$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4f1efc5-799e-4a3f-923a-2c596483788b.roa File: d4f1efc5-799e-4a3f-923a-2c596483788b.roa (raw, json) Hash identifier: TSfGMRUrA0zRgbgDi68DXvMIdKisXXHoPA28n1u3zqI= Subject key identifier: 17:51:8A:8B:A4:F3:02:EF:E8:8E:6E:18:38:82:32:96:F9:AC:72:4C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 24B79A1A292B5C8B4D37C689F5F94BC50F75914D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4f1efc5-799e-4a3f-923a-2c596483788b.roa Signing time: Mon 09 Jun 2025 17:11:45 +0000 ROA not before: Mon 09 Jun 2025 17:11:45 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.199.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b7:9a:1a:29:2b:5c:8b:4d:37:c6:89:f5:f9:4b:c5:0f:75:91:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 17:11:45 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=90e7dc54b7bf7acc2e07a68b1452632eceae35bc32c2345ccec792016b6e1180, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7b:96:8d:d4:6d:8d:17:e9:7e:26:ef:01:9e: ec:76:db:24:39:a9:3b:83:73:f5:33:0f:5e:ba:6f: 92:bf:60:51:f5:ef:99:be:fd:71:a2:d6:cd:0d:20: 95:9b:77:83:3a:ed:11:b0:7d:d7:c2:90:f8:90:9b: 97:3b:94:ff:17:0d:fc:d7:a3:96:66:5f:c4:17:41: 58:58:df:ad:5b:f2:02:b5:db:03:f4:af:f0:44:46: 3e:2f:ac:46:2c:4d:b2:6e:3b:ce:4b:73:7d:da:69: 2a:0f:61:67:ef:cf:0a:30:e0:f8:6b:de:b6:5a:ed: fb:c4:7a:93:27:e9:ab:d4:76:99:c1:8a:7d:66:28: 12:79:03:89:12:f3:25:28:ee:c9:7c:b5:56:d2:13: b3:92:1f:be:c9:01:49:14:fb:69:78:75:c1:e5:21: fb:51:b0:a2:ee:0f:8e:59:33:99:ec:f6:00:4d:3d: 5b:44:11:5f:bd:93:44:16:d8:24:26:ef:0d:06:43: ff:26:b3:d0:71:b6:ae:c2:84:b3:fd:2a:60:5e:e8: 7b:79:02:d3:66:d3:f7:f5:6f:23:ee:fc:46:cd:23: 36:d0:18:7f:fb:23:c8:17:18:bd:48:6f:72:6e:bf: e7:17:fd:9f:dc:bf:2f:c8:be:cf:3d:74:db:d1:1a: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:51:8A:8B:A4:F3:02:EF:E8:8E:6E:18:38:82:32:96:F9:AC:72:4C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4f1efc5-799e-4a3f-923a-2c596483788b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.199.0.0/17 Signature Algorithm: sha256WithRSAEncryption a6:38:09:99:69:d4:71:99:80:ef:1e:8e:a9:2e:66:f0:3e:f8: f4:7f:29:89:a5:9a:b0:15:65:41:8e:f3:87:b9:9e:28:9b:0d: 67:4a:2d:92:df:c4:55:e0:a9:86:73:a5:98:65:19:80:ed:32: 74:2d:e7:39:81:e7:c7:25:4a:f2:d4:d7:d5:8e:e4:3a:6b:2b: 23:89:25:3f:b0:24:a2:d8:11:e9:3c:bc:ee:01:14:cf:62:cf: c3:16:38:0c:6d:3e:44:56:83:a3:06:50:7a:7b:13:e6:bb:76: cc:42:aa:33:4f:7b:41:d0:6d:d5:c5:32:1e:bd:70:2a:f5:e3: f5:d0:8d:9d:34:33:d5:16:61:8b:a5:77:b6:66:45:77:e8:ac: 50:f9:00:0d:ba:f6:b8:46:0b:89:6a:fb:42:63:d9:a9:bd:0e: e5:6d:27:0d:0f:3d:42:55:39:ce:3e:94:e2:c7:e5:39:d1:d4: b0:5b:b9:2f:ec:c3:e8:89:4e:74:27:ff:99:96:ff:11:57:c4: 92:6b:34:f8:33:21:79:a3:24:7f:52:cb:c7:ab:67:80:93:72: 37:9a:c0:63:23:98:70:bd:74:05:2c:4c:4b:20:16:65:18:1d: cf:0a:bb:6d:e3:eb:9c:a1:ff:f0:62:22:ce:17:ca:52:2b:78: 7e:46:85:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJLeaGikrXItNN8aJ9flLxQ91kU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTcxMTQ1WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MGU3ZGM1NGI3YmY3YWNjMmUwN2E2OGIxNDUyNjMyZWNl YWUzNWJjMzJjMjM0NWNjZWM3OTIwMTZiNmUxMTgwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDce5aN1G2NF+l+Ju8Bnux22yQ5qTuDc/UzD166b5K/YFH1 75m+/XGi1s0NIJWbd4M67RGwfdfCkPiQm5c7lP8XDfzXo5ZmX8QXQVhY361b8gK1 2wP0r/BERj4vrEYsTbJuO85Lc33aaSoPYWfvzwow4Phr3rZa7fvEepMn6avUdpnB in1mKBJ5A4kS8yUo7sl8tVbSE7OSH77JAUkU+2l4dcHlIftRsKLuD45ZM5ns9gBN PVtEEV+9k0QW2CQm7w0GQ/8ms9Bxtq7ChLP9KmBe6Ht5AtNm0/f1byPu/EbNIzbQ GH/7I8gXGL1Ib3Juv+cX/Z/cvy/Ivs89dNvRGnaPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUF1GKi6TzAu/ojm4YOIIylvmsckwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q0ZjFlZmM1LTc5OWUtNGEzZi05MjNhLTJjNTk2NDgzNzg4Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2xwAwDQYJKoZIhvcNAQELBQADggEBAKY4CZlp1HGZgO8ejqkuZvA++PR/ KYmlmrAVZUGO84e5niibDWdKLZLfxFXgqYZzpZhlGYDtMnQt5zmB58clSvLU19WO 5DprKyOJJT+wJKLYEek8vO4BFM9iz8MWOAxtPkRWg6MGUHp7E+a7dsxCqjNPe0HQ bdXFMh69cCr14/XQjZ00M9UWYYuld7ZmRXforFD5AA269rhGC4lq+0Jj2am9DuVt Jw0PPUJVOc4+lOLH5TnR1LBbuS/sw+iJTnQn/5mW/xFXxJJrNPgzIXmjJH9Sy8er Z4CTcjeawGMjmHC9dAUsTEsgFmUYHc8Ku23j65yh//BiIs4XylIreH5Ghe8= -----END CERTIFICATE-----Generated at Sat Jun 14 05:54:54 2025 by rpki-client