$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3118401e-426b-4833-b671-0716f93fb236.roa File: 3118401e-426b-4833-b671-0716f93fb236.roa (raw, json) Hash identifier: zIlvMj3455lYG1PG4WQKNaiY5KRXEzdr4XSpNc6aoE4= Subject key identifier: F3:B9:D0:64:D2:FB:F2:F9:53:4D:CA:8D:7A:2F:0F:46:AD:72:72:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 58D95C2BAC55B576CC243745C960CB6914C79FDF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3118401e-426b-4833-b671-0716f93fb236.roa Signing time: Mon 30 Jun 2025 16:01:07 +0000 ROA not before: Mon 30 Jun 2025 16:01:07 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.214.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d9:5c:2b:ac:55:b5:76:cc:24:37:45:c9:60:cb:69:14:c7:9f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:01:07 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=fe40e50868ad21678faf8fafb77db99cc849eb3096777317e0d5cee468c7a538, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:83:76:05:73:9e:69:04:b9:c4:43:a8:b2: 06:fa:7d:be:7a:84:03:bd:62:3e:01:ee:be:62:94: ad:2d:74:3d:6e:fd:38:28:26:ed:28:b4:48:ca:10: ef:ef:0c:fb:b5:98:a2:f1:70:26:d3:14:f4:25:15: 24:d1:cb:67:c0:a1:b5:89:d1:36:cc:a7:93:92:cd: de:06:c1:d7:99:07:7f:f3:4a:58:91:f3:83:25:f7: 83:05:d2:3e:36:f6:15:fe:05:3a:70:1d:15:9d:2c: 52:dd:d5:a7:2e:34:bf:29:3a:5b:36:22:79:50:95: 73:d4:b1:1f:fa:77:99:15:4c:f9:e8:d4:4f:d4:d3: a0:a3:90:05:e5:a3:05:38:27:c9:10:04:e2:1d:bf: 0b:92:39:3d:19:ce:06:8b:13:22:33:03:f3:af:0d: a7:ea:3c:d0:3c:39:ee:bf:3e:f0:50:f4:2f:19:e4: 0b:23:62:ad:98:65:02:7b:bb:49:62:12:08:c7:1a: c1:e5:8c:44:2e:68:9a:a9:6d:13:30:0c:aa:80:fd: 89:2e:e8:72:47:d3:7c:03:a8:63:c0:98:01:92:36: aa:13:14:30:8f:6a:2d:2a:da:87:31:78:c1:cc:cb: 22:41:08:aa:b4:f2:6b:32:a7:57:8e:7c:55:06:d7: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B9:D0:64:D2:FB:F2:F9:53:4D:CA:8D:7A:2F:0F:46:AD:72:72:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3118401e-426b-4833-b671-0716f93fb236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.214.0.0/15 Signature Algorithm: sha256WithRSAEncryption 70:f0:50:04:3f:b2:37:79:62:96:0f:d4:04:7f:5e:64:6f:8b: 12:9d:99:08:40:1c:bf:c7:d4:c9:45:12:68:bf:ee:45:fd:b1: 76:91:16:c4:ca:14:2e:c8:ce:5d:60:15:ea:69:3e:b7:68:1a: fe:ef:a9:5b:c9:7a:af:b6:b7:ca:c0:1a:9a:da:b7:45:24:84: 8a:27:13:7d:3d:f1:1b:09:be:c7:35:d9:db:9a:cb:8c:da:73: ff:bf:cd:f8:44:b7:36:3c:10:8f:b4:7f:0f:77:63:a5:86:14: fd:f7:db:b6:27:43:cb:74:b8:b6:6e:e1:0d:46:8e:73:19:64: 32:25:d1:f7:84:6d:85:e1:ca:7b:37:ed:d2:9d:d9:a1:2b:26: 3a:6b:6a:be:c9:28:5c:3f:5e:67:bf:4e:9b:79:ab:9b:04:f1: e4:77:9e:36:ac:ab:b9:ea:c1:21:b6:55:e1:6d:4d:5a:5f:30: 84:20:ac:c7:7d:8b:70:6e:e0:7e:67:bf:2d:d3:2b:f6:0d:2c: 38:b0:80:86:85:13:85:f5:69:da:a3:bd:49:b6:07:95:f7:64: 27:b1:1b:8c:04:b9:31:a4:78:10:75:69:6f:7b:a2:2a:b5:34: 9d:18:3f:36:be:bf:89:2b:f6:bf:ee:4b:d8:e1:43:2f:59:22: 3e:6e:42:d4 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWNlcK6xVtXbMJDdFyWDLaRTHn98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYwMTA3WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTQwZTUwODY4YWQyMTY3OGZhZjhmYWZiNzdkYjk5Y2M4 NDllYjMwOTY3NzczMTdlMGQ1Y2VlNDY4YzdhNTM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3AYN2BXOeaQS5xEOosgb6fb56hAO9Yj4B7r5ilK0tdD1u /TgoJu0otEjKEO/vDPu1mKLxcCbTFPQlFSTRy2fAobWJ0TbMp5OSzd4GwdeZB3/z SliR84Ml94MF0j429hX+BTpwHRWdLFLd1acuNL8pOls2InlQlXPUsR/6d5kVTPno 1E/U06CjkAXlowU4J8kQBOIdvwuSOT0ZzgaLEyIzA/OvDafqPNA8Oe6/PvBQ9C8Z 5AsjYq2YZQJ7u0liEgjHGsHljEQuaJqpbRMwDKqA/Yku6HJH03wDqGPAmAGSNqoT FDCPai0q2ocxeMHMyyJBCKq08msyp1eOfFUG1xpFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU87nQZNL78vlTTcqNei8PRq1ycsowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMxMTg0MDFlLTQyNmItNDgzMy1iNjcxLTA3MTZmOTNmYjIzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEN1jANBgkqhkiG9w0BAQsFAAOCAQEAcPBQBD+yN3lilg/UBH9eZG+LEp2Z CEAcv8fUyUUSaL/uRf2xdpEWxMoULsjOXWAV6mk+t2ga/u+pW8l6r7a3ysAamtq3 RSSEiicTfT3xGwm+xzXZ25rLjNpz/7/N+ES3NjwQj7R/D3djpYYU/ffbtidDy3S4 tm7hDUaOcxlkMiXR94RtheHKezft0p3ZoSsmOmtqvskoXD9eZ79Om3mrmwTx5Hee NqyruerBIbZV4W1NWl8whCCsx32LcG7gfme/LdMr9g0sOLCAhoUThfVp2qO9SbYH lfdkJ7EbjAS5MaR4EHVpb3uiKrU0nRg/Nr6/iSv2v+5L2OFDL1kiPm5C1A== -----END CERTIFICATE-----Generated at Tue Jul 1 05:01:12 2025 by rpki-client