$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e68c1848-0bb8-4231-950d-45bc4c25d8d3.roa File: e68c1848-0bb8-4231-950d-45bc4c25d8d3.roa (raw, json) Hash identifier: sbH444zQjj3aBY+dTu8Epj5k9Cldop614RYBl5AmZHU= Subject key identifier: D0:C7:C6:EB:4F:B7:30:32:00:6D:5F:F5:1C:C2:95:35:91:33:E6:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 03231CAAA98924AE93AC225C4367D2C7B1D6175E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e68c1848-0bb8-4231-950d-45bc4c25d8d3.roa Signing time: Mon 09 Jun 2025 18:20:08 +0000 ROA not before: Mon 09 Jun 2025 18:20:08 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.255.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:23:1c:aa:a9:89:24:ae:93:ac:22:5c:43:67:d2:c7:b1:d6:17:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:20:08 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=fcae7353b85733e67d82f00fd1a04027227b949433a5d550e3799784f1ba178d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:15:ec:d0:f0:c0:e1:17:5c:3f:d8:b2:c6:04: d6:ed:8d:59:55:7b:da:d9:d7:43:32:59:29:82:fa: 0a:18:d7:cc:2e:f0:96:dd:c0:cd:eb:b8:1e:46:bd: c7:bc:e9:bb:32:6e:2f:0c:7f:f2:cf:d8:fe:50:3f: d9:8a:4a:81:11:ce:ea:21:74:99:4c:36:a1:ab:42: a1:ea:75:63:14:76:41:2e:d6:91:66:84:de:f8:c5: 9d:c9:81:d3:99:08:77:90:8a:7f:7d:ce:1d:f1:c0: a2:4a:e1:80:ef:2a:68:04:02:d5:52:fe:3d:6b:ca: d4:1c:fc:82:2a:c5:f5:3e:0b:ce:66:3a:56:7a:ac: 42:fd:83:30:b4:d0:67:e9:86:7b:bf:cc:cf:2b:4a: b2:b2:07:13:98:19:72:2e:70:05:10:a0:76:d9:9e: 41:57:fc:e6:98:c1:b0:34:d3:94:a6:ae:5a:5f:68: 2a:85:08:9d:ea:30:97:7a:90:74:30:80:b4:25:b3: 09:a0:6d:fa:78:e9:32:8a:05:3a:6f:a4:6d:f0:db: 3d:85:be:be:e5:79:8d:e7:03:0d:66:39:63:bb:ad: b0:0b:2c:65:41:be:66:38:bf:c5:d3:82:8c:54:a0: 5f:45:b7:2f:17:6b:91:08:99:a7:53:e7:c3:e3:07: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C7:C6:EB:4F:B7:30:32:00:6D:5F:F5:1C:C2:95:35:91:33:E6:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e68c1848-0bb8-4231-950d-45bc4c25d8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.255.124.0/23 Signature Algorithm: sha256WithRSAEncryption 20:ff:89:32:6b:5e:9d:ea:71:d4:1c:4a:4e:a8:56:e7:6f:0c: e7:32:f7:48:73:46:fb:74:d5:30:6d:7f:b2:a8:cb:61:e7:e7: 0f:60:5a:50:df:56:40:b9:1e:dc:e0:16:97:a9:51:37:29:e7: 43:df:6a:16:15:da:f5:d2:36:d0:83:db:9e:c7:a9:f3:d4:db: f5:01:a9:4b:d9:d9:6a:17:13:61:52:55:05:f7:01:ca:c8:7e: 67:bc:a8:57:2a:c7:fe:ec:95:79:ce:50:4b:aa:4d:79:59:cc: b1:13:30:53:3e:44:fd:cc:d4:b7:c4:8e:c6:5e:05:ca:60:3f: de:05:5d:1d:76:9d:93:2c:a1:f2:fd:72:b3:50:c4:a5:6f:af: db:58:69:ec:d5:ce:f3:44:cf:15:fc:01:c5:39:34:a1:5a:ab: d4:50:b2:a6:7a:85:9c:c7:1f:ba:72:06:90:16:1e:e8:69:da: 09:d5:57:5d:6d:8b:33:f3:45:1b:dc:ed:41:3d:50:db:46:ee: 3a:2f:6c:eb:94:37:41:04:b8:e3:32:90:82:d6:b7:bd:ce:dd: 3e:cc:10:ca:37:6a:b9:1c:68:de:07:ca:ff:8e:fa:0e:29:f1: 02:f0:c2:b3:a1:01:a5:53:c5:d4:11:f1:27:4c:7e:36:cd:9d: 06:26:a9:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAyMcqqmJJK6TrCJcQ2fSx7HWF14wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgyMDA4WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmY2FlNzM1M2I4NTczM2U2N2Q4MmYwMGZkMWEwNDAyNzIy N2I5NDk0MzNhNWQ1NTBlMzc5OTc4NGYxYmExNzhkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxFezQ8MDhF1w/2LLGBNbtjVlVe9rZ10MyWSmC+goY18wu 8JbdwM3ruB5Gvce86bsybi8Mf/LP2P5QP9mKSoERzuohdJlMNqGrQqHqdWMUdkEu 1pFmhN74xZ3JgdOZCHeQin99zh3xwKJK4YDvKmgEAtVS/j1rytQc/IIqxfU+C85m OlZ6rEL9gzC00Gfphnu/zM8rSrKyBxOYGXIucAUQoHbZnkFX/OaYwbA005Smrlpf aCqFCJ3qMJd6kHQwgLQlswmgbfp46TKKBTpvpG3w2z2Fvr7leY3nAw1mOWO7rbAL LGVBvmY4v8XTgoxUoF9Fty8Xa5EImadT58PjB84VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0MfG60+3MDIAbV/1HMKVNZEz5tcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U2OGMxODQ4LTBiYjgtNDIzMS05NTBkLTQ1YmM0YzI1ZDhkMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2/3wwDQYJKoZIhvcNAQELBQADggEBACD/iTJrXp3qcdQcSk6oVudvDOcy 90hzRvt01TBtf7Koy2Hn5w9gWlDfVkC5HtzgFpepUTcp50PfahYV2vXSNtCD257H qfPU2/UBqUvZ2WoXE2FSVQX3AcrIfme8qFcqx/7slXnOUEuqTXlZzLETMFM+RP3M 1LfEjsZeBcpgP94FXR12nZMsofL9crNQxKVvr9tYaezVzvNEzxX8AcU5NKFaq9RQ sqZ6hZzHH7pyBpAWHuhp2gnVV11tizPzRRvc7UE9UNtG7jovbOuUN0EEuOMykILW t73O3T7MEMo3arkcaN4Hyv+O+g4p8QLwwrOhAaVTxdQR8SdMfjbNnQYmqcM= -----END CERTIFICATE-----Generated at Sat Jun 14 05:57:02 2025 by rpki-client