$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ffe5884-4d22-45e8-89e1-41ca220cabc1.roa File: 7ffe5884-4d22-45e8-89e1-41ca220cabc1.roa (raw, json) Hash identifier: bfjJwNJUufY1R4Dcecag69kbZYm0pAN6gy3H6ZZwkOA= Subject key identifier: D9:3B:E7:1B:46:D0:31:21:15:5A:5C:49:79:B6:0C:48:3B:01:61:07 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F9D562F64F2236D3F4A7A9B9F1742C0DCD73016 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ffe5884-4d22-45e8-89e1-41ca220cabc1.roa Signing time: Mon 09 Jun 2025 17:11:09 +0000 ROA not before: Mon 09 Jun 2025 17:11:09 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.204.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9d:56:2f:64:f2:23:6d:3f:4a:7a:9b:9f:17:42:c0:dc:d7:30:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 17:11:09 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=33ecdb19a7590928e97b78b4fcf02dd6358f642f88ba736c1085816492e68cc6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:65:e4:2e:67:b8:e1:64:82:8c:25:ad:99:cd: b9:81:a5:87:12:07:c1:57:38:4e:83:dd:13:f5:bc: ec:0b:71:ac:8e:ef:93:0f:ec:e6:33:79:20:09:ef: 18:91:b8:1e:09:c5:73:e7:9d:e2:03:68:0a:28:e1: 5e:b7:d2:11:74:92:91:09:1e:9a:fb:e7:88:c9:e1: 5d:95:f4:db:10:52:0a:d6:83:a3:fd:2e:9a:28:f2: f7:c6:9b:5e:d9:ec:c8:74:65:8c:4f:53:f7:f2:43: 34:d6:df:6d:0a:bf:db:7b:14:41:bb:7c:11:be:d7: 53:c3:15:8c:07:45:74:91:e9:45:83:2b:de:69:2f: 5d:d3:b0:b1:3d:25:5a:9f:7a:22:1b:5f:42:25:6a: 04:d2:d6:d0:cf:7b:7a:4d:38:e7:aa:c5:fe:9e:e6: 9a:67:ec:51:a0:a0:db:06:97:bc:9b:98:58:b0:c6: 76:2b:89:bd:87:c6:31:17:e2:bb:0a:b5:45:c2:bc: b4:cc:f9:ef:33:27:8c:e1:a4:38:f1:11:3d:44:92: 5e:3b:82:16:ce:91:b9:bf:71:95:7b:65:43:b1:cc: 16:e2:be:19:9d:e9:d1:e8:06:93:fb:a3:c5:83:af: 18:04:52:b5:31:ca:dd:13:af:14:79:de:d8:18:71: 6c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3B:E7:1B:46:D0:31:21:15:5A:5C:49:79:B6:0C:48:3B:01:61:07 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ffe5884-4d22-45e8-89e1-41ca220cabc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.204.0.0/15 Signature Algorithm: sha256WithRSAEncryption 51:bd:57:02:e8:83:5d:9c:1d:f8:fd:d8:0c:91:12:20:78:50: 55:d2:5e:da:72:f6:da:fa:a9:17:f3:af:79:50:20:da:89:1d: 6f:6f:1e:4d:e0:e7:0d:a1:25:f3:e1:bf:15:0a:d7:37:d6:d6: f5:1f:ba:2b:87:b4:e0:53:b0:a3:36:21:05:0d:c3:80:f0:70: 24:df:9b:70:fc:e6:26:f8:50:aa:ce:38:91:79:c5:6f:9f:88: c2:94:a9:0b:4d:95:65:65:42:e5:48:da:15:b2:2b:04:e2:9d: 8e:53:3b:8a:07:fe:2b:d9:d0:50:bd:f6:33:15:7f:cd:61:6e: a4:dd:20:07:9e:7e:cf:c2:ca:ba:1a:fd:10:e3:15:b9:bd:87: 2d:01:b0:05:c1:42:19:fc:83:78:95:3e:c3:8e:6a:ed:a8:cb: 0d:33:89:5b:0c:df:1b:f3:50:33:d1:f8:d1:3c:4e:27:fa:7b: 7e:34:0a:c3:cb:1c:a9:79:9e:30:fe:f0:27:80:1b:b1:8c:38: be:7f:37:b7:7d:db:16:7a:8e:1e:e8:7e:f4:ac:10:f4:61:44: 2e:9b:af:f9:b4:09:43:84:9e:fa:1c:de:ea:7a:ea:81:be:e2: 9e:44:49:41:b7:9a:f1:14:59:68:6d:09:5b:49:80:73:97:46: 12:bb:84:4d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUT51WL2TyI20/SnqbnxdCwNzXMBYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTcxMTA5WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzM2VjZGIxOWE3NTkwOTI4ZTk3Yjc4YjRmY2YwMmRkNjM1 OGY2NDJmODhiYTczNmMxMDg1ODE2NDkyZTY4Y2M2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGZeQuZ7jhZIKMJa2ZzbmBpYcSB8FXOE6D3RP1vOwLcayO 75MP7OYzeSAJ7xiRuB4JxXPnneIDaAoo4V630hF0kpEJHpr754jJ4V2V9NsQUgrW g6P9Lpoo8vfGm17Z7Mh0ZYxPU/fyQzTW320Kv9t7FEG7fBG+11PDFYwHRXSR6UWD K95pL13TsLE9JVqfeiIbX0IlagTS1tDPe3pNOOeqxf6e5ppn7FGgoNsGl7ybmFiw xnYrib2HxjEX4rsKtUXCvLTM+e8zJ4zhpDjxET1Ekl47ghbOkbm/cZV7ZUOxzBbi vhmd6dHoBpP7o8WDrxgEUrUxyt0TrxR53tgYcWxVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2TvnG0bQMSEVWlxJebYMSDsBYQcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdmZmU1ODg0LTRkMjItNDVlOC04OWUxLTQxY2EyMjBjYWJjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2zDANBgkqhkiG9w0BAQsFAAOCAQEAUb1XAuiDXZwd+P3YDJESIHhQVdJe 2nL22vqpF/OveVAg2okdb28eTeDnDaEl8+G/FQrXN9bW9R+6K4e04FOwozYhBQ3D gPBwJN+bcPzmJvhQqs44kXnFb5+IwpSpC02VZWVC5UjaFbIrBOKdjlM7igf+K9nQ UL32MxV/zWFupN0gB55+z8LKuhr9EOMVub2HLQGwBcFCGfyDeJU+w45q7ajLDTOJ WwzfG/NQM9H40TxOJ/p7fjQKw8scqXmeMP7wJ4AbsYw4vn83t33bFnqOHuh+9KwQ 9GFELpuv+bQJQ4Se+hze6nrqgb7inkRJQbea8RRZaG0JW0mAc5dGEruETQ== -----END CERTIFICATE-----Generated at Sat Jun 14 06:03:10 2025 by rpki-client