$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d0d885e-8b3a-4845-9545-99d75712008c.roa File: 0d0d885e-8b3a-4845-9545-99d75712008c.roa (raw, json) Hash identifier: VfRNN29VleQEMnP0+MKNBeUgoW9aq47kuX4Xxy3mzsI= Subject key identifier: A9:C6:CD:1B:C8:FA:2F:B1:5F:DC:A2:DC:75:3C:30:F9:2C:92:3F:31 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 186F116E5258FB57AA8332AFE92DE7ABB49C8B9E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d0d885e-8b3a-4845-9545-99d75712008c.roa Signing time: Mon 30 Jun 2025 17:21:44 +0000 ROA not before: Mon 30 Jun 2025 17:21:44 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.189.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:6f:11:6e:52:58:fb:57:aa:83:32:af:e9:2d:e7:ab:b4:9c:8b:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 17:21:44 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=9e00753ce2df28fec5c3f8652d8714af0e6c1cb2dffd98f7980120bc84de1800, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:94:a1:6b:46:2f:d3:2a:b7:de:dd:97:40:fc: 24:77:34:de:f7:cd:77:3c:e6:a4:4e:91:3f:42:8e: 95:d2:cd:7d:cb:36:26:80:a9:9d:c7:8e:18:b5:c5: b9:bf:e7:8c:22:86:33:ae:1f:6c:ea:20:70:5a:15: 3f:9b:da:a7:29:11:8c:44:cd:7b:22:0b:57:83:ce: 6c:7b:29:2c:79:f1:ca:31:a4:0e:18:41:6f:2b:48: 7d:5b:7a:94:a3:c4:c6:1f:72:e5:88:61:e7:0e:6a: 7b:38:33:7f:01:73:a9:3f:ce:ce:e2:86:81:a9:20: 42:07:ed:a1:69:ea:3a:be:d2:52:e0:62:52:c2:0f: b5:b5:25:42:ef:a9:4f:38:db:c9:35:55:58:18:6d: f8:0e:23:d8:24:b2:bd:b7:38:d5:6b:5f:c5:15:4f: 86:97:26:1b:e0:59:cb:78:49:40:4e:5d:73:df:8d: a8:74:ba:3c:e8:f2:d4:9c:73:85:7f:ff:4e:3f:36: fa:c3:08:88:aa:03:5b:fa:e4:8f:a2:10:95:b1:23: 1b:52:0e:54:a7:d3:a1:e6:3b:0f:f7:06:f5:75:bb: 1f:9e:87:2c:82:98:97:95:af:90:cb:79:40:60:79: 8a:04:3f:fd:5f:7c:84:65:fc:1a:11:a2:bf:d2:a0: e6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C6:CD:1B:C8:FA:2F:B1:5F:DC:A2:DC:75:3C:30:F9:2C:92:3F:31 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0d0d885e-8b3a-4845-9545-99d75712008c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.189.0.0/17 Signature Algorithm: sha256WithRSAEncryption 87:d6:c8:e4:6e:22:90:a1:1e:cc:df:27:82:c4:cd:a9:3f:73: 2d:9d:b3:1d:18:90:6b:61:df:e5:a8:14:47:2d:5b:e6:2f:41: 70:37:54:56:a3:99:32:6e:83:79:79:3b:39:1c:35:bd:0b:95: 24:4e:5e:a8:3f:c1:2a:d4:eb:b6:23:99:65:4a:13:0f:d2:d9: 6d:f0:4f:88:f9:b7:ad:21:2a:08:83:45:5d:14:8f:68:c0:3b: b5:32:a3:2c:1a:fe:27:24:c1:60:9f:92:f6:76:6e:ed:13:b1: 9d:48:73:6d:41:04:cf:06:f9:9d:2f:ba:6c:b2:16:61:27:b5: 9a:7a:1e:fe:02:72:56:76:4a:fc:83:42:a2:fa:ef:10:4c:e8: 51:8e:19:68:e8:2b:e4:ad:c3:47:3d:29:de:aa:6a:cb:b1:d0: 62:3a:d1:02:c5:58:63:f6:59:91:7f:46:a6:8e:79:f8:56:6f: e0:dd:a7:67:09:05:69:7a:7d:cd:e7:03:1c:c1:86:d9:8e:b2: 2d:f8:fd:8a:cc:a0:a8:29:e6:d8:aa:c8:15:07:be:a1:aa:e1: aa:44:dc:60:a4:25:14:b4:01:46:76:cc:ea:a1:98:42:93:c0: 07:c6:cc:49:f7:03:d2:b6:82:b3:95:9b:5b:3d:f5:4f:4c:31: 47:6b:6c:c9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGG8RblJY+1eqgzKv6S3nq7Sci54wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTcyMTQ0WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZTAwNzUzY2UyZGYyOGZlYzVjM2Y4NjUyZDg3MTRhZjBl NmMxY2IyZGZmZDk4Zjc5ODAxMjBiYzg0ZGUxODAwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWlKFrRi/TKrfe3ZdA/CR3NN73zXc85qROkT9CjpXSzX3L NiaAqZ3Hjhi1xbm/54wihjOuH2zqIHBaFT+b2qcpEYxEzXsiC1eDzmx7KSx58cox pA4YQW8rSH1bepSjxMYfcuWIYecOans4M38Bc6k/zs7ihoGpIEIH7aFp6jq+0lLg YlLCD7W1JULvqU8428k1VVgYbfgOI9gksr23ONVrX8UVT4aXJhvgWct4SUBOXXPf jah0ujzo8tScc4V//04/NvrDCIiqA1v65I+iEJWxIxtSDlSn06HmOw/3BvV1ux+e hyyCmJeVr5DLeUBgeYoEP/1ffIRl/BoRor/SoObvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqcbNG8j6L7Ff3KLcdTww+SySPzEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBkMGQ4ODVlLThiM2EtNDg0NS05NTQ1LTk5ZDc1NzEyMDA4Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2vQAwDQYJKoZIhvcNAQELBQADggEBAIfWyORuIpChHszfJ4LEzak/cy2d sx0YkGth3+WoFEctW+YvQXA3VFajmTJug3l5OzkcNb0LlSROXqg/wSrU67YjmWVK Ew/S2W3wT4j5t60hKgiDRV0Uj2jAO7Uyoywa/ickwWCfkvZ2bu0TsZ1Ic21BBM8G +Z0vumyyFmEntZp6Hv4CclZ2SvyDQqL67xBM6FGOGWjoK+Stw0c9Kd6qasux0GI6 0QLFWGP2WZF/RqaOefhWb+Ddp2cJBWl6fc3nAxzBhtmOsi34/YrMoKgp5tiqyBUH vqGq4apE3GCkJRS0AUZ2zOqhmEKTwAfGzEn3A9K2grOVm1s99U9MMUdrbMk= -----END CERTIFICATE-----Generated at Tue Jul 1 00:04:46 2025 by rpki-client