$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa File: df8dba07-310a-4b8a-8825-01ce44c750ab.roa (raw, json) Hash identifier: ocgKKakwuKP4izu5BxJkRKus1K3M8QdrCCG3JdhXMCQ= Subject key identifier: AC:E5:B1:66:6B:22:18:27:D6:F9:BD:EB:58:F3:96:74:80:CA:69:2B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A42691FD438999BF8067FFB30B08312CE2AF571 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa Signing time: Tue 03 Jun 2025 15:11:03 +0000 ROA not before: Tue 03 Jun 2025 15:11:03 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.252.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:42:69:1f:d4:38:99:9b:f8:06:7f:fb:30:b0:83:12:ce:2a:f5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:11:03 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=4765adc8c51ebd929874f94e818612ce63f1c84272672be0d7b93518ed057a77, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3c:59:fa:d5:4f:bf:48:9e:d4:4c:ce:ac:37: ab:f4:5a:53:81:f3:21:e3:2f:27:56:e2:83:4b:bf: 24:65:90:b6:7d:c9:3a:dd:54:fc:af:c7:bc:00:3b: 33:14:00:b7:4f:2d:fe:d3:13:a7:9c:d6:af:14:49: 89:9b:ac:7c:43:e2:c7:72:77:0b:47:f9:b0:20:30: 3c:81:da:38:fa:7d:73:7e:28:ce:4d:c9:4c:82:86: d3:be:3e:bf:27:11:16:7b:cf:b3:c0:9e:ca:26:7e: 52:de:af:25:3c:93:4a:39:73:17:12:2f:67:8c:5e: ef:0e:b1:a9:98:08:6f:05:1a:f6:f4:a1:2f:fc:7f: 6b:e2:1f:98:8d:3b:da:3f:ba:14:d4:0c:4e:5b:e2: 97:81:c8:f0:79:7f:e1:cd:a7:7b:db:5f:32:da:38: 92:10:18:29:b0:54:d2:b0:c5:5a:1b:3a:73:a8:de: f6:b0:55:30:5f:4c:4f:38:a3:2c:3c:0c:94:30:b5: 1b:ff:b1:4f:dc:c3:0f:6b:49:46:47:4b:2d:c9:59: e1:a3:8d:a5:49:31:72:b2:79:50:01:02:c5:91:3e: 00:d0:26:5c:96:19:8c:57:83:32:ab:17:12:83:93: 4f:82:38:57:06:24:8b:06:84:f8:98:d4:9c:1f:2f: 2a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E5:B1:66:6B:22:18:27:D6:F9:BD:EB:58:F3:96:74:80:CA:69:2B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df8dba07-310a-4b8a-8825-01ce44c750ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.252.64.0/18 Signature Algorithm: sha256WithRSAEncryption 04:5f:57:72:04:bc:c9:5f:f2:cb:43:dc:b5:01:e3:e2:f1:f0: 16:7e:1b:fc:09:6d:09:a8:59:b2:b6:04:c8:68:72:2e:aa:59: 1d:87:f7:30:27:0e:05:48:8a:17:80:64:83:fb:02:31:6a:3d: 4c:71:55:49:09:24:34:bc:70:0c:76:08:5a:b0:1a:a1:61:e1: ff:fa:3b:95:5d:94:d7:f1:b2:eb:74:76:66:ed:69:75:94:f2: 87:a9:26:4b:89:8a:06:07:88:42:b6:ff:ad:88:f2:60:9f:51: 41:e2:f0:0a:29:69:2b:90:20:5f:95:55:b4:d1:1f:6f:e6:c4: c1:b6:2a:d6:a1:67:3d:95:e6:dc:ec:91:9e:21:62:5a:41:23: 85:fc:9c:33:45:e6:60:21:44:c5:7a:a3:6d:9f:50:8b:cf:75: 5f:9a:d9:1e:5a:44:75:ba:d9:32:03:21:12:9d:c3:10:c8:53: df:b1:b4:ad:94:77:3b:6c:4b:73:f2:f7:d3:6a:fa:79:19:0b: ea:82:06:47:04:de:53:f3:80:db:d0:a7:c6:61:31:74:92:40: 4a:2d:84:76:29:e7:f7:9b:f3:dc:87:27:b6:3a:c4:65:82:f2: d5:5c:a3:db:31:52:4d:21:96:e6:a2:ed:75:7e:26:0d:32:b3: 73:e5:61:7d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUekJpH9Q4mZv4Bn/7MLCDEs4q9XEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUxMTAzWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NzY1YWRjOGM1MWViZDkyOTg3NGY5NGU4MTg2MTJjZTYz ZjFjODQyNzI2NzJiZTBkN2I5MzUxOGVkMDU3YTc3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3PFn61U+/SJ7UTM6sN6v0WlOB8yHjLydW4oNLvyRlkLZ9 yTrdVPyvx7wAOzMUALdPLf7TE6ec1q8USYmbrHxD4sdydwtH+bAgMDyB2jj6fXN+ KM5NyUyChtO+Pr8nERZ7z7PAnsomflLeryU8k0o5cxcSL2eMXu8OsamYCG8FGvb0 oS/8f2viH5iNO9o/uhTUDE5b4peByPB5f+HNp3vbXzLaOJIQGCmwVNKwxVobOnOo 3vawVTBfTE84oyw8DJQwtRv/sU/cww9rSUZHSy3JWeGjjaVJMXKyeVABAsWRPgDQ JlyWGYxXgzKrFxKDk0+COFcGJIsGhPiY1JwfLyp7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrOWxZmsiGCfW+b3rWPOWdIDKaSswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmOGRiYTA3LTMxMGEtNGI4YS04ODI1LTAxY2U0NGM3NTBhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/EAwDQYJKoZIhvcNAQELBQADggEBAARfV3IEvMlf8stD3LUB4+Lx8BZ+ G/wJbQmoWbK2BMhoci6qWR2H9zAnDgVIiheAZIP7AjFqPUxxVUkJJDS8cAx2CFqw GqFh4f/6O5VdlNfxsut0dmbtaXWU8oepJkuJigYHiEK2/62I8mCfUUHi8AopaSuQ IF+VVbTRH2/mxMG2KtahZz2V5tzskZ4hYlpBI4X8nDNF5mAhRMV6o22fUIvPdV+a 2R5aRHW62TIDIRKdwxDIU9+xtK2UdztsS3Py99Nq+nkZC+qCBkcE3lPzgNvQp8Zh MXSSQEothHYp5/eb89yHJ7Y6xGWC8tVco9sxUk0hluai7XV+Jg0ys3PlYX0= -----END CERTIFICATE-----Generated at Sat Jun 14 05:49:35 2025 by rpki-client