$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64bd0569-407e-438a-81e1-f95d28e5654e.roa File: 64bd0569-407e-438a-81e1-f95d28e5654e.roa (raw, json) Hash identifier: 5CdbxTaC+Zy/tBZezwxzliXTwjj+pgMl3PaPsdkmqvA= Subject key identifier: 0E:D2:48:51:83:FD:74:DD:D9:C4:12:5C:7D:BB:EF:A5:25:CB:2E:EA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7F9C71C0B9C4330E25E78896FE57A13E09376DB8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64bd0569-407e-438a-81e1-f95d28e5654e.roa Signing time: Tue 20 May 2025 16:21:42 +0000 ROA not before: Tue 20 May 2025 16:21:42 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.248.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9c:71:c0:b9:c4:33:0e:25:e7:88:96:fe:57:a1:3e:09:37:6d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 16:21:42 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=bf3c3cc62394027c971c085ccd583bc7bacb664c27ac571eadf746f424ae6fd2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:95:61:d7:69:b5:40:eb:de:44:79:45:7b:c4: d5:b8:57:1e:95:2c:39:12:b5:f0:ba:91:5f:7a:73: d3:3f:98:eb:13:e8:dc:a2:5c:a0:d8:e8:ae:1e:3a: b6:45:62:ee:57:b6:35:25:82:e1:88:43:fe:68:a8: cf:99:d1:a0:bf:bf:6d:41:99:e0:ab:af:ae:05:05: f3:86:24:fa:1b:84:db:8e:7a:d3:19:82:8f:fb:b5: 36:cd:5c:93:c8:c6:44:7b:34:83:c4:9f:57:b9:22: 9d:08:10:41:61:fd:00:8d:a9:4e:37:6c:eb:d9:a3: 94:1d:32:b2:68:02:88:80:51:c5:21:a4:83:cf:c5: 49:51:21:22:71:48:09:28:44:36:0c:e1:a5:83:89: b6:c5:bf:c0:c4:5e:81:49:82:d7:67:62:2e:38:dc: 84:3f:a1:70:c9:25:60:13:d4:cf:0d:4f:a3:ee:2d: bb:55:c0:cd:9e:ab:ea:23:b4:91:af:eb:80:af:f4: d9:2d:f3:7d:4f:8a:1d:50:ca:bc:2f:fb:fb:fd:69: 69:41:f8:67:a5:d8:cb:91:07:57:00:e6:f9:f2:2a: ba:17:06:ec:8b:43:9d:4c:e1:b0:59:ed:83:8c:12: 71:37:f7:08:22:cd:16:f1:4d:01:7c:9b:cb:4b:1f: a6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D2:48:51:83:FD:74:DD:D9:C4:12:5C:7D:BB:EF:A5:25:CB:2E:EA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64bd0569-407e-438a-81e1-f95d28e5654e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.248.124.0/24 Signature Algorithm: sha256WithRSAEncryption 26:96:01:99:88:d8:57:95:0e:1b:46:40:44:3d:fe:04:f8:ab: 4e:f2:50:32:00:20:75:75:2b:b1:08:3b:60:27:88:ba:84:62: 66:61:b9:4e:4a:86:31:7e:50:02:99:67:d4:d4:67:a0:fd:81: 86:fd:1b:e9:42:dd:05:08:1c:4f:57:1b:0c:1a:76:70:27:fe: 43:a6:e8:70:75:fb:52:5d:72:df:aa:77:1f:06:e8:a8:2b:b4: ad:73:e8:7a:78:2d:60:c2:d6:1e:b1:35:33:9b:dc:a2:c9:63: 72:29:4c:a7:72:20:7f:4e:84:f8:ae:df:0d:41:09:04:cd:15: e3:48:bf:57:58:cf:a1:4a:d0:c8:d5:6e:ba:e7:6b:94:f7:9a: a1:07:f2:6e:75:8d:3d:c5:f7:b8:85:91:b7:9b:95:68:24:d8: 01:fa:6f:21:1d:99:5f:ba:01:af:f0:54:0a:57:29:58:bc:af: 94:60:99:22:39:c4:63:cb:46:47:79:c7:bc:15:1b:db:d8:96: e7:8a:5c:0b:ac:5c:94:da:65:ce:89:98:a2:d2:7c:b7:59:2d: 3f:02:5f:e8:b2:91:f8:e5:06:6f:b0:61:b5:c4:87:49:c3:ab: a7:e3:63:83:b0:c2:4a:dc:88:8e:cd:24:aa:4e:74:2f:4f:b8: 6f:92:82:c6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf5xxwLnEMw4l54iW/lehPgk3bbgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTYyMTQyWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjNjM2NjNjIzOTQwMjdjOTcxYzA4NWNjZDU4M2JjN2Jh Y2I2NjRjMjdhYzU3MWVhZGY3NDZmNDI0YWU2ZmQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrlWHXabVA695EeUV7xNW4Vx6VLDkStfC6kV96c9M/mOsT 6NyiXKDY6K4eOrZFYu5XtjUlguGIQ/5oqM+Z0aC/v21BmeCrr64FBfOGJPobhNuO etMZgo/7tTbNXJPIxkR7NIPEn1e5Ip0IEEFh/QCNqU43bOvZo5QdMrJoAoiAUcUh pIPPxUlRISJxSAkoRDYM4aWDibbFv8DEXoFJgtdnYi443IQ/oXDJJWAT1M8NT6Pu LbtVwM2eq+ojtJGv64Cv9Nkt831Pih1Qyrwv+/v9aWlB+Gel2MuRB1cA5vnyKroX BuyLQ51M4bBZ7YOMEnE39wgizRbxTQF8m8tLH6azAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDtJIUYP9dN3ZxBJcfbvvpSXLLuowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0YmQwNTY5LTQwN2UtNDM4YS04MWUxLWY5NWQyOGU1NjU0ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN+HwwDQYJKoZIhvcNAQELBQADggEBACaWAZmI2FeVDhtGQEQ9/gT4q07y UDIAIHV1K7EIO2AniLqEYmZhuU5KhjF+UAKZZ9TUZ6D9gYb9G+lC3QUIHE9XGwwa dnAn/kOm6HB1+1Jdct+qdx8G6KgrtK1z6Hp4LWDC1h6xNTOb3KLJY3IpTKdyIH9O hPiu3w1BCQTNFeNIv1dYz6FK0MjVbrrna5T3mqEH8m51jT3F97iFkbeblWgk2AH6 byEdmV+6Aa/wVApXKVi8r5RgmSI5xGPLRkd5x7wVG9vYlueKXAusXJTaZc6JmKLS fLdZLT8CX+iykfjlBm+wYbXEh0nDq6fjY4OwwkrciI7NJKpOdC9PuG+SgsY= -----END CERTIFICATE-----Generated at Sat Jun 14 23:43:55 2025 by rpki-client