$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa File: f9586523-cfb8-4449-afa5-509594fbadc0.roa (raw, json) Hash identifier: WQlCK4yYapCMErCDv8tXakfPjVc+L99PMZ6NUOKDShs= Subject key identifier: D4:9B:76:D4:2C:B3:98:04:F4:AA:83:82:FD:13:1E:41:A8:0E:BA:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 571DCDCF89E07F6B587E5D3A824DD6D3046E6C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa Signing time: Fri 13 Jun 2025 18:21:08 +0000 ROA not before: Fri 13 Jun 2025 18:21:08 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1d:cd:cf:89:e0:7f:6b:58:7e:5d:3a:82:4d:d6:d3:04:6e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 13 18:21:08 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=7da9ce7507b0953e75ff9502ff39e85819d1c96b2634f94d0cc0911205426865, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:cb:b4:fe:36:34:83:81:98:de:85:e7:57: 95:96:47:9f:86:9f:76:29:2f:7d:eb:9e:4d:50:9f: 3a:ad:14:e1:f5:59:b3:07:78:aa:4c:0c:00:d3:15: b3:7b:19:df:be:70:fa:a2:01:3d:a8:bb:f2:3d:ef: a0:b1:7d:08:d3:36:b6:84:9b:0e:b0:ef:55:f0:26: a0:d2:da:d7:7d:3f:cd:c0:fd:ce:2e:a7:88:95:e8: 16:05:98:1c:00:37:58:f2:b6:98:86:00:09:a8:3d: 66:48:3a:7e:a8:5f:68:f8:d3:80:27:76:58:94:c1: 3a:79:18:2c:9b:64:59:1b:53:7e:76:cb:17:0c:ca: 42:c5:31:85:8c:5d:a0:b5:83:a9:48:f6:ac:7a:34: c1:92:6f:53:28:ac:ac:cc:6e:a3:03:9f:9e:51:57: 94:f7:1a:13:a4:3f:6a:59:13:98:35:3c:63:8d:ee: 7b:76:bd:2a:4b:33:9d:d2:fb:55:b2:70:62:b3:b5: 78:c8:6d:6d:b6:64:98:d2:c2:f6:7c:93:e2:50:95: 65:aa:ea:6d:68:e8:f7:3e:a8:c1:32:9b:c3:44:00: 85:f6:8f:6b:48:99:b1:40:94:69:22:97:da:9e:39: f3:48:76:f8:10:12:94:2f:f8:91:4f:52:f0:6b:32: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9B:76:D4:2C:B3:98:04:F4:AA:83:82:FD:13:1E:41:A8:0E:BA:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9586523-cfb8-4449-afa5-509594fbadc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.64.0/19 Signature Algorithm: sha256WithRSAEncryption 0e:a2:b1:3c:02:74:f8:a8:bb:4c:f4:2d:bf:23:4e:67:3f:58: 48:01:05:32:63:15:ab:d4:50:5e:0f:bc:7d:50:09:93:47:42: 10:e9:b6:7d:d4:1f:4f:63:83:d8:76:a7:e7:3c:1d:bf:4e:54: b4:52:96:04:da:31:a1:78:39:5b:c3:d4:e7:73:9c:13:f1:66: aa:85:e9:15:a6:62:3a:0b:80:cf:a6:6f:1f:b5:69:13:48:99: c8:fe:4d:b4:80:44:f7:22:d6:aa:ee:92:e2:d5:1e:a9:5c:55: 93:2b:47:cc:54:cf:6e:af:cd:f8:26:d4:d5:72:8b:69:86:11: f5:ab:b6:05:0b:1b:66:fe:3d:f8:65:9a:d7:d7:16:7b:73:84: c1:84:30:8f:2d:3d:57:97:a2:68:6a:d3:cd:ee:01:f0:88:38: 74:88:1a:c5:38:9d:d7:cc:d5:55:d1:9d:a8:96:98:57:39:fd: 59:7e:ae:7a:8c:3d:32:42:36:99:98:8a:9d:93:20:f6:59:9a: 79:00:d9:40:94:3e:1f:66:84:bf:6e:0c:b2:e4:1c:65:6a:58: e5:dd:aa:7c:23:de:a6:76:0c:f8:dd:dd:3f:51:3d:7c:e7:3a: 12:18:e3:62:0c:6b:0d:7c:1d:df:de:70:c7:25:b9:9d:c2:69: ab:29:ac:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITVx3Nz4ngf2tYfl06gk3W0wRubDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MTMxODIxMDhaFw0yNTA3MTgyMzU5NTla MHoxSTBHBgNVBAUTQDdkYTljZTc1MDdiMDk1M2U3NWZmOTUwMmZmMzllODU4MTlk MWM5NmIyNjM0Zjk0ZDBjYzA5MTEyMDU0MjY4NjUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAK63y7T+NjSDgZjehedXlZZHn4afdikvfeueTVCfOq0U4fVZ swd4qkwMANMVs3sZ375w+qIBPai78j3voLF9CNM2toSbDrDvVfAmoNLa130/zcD9 zi6niJXoFgWYHAA3WPK2mIYACag9Zkg6fqhfaPjTgCd2WJTBOnkYLJtkWRtTfnbL FwzKQsUxhYxdoLWDqUj2rHo0wZJvUyisrMxuowOfnlFXlPcaE6Q/alkTmDU8Y43u e3a9KkszndL7VbJwYrO1eMhtbbZkmNLC9nyT4lCVZarqbWjo9z6owTKbw0QAhfaP a0iZsUCUaSKX2p4580h2+BASlC/4kU9S8GsyZGcCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBTUm3bULLOYBPSqg4L9Ex5BqA66gjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZjk1ODY1MjMtY2ZiOC00NDQ5LWFmYTUtNTA5NTk0ZmJhZGMwLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTbwQDANBgkqhkiG9w0BAQsFAAOCAQEADqKxPAJ0+Ki7TPQtvyNOZz9YSAEF MmMVq9RQXg+8fVAJk0dCEOm2fdQfT2OD2Han5zwdv05UtFKWBNoxoXg5W8PU53Oc E/FmqoXpFaZiOguAz6ZvH7VpE0iZyP5NtIBE9yLWqu6S4tUeqVxVkytHzFTPbq/N +CbU1XKLaYYR9au2BQsbZv49+GWa19cWe3OEwYQwjy09V5eiaGrTze4B8Ig4dIga xTid18zVVdGdqJaYVzn9WX6ueow9MkI2mZiKnZMg9lmaeQDZQJQ+H2aEv24MsuQc ZWpY5d2qfCPepnYM+N3dP1E9fOc6EhjjYgxrDXwd395wxyW5ncJpqymsow== -----END CERTIFICATE-----Generated at Sat Jun 14 05:52:53 2025 by rpki-client