$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6af410b9-5678-4912-9e78-84efc2a8ec5b.roa File: 6af410b9-5678-4912-9e78-84efc2a8ec5b.roa (raw, json) Hash identifier: rZdIhtZ/fvZspPqDrvY1BruxUsBHBe/RHTfHNaoGIG4= Subject key identifier: B6:20:8D:94:F6:24:61:35:23:9B:32:36:82:EE:18:62:88:0C:9E:30 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29434F4E23C068785523F4447B89C608BF270A7D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6af410b9-5678-4912-9e78-84efc2a8ec5b.roa Signing time: Tue 20 May 2025 15:50:13 +0000 ROA not before: Tue 20 May 2025 15:50:13 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.246.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:43:4f:4e:23:c0:68:78:55:23:f4:44:7b:89:c6:08:bf:27:0a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 15:50:13 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=2eea12d599905da3efb694a62c34af54803ae0a004cdc056ecc15d4ab3c9230f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d1:48:53:a0:23:da:a4:10:3f:bb:90:a1:e3: a5:a8:e8:a5:c1:57:a6:87:5c:41:d8:b8:2a:4c:59: 0e:d5:62:b1:18:e7:59:89:f9:d4:43:92:41:7d:ab: 45:ef:83:e5:ae:76:9a:b4:c8:9f:89:20:1f:66:27: 7e:45:4a:47:38:4d:63:28:bc:d5:22:2a:fa:db:48: 0c:82:09:b1:28:04:2a:27:25:31:d3:5b:33:34:83: 60:da:99:40:7e:b4:ec:4d:fa:26:5a:28:d3:76:71: 28:76:69:8f:31:af:d8:e8:28:f6:e7:40:d8:d0:a6: 22:3f:18:f5:70:aa:25:0a:8b:36:f4:6e:49:d5:3f: 65:3d:19:c8:f9:17:df:9b:74:a2:af:28:68:98:a4: 07:26:4a:23:96:9a:30:2b:6d:28:f0:fb:bf:38:dd: e4:b9:4c:10:0d:dd:52:7b:8d:47:7f:87:3b:39:de: 6c:c5:35:34:c3:73:56:4e:d6:85:8f:e6:92:0c:7b: a4:ed:92:59:57:7d:fd:b8:58:fd:70:f7:05:42:1e: 9f:ac:e9:42:00:e4:82:09:c4:e6:66:0e:48:32:3b: 4f:70:11:82:4e:3a:fc:03:37:a2:ce:0f:6d:2d:e8: a0:3c:21:2c:12:03:23:98:f3:d1:7b:88:53:78:00: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:20:8D:94:F6:24:61:35:23:9B:32:36:82:EE:18:62:88:0C:9E:30 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6af410b9-5678-4912-9e78-84efc2a8ec5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.246.248.0/22 Signature Algorithm: sha256WithRSAEncryption 93:b4:2e:03:f9:82:e6:e6:61:61:fe:9f:7e:ab:8e:bc:f3:8b: 03:df:fd:d6:fa:90:32:9b:a7:c6:2b:70:4a:b3:1f:ea:04:21: e3:c0:7c:75:39:cc:3d:b9:b2:56:57:61:76:97:e7:1d:ba:75: c8:e7:80:f6:60:2b:00:2c:0b:61:d3:62:e9:2d:19:1f:ff:26: fe:4e:ec:10:07:f8:3f:40:25:ec:51:5a:01:e7:8a:a2:4e:bf: 5c:4f:f9:d5:6b:62:6e:0d:80:ef:84:91:99:6f:0e:6b:38:a5: 72:2e:fe:c2:26:b6:19:31:50:42:84:20:d6:4f:c2:e7:3a:1b: db:b9:04:42:f8:dc:40:3e:61:7a:95:f8:99:a7:60:f5:8b:f0: a3:23:f9:50:76:cf:9d:5b:da:f2:e2:3a:9e:51:1a:9d:f6:e5: a7:cc:3f:79:84:3a:d5:36:8b:7e:5d:cb:34:65:a8:fd:27:66: 4f:cc:6d:4c:6d:01:ed:51:8e:07:39:7a:fa:a3:42:5f:37:25: 83:df:5e:41:4c:c0:b3:bc:ce:fb:e6:b8:5b:60:42:59:07:cf: 23:cb:ab:a3:57:53:d0:8e:e9:e9:9a:5f:1d:32:b1:31:e1:69: d8:66:a0:13:04:d5:55:d1:27:e3:a5:65:87:b9:db:f2:ff:13: 16:36:74:82 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKUNPTiPAaHhVI/REe4nGCL8nCn0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTU1MDEzWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWVhMTJkNTk5OTA1ZGEzZWZiNjk0YTYyYzM0YWY1NDgw M2FlMGEwMDRjZGMwNTZlY2MxNWQ0YWIzYzkyMzBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC00UhToCPapBA/u5Ch46Wo6KXBV6aHXEHYuCpMWQ7VYrEY 51mJ+dRDkkF9q0Xvg+Wudpq0yJ+JIB9mJ35FSkc4TWMovNUiKvrbSAyCCbEoBCon JTHTWzM0g2DamUB+tOxN+iZaKNN2cSh2aY8xr9joKPbnQNjQpiI/GPVwqiUKizb0 bknVP2U9Gcj5F9+bdKKvKGiYpAcmSiOWmjArbSjw+7843eS5TBAN3VJ7jUd/hzs5 3mzFNTTDc1ZO1oWP5pIMe6TtkllXff24WP1w9wVCHp+s6UIA5IIJxOZmDkgyO09w EYJOOvwDN6LOD20t6KA8ISwSAyOY89F7iFN4ABKZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtiCNlPYkYTUjmzI2gu4YYogMnjAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhZjQxMGI5LTU2NzgtNDkxMi05ZTc4LTg0ZWZjMmE4ZWM1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIN9vgwDQYJKoZIhvcNAQELBQADggEBAJO0LgP5gubmYWH+n36rjrzziwPf /db6kDKbp8YrcEqzH+oEIePAfHU5zD25slZXYXaX5x26dcjngPZgKwAsC2HTYukt GR//Jv5O7BAH+D9AJexRWgHniqJOv1xP+dVrYm4NgO+EkZlvDms4pXIu/sImthkx UEKEINZPwuc6G9u5BEL43EA+YXqV+JmnYPWL8KMj+VB2z51b2vLiOp5RGp325afM P3mEOtU2i35dyzRlqP0nZk/MbUxtAe1Rjgc5evqjQl83JYPfXkFMwLO8zvvmuFtg QlkHzyPLq6NXU9CO6emaXx0ysTHhadhmoBME1VXRJ+OlZYe52/L/ExY2dII= -----END CERTIFICATE-----Generated at Sat Jun 14 06:23:14 2025 by rpki-client