$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df187bb2-02cd-4a0e-a508-bb3e29e6ed81.roa File: df187bb2-02cd-4a0e-a508-bb3e29e6ed81.roa (raw, json) Hash identifier: z5C2aSXWahj9/8KxawN5/4zxC1XFPuIupUzTa4j37Xk= Subject key identifier: A2:23:12:81:FA:7B:40:8C:DC:18:BA:85:6B:63:54:2E:2E:2C:1B:B7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 090287F3FA4E717715E1D6F56D13160AF31E6FC0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df187bb2-02cd-4a0e-a508-bb3e29e6ed81.roa Signing time: Mon 09 Jun 2025 18:10:46 +0000 ROA not before: Mon 09 Jun 2025 18:10:46 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:02:87:f3:fa:4e:71:77:15:e1:d6:f5:6d:13:16:0a:f3:1e:6f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:10:46 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=61e3481e07107f98788d55e7025c0c1ef58fd0fd08b950d087553052e124870f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:d7:7e:3e:50:22:16:27:82:59:7c:da:e2: 1f:50:a3:06:81:de:28:3e:20:13:66:d3:09:5d:c8: 1d:e7:84:77:c7:d2:4a:16:30:df:ae:f6:d0:fe:f3: 9b:81:40:69:4d:0d:3e:e7:72:4f:b9:76:fb:5c:fc: 57:c2:bd:d6:c7:ce:ca:57:75:45:7b:3d:e5:6c:e5: c5:1c:c5:5d:1a:2a:5f:fc:ad:45:2c:b7:8b:9c:40: 55:7e:b1:fe:d7:c9:10:37:15:2d:c5:0d:89:9b:77: d2:90:88:35:19:66:7d:14:98:44:4c:23:28:0d:65: c7:e7:99:f7:d9:e9:66:2f:d4:cc:9f:e7:ee:40:47: ce:23:7a:04:b0:a5:07:fa:b0:87:fe:b5:c7:5d:58: 0f:f3:71:c2:da:cd:cd:13:f0:98:e8:f7:ea:ff:94: 69:60:9a:db:67:61:33:48:5a:f8:96:d5:c8:58:4c: 89:78:da:bc:63:d8:18:61:c1:6a:cd:b3:33:fd:9b: 7b:37:0b:9b:06:e8:47:aa:e5:14:b2:99:e1:e1:61: 2b:d8:d5:d7:11:bc:01:3f:fa:bc:ea:14:c8:45:b0: cd:e1:02:0b:13:19:5d:63:f8:1b:26:85:d1:70:e3: 1a:5d:bc:f5:d1:bb:18:c3:0a:3a:62:45:bd:2f:2f: 9e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:23:12:81:FA:7B:40:8C:DC:18:BA:85:6B:63:54:2E:2E:2C:1B:B7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df187bb2-02cd-4a0e-a508-bb3e29e6ed81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.57.0/24 Signature Algorithm: sha256WithRSAEncryption 50:af:ed:91:10:dd:af:c4:1b:c3:64:b6:9f:a6:c8:2b:47:be: db:45:37:f5:19:8c:71:b8:39:57:54:13:be:70:b0:ed:25:91: 67:e3:ea:c8:fb:b5:af:1e:32:ee:0f:b4:a3:94:21:cb:eb:d8: 42:7b:61:01:2f:ff:05:87:07:33:0d:83:78:cc:60:50:a3:4e: 91:cc:8e:76:81:4b:a3:9a:eb:87:88:c8:f5:83:0f:54:c3:94: d9:09:ce:d4:c6:f8:f8:1b:d5:b9:fb:f0:0a:e2:95:e8:f5:6f: ac:1b:fe:72:54:b9:33:41:d3:bc:10:1f:28:57:6a:4a:8f:c3: 25:84:63:14:6d:80:80:e3:95:ef:fc:0a:72:8a:7a:a0:e0:c0: 36:78:54:3d:d2:34:cd:fd:fd:24:b3:af:92:1a:2e:bf:01:b6: 6c:fc:65:67:96:44:69:3f:bb:72:e4:54:e0:30:b2:f6:91:ca: 5b:c2:d8:fa:6b:b2:eb:10:64:ab:c9:0b:05:dd:c6:7b:db:e4: 08:c8:15:5f:12:b0:80:79:f6:22:7a:b5:b0:f5:75:0f:91:18: 82:62:9f:d4:85:f4:27:f9:de:48:fd:41:79:e9:5c:51:dc:f2: 34:07:a2:4c:31:2e:50:00:3b:a5:35:8c:1f:03:94:08:40:90: d9:7b:ca:d3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCQKH8/pOcXcV4db1bRMWCvMeb8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgxMDQ2WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2MWUzNDgxZTA3MTA3Zjk4Nzg4ZDU1ZTcwMjVjMGMxZWY1 OGZkMGZkMDhiOTUwZDA4NzU1MzA1MmUxMjQ4NzBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDG+Nd+PlAiFieCWXza4h9QowaB3ig+IBNm0wldyB3nhHfH 0koWMN+u9tD+85uBQGlNDT7nck+5dvtc/FfCvdbHzspXdUV7PeVs5cUcxV0aKl/8 rUUst4ucQFV+sf7XyRA3FS3FDYmbd9KQiDUZZn0UmERMIygNZcfnmffZ6WYv1Myf 5+5AR84jegSwpQf6sIf+tcddWA/zccLazc0T8Jjo9+r/lGlgmttnYTNIWviW1chY TIl42rxj2BhhwWrNszP9m3s3C5sG6Eeq5RSymeHhYSvY1dcRvAE/+rzqFMhFsM3h AgsTGV1j+BsmhdFw4xpdvPXRuxjDCjpiRb0vL56vAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoiMSgfp7QIzcGLqFa2NULi4sG7cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmMTg3YmIyLTAyY2QtNGEwZS1hNTA4LWJiM2UyOWU2ZWQ4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA28DkwDQYJKoZIhvcNAQELBQADggEBAFCv7ZEQ3a/EG8Nktp+myCtHvttF N/UZjHG4OVdUE75wsO0lkWfj6sj7ta8eMu4PtKOUIcvr2EJ7YQEv/wWHBzMNg3jM YFCjTpHMjnaBS6Oa64eIyPWDD1TDlNkJztTG+Pgb1bn78Arilej1b6wb/nJUuTNB 07wQHyhXakqPwyWEYxRtgIDjle/8CnKKeqDgwDZ4VD3SNM39/SSzr5IaLr8Btmz8 ZWeWRGk/u3LkVOAwsvaRylvC2PprsusQZKvJCwXdxnvb5AjIFV8SsIB59iJ6tbD1 dQ+RGIJin9SF9Cf53kj9QXnpXFHc8jQHokwxLlAAO6U1jB8DlAhAkNl7ytM= -----END CERTIFICATE-----Generated at Sat Jun 14 05:51:42 2025 by rpki-client