$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ce6c4-4700-4354-9222-9e25c8a83e36.roa File: 862ce6c4-4700-4354-9222-9e25c8a83e36.roa (raw, json) Hash identifier: bVwzB2SGamABEZAAB4WZHdgMiuG5VTgzPOfspNLD7js= Subject key identifier: 3D:6A:53:2F:A1:4D:32:2C:5C:F4:29:AF:87:C9:52:12:66:D1:0E:77 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08AE217468123B811D771009BFC43CFC29772F30 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ce6c4-4700-4354-9222-9e25c8a83e36.roa Signing time: Tue 20 May 2025 17:20:49 +0000 ROA not before: Tue 20 May 2025 17:20:49 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.66.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ae:21:74:68:12:3b:81:1d:77:10:09:bf:c4:3c:fc:29:77:2f:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 17:20:49 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=3e7e529306ea56b4db7afc46adc47feee769e5a38e75ea2a2a67794fab414d06, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:7a:f1:9a:3e:9f:bf:05:76:89:bd:ca:d5: 35:72:e2:51:e7:e2:50:c9:21:f1:ea:35:c6:8b:cf: 93:fc:3c:58:18:94:fe:28:2d:fd:5c:16:36:0f:c9: a4:e8:3c:2a:cf:45:42:53:fe:70:e8:79:45:9c:d5: 61:7b:5c:04:57:69:5b:d0:37:fb:45:e4:ec:f7:7f: de:b0:8b:fd:79:0d:ec:d7:00:54:c3:fd:4a:b0:41: 63:5c:43:70:08:c0:5f:5d:0d:4f:5d:0a:b1:96:42: ea:5b:2a:ae:af:ab:0b:92:d7:6f:79:3e:ad:44:9a: 97:1e:0f:a0:01:4a:19:79:23:c2:aa:d0:54:ce:dc: 55:a7:5e:c8:73:e8:9b:a7:3f:6c:6d:9c:10:32:8d: 53:24:4f:11:5d:fb:a7:59:e1:43:e2:33:8d:7c:f4: a3:60:68:91:db:c9:34:f6:ee:3a:90:d3:9c:80:fb: af:e4:27:15:8b:4e:e9:b5:a2:0d:4d:38:f6:26:9b: 86:f8:75:70:d9:63:de:58:fe:62:8b:fb:0f:c3:f3: 7f:31:73:77:94:61:08:d7:aa:73:77:69:39:d4:fd: 9b:18:ef:8a:9e:8e:51:5d:ca:eb:a5:19:41:bc:43: 16:0c:49:40:df:13:85:1e:bc:03:1e:7c:3f:c9:cc: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6A:53:2F:A1:4D:32:2C:5C:F4:29:AF:87:C9:52:12:66:D1:0E:77 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/862ce6c4-4700-4354-9222-9e25c8a83e36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.66.64.0/19 Signature Algorithm: sha256WithRSAEncryption 35:33:3d:f5:da:2a:25:54:d3:19:18:37:ae:e6:fb:63:fb:86: b4:c0:29:36:10:75:d1:63:a0:4d:04:31:7d:0a:ed:83:cc:af: dc:06:75:1a:19:66:02:9b:79:b0:9c:43:59:fb:8e:99:c0:15: 41:af:ce:62:dd:31:8c:c8:d8:d1:be:42:e8:34:22:56:c6:cc: 4f:36:bc:83:de:3d:f8:41:53:04:01:1c:61:03:4d:a5:5f:23: 0a:99:30:58:09:a6:c9:aa:f2:e1:13:33:f4:75:f9:6b:cc:89: bf:09:07:cc:19:40:c6:f9:d2:86:9d:1d:d4:11:00:29:06:ff: 72:37:2c:a7:33:76:21:c4:5b:ec:77:d7:ee:ed:bd:36:c2:26: 37:5c:81:41:bf:94:1c:12:54:e4:6c:1f:d3:89:3a:7f:4a:7b: 7f:f3:7d:e9:3a:8d:ac:b4:16:f0:e3:f4:f0:d3:47:80:9f:0f: c1:38:4b:2f:cd:6b:fd:8b:c3:76:de:6b:09:cf:07:56:19:1e: 03:1d:a6:9f:74:51:99:e3:ea:12:53:58:d2:0b:79:d8:26:dc: fa:9e:78:84:e2:31:80:f9:50:e5:17:f1:f3:06:74:f7:e8:62: d3:f1:57:59:50:da:a0:cf:cf:e5:31:06:c4:24:8f:dd:f8:0d: 28:8e:32:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCK4hdGgSO4EddxAJv8Q8/Cl3LzAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTcyMDQ5WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTdlNTI5MzA2ZWE1NmI0ZGI3YWZjNDZhZGM0N2ZlZWU3 NjllNWEzOGU3NWVhMmEyYTY3Nzk0ZmFiNDE0ZDA2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKKHrxmj6fvwV2ib3K1TVy4lHn4lDJIfHqNcaLz5P8PFgY lP4oLf1cFjYPyaToPCrPRUJT/nDoeUWc1WF7XARXaVvQN/tF5Oz3f96wi/15DezX AFTD/UqwQWNcQ3AIwF9dDU9dCrGWQupbKq6vqwuS1295Pq1EmpceD6ABShl5I8Kq 0FTO3FWnXshz6JunP2xtnBAyjVMkTxFd+6dZ4UPiM4189KNgaJHbyTT27jqQ05yA +6/kJxWLTum1og1NOPYmm4b4dXDZY95Y/mKL+w/D838xc3eUYQjXqnN3aTnU/ZsY 74qejlFdyuulGUG8QxYMSUDfE4UevAMefD/JzEYBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPWpTL6FNMixc9Cmvh8lSEmbRDncwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2MmNlNmM0LTQ3MDAtNDM1NC05MjIyLTllMjVjOGE4M2UzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2QkAwDQYJKoZIhvcNAQELBQADggEBADUzPfXaKiVU0xkYN67m+2P7hrTA KTYQddFjoE0EMX0K7YPMr9wGdRoZZgKbebCcQ1n7jpnAFUGvzmLdMYzI2NG+Qug0 IlbGzE82vIPePfhBUwQBHGEDTaVfIwqZMFgJpsmq8uETM/R1+WvMib8JB8wZQMb5 0oadHdQRACkG/3I3LKczdiHEW+x31+7tvTbCJjdcgUG/lBwSVORsH9OJOn9Ke3/z fek6jay0FvDj9PDTR4CfD8E4Sy/Na/2Lw3beawnPB1YZHgMdpp90UZnj6hJTWNIL edgm3PqeeITiMYD5UOUX8fMGdPfoYtPxV1lQ2qDPz+UxBsQkj934DSiOMpc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:35:10 2025 by rpki-client