$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3daad517-e110-4327-af02-a98ecd17ad81.roa File: 3daad517-e110-4327-af02-a98ecd17ad81.roa (raw, json) Hash identifier: RmJ7Tv8/ClmJC148RyzKDriSeEvw+HvoE5DGsAa3Z+Y= Subject key identifier: D2:13:1E:BB:5E:76:3A:B3:2C:83:4B:D3:45:EA:38:7C:74:CE:D3:6B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6E6D36A4A93ABBC7BF8993ADCBE318EA87817BFB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3daad517-e110-4327-af02-a98ecd17ad81.roa Signing time: Wed 21 May 2025 00:41:54 +0000 ROA not before: Wed 21 May 2025 00:41:54 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.230.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:6d:36:a4:a9:3a:bb:c7:bf:89:93:ad:cb:e3:18:ea:87:81:7b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:41:54 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=e5b9ca455edd6696e06adddf71e580b6124e1a728d49b23609ac78d6c6cc7aef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ed:1d:3b:d3:8e:e8:65:94:f8:4f:1c:d7:e4: 49:5f:19:82:27:a0:51:3e:ff:b3:cf:01:ea:6c:7c: 67:b3:49:c6:23:be:45:d4:60:1e:73:33:73:45:8f: 97:b6:6b:25:16:14:10:a1:0f:81:ae:59:14:2a:92: c9:d7:9a:6d:55:62:b8:74:a5:28:c6:51:11:de:5f: 50:58:25:01:6a:61:95:b4:66:0a:52:1a:b8:f3:61: fa:55:d4:a7:49:13:59:4d:57:f4:42:87:27:0f:e6: 30:0d:9c:ce:43:f0:9b:69:ad:ac:a0:5c:15:2a:d4: ae:9a:9e:22:bc:a3:4b:71:62:ca:0c:c5:ca:6d:37: 45:dd:82:73:20:c5:f5:1f:be:a1:09:01:7c:14:56: aa:23:af:3b:8f:17:c7:06:09:90:5e:29:a7:45:ad: 44:b3:1a:7b:36:fa:ca:4b:1c:05:27:32:ee:bc:fa: aa:a9:81:2d:80:bf:17:0d:d0:04:9c:d1:a8:fc:1c: 35:57:4a:22:7a:82:5d:35:2c:5c:ec:e2:5c:86:01: c8:21:74:7a:52:13:a7:a1:00:9a:2c:0a:14:a1:09: 5e:42:bf:34:f5:38:59:db:55:1e:04:b8:c1:bf:c5: 4a:5f:61:f8:4a:50:c4:5d:cf:4d:83:cf:6b:55:89: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:13:1E:BB:5E:76:3A:B3:2C:83:4B:D3:45:EA:38:7C:74:CE:D3:6B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3daad517-e110-4327-af02-a98ecd17ad81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.230.224.0/19 Signature Algorithm: sha256WithRSAEncryption 24:56:db:0a:f8:20:22:aa:c5:bf:7e:c8:72:c9:3c:58:24:a9: 35:4f:97:7c:c2:94:d4:d2:15:77:93:cf:cb:13:2c:f3:0a:f4: dd:14:bc:28:e6:db:8c:a1:b9:6f:d0:36:7f:fb:38:65:b5:9a: ae:be:4b:3f:1f:d6:37:5a:7d:a3:74:27:11:c1:76:65:46:41: 01:ea:59:8c:df:5d:aa:fc:34:e4:94:e9:f9:ce:77:cf:73:bb: 05:72:2d:0d:9a:ae:b0:45:7b:37:b6:a8:7e:6d:53:f2:3d:ca: 80:7d:dc:b3:cb:fe:79:f5:91:1f:8a:8c:02:de:6c:97:d0:fd: b4:b3:8e:7e:c5:7f:e0:b4:ce:3f:14:fa:7e:4a:1b:dd:26:b9: bf:74:75:01:12:b2:77:86:f3:81:33:71:4e:16:72:be:de:71: c2:84:cc:63:05:4d:51:dc:02:4c:60:63:0e:de:a5:10:c2:b0: f0:9d:10:26:07:eb:a5:87:82:7e:04:84:12:06:22:28:b6:1f: 9b:47:39:4a:3b:96:40:d8:2a:8f:73:fb:14:8c:0f:ff:9f:9f: 6e:ff:f1:0c:2c:39:66:a7:c3:89:3b:7a:50:04:c9:94:ad:e7: c5:62:4f:69:b3:db:44:fd:8f:70:51:41:ea:57:02:80:d5:61: 93:6a:f6:d4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbm02pKk6u8e/iZOty+MY6oeBe/swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDA0MTU0WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNWI5Y2E0NTVlZGQ2Njk2ZTA2YWRkZGY3MWU1ODBiNjEy NGUxYTcyOGQ0OWIyMzYwOWFjNzhkNmM2Y2M3YWVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq7R07047oZZT4TxzX5ElfGYInoFE+/7PPAepsfGezScYj vkXUYB5zM3NFj5e2ayUWFBChD4GuWRQqksnXmm1VYrh0pSjGURHeX1BYJQFqYZW0 ZgpSGrjzYfpV1KdJE1lNV/RChycP5jANnM5D8JtpraygXBUq1K6aniK8o0txYsoM xcptN0XdgnMgxfUfvqEJAXwUVqojrzuPF8cGCZBeKadFrUSzGns2+spLHAUnMu68 +qqpgS2AvxcN0ASc0aj8HDVXSiJ6gl01LFzs4lyGAcghdHpSE6ehAJosChShCV5C vzT1OFnbVR4EuMG/xUpfYfhKUMRdz02Dz2tViSP9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0hMeu152OrMsg0vTReo4fHTO02swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNkYWFkNTE3LWUxMTAtNDMyNy1hZjAyLWE5OGVjZDE3YWQ4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU25uAwDQYJKoZIhvcNAQELBQADggEBACRW2wr4ICKqxb9+yHLJPFgkqTVP l3zClNTSFXeTz8sTLPMK9N0UvCjm24yhuW/QNn/7OGW1mq6+Sz8f1jdafaN0JxHB dmVGQQHqWYzfXar8NOSU6fnOd89zuwVyLQ2arrBFeze2qH5tU/I9yoB93LPL/nn1 kR+KjALebJfQ/bSzjn7Ff+C0zj8U+n5KG90mub90dQESsneG84EzcU4Wcr7eccKE zGMFTVHcAkxgYw7epRDCsPCdECYH66WHgn4EhBIGIii2H5tHOUo7lkDYKo9z+xSM D/+fn27/8QwsOWanw4k7elAEyZSt58ViT2mz20T9j3BRQepXAoDVYZNq9tQ= -----END CERTIFICATE-----Generated at Fri Jun 6 03:34:12 2025 by rpki-client