$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbc07bf3-fdbc-49d9-a0a9-cc6667195980.roa File: dbc07bf3-fdbc-49d9-a0a9-cc6667195980.roa (raw, json) Hash identifier: 8aRAyUDyjGWQz/0m7Wnwi4PinlvH9WdioMULR+dddIU= Subject key identifier: 4C:12:D6:22:DF:61:45:24:E3:BF:03:79:B9:54:9E:20:4E:A0:D1:16 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34B8348A9F75FDB761013F3AFB0325963E6678A2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbc07bf3-fdbc-49d9-a0a9-cc6667195980.roa Signing time: Sat 07 Jun 2025 00:40:33 +0000 ROA not before: Sat 07 Jun 2025 00:40:33 +0000 ROA not after: Sat 12 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.54.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b8:34:8a:9f:75:fd:b7:61:01:3f:3a:fb:03:25:96:3e:66:78:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 7 00:40:33 2025 GMT Not After : Jul 12 23:59:59 2025 GMT Subject: serialNumber=bf98e0a6069cb8682a042b0718a0b37ebe28bb87c5a4b65fa2a0a1beb8d959ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0d:ce:f9:73:dc:33:a9:d4:ac:24:e7:b0:97: 90:36:f4:a1:87:58:43:75:7d:75:a6:f7:8e:28:d8: dd:b3:b3:32:92:aa:b8:83:91:b6:2c:7b:f8:01:8f: 82:7d:31:ea:be:57:9f:d5:9a:1f:f6:b2:f0:98:3d: 83:fc:f5:a4:ac:ab:0b:3a:46:35:ff:93:c4:f3:31: ae:28:f8:5a:0f:9e:76:04:8a:a5:6a:c7:91:16:75: 0a:40:bd:b8:f5:87:0b:b7:8f:42:66:85:a4:4f:09: ce:26:b3:9a:28:e3:9c:a9:70:a8:17:9f:c8:4c:b7: 75:ea:22:d0:c6:3c:3c:be:a7:c5:33:b9:01:07:5d: ec:ba:d6:7b:b7:92:0d:2b:c1:d5:71:73:09:86:2f: cc:dc:e7:43:55:c2:b1:7b:8a:75:c3:72:71:2a:39: 89:bb:ce:dc:18:b0:2a:27:c7:e0:dc:7e:ba:4d:1b: 7f:e5:4a:00:45:23:82:ab:8c:84:d0:ef:4d:44:37: b9:45:23:2a:1a:c9:22:5b:a3:21:d5:e5:de:ad:5f: e1:20:93:07:af:56:9a:a4:17:b9:a0:ee:01:06:15: e6:c3:ad:95:de:88:ad:75:f0:ee:e4:21:2f:0b:dc: af:70:a5:20:e9:18:bc:2c:34:65:e3:5a:5a:4e:d4: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:12:D6:22:DF:61:45:24:E3:BF:03:79:B9:54:9E:20:4E:A0:D1:16 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dbc07bf3-fdbc-49d9-a0a9-cc6667195980.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.54.0.0/15 Signature Algorithm: sha256WithRSAEncryption 56:ec:0a:97:9f:fd:82:92:fd:a4:ea:1f:13:d1:25:e6:81:ea: 9f:14:28:c7:ac:01:a9:86:16:b1:b0:81:19:58:fb:99:0d:23: 1c:04:9b:56:7f:84:12:3d:e7:92:8b:5a:14:ea:e6:50:01:50: a8:58:9b:07:e5:ac:6b:5f:49:2f:ca:36:96:0e:e4:7e:ac:5c: 49:a5:16:fa:f6:da:4d:72:a4:76:ec:99:71:d0:e6:47:03:bb: a5:1d:13:4b:56:95:5f:cc:5e:9a:65:14:87:77:a0:34:99:31: 5d:6e:b8:da:b1:1c:1f:b6:0e:cf:e9:74:c0:8f:d7:59:25:97: 6f:34:cf:9e:b8:36:c3:29:87:2b:3a:08:cd:b7:b1:e2:2d:c3: 36:c6:f1:0f:87:df:5a:cb:37:94:a6:3d:85:de:99:95:b3:55: 33:0d:6f:89:04:bd:85:05:c8:ba:c5:0f:b4:4a:56:8c:7a:5c: 3f:b0:5d:ff:96:a4:d4:88:04:7c:95:79:7c:1a:11:fe:84:58: a5:1d:98:ef:bd:cd:b8:18:d7:f1:bf:1c:43:7c:81:f5:d0:07: 45:ee:15:ba:c3:2e:e5:fa:d2:ab:85:ca:6c:63:18:c6:99:b0: 22:b8:74:dd:1e:20:2e:e9:39:8d:d1:11:83:a2:1c:00:d9:93: 63:62:40:91 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNLg0ip91/bdhAT86+wMllj5meKIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA3MDA0MDMzWhcNMjUwNzEyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiZjk4ZTBhNjA2OWNiODY4MmEwNDJiMDcxOGEwYjM3ZWJl MjhiYjg3YzVhNGI2NWZhMmEwYTFiZWI4ZDk1OWVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7Dc75c9wzqdSsJOewl5A29KGHWEN1fXWm944o2N2zszKS qriDkbYse/gBj4J9Meq+V5/Vmh/2svCYPYP89aSsqws6RjX/k8TzMa4o+FoPnnYE iqVqx5EWdQpAvbj1hwu3j0JmhaRPCc4ms5oo45ypcKgXn8hMt3XqItDGPDy+p8Uz uQEHXey61nu3kg0rwdVxcwmGL8zc50NVwrF7inXDcnEqOYm7ztwYsConx+DcfrpN G3/lSgBFI4KrjITQ701EN7lFIyoaySJboyHV5d6tX+EgkwevVpqkF7mg7gEGFebD rZXeiK118O7kIS8L3K9wpSDpGLwsNGXjWlpO1PdNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUTBLWIt9hRSTjvwN5uVSeIE6g0RYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RiYzA3YmYzLWZkYmMtNDlkOS1hMGE5LWNjNjY2NzE5NTk4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0NjANBgkqhkiG9w0BAQsFAAOCAQEAVuwKl5/9gpL9pOofE9El5oHqnxQo x6wBqYYWsbCBGVj7mQ0jHASbVn+EEj3nkotaFOrmUAFQqFibB+Wsa19JL8o2lg7k fqxcSaUW+vbaTXKkduyZcdDmRwO7pR0TS1aVX8xemmUUh3egNJkxXW642rEcH7YO z+l0wI/XWSWXbzTPnrg2wymHKzoIzbex4i3DNsbxD4ffWss3lKY9hd6ZlbNVMw1v iQS9hQXIusUPtEpWjHpcP7Bd/5ak1IgEfJV5fBoR/oRYpR2Y773NuBjX8b8cQ3yB 9dAHRe4VusMu5frSq4XKbGMYxpmwIrh03R4gLuk5jdERg6IcANmTY2JAkQ== -----END CERTIFICATE-----Generated at Sat Jun 14 05:48:33 2025 by rpki-client