$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/864a183e-fef8-4178-a4ef-4b638820d752.roa File: 864a183e-fef8-4178-a4ef-4b638820d752.roa (raw, json) Hash identifier: kltnlIXkoObvSt4GH+LDTmJou0udWn65oLLQLS9GgY0= Subject key identifier: 06:A9:B5:D1:97:97:2E:B5:EE:C7:D4:65:66:08:AE:0A:88:09:1F:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 21A4AC681C03BCF71EDF6BA1B09A397F05C0440A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/864a183e-fef8-4178-a4ef-4b638820d752.roa Signing time: Fri 13 Jun 2025 18:01:24 +0000 ROA not before: Fri 13 Jun 2025 18:01:24 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.80.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a4:ac:68:1c:03:bc:f7:1e:df:6b:a1:b0:9a:39:7f:05:c0:44:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 13 18:01:24 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=347b344fee2729041b5214ef92feb7bbc986575b3a0f929cbc284e3dbeead8dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:39:45:94:9f:cb:d9:5b:23:c0:ce:01:9b: 06:8c:b2:f4:08:a0:0d:20:93:77:68:37:19:e0:de: f1:cc:60:ad:05:c7:ce:34:e9:1a:59:28:f3:be:fe: ad:3e:de:b0:9f:ff:ba:b3:52:d1:1c:fd:1a:7c:9e: a8:2f:4d:a1:61:9d:fe:41:d5:8f:06:c0:82:7c:48: 8d:e8:90:d3:b9:65:6f:43:c0:48:8f:a1:26:38:ab: 53:d8:e8:b9:2a:17:e5:3f:60:1b:67:09:be:8c:63: b5:4f:8a:2d:3f:88:e9:3a:e3:c5:f3:cc:48:0d:a3: c1:85:49:ad:13:57:37:9f:03:d7:b8:17:26:41:48: 3b:c9:0c:9a:3c:1f:e4:b5:46:21:f3:98:16:7e:e3: ec:05:da:9e:53:ec:d6:bc:91:af:78:9c:68:a6:89: 43:b1:77:fa:ae:93:4c:4a:9a:64:42:b8:f2:4d:b6: ea:e6:d8:52:e8:e4:79:51:b1:f6:8d:22:93:d2:e6: 0e:f8:b9:4b:19:1e:43:a8:24:65:28:7f:4b:cd:35: 12:dc:06:b2:f2:26:5d:db:00:4d:60:03:54:83:0d: ac:e4:25:3e:12:ec:a3:1a:e6:bf:17:f2:17:d2:ed: 35:07:26:fc:8b:cf:44:5a:b8:06:28:ba:a7:ce:d7: 90:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:B5:D1:97:97:2E:B5:EE:C7:D4:65:66:08:AE:0A:88:09:1F:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/864a183e-fef8-4178-a4ef-4b638820d752.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.80.0.0/14 Signature Algorithm: sha256WithRSAEncryption 3f:8f:19:a0:79:6c:e8:e6:b9:a8:a0:16:6a:2f:09:2d:cd:97: 7b:6c:27:96:d7:55:86:1e:ab:73:d2:10:c6:9c:1e:02:d1:34: bd:30:f0:d5:e8:03:1b:a1:22:41:ae:94:19:1f:f7:c8:cc:3e: 07:34:68:41:ca:ad:47:be:9c:46:14:77:63:64:b9:22:60:d0: f1:5f:67:47:c0:ee:e0:73:84:eb:1a:d2:1a:41:4d:61:fe:fd: de:ca:fb:db:0e:e6:d6:27:f2:4c:16:47:2d:15:05:82:47:2c: 4e:62:3c:9b:d8:ec:5f:10:f7:61:e3:ea:b0:2a:f1:b5:f5:a0: b1:95:58:7a:af:f9:df:3b:29:74:c3:2d:f8:6c:5e:a5:97:3e: 6e:23:62:38:14:c3:b6:c7:d0:1d:d7:72:bb:78:fe:21:97:1c: b9:34:dd:7b:a0:e4:37:2b:7b:e4:d7:3d:26:cd:30:58:d2:ec: b0:25:5a:e3:cb:24:b6:61:30:36:c8:c1:40:27:97:51:08:96: 23:70:7b:64:ac:18:35:c3:bb:0e:61:6d:02:a5:32:07:9b:e2: a7:d6:34:91:7d:03:90:04:b6:31:c9:d2:2f:cd:b0:ef:86:97: 04:24:34:9f:75:0a:d4:40:54:da:a3:df:77:0a:54:05:ab:e6: b8:27:0c:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIaSsaBwDvPce32uhsJo5fwXARAowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjEzMTgwMTI0WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzNDdiMzQ0ZmVlMjcyOTA0MWI1MjE0ZWY5MmZlYjdiYmM5 ODY1NzViM2EwZjkyOWNiYzI4NGUzZGJlZWFkOGRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbujlFlJ/L2VsjwM4BmwaMsvQIoA0gk3doNxng3vHMYK0F x8406RpZKPO+/q0+3rCf/7qzUtEc/Rp8nqgvTaFhnf5B1Y8GwIJ8SI3okNO5ZW9D wEiPoSY4q1PY6LkqF+U/YBtnCb6MY7VPii0/iOk648XzzEgNo8GFSa0TVzefA9e4 FyZBSDvJDJo8H+S1RiHzmBZ+4+wF2p5T7Na8ka94nGimiUOxd/quk0xKmmRCuPJN turm2FLo5HlRsfaNIpPS5g74uUsZHkOoJGUof0vNNRLcBrLyJl3bAE1gA1SDDazk JT4S7KMa5r8X8hfS7TUHJvyLz0RauAYouqfO15C3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUBqm10ZeXLrXux9RlZgiuCogJHx4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg2NGExODNlLWZlZjgtNDE3OC1hNGVmLTRiNjM4ODIwZDc1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwISUDANBgkqhkiG9w0BAQsFAAOCAQEAP48ZoHls6Oa5qKAWai8JLc2Xe2wn ltdVhh6rc9IQxpweAtE0vTDw1egDG6EiQa6UGR/3yMw+BzRoQcqtR76cRhR3Y2S5 ImDQ8V9nR8Du4HOE6xrSGkFNYf793sr72w7m1ifyTBZHLRUFgkcsTmI8m9jsXxD3 YePqsCrxtfWgsZVYeq/53zspdMMt+GxepZc+biNiOBTDtsfQHddyu3j+IZccuTTd e6DkNyt75Nc9Js0wWNLssCVa48sktmEwNsjBQCeXUQiWI3B7ZKwYNcO7DmFtAqUy B5vip9Y0kX0DkAS2McnSL82w74aXBCQ0n3UK1EBU2qPfdwpUBavmuCcMAg== -----END CERTIFICATE-----Generated at Sat Jun 14 06:07:24 2025 by rpki-client