Nw/FmVQXr+O3gZZhHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8xLEgA8/WlkoTjbPs9e5wuHyO9kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkYWVhOGFmLWEyOGUtNDQzYy05NzA5LWU1M2YzZmQ1OTQzMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2XMAwDQYJKoZIhvcNAQELBQADggEBAH4Ev28PWQ3gigtCHKROZCepwTTN v3M+m6Ot+y/+ybyzknYYCtyJYfnTEA9ayWSxnG8cqtAv2RlppJD1s5xCPNc+9cE5 YUdhr8HPM+vh7y4J2MghlE35p38oRO39dds2ZRpNueldyxSJxVBHCwr4DdOYkJTK 4dPPoX6e6VmRWmXVJRIvdz0xaYF9bkCN9XGg78rtzrINy/qejET6RvDabF67HrDY cX9m6m6XnVJual/cGPdAuQIf++vI+6Hi7CtkVUKN+9zsM2YjzXYg4eMZ06BSeQi+ nKX7L/WWfrFVXdcDRC/hpp1zF8bUULEBhAJDW3edE/IhPkDmpGDCjkddh1g= -----END CERTIFICATE-----Generated at Sat Jun 14 23:43:08 2025 by rpki-client