$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4233d2e-c37a-4891-99b1-55eb8aa85e55.roa File: b4233d2e-c37a-4891-99b1-55eb8aa85e55.roa (raw, json) Hash identifier: lg35n8ANE8JWrS3vkSSxZizFLCGX8Q6f0ycbrgPzfFo= Subject key identifier: E2:20:0A:3F:F1:70:49:26:7A:BC:EC:A1:94:B7:C2:5C:C7:89:E9:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70D928B4401B2B59E09A0DAB3375ACE598E8E3CA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4233d2e-c37a-4891-99b1-55eb8aa85e55.roa Signing time: Mon 09 Jun 2025 17:40:40 +0000 ROA not before: Mon 09 Jun 2025 17:40:40 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d9:28:b4:40:1b:2b:59:e0:9a:0d:ab:33:75:ac:e5:98:e8:e3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 17:40:40 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=ecfbe05646fa0241f11210abaff972ae1cb95a99ab3f67e5d6e786be5363a370, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:5d:e0:e5:99:13:7f:3a:1a:4e:1a:a5:f0: 94:b3:05:cc:91:3c:62:78:24:d5:44:98:00:cd:94: d1:b7:0c:fd:b7:07:1d:af:95:18:b6:86:82:55:c4: 54:6c:15:8d:e3:e5:5c:2e:53:ac:e0:5b:95:75:1c: ac:85:32:92:2f:24:e2:f9:52:ff:43:f4:fe:88:26: f1:d8:2f:ad:8a:dd:91:e5:35:40:5a:19:ef:40:5a: 5c:fd:b5:b2:31:1e:ce:ed:28:62:a7:93:ee:1a:ce: 6a:33:f3:dc:9a:bf:50:d5:8b:a5:f6:ab:31:e5:05: 4a:13:ec:e9:a9:09:16:19:f1:17:fd:6a:75:a2:34: e8:76:e3:59:3d:0d:ae:32:75:d5:12:74:fe:fd:88: 30:96:d6:fe:a3:3b:0f:81:c5:08:a8:4e:ea:65:cc: 9e:42:80:77:93:dd:9e:92:bc:7a:1c:2d:09:b9:7b: 71:a2:c1:ea:c3:17:f3:9f:74:97:cb:8e:52:35:ca: c8:0b:31:c8:f6:0f:26:91:d8:09:cf:5c:ab:e8:4f: ea:7b:2d:b5:0c:9a:8e:6b:32:42:66:73:14:f1:0e: 74:92:50:7b:35:89:dc:d2:37:91:18:61:9f:f1:55: 50:c5:d9:08:f5:d6:a3:ff:e7:19:57:46:c5:86:55: b1:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:20:0A:3F:F1:70:49:26:7A:BC:EC:A1:94:B7:C2:5C:C7:89:E9:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b4233d2e-c37a-4891-99b1-55eb8aa85e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.192.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:b5:15:ea:9a:2f:e0:01:4a:26:85:45:d7:1f:36:72:09:6b: fe:3b:7b:a8:28:ce:39:4a:68:70:47:57:7f:ec:f4:cf:07:c5: 22:a0:3a:93:97:a6:7f:db:52:c8:18:d3:4a:8b:44:8b:be:da: f7:4c:7c:df:9d:da:4a:27:c4:37:15:88:54:57:53:4b:67:a1: dd:70:93:84:02:38:02:b9:8a:df:54:ca:36:10:a9:71:d4:55: aa:54:11:1b:64:07:0c:ae:53:5a:02:8a:c9:2e:6e:89:54:dc: 1f:76:29:9b:21:cd:c9:e4:88:86:ec:2b:e8:4f:73:df:a9:1b: 60:f0:2d:8d:b6:3c:7d:59:dd:76:c5:f3:31:70:1f:5a:c3:9a: 6c:4d:9c:72:60:62:f4:28:6f:79:72:10:0f:85:c4:ba:72:19: 5d:9a:c4:55:a0:61:f8:ff:d2:f1:26:ec:5a:e9:d7:6a:e2:e3: 4f:d7:c7:8a:a3:f2:f7:b8:3f:04:40:01:44:92:7b:e4:86:5e: 87:bb:8b:35:47:e4:ac:81:0f:3e:fd:c9:2a:bf:ca:97:7a:f4: 7c:59:1e:46:8d:e1:b0:74:f0:5e:6e:1b:17:38:55:98:cc:52: 8c:5d:fb:ba:c7:18:a3:bf:bc:12:dc:5b:6b:a6:49:06:5d:ba: 3a:fb:94:37 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcNkotEAbK1ngmg2rM3Ws5Zjo48owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTc0MDQwWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlY2ZiZTA1NjQ2ZmEwMjQxZjExMjEwYWJhZmY5NzJhZTFj Yjk1YTk5YWIzZjY3ZTVkNmU3ODZiZTUzNjNhMzcwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUJl3g5ZkTfzoaThql8JSzBcyRPGJ4JNVEmADNlNG3DP23 Bx2vlRi2hoJVxFRsFY3j5VwuU6zgW5V1HKyFMpIvJOL5Uv9D9P6IJvHYL62K3ZHl NUBaGe9AWlz9tbIxHs7tKGKnk+4azmoz89yav1DVi6X2qzHlBUoT7OmpCRYZ8Rf9 anWiNOh241k9Da4yddUSdP79iDCW1v6jOw+BxQioTuplzJ5CgHeT3Z6SvHocLQm5 e3GiwerDF/OfdJfLjlI1ysgLMcj2DyaR2AnPXKvoT+p7LbUMmo5rMkJmcxTxDnSS UHs1idzSN5EYYZ/xVVDF2Qj11qP/5xlXRsWGVbEJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4iAKP/FwSSZ6vOyhlLfCXMeJ6cUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I0MjMzZDJlLWMzN2EtNDg5MS05OWIxLTU1ZWI4YWE4NWU1NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM25sAwDQYJKoZIhvcNAQELBQADggEBAGy1FeqaL+ABSiaFRdcfNnIJa/47 e6gozjlKaHBHV3/s9M8HxSKgOpOXpn/bUsgY00qLRIu+2vdMfN+d2konxDcViFRX U0tnod1wk4QCOAK5it9UyjYQqXHUVapUERtkBwyuU1oCiskubolU3B92KZshzcnk iIbsK+hPc9+pG2DwLY22PH1Z3XbF8zFwH1rDmmxNnHJgYvQob3lyEA+FxLpyGV2a xFWgYfj/0vEm7Frp12ri40/Xx4qj8ve4PwRAAUSSe+SGXoe7izVH5KyBDz79ySq/ ypd69HxZHkaN4bB08F5uGxc4VZjMUoxd+7rHGKO/vBLcW2umSQZdujr7lDc= -----END CERTIFICATE-----Generated at Sat Jun 14 05:53:56 2025 by rpki-client