$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1abd53-11cc-40f5-a940-7880dabf252e.roa File: ab1abd53-11cc-40f5-a940-7880dabf252e.roa (raw, json) Hash identifier: z2YoTP/ubDbJTN3C7c9uQTMIz015kW5WQiNKJawbHPA= Subject key identifier: B5:73:72:10:41:A9:4E:21:8C:DC:1D:89:23:F2:CD:E6:78:70:5B:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 445B2E7598E8D5F9D3F3C83057ACA3CFF68BC263 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1abd53-11cc-40f5-a940-7880dabf252e.roa Signing time: Mon 09 Jun 2025 16:32:08 +0000 ROA not before: Mon 09 Jun 2025 16:32:08 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.157.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:5b:2e:75:98:e8:d5:f9:d3:f3:c8:30:57:ac:a3:cf:f6:8b:c2:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:32:08 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=c61d7d2b5836cb9cf4f3c3524e67d7501788ec69508d0a99e8ca314c822157f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4a:e5:cc:bf:21:d3:a3:e7:70:72:7a:19:2e: 0d:e9:ff:70:be:71:aa:5e:be:b1:e8:35:b7:03:b0: eb:e9:99:13:a6:ba:01:e4:47:80:9b:12:d8:34:6c: 7b:28:ae:f0:27:94:fb:a3:c0:94:47:63:dd:2d:c7: 8a:72:a4:46:14:84:7c:33:19:bf:b4:33:2a:a2:86: b2:67:e2:69:2f:12:d7:70:07:2e:4a:74:77:ff:11: db:10:ee:90:35:89:ee:41:1a:99:9c:8f:5d:3b:0c: ea:ec:9c:ac:2d:18:69:4a:09:cc:c3:3f:01:13:9c: e5:7e:08:fd:5b:74:10:c6:71:ee:d4:9b:2d:ca:b7: 59:93:f7:ab:fa:dd:7d:26:10:71:f5:cd:21:4e:69: 4b:a8:c8:fa:82:0c:92:76:43:28:3b:f7:80:11:29: e6:04:4b:ec:74:59:a7:ac:fc:c2:90:95:a3:bf:a5: 9e:be:8a:bb:98:68:b1:52:3c:31:e0:d5:30:57:ba: 6c:21:7b:6a:cb:11:33:fe:c3:c4:58:31:d6:72:48: 66:cc:b5:64:03:7e:3a:72:a2:2b:3f:44:25:77:97: 1a:74:67:46:fe:12:0d:2f:9a:c5:48:87:1b:d3:59: 63:ad:3b:2c:92:6a:6a:47:47:10:de:fb:a1:34:33: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:72:10:41:A9:4E:21:8C:DC:1D:89:23:F2:CD:E6:78:70:5B:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ab1abd53-11cc-40f5-a940-7880dabf252e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.157.128.0/18 Signature Algorithm: sha256WithRSAEncryption 3d:c4:da:5c:6d:a7:6d:0e:b9:e0:59:a6:5e:b9:b1:b2:e9:0d: 26:5d:85:22:4e:b6:12:2d:04:21:53:f0:dc:d7:64:d5:b2:1d: e5:46:92:12:09:14:00:d1:93:d0:92:25:29:81:83:a6:bf:cf: 44:d4:30:6a:04:8c:f1:d9:a4:99:96:f4:d2:0f:7f:63:df:f5: d2:81:29:46:00:24:c3:1b:28:d9:3b:51:8f:f7:97:7f:b7:3c: af:e7:1b:3a:ca:ca:45:18:b1:30:f6:0c:dc:48:cd:5c:78:cc: f4:7b:6a:81:40:0a:0b:ce:af:a7:ac:74:71:17:d0:94:0e:04: 08:0a:87:2e:3c:23:7e:fb:75:2f:5a:dd:76:55:95:97:cd:7f: eb:df:75:73:b9:84:ff:19:64:18:d0:f7:df:a2:d1:6c:7a:4e: 1d:59:e2:e2:b4:18:0e:36:81:c8:02:55:47:50:cb:cc:51:38: 94:50:2b:47:f9:18:da:62:23:15:de:68:fe:ff:ed:16:d0:32: 04:c3:86:14:44:5e:38:c3:3c:48:35:9b:77:f6:91:cb:4c:8e: 21:20:fc:46:43:19:c1:b4:c8:15:73:ac:43:dd:16:58:1a:ed: 13:b6:fa:db:b1:4a:1c:19:95:71:c3:ea:5c:ae:90:8e:94:19: 18:d6:bc:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURFsudZjo1fnT88gwV6yjz/aLwmMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYzMjA4WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjFkN2QyYjU4MzZjYjljZjRmM2MzNTI0ZTY3ZDc1MDE3 ODhlYzY5NTA4ZDBhOTllOGNhMzE0YzgyMjE1N2Y2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDUSuXMvyHTo+dwcnoZLg3p/3C+capevrHoNbcDsOvpmROm ugHkR4CbEtg0bHsorvAnlPujwJRHY90tx4pypEYUhHwzGb+0MyqihrJn4mkvEtdw By5KdHf/EdsQ7pA1ie5BGpmcj107DOrsnKwtGGlKCczDPwETnOV+CP1bdBDGce7U my3Kt1mT96v63X0mEHH1zSFOaUuoyPqCDJJ2Qyg794ARKeYES+x0Waes/MKQlaO/ pZ6+iruYaLFSPDHg1TBXumwhe2rLETP+w8RYMdZySGbMtWQDfjpyois/RCV3lxp0 Z0b+Eg0vmsVIhxvTWWOtOyySampHRxDe+6E0M7NNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtXNyEEGpTiGM3B2JI/LN5nhwWx4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiMWFiZDUzLTExY2MtNDBmNS1hOTQwLTc4ODBkYWJmMjUyZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2nYAwDQYJKoZIhvcNAQELBQADggEBAD3E2lxtp20OueBZpl65sbLpDSZd hSJOthItBCFT8NzXZNWyHeVGkhIJFADRk9CSJSmBg6a/z0TUMGoEjPHZpJmW9NIP f2Pf9dKBKUYAJMMbKNk7UY/3l3+3PK/nGzrKykUYsTD2DNxIzVx4zPR7aoFACgvO r6esdHEX0JQOBAgKhy48I377dS9a3XZVlZfNf+vfdXO5hP8ZZBjQ99+i0Wx6Th1Z 4uK0GA42gcgCVUdQy8xROJRQK0f5GNpiIxXeaP7/7RbQMgTDhhREXjjDPEg1m3f2 kctMjiEg/EZDGcG0yBVzrEPdFlga7RO2+tuxShwZlXHD6lyukI6UGRjWvDg= -----END CERTIFICATE-----Generated at Sat Jun 14 23:52:25 2025 by rpki-client