$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d489da28-9b7c-4eab-91b5-6553e8bd7602.roa File: d489da28-9b7c-4eab-91b5-6553e8bd7602.roa (raw, json) Hash identifier: VpbUN8+JyT2YxWuHKjgNO/FGOTR+Fa2fTzSMgF1LOXM= Subject key identifier: 3D:EE:22:32:A0:5C:2A:75:98:D9:CF:FC:EE:A8:BD:FB:48:35:5C:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 752764E1C97DD74A5CD8025452FB82CCB25CB439 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d489da28-9b7c-4eab-91b5-6553e8bd7602.roa Signing time: Mon 09 Jun 2025 16:21:46 +0000 ROA not before: Mon 09 Jun 2025 16:21:46 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:27:64:e1:c9:7d:d7:4a:5c:d8:02:54:52:fb:82:cc:b2:5c:b4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:21:46 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=95d795335b28d017a191b29dc448c0f657e2cbaf35a36d1f9cbeb2e4502f1eff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4f:ee:b3:58:ba:3c:98:ac:5a:bb:a6:df:83: 08:74:ff:0b:ce:cf:14:52:b7:06:0c:5c:cb:82:27: 5a:1d:2a:6f:8a:d1:7a:d8:67:5e:f9:04:13:02:b6: 5f:ee:57:bb:36:a7:79:8f:3f:2f:c2:28:36:d5:c1: 3d:e1:6e:e7:07:86:94:54:97:2b:37:3b:6d:0e:df: bf:83:70:58:ba:0e:27:65:49:7a:23:4e:67:61:89: 9c:05:22:13:fe:58:cd:d4:80:1e:d3:88:4a:5e:b5: ba:a9:31:2f:9a:26:f8:41:b8:c8:61:b5:bc:77:33: e7:9f:ae:e9:86:87:2b:1e:75:6d:af:8c:4f:20:8d: a8:03:0e:d1:90:e5:f2:31:5e:1f:7b:ea:bd:eb:fb: 56:93:fb:37:2c:ea:f5:0f:6f:75:2b:d0:b3:ae:28: 88:ec:ca:e8:d4:87:48:e0:36:0d:65:b3:07:0e:47: 8f:e7:ab:f9:3a:11:7c:ee:a3:0c:b9:8f:8f:57:61: 97:83:64:64:b3:7a:65:cd:3b:53:7e:94:af:f7:4c: ae:42:41:ad:d4:be:d3:13:f4:95:c9:ab:69:34:43: 78:9a:31:82:e9:e2:3a:b1:09:7b:71:15:a7:7c:7f: e1:fe:65:b5:83:73:76:84:de:d7:9d:8b:86:a3:3c: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:EE:22:32:A0:5C:2A:75:98:D9:CF:FC:EE:A8:BD:FB:48:35:5C:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d489da28-9b7c-4eab-91b5-6553e8bd7602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.223.0/24 Signature Algorithm: sha256WithRSAEncryption 19:20:fd:87:9a:c5:87:c7:99:22:e9:99:59:b7:6c:48:1c:63: 2f:b3:37:b8:84:e1:7c:d7:04:7d:3c:4b:35:28:5f:d4:80:ed: 9f:72:61:0e:0f:f0:b4:5f:9e:5c:db:ae:2e:fd:51:e1:d0:ec: 52:7c:94:2b:fd:fe:f8:1b:1a:49:9b:10:25:84:0e:a1:31:c6: 72:dc:49:aa:96:fb:49:ed:a5:eb:8f:a7:bb:d4:fe:4f:b1:ea: 33:5b:74:34:41:8e:28:cc:bb:84:46:5e:7e:08:c0:89:2e:d1: 5d:18:fb:c6:47:ad:b1:6d:c8:e6:25:40:8f:a9:a6:81:7a:c0: 56:b9:b0:9a:d9:76:40:22:ed:30:10:8f:ca:f9:de:e1:05:5a: 72:ad:fe:70:e2:96:f3:01:5a:c2:b9:a8:95:e5:80:ee:28:b8: f4:50:46:32:fc:e8:a0:81:de:87:12:0d:06:4c:60:65:ab:b1: 3c:50:40:29:02:af:eb:36:0c:e4:28:ac:b1:c3:ef:ce:d6:73: 9b:22:3c:8a:43:53:d4:6f:8a:d6:f1:d8:56:e6:c1:51:28:6f: 94:c5:64:a5:d2:6f:d6:67:c4:d5:6a:72:fb:fb:4c:09:fd:f8: 57:dc:45:d0:84:81:6e:9d:64:55:3a:6a:e1:8a:ca:ad:15:f5: 9b:f2:fa:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdSdk4cl910pc2AJUUvuCzLJctDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYyMTQ2WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWQ3OTUzMzViMjhkMDE3YTE5MWIyOWRjNDQ4YzBmNjU3 ZTJjYmFmMzVhMzZkMWY5Y2JlYjJlNDUwMmYxZWZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtT+6zWLo8mKxau6bfgwh0/wvOzxRStwYMXMuCJ1odKm+K 0XrYZ175BBMCtl/uV7s2p3mPPy/CKDbVwT3hbucHhpRUlys3O20O37+DcFi6Didl SXojTmdhiZwFIhP+WM3UgB7TiEpetbqpMS+aJvhBuMhhtbx3M+efrumGhysedW2v jE8gjagDDtGQ5fIxXh976r3r+1aT+zcs6vUPb3Ur0LOuKIjsyujUh0jgNg1lswcO R4/nq/k6EXzuowy5j49XYZeDZGSzemXNO1N+lK/3TK5CQa3UvtMT9JXJq2k0Q3ia MYLp4jqxCXtxFad8f+H+ZbWDc3aE3tedi4ajPHGXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPe4iMqBcKnWY2c/87qi9+0g1XMkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q0ODlkYTI4LTliN2MtNGVhYi05MWI1LTY1NTNlOGJkNzYwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2xd8wDQYJKoZIhvcNAQELBQADggEBABkg/YeaxYfHmSLpmVm3bEgcYy+z N7iE4XzXBH08SzUoX9SA7Z9yYQ4P8LRfnlzbri79UeHQ7FJ8lCv9/vgbGkmbECWE DqExxnLcSaqW+0ntpeuPp7vU/k+x6jNbdDRBjijMu4RGXn4IwIku0V0Y+8ZHrbFt yOYlQI+ppoF6wFa5sJrZdkAi7TAQj8r53uEFWnKt/nDilvMBWsK5qJXlgO4ouPRQ RjL86KCB3ocSDQZMYGWrsTxQQCkCr+s2DOQorLHD787Wc5siPIpDU9Rvitbx2Fbm wVEob5TFZKXSb9ZnxNVqcvv7TAn9+FfcRdCEgW6dZFU6auGKyq0V9Zvy+o8= -----END CERTIFICATE-----Generated at Sat Jun 14 23:45:36 2025 by rpki-client