$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa File: b1a9d485-3494-46cc-b104-fcee651d4b2b.roa (raw, json) Hash identifier: 6+lfEakIkGwYfnHZBHlF7nEetG67hFnhLMDSry2ctEs= Subject key identifier: E6:06:04:32:2A:C9:3C:46:B5:1E:07:9A:C8:5E:58:9F:94:93:5F:DB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: AA7D04A3B064B0E0BA53031414D5F2ED155E5F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa Signing time: Tue 20 May 2025 17:20:12 +0000 ROA not before: Tue 20 May 2025 17:20:12 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.79.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: aa:7d:04:a3:b0:64:b0:e0:ba:53:03:14:14:d5:f2:ed:15:5e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 17:20:12 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=a1f5876fbe1d72dd5f005a5621f553c88cac88a7b72b195498eaa04e9568c1c5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:86:e3:79:fd:08:6c:23:6e:c5:60:f4:90: 23:17:bc:3e:c8:54:51:9d:db:fa:db:2b:3f:01:e2: ad:b5:14:67:f5:10:2f:3b:7f:1a:c1:b1:27:3f:c0: 63:be:35:fb:cd:ca:d1:00:ee:78:c0:d2:db:4a:63: ba:c7:74:86:1b:39:84:6a:4c:a9:99:bd:12:61:47: 8b:85:03:4e:c0:a8:04:73:46:a9:c6:71:c1:51:d0: 5f:ad:ea:4f:91:a6:ec:5b:df:83:44:fc:41:1e:d0: 83:56:51:2b:21:1d:fa:7c:42:32:d5:fe:61:df:f5: 7b:3e:9f:f2:5b:dc:88:83:40:d3:79:9b:be:95:d6: 45:eb:be:54:cf:1d:80:94:13:17:4c:94:c7:60:d7: 65:93:ef:c2:38:4b:9a:3e:16:6e:65:8d:77:3a:e1: 88:7d:5d:e9:ce:b4:21:0d:19:c5:5c:d2:e8:0c:25: d7:4e:d7:68:fa:3a:44:e3:07:ff:45:f6:b2:c8:64: 3b:48:c0:d0:fc:33:fe:26:f5:a1:86:9d:cb:c3:bc: eb:f7:c5:e4:fe:f9:62:d8:7f:ba:00:56:8a:29:f4: 9a:79:83:cf:39:aa:8d:47:20:1d:b0:07:2c:7e:9d: 91:3f:33:2a:05:a1:ef:77:33:bf:cb:fc:40:6d:53: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:06:04:32:2A:C9:3C:46:B5:1E:07:9A:C8:5E:58:9F:94:93:5F:DB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1a9d485-3494-46cc-b104-fcee651d4b2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.79.128.0/17 Signature Algorithm: sha256WithRSAEncryption 1e:d6:74:e8:1c:17:db:7a:80:43:5e:7e:2f:9e:7d:5b:e9:58: 7a:db:6d:dd:7c:81:c1:d5:65:6c:bc:fa:be:89:be:e3:38:86: 6c:b6:f8:b3:99:55:52:60:4f:7b:79:ba:f5:bf:d9:66:7e:19: 17:3d:97:23:50:6e:d1:d6:57:79:13:c3:d4:16:b1:57:d6:8d: 64:b4:96:30:f9:61:ec:d9:5f:4c:81:eb:27:d6:e9:fc:bc:43: 42:a0:86:5a:b9:09:26:5a:53:b6:39:71:7d:8b:6a:ef:39:21: 64:85:df:97:8c:49:c7:8f:76:9a:e3:12:35:28:30:87:d7:3b: c1:ee:02:75:2e:53:1b:c1:63:2f:9c:e2:b8:34:41:14:d6:db: 1e:7d:80:8a:b2:5d:b0:b1:7f:65:c0:cb:3f:e6:1b:fc:6c:19: f1:68:78:61:77:16:d2:cc:3c:0a:21:fe:ac:36:67:32:e4:cc: 0d:ca:79:a9:42:d2:50:0f:ac:54:27:32:12:3e:89:32:4e:c0: ec:c6:cb:6e:97:ba:4c:d0:48:9c:ed:e7:45:db:b0:94:89:ed: 3f:7c:c2:62:e6:71:bf:24:9d:95:82:6b:f3:48:21:26:1d:15: 6a:d9:0f:3a:50:15:5a:e2:09:5e:12:d2:08:5d:7b:87:d3:c9: c5:0d:0d:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAKp9BKOwZLDgulMDFBTV8u0VXl8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTcyMDEyWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMWY1ODc2ZmJlMWQ3MmRkNWYwMDVhNTYyMWY1NTNjODhj YWM4OGE3YjcyYjE5NTQ5OGVhYTA0ZTk1NjhjMWM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdpIbjef0IbCNuxWD0kCMXvD7IVFGd2/rbKz8B4q21FGf1 EC87fxrBsSc/wGO+NfvNytEA7njA0ttKY7rHdIYbOYRqTKmZvRJhR4uFA07AqARz RqnGccFR0F+t6k+Rpuxb34NE/EEe0INWUSshHfp8QjLV/mHf9Xs+n/Jb3IiDQNN5 m76V1kXrvlTPHYCUExdMlMdg12WT78I4S5o+Fm5ljXc64Yh9XenOtCENGcVc0ugM JddO12j6OkTjB/9F9rLIZDtIwND8M/4m9aGGncvDvOv3xeT++WLYf7oAVoop9Jp5 g885qo1HIB2wByx+nZE/MyoFoe93M7/L/EBtU1IRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5gYEMirJPEa1HgeayF5Yn5STX9swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxYTlkNDg1LTM0OTQtNDZjYy1iMTA0LWZjZWU2NTFkNGIyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2T4AwDQYJKoZIhvcNAQELBQADggEBAB7WdOgcF9t6gENefi+efVvpWHrb bd18gcHVZWy8+r6JvuM4hmy2+LOZVVJgT3t5uvW/2WZ+GRc9lyNQbtHWV3kTw9QW sVfWjWS0ljD5YezZX0yB6yfW6fy8Q0Kghlq5CSZaU7Y5cX2Lau85IWSF35eMSceP dprjEjUoMIfXO8HuAnUuUxvBYy+c4rg0QRTW2x59gIqyXbCxf2XAyz/mG/xsGfFo eGF3FtLMPAoh/qw2ZzLkzA3KealC0lAPrFQnMhI+iTJOwOzGy26XukzQSJzt50Xb sJSJ7T98wmLmcb8knZWCa/NIISYdFWrZDzpQFVriCV4S0ghde4fTycUNDew= -----END CERTIFICATE-----Generated at Sat Jun 14 06:19:17 2025 by rpki-client