$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ec2e23d-f50e-4ea7-bf1e-e75959549124.roa File: 5ec2e23d-f50e-4ea7-bf1e-e75959549124.roa (raw, json) Hash identifier: taUr3db56z+fd/E11Z/rz88dHc/k8gif0Ks9t90wvL8= Subject key identifier: F6:B8:3E:1F:A9:9D:C4:9C:CE:39:A7:06:F4:EE:98:E9:1B:EA:07:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C2E09DE2389DE6CB7ADDFEB80CAEAF89FB89ED2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ec2e23d-f50e-4ea7-bf1e-e75959549124.roa Signing time: Mon 09 Jun 2025 19:20:57 +0000 ROA not before: Mon 09 Jun 2025 19:20:57 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.242.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:2e:09:de:23:89:de:6c:b7:ad:df:eb:80:ca:ea:f8:9f:b8:9e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 19:20:57 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=31dfb73e3675b91999818564d5e60d1ec79533ab63eb61da2af04e429dfef7da, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:85:43:e2:91:45:22:86:e4:ab:54:03:e1:22: 16:a0:a9:6b:c8:9c:c9:f7:7e:df:07:6b:c2:86:4c: 46:63:c9:7c:d4:63:e0:32:bc:f1:2a:7e:ad:7e:8d: 1e:11:f2:1e:82:c0:50:0c:b0:a2:f0:67:c9:7e:bb: 9f:91:d0:7b:2d:57:61:84:c7:d0:d2:91:95:ef:5f: 0c:58:b6:12:60:f4:ef:5d:99:9b:76:35:55:02:bf: 29:81:92:f2:eb:80:22:d9:54:a2:27:44:d2:0e:82: e3:e4:0e:88:17:27:bb:a5:68:01:3b:ca:91:6d:d8: 18:b9:f0:61:e9:d3:ef:13:52:49:0c:51:23:40:0e: a0:21:b6:81:f8:cb:cd:04:c1:7b:54:50:ae:94:08: af:b6:f3:9e:da:c0:6d:2b:0d:ed:65:fa:8b:e9:b2: 40:53:b5:49:60:69:35:32:bc:41:9d:f6:f2:ba:26: 1a:ea:35:52:93:7f:16:1f:12:45:ba:42:38:5e:ff: a3:04:2a:e8:8d:a7:df:c2:f0:dd:21:96:db:14:9d: 13:a7:e6:c3:b4:39:f3:68:e8:48:a6:9a:5f:11:52: 6c:ca:f3:d3:a6:6d:ab:a0:7d:59:3c:ef:fe:79:5a: 42:83:a2:c3:70:53:c4:02:6f:b9:1a:b4:15:60:3a: fb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B8:3E:1F:A9:9D:C4:9C:CE:39:A7:06:F4:EE:98:E9:1B:EA:07:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ec2e23d-f50e-4ea7-bf1e-e75959549124.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.242.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7b:26:88:ab:7b:dd:d2:e5:b6:fa:27:e2:6a:6f:4e:bf:31:47: 26:ed:72:48:af:70:82:c2:ef:77:78:9e:1e:83:23:f5:f0:f3: 7d:14:22:28:5b:0e:63:59:c2:5d:f0:55:12:5d:da:87:76:5e: be:71:24:1a:5c:29:44:07:30:c7:3f:f9:0d:a2:3c:d4:c4:c9: 43:55:60:fc:86:3e:5b:8d:8d:22:37:cc:b7:d7:2e:7b:cf:02: 82:e1:f2:c5:f2:13:2c:af:f6:a6:9a:20:55:28:63:bb:41:b1: a3:95:81:d8:2a:7e:a3:34:5f:a5:68:b3:34:76:3e:26:77:b4: a1:53:cf:9e:cd:45:7a:d0:db:50:9c:e8:2c:51:dd:44:94:f8: 2c:10:4b:ee:78:62:f1:83:f4:03:e4:ac:e5:f6:51:bd:9e:40: c3:50:d3:d0:97:1f:31:ca:74:07:3d:5c:06:1e:a7:30:ca:82: dd:ff:0d:dc:35:66:6a:1d:a7:dd:76:94:f7:d5:3f:1f:47:b2: e0:87:61:af:bb:6c:02:c3:77:3b:83:fb:24:79:37:1d:97:f2: f2:c2:ce:be:46:26:df:1a:fd:80:c0:f4:24:64:0e:03:c7:21: 99:2c:cf:7d:33:38:65:7e:2a:6a:95:b6:f9:38:63:42:78:ff: 45:71:5f:40 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHC4J3iOJ3my3rd/rgMrq+J+4ntIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTkyMDU3WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzMWRmYjczZTM2NzViOTE5OTk4MTg1NjRkNWU2MGQxZWM3 OTUzM2FiNjNlYjYxZGEyYWYwNGU0MjlkZmVmN2RhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDuhUPikUUihuSrVAPhIhagqWvInMn3ft8Ha8KGTEZjyXzU Y+AyvPEqfq1+jR4R8h6CwFAMsKLwZ8l+u5+R0HstV2GEx9DSkZXvXwxYthJg9O9d mZt2NVUCvymBkvLrgCLZVKInRNIOguPkDogXJ7ulaAE7ypFt2Bi58GHp0+8TUkkM USNADqAhtoH4y80EwXtUUK6UCK+2857awG0rDe1l+ovpskBTtUlgaTUyvEGd9vK6 JhrqNVKTfxYfEkW6Qjhe/6MEKuiNp9/C8N0hltsUnROn5sO0OfNo6Eimml8RUmzK 89OmbaugfVk87/55WkKDosNwU8QCb7katBVgOvuvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9rg+H6mdxJzOOacG9O6Y6RvqB78wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVlYzJlMjNkLWY1MGUtNGVhNy1iZjFlLWU3NTk1OTU0OTEyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA28jANBgkqhkiG9w0BAQsFAAOCAQEAeyaIq3vd0uW2+ifiam9OvzFHJu1y SK9wgsLvd3ieHoMj9fDzfRQiKFsOY1nCXfBVEl3ah3ZevnEkGlwpRAcwxz/5DaI8 1MTJQ1Vg/IY+W42NIjfMt9cue88CguHyxfITLK/2ppogVShju0Gxo5WB2Cp+ozRf pWizNHY+Jne0oVPPns1FetDbUJzoLFHdRJT4LBBL7nhi8YP0A+Ss5fZRvZ5Aw1DT 0JcfMcp0Bz1cBh6nMMqC3f8N3DVmah2n3XaU99U/H0ey4Idhr7tsAsN3O4P7JHk3 HZfy8sLOvkYm3xr9gMD0JGQOA8chmSzPfTM4ZX4qapW2+ThjQnj/RXFfQA== -----END CERTIFICATE-----Generated at Sat Jun 14 05:42:29 2025 by rpki-client