$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/787cb459-80fc-4a4b-8b0b-289bd640b703.roa File: 787cb459-80fc-4a4b-8b0b-289bd640b703.roa (raw, json) Hash identifier: LrtXoJKTBR+nLQsKvu+2XsbP4iU1OdQ3nz0jDCY8ys4= Subject key identifier: AE:13:09:AA:A8:EC:CF:23:76:1B:BD:F6:87:A5:64:6F:08:52:70:2F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 261C93F2B4124BD4864813A7DAF9F50606B6BA8C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/787cb459-80fc-4a4b-8b0b-289bd640b703.roa Signing time: Mon 09 Jun 2025 18:30:26 +0000 ROA not before: Mon 09 Jun 2025 18:30:26 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.243.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1c:93:f2:b4:12:4b:d4:86:48:13:a7:da:f9:f5:06:06:b6:ba:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:30:26 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=1d1cb63be3b23f24e93e1470a28bd252f69c2714835e58272eadde5141aaa270, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:64:fa:dd:07:37:51:d1:ca:41:34:e4:fc:c8: 35:be:3e:c2:91:5a:5e:13:00:af:50:32:94:39:e9: a8:81:f6:9d:d6:15:82:59:6b:d5:4e:36:ee:0f:02: 54:72:34:79:c1:19:b1:d8:a3:1a:04:02:d1:3d:4f: 2e:59:ec:45:c1:a7:2e:19:ab:86:c7:74:75:b6:28: 83:0e:67:b0:43:4a:a7:7b:1e:3c:21:7d:51:c2:61: 0c:3f:e1:1d:b4:b6:44:dc:9d:97:04:8a:5f:47:4a: 4e:f4:14:86:73:b5:0c:9d:bf:67:e3:4a:15:62:55: c9:1c:fb:a6:b4:2a:85:df:b3:e5:7f:b5:48:54:bd: 4c:32:d8:ca:10:a5:53:42:74:d5:ac:21:5a:57:14: 40:fe:b2:31:a1:d7:62:2f:50:f7:dc:64:07:94:ad: 17:27:57:63:26:31:c9:da:a9:fd:5b:99:3c:1b:c7: fd:d1:72:b9:5d:28:53:2a:cf:89:d9:f4:54:29:41: 53:b3:12:4b:9b:ec:df:a2:99:35:4c:3e:2a:2f:9a: b2:20:09:f6:5e:e2:e8:65:08:44:6d:18:cf:49:59: b8:39:39:15:a9:42:72:bc:92:b9:7e:8a:61:70:de: 18:33:0d:19:dc:aa:19:55:0a:42:62:f8:d4:52:b4: 01:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:13:09:AA:A8:EC:CF:23:76:1B:BD:F6:87:A5:64:6F:08:52:70:2F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/787cb459-80fc-4a4b-8b0b-289bd640b703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.243.16.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:a5:43:17:f9:97:1a:d7:ce:cb:eb:c9:bd:d3:7b:52:98:2a: a3:e7:81:55:71:ae:9a:88:75:40:80:3e:02:2b:ba:2d:8d:c0: 5c:6a:50:0e:8e:ab:f8:e6:79:c0:df:e0:23:0a:ef:cc:73:7e: 09:99:6b:b0:40:28:f9:3f:44:2f:6f:90:38:fb:8e:a5:ca:fd: d5:29:f1:17:5a:71:d5:d5:59:a9:da:f3:8c:f8:76:ab:00:ed: 02:c8:92:f2:ab:64:a0:8a:ec:7f:9c:cd:56:26:6a:cf:e4:35: 6e:da:bc:15:3f:98:a8:6d:17:e7:b8:77:2e:21:cc:2a:4c:7c: 34:c9:fc:f3:c3:7b:61:58:58:35:72:6f:b3:07:26:4c:e9:89: 40:0f:a9:cb:0f:08:6e:bf:70:b3:fe:08:eb:2b:ef:17:79:f3: f1:93:c3:07:fa:79:ed:1d:2b:da:a9:7a:88:8a:0f:24:9d:a6: f7:79:71:63:33:0a:19:06:13:7d:05:e6:b3:d8:27:d9:35:92: 51:03:f8:d4:a7:fd:89:6e:58:1d:00:2d:2f:83:cc:61:45:e8: 4d:5b:28:62:0c:9e:aa:05:04:54:c6:ac:16:21:e4:e2:d7:6c: 24:30:08:a6:be:e3:a9:4b:3b:08:30:df:26:95:68:a9:d3:bb: d3:81:16:e4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJhyT8rQSS9SGSBOn2vn1Bga2uowwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgzMDI2WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZDFjYjYzYmUzYjIzZjI0ZTkzZTE0NzBhMjhiZDI1MmY2 OWMyNzE0ODM1ZTU4MjcyZWFkZGU1MTQxYWFhMjcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpZPrdBzdR0cpBNOT8yDW+PsKRWl4TAK9QMpQ56aiB9p3W FYJZa9VONu4PAlRyNHnBGbHYoxoEAtE9Ty5Z7EXBpy4Zq4bHdHW2KIMOZ7BDSqd7 HjwhfVHCYQw/4R20tkTcnZcEil9HSk70FIZztQydv2fjShViVckc+6a0KoXfs+V/ tUhUvUwy2MoQpVNCdNWsIVpXFED+sjGh12IvUPfcZAeUrRcnV2MmMcnaqf1bmTwb x/3RcrldKFMqz4nZ9FQpQVOzEkub7N+imTVMPiovmrIgCfZe4uhlCERtGM9JWbg5 ORWpQnK8krl+imFw3hgzDRncqhlVCkJi+NRStAFdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrhMJqqjszyN2G732h6VkbwhScC8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4N2NiNDU5LTgwZmMtNGE0Yi04YjBiLTI4OWJkNjQwYjcwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM28xAwDQYJKoZIhvcNAQELBQADggEBAJylQxf5lxrXzsvryb3Te1KYKqPn gVVxrpqIdUCAPgIrui2NwFxqUA6Oq/jmecDf4CMK78xzfgmZa7BAKPk/RC9vkDj7 jqXK/dUp8RdacdXVWana84z4dqsA7QLIkvKrZKCK7H+czVYmas/kNW7avBU/mKht F+e4dy4hzCpMfDTJ/PPDe2FYWDVyb7MHJkzpiUAPqcsPCG6/cLP+COsr7xd58/GT wwf6ee0dK9qpeoiKDySdpvd5cWMzChkGE30F5rPYJ9k1klED+NSn/YluWB0ALS+D zGFF6E1bKGIMnqoFBFTGrBYh5OLXbCQwCKa+46lLOwgw3yaVaKnTu9OBFuQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:46 2025 by rpki-client