$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b446881-5d21-4e6f-afdf-0ff2b1dbea1a.roa File: 7b446881-5d21-4e6f-afdf-0ff2b1dbea1a.roa (raw, json) Hash identifier: eHwL3CNO4gsMtdysxTNwfYxcMg0NPMa9yOjRLvQZ0Fg= Subject key identifier: 2B:DD:B0:70:15:E6:13:32:CF:17:4B:A5:D3:7E:47:2A:3C:04:F3:D8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EC878EDC3C47FAB8922C0E41AA1AADD5907F538 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b446881-5d21-4e6f-afdf-0ff2b1dbea1a.roa Signing time: Mon 09 Jun 2025 17:52:11 +0000 ROA not before: Mon 09 Jun 2025 17:52:11 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.235.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c8:78:ed:c3:c4:7f:ab:89:22:c0:e4:1a:a1:aa:dd:59:07:f5:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 17:52:11 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=807ca41d5277dc14f39b6537f26794602017ae63ae834c57528e0e05b26e55f9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:65:e4:3a:41:8b:45:c8:53:07:dd:52:52: 64:69:05:43:46:e8:d3:a8:e1:d5:31:f4:10:13:bb: 1f:ea:ea:3a:0b:65:74:04:5b:b1:f4:5a:48:f5:f4: 34:d3:f9:2c:7b:58:56:91:ca:e9:a0:8f:6c:0f:b1: e1:d2:35:a5:e1:59:a7:7a:19:a9:4a:b8:d7:35:05: 34:5e:10:9d:f3:c4:b4:b2:a5:6d:99:97:b4:49:7c: 9f:79:2a:53:d5:57:3e:16:3a:38:1b:03:3e:e8:e7: 82:5e:7f:22:42:5b:29:46:97:e6:95:b5:60:59:4c: 8b:f5:f9:16:42:9b:91:1d:cb:4d:2f:78:b3:24:7c: 44:0e:48:ae:77:82:5d:7c:dc:07:87:e3:50:27:37: de:fb:55:de:54:f0:09:5d:d6:e3:b9:b3:90:50:89: 99:c1:31:e8:2f:ae:28:18:ff:08:de:1f:5e:05:70: aa:aa:7d:b3:06:58:69:22:c4:89:cf:e7:de:14:ca: 07:52:ad:a6:19:33:f8:df:fe:d4:37:13:0e:71:69: 90:17:e9:de:10:d2:30:9d:7c:6a:32:2f:fd:b1:07: 8a:65:94:12:91:dc:0c:b8:a3:8c:ea:fa:ea:00:20: c1:4a:cc:ed:e9:be:b0:0e:3e:e5:e5:41:c4:a2:4e: 5c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DD:B0:70:15:E6:13:32:CF:17:4B:A5:D3:7E:47:2A:3C:04:F3:D8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b446881-5d21-4e6f-afdf-0ff2b1dbea1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.235.0.0/18 Signature Algorithm: sha256WithRSAEncryption 4c:cd:47:a1:23:1a:69:b2:21:0f:f2:f6:2c:89:6e:f9:4b:9f: f2:72:66:a7:3d:60:a5:fa:cf:1e:55:d6:3c:9c:d9:d0:dd:97: 2d:28:e0:48:ab:35:f7:02:cc:ae:b7:a2:a7:29:63:91:92:49: ee:87:9a:86:79:64:5c:c0:f7:db:51:a0:a7:75:ec:3d:34:dd: 32:65:9f:cf:6f:7e:82:90:6e:1e:8d:f1:84:26:0e:13:4a:e0: 21:a0:38:f1:34:3c:11:e2:00:a2:7c:3c:57:78:43:ac:8c:44: fd:be:83:c9:37:e6:00:d3:8d:c0:29:db:ae:02:58:84:2b:ab: 56:27:f7:cc:40:54:f3:a7:79:76:7e:21:68:0c:85:3f:68:b7: 24:1d:05:3b:61:b2:ad:16:d4:7d:8d:5f:32:e0:0b:1a:23:6c: 51:b3:1f:db:5e:57:3a:17:58:5d:5a:9e:58:c7:40:df:e5:23: d4:65:bb:f2:81:fe:7e:27:6c:1c:e6:c6:ca:af:cb:97:fe:23: ba:7e:d3:50:f9:eb:f8:1a:aa:0a:f5:22:a7:9f:70:01:36:aa: 17:38:bf:3c:e3:9c:65:0a:56:74:57:ca:ae:c6:f3:04:05:0b: 20:40:b9:c2:3f:15:c3:c7:b5:ef:84:cb:1d:cd:14:13:af:b9: cc:c2:11:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbsh47cPEf6uJIsDkGqGq3VkH9TgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTc1MjExWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MDdjYTQxZDUyNzdkYzE0ZjM5YjY1MzdmMjY3OTQ2MDIw MTdhZTYzYWU4MzRjNTc1MjhlMGUwNWIyNmU1NWY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi2WXkOkGLRchTB91SUmRpBUNG6NOo4dUx9BATux/q6joL ZXQEW7H0Wkj19DTT+Sx7WFaRyumgj2wPseHSNaXhWad6GalKuNc1BTReEJ3zxLSy pW2Zl7RJfJ95KlPVVz4WOjgbAz7o54JefyJCWylGl+aVtWBZTIv1+RZCm5Edy00v eLMkfEQOSK53gl183AeH41AnN977Vd5U8Ald1uO5s5BQiZnBMegvrigY/wjeH14F cKqqfbMGWGkixInP594UygdSraYZM/jf/tQ3Ew5xaZAX6d4Q0jCdfGoyL/2xB4pl lBKR3Ay4o4zq+uoAIMFKzO3pvrAOPuXlQcSiTlyrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK92wcBXmEzLPF0ul035HKjwE89gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiNDQ2ODgxLTVkMjEtNGU2Zi1hZmRmLTBmZjJiMWRiZWExYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY26wAwDQYJKoZIhvcNAQELBQADggEBAEzNR6EjGmmyIQ/y9iyJbvlLn/Jy Zqc9YKX6zx5V1jyc2dDdly0o4EirNfcCzK63oqcpY5GSSe6HmoZ5ZFzA99tRoKd1 7D003TJln89vfoKQbh6N8YQmDhNK4CGgOPE0PBHiAKJ8PFd4Q6yMRP2+g8k35gDT jcAp264CWIQrq1Yn98xAVPOneXZ+IWgMhT9otyQdBTthsq0W1H2NXzLgCxojbFGz H9teVzoXWF1anljHQN/lI9Rlu/KB/n4nbBzmxsqvy5f+I7p+01D56/gaqgr1Iqef cAE2qhc4vzzjnGUKVnRXyq7G8wQFCyBAucI/FcPHte+Eyx3NFBOvuczCEUQ= -----END CERTIFICATE-----Generated at Sat Jun 14 23:42:50 2025 by rpki-client