$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc9b8260-0a72-41d0-9f34-887fcee35b7a.roa File: cc9b8260-0a72-41d0-9f34-887fcee35b7a.roa (raw, json) Hash identifier: vTr5iy15VW+/kggamFlT5z88/Zb5pLTLdxbfXGLcGyo= Subject key identifier: 86:01:E3:BB:50:D3:07:BE:38:F7:0D:8A:28:53:8E:54:83:D3:E8:0B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5ACB6B2D95E053FC5928BF938BDB32F4529EF5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc9b8260-0a72-41d0-9f34-887fcee35b7a.roa Signing time: Mon 09 Jun 2025 18:10:41 +0000 ROA not before: Mon 09 Jun 2025 18:10:41 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cb:6b:2d:95:e0:53:fc:59:28:bf:93:8b:db:32:f4:52:9e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:10:41 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=7f7ef7b1219be39d4faece1cc7a47df2c02fcd23caa5815647cb5e0bc70105f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:2d:83:a5:3c:bd:0e:fb:68:bc:1b:73:f2: f6:cc:c6:9d:22:69:bf:e1:9c:a5:ef:63:84:ad:52: be:1f:9e:62:94:59:74:da:aa:be:05:ea:35:be:24: 20:56:74:ce:e3:4b:b1:ed:12:0f:1a:8c:d3:bf:0e: 57:86:d4:e2:0f:15:3a:d6:5f:20:a1:bc:bc:39:12: ef:5a:6f:31:4d:53:40:61:c9:bf:49:19:c6:8a:ab: 7d:af:26:28:54:45:97:fd:3d:18:b1:02:30:bc:07: c8:30:96:9f:96:07:4c:69:97:00:22:24:17:7c:24: d4:62:be:66:e6:fc:e9:03:e8:8a:bd:d1:08:d9:ec: 80:60:dd:b7:8a:64:a5:86:3c:cc:91:dc:ea:33:2a: c0:40:5c:39:03:78:42:c2:37:23:e9:94:6d:eb:11: 48:37:07:88:c6:29:52:05:cb:25:3c:c5:cc:d5:9c: b6:6e:7e:db:63:42:83:bc:70:13:b2:2e:52:5e:f5: fa:81:45:e8:00:9e:9f:84:ce:da:df:57:2c:c2:79: fd:07:d7:ac:ac:55:24:39:5e:68:53:f3:b9:35:b9: 4d:b4:bf:e3:8b:8d:b9:b0:56:98:25:2c:dc:ea:5b: 25:0c:48:72:66:60:e2:a6:fa:d1:49:be:36:0e:e0: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:01:E3:BB:50:D3:07:BE:38:F7:0D:8A:28:53:8E:54:83:D3:E8:0B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cc9b8260-0a72-41d0-9f34-887fcee35b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.108.0/24 Signature Algorithm: sha256WithRSAEncryption 43:58:a5:13:92:e0:dc:0b:9f:c1:1b:61:71:c3:e0:cf:f9:99: 25:90:87:9c:88:0c:ff:d9:68:06:e8:3a:dd:1e:e5:26:20:58: c2:8d:f5:5f:e8:8b:a0:9b:97:50:38:69:22:18:36:bd:a2:30: de:0b:a4:4f:e5:a5:01:0d:8b:72:86:88:7a:83:7b:a0:5b:33: 35:9c:b3:de:4d:4a:e2:26:8e:3b:ec:db:d0:76:46:ab:da:17: 5e:6a:f7:af:e2:bf:26:12:15:83:bb:9f:39:8a:2c:09:3c:28: 24:5d:8c:eb:e6:30:ec:ab:ab:be:27:54:61:5a:32:25:f8:42: b4:0b:96:26:a6:d0:83:ea:8b:bc:59:61:c2:56:93:d7:38:57: 0b:a4:b8:be:ce:98:58:5a:ce:c7:59:e9:fb:12:ab:7e:f8:d1: cd:13:5a:a7:2e:14:55:0d:ce:72:b0:f8:a2:b9:6f:f0:bd:bf: e1:49:2b:c6:7e:61:d9:ea:c9:8b:73:e4:6c:6e:c2:0c:c4:8c: 64:42:80:df:99:e5:2e:96:ca:ab:36:9b:dc:90:be:53:0f:e8: 5b:cb:20:e0:9e:d7:7b:13:eb:cd:f1:61:b2:d9:c6:28:af:1c: 95:40:5b:3b:8c:67:b4:32:b4:d2:77:74:2d:9f:a2:bd:80:d7: 87:2d:68:a4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITWstrLZXgU/xZKL+Ti9sy9FKe9TANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MDkxODEwNDFaFw0yNTA3MTQyMzU5NTla MHoxSTBHBgNVBAUTQDdmN2VmN2IxMjE5YmUzOWQ0ZmFlY2UxY2M3YTQ3ZGYyYzAy ZmNkMjNjYWE1ODE1NjQ3Y2I1ZTBiYzcwMTA1ZjYxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALeuLYOlPL0O+2i8G3Py9szGnSJpv+Gcpe9jhK1Svh+eYpRZ dNqqvgXqNb4kIFZ0zuNLse0SDxqM078OV4bU4g8VOtZfIKG8vDkS71pvMU1TQGHJ v0kZxoqrfa8mKFRFl/09GLECMLwHyDCWn5YHTGmXACIkF3wk1GK+Zub86QPoir3R CNnsgGDdt4pkpYY8zJHc6jMqwEBcOQN4QsI3I+mUbesRSDcHiMYpUgXLJTzFzNWc tm5+22NCg7xwE7IuUl71+oFF6ACen4TO2t9XLMJ5/QfXrKxVJDleaFPzuTW5TbS/ 44uNubBWmCUs3OpbJQxIcmZg4qb60Um+Ng7gKZ8CAwEAAaOCArEwggKtMB0GA1Ud DgQWBBSGAeO7UNMHvjj3DYooU45Ug9PoCzAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvY2M5YjgyNjAtMGE3Mi00MWQwLTlmMzQtODg3ZmNlZTM1YjdhLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEADbwbDANBgkqhkiG9w0BAQsFAAOCAQEAQ1ilE5Lg3AufwRthccPgz/mZJZCH nIgM/9loBug63R7lJiBYwo31X+iLoJuXUDhpIhg2vaIw3gukT+WlAQ2LcoaIeoN7 oFszNZyz3k1K4iaOO+zb0HZGq9oXXmr3r+K/JhIVg7ufOYosCTwoJF2M6+Yw7Kur vidUYVoyJfhCtAuWJqbQg+qLvFlhwlaT1zhXC6S4vs6YWFrOx1np+xKrfvjRzRNa py4UVQ3OcrD4orlv8L2/4Ukrxn5h2erJi3PkbG7CDMSMZEKA35nlLpbKqzab3JC+ Uw/oW8sg4J7XexPrzfFhstnGKK8clUBbO4xntDK00nd0LZ+ivYDXhy1opA== -----END CERTIFICATE-----Generated at Sat Jun 14 05:50:46 2025 by rpki-client