$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21d15316-3436-4c1c-b12c-229c180945e0.roa File: 21d15316-3436-4c1c-b12c-229c180945e0.roa (raw, json) Hash identifier: HCFIrxMk309o3t/iml4n1DFzo+Fs3+9hShtp49sysDo= Subject key identifier: 26:18:95:DA:7B:05:3F:9F:AE:CC:C7:D2:A1:E9:19:BA:4D:FC:17:93 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 57E22C887FEF8B3AD03FCB97B54EF16E982847FC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21d15316-3436-4c1c-b12c-229c180945e0.roa Signing time: Mon 30 Jun 2025 17:30:24 +0000 ROA not before: Mon 30 Jun 2025 17:30:24 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.219.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e2:2c:88:7f:ef:8b:3a:d0:3f:cb:97:b5:4e:f1:6e:98:28:47:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 17:30:24 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=95bb850522524f923387df7222376bf6e8db36bd838ccef96ea440e9990ba5bf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4c:1a:fd:34:79:26:8d:d6:32:14:74:2c:ad: 15:eb:4d:5d:12:7f:29:31:19:90:56:be:4d:05:42: bf:19:e8:7a:3a:f8:15:29:d5:76:ed:34:bc:32:c4: 98:30:d4:3d:3e:49:20:5a:28:8d:4f:d5:6d:35:6e: f6:06:17:11:2e:74:55:30:ed:dc:9d:1e:64:8a:0a: 71:04:e6:d1:5f:8d:b0:93:3a:64:68:b7:e0:e6:8d: 9d:f0:b5:db:b0:1c:4d:2f:97:8c:ae:78:2b:76:18: d5:e9:e0:74:f4:13:5d:1a:ca:fc:c8:75:b7:e2:69: ea:09:14:2e:bb:d9:8d:f7:ac:ed:cc:db:d7:d6:31: 7f:37:6f:ef:5e:0b:ea:a5:a8:b5:18:96:36:af:eb: 57:5f:7a:21:05:cc:22:b9:8c:37:9d:10:e1:32:77: 31:c0:58:bf:32:87:80:00:54:a9:5f:a3:a2:0a:17: 07:80:c0:40:92:44:20:ec:2b:33:c0:02:0d:f4:9a: 6a:73:60:57:82:4f:a0:46:57:91:2d:74:b6:1e:b5: b0:bd:6e:5b:d5:e5:6a:2a:58:54:d9:7e:9b:37:c8: 60:7c:8f:a6:ff:7a:0b:5c:b9:f5:30:8b:19:4f:16: aa:c3:2d:8d:23:6e:14:ea:20:09:c3:20:32:a2:82: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:18:95:DA:7B:05:3F:9F:AE:CC:C7:D2:A1:E9:19:BA:4D:FC:17:93 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21d15316-3436-4c1c-b12c-229c180945e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.219.192.0/19 Signature Algorithm: sha256WithRSAEncryption a4:cf:ff:96:a5:dd:71:d4:02:d1:c0:04:24:e6:a5:8f:85:5b: 2e:3b:22:0b:89:c7:e1:18:f4:ca:e8:89:08:ea:d9:a2:44:b6: 68:34:15:d8:20:ea:d8:79:8a:0e:b4:cc:fe:71:99:0e:24:56: 65:ec:2d:e0:37:2c:b2:28:1c:e2:51:03:53:47:ad:f1:6d:db: 6c:51:d5:e3:a2:be:61:7d:9c:a0:db:a0:42:e6:ba:73:97:28: ed:91:70:c3:e8:51:87:60:91:90:90:e1:ba:37:3a:38:6c:f1: 6b:0c:ac:61:48:ad:f6:85:9b:5a:b1:32:f3:4e:18:77:89:8a: af:7e:fb:e6:86:7d:38:e3:61:a4:c8:b5:ab:4a:73:c2:60:88: 43:51:ad:0c:d6:84:80:56:99:86:ea:d3:a2:88:53:34:d9:88: c7:b9:b0:22:eb:84:db:46:4d:58:1b:a1:06:d7:9e:c7:a5:0f: 27:ff:5f:a1:f7:f8:7e:60:72:bc:22:41:d8:d2:bc:5d:95:a0: 4d:ae:fd:35:43:14:91:a1:5c:3f:a2:f3:b6:32:31:06:e1:d5: e5:a6:e0:42:9e:52:aa:ce:f7:a7:52:04:31:3e:0f:04:88:0a: 36:09:0f:4d:19:3e:cd:d2:dd:2c:b7:09:9f:cc:30:3b:05:81: 51:80:3b:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUV+IsiH/vizrQP8uXtU7xbpgoR/wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTczMDI0WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NWJiODUwNTIyNTI0ZjkyMzM4N2RmNzIyMjM3NmJmNmU4 ZGIzNmJkODM4Y2NlZjk2ZWE0NDBlOTk5MGJhNWJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZTBr9NHkmjdYyFHQsrRXrTV0SfykxGZBWvk0FQr8Z6Ho6 +BUp1XbtNLwyxJgw1D0+SSBaKI1P1W01bvYGFxEudFUw7dydHmSKCnEE5tFfjbCT OmRot+DmjZ3wtduwHE0vl4yueCt2GNXp4HT0E10ayvzIdbfiaeoJFC672Y33rO3M 29fWMX83b+9eC+qlqLUYljav61dfeiEFzCK5jDedEOEydzHAWL8yh4AAVKlfo6IK FweAwECSRCDsKzPAAg30mmpzYFeCT6BGV5EtdLYetbC9blvV5WoqWFTZfps3yGB8 j6b/egtcufUwixlPFqrDLY0jbhTqIAnDIDKigvGRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJhiV2nsFP5+uzMfSoekZuk38F5MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxZDE1MzE2LTM0MzYtNGMxYy1iMTJjLTIyOWMxODA5NDVlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU228AwDQYJKoZIhvcNAQELBQADggEBAKTP/5al3XHUAtHABCTmpY+FWy47 IguJx+EY9MroiQjq2aJEtmg0Fdgg6th5ig60zP5xmQ4kVmXsLeA3LLIoHOJRA1NH rfFt22xR1eOivmF9nKDboELmunOXKO2RcMPoUYdgkZCQ4bo3Ojhs8WsMrGFIrfaF m1qxMvNOGHeJiq9+++aGfTjjYaTItatKc8JgiENRrQzWhIBWmYbq06KIUzTZiMe5 sCLrhNtGTVgboQbXnselDyf/X6H3+H5gcrwiQdjSvF2VoE2u/TVDFJGhXD+i87Yy MQbh1eWm4EKeUqrO96dSBDE+DwSICjYJD00ZPs3S3Sy3CZ/MMDsFgVGAO54= -----END CERTIFICATE-----Generated at Mon Jun 30 23:31:20 2025 by rpki-client