$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6736d94e-8fc9-4f0b-86ac-2e158a26063f.roa File: 6736d94e-8fc9-4f0b-86ac-2e158a26063f.roa (raw, json) Hash identifier: DLBeS7VxYwqbg8lbnZwoliJZ4e/VGRylbXzT71h+Tu0= Subject key identifier: 27:10:FC:9E:E5:5E:67:4A:97:74:B3:BC:EC:CB:C6:B0:48:6D:6D:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D67951F0FAEF29988F0AC4359A19649DEAF24 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6736d94e-8fc9-4f0b-86ac-2e158a26063f.roa Signing time: Mon 16 Jun 2025 17:00:17 +0000 ROA not before: Mon 16 Jun 2025 17:00:17 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.141.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:67:95:1f:0f:ae:f2:99:88:f0:ac:43:59:a1:96:49:de:af:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:00:17 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=b78060cbe7281983c824420112675cf87d940fdcb932905db7e345bc8e6bfc37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d4:f3:5c:f6:d4:03:b9:c4:8a:4b:d5:ba:64: 02:13:1e:d5:de:ba:3d:c9:58:b0:f1:0d:36:07:93: fa:24:9e:ce:f4:81:77:2f:ce:02:a2:6a:af:8f:cc: a6:3c:48:41:7a:b9:a1:bc:22:d0:32:15:a3:d0:4d: 28:a8:ed:ce:00:55:cc:99:d5:03:d4:83:d7:03:72: de:ce:fd:21:69:eb:d5:bd:02:d8:14:6b:5e:32:f4: 2f:65:05:a1:eb:ee:2c:3e:e9:05:b7:59:03:39:09: a3:8a:c8:71:48:70:35:da:09:f3:d6:24:62:11:6c: e0:ee:d3:bd:bf:ae:f7:63:6d:e4:ae:3a:32:87:24: ba:5e:b6:ad:4c:06:4e:50:ea:e5:f3:87:50:a1:a3: 2f:5c:d8:21:1c:90:19:6a:dd:f1:0f:41:b7:73:b4: 36:08:f9:11:4d:fb:54:2e:11:0f:ad:6d:a2:10:ea: 39:0a:20:8e:b7:76:04:6b:fb:a8:56:60:a9:1d:a2: 7b:b6:ed:cf:c5:92:c8:53:27:8d:ac:03:88:af:11: 26:16:22:30:97:13:ac:0a:42:af:45:22:eb:46:ec: d0:c9:64:51:52:02:34:2f:2c:be:8d:b5:d4:9d:c2: 05:e3:b6:d3:c7:67:f1:f0:6c:fb:a4:d8:a9:1a:6b: dd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:10:FC:9E:E5:5E:67:4A:97:74:B3:BC:EC:CB:C6:B0:48:6D:6D:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6736d94e-8fc9-4f0b-86ac-2e158a26063f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.141.168.0/23 Signature Algorithm: sha256WithRSAEncryption 92:9b:05:2e:06:07:24:06:bf:47:f5:38:46:ca:3f:54:11:42: 75:fb:2c:93:e8:82:c1:c7:ca:18:45:b5:60:16:7a:5d:f4:00: 77:d8:90:25:75:74:55:02:73:aa:b5:a6:61:bf:fd:79:de:3b: e1:55:32:e4:42:37:3e:d2:40:06:fa:ca:fe:5e:44:c1:26:2c: 74:b3:65:1b:6b:30:39:8d:13:f7:77:f8:17:5d:b1:26:0d:28: 4d:cb:e4:51:8b:c9:f2:1b:2a:6c:d9:a2:76:2f:d7:ea:e4:b7: be:05:62:10:aa:da:25:f5:8d:d2:60:bf:64:46:17:00:42:ed: 2b:81:75:32:86:9a:ff:b8:c9:f7:f1:79:d6:01:b1:d8:31:7b: 38:c6:fb:af:c0:85:ec:66:c8:38:60:75:c2:88:a3:9b:e7:00: 3c:b9:80:24:94:a1:a9:85:f1:e3:4a:42:57:30:b8:b8:55:09: c5:22:f6:82:7b:e0:7a:c1:56:22:61:f1:10:a0:e5:b2:0e:8c: 55:0f:c5:b9:2e:3f:1b:35:f8:9e:1f:28:f0:03:f3:3a:53:4c: 60:19:ee:a2:e3:d6:68:40:05:ef:55:00:4c:c2:bc:82:bc:d9: 7c:9d:c6:68:fe:30:a4:09:6f:19:cf:71:d3:e7:0c:3d:1b:90: 47:db:25:67 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITHWeVHw+u8pmI8KxDWaGWSd6vJDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MTYxNzAwMTdaFw0yNTA3MjEyMzU5NTla MHoxSTBHBgNVBAUTQGI3ODA2MGNiZTcyODE5ODNjODI0NDIwMTEyNjc1Y2Y4N2Q5 NDBmZGNiOTMyOTA1ZGI3ZTM0NWJjOGU2YmZjMzcxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKHU81z21AO5xIpL1bpkAhMe1d66PclYsPENNgeT+iSezvSB dy/OAqJqr4/MpjxIQXq5obwi0DIVo9BNKKjtzgBVzJnVA9SD1wNy3s79IWnr1b0C 2BRrXjL0L2UFoevuLD7pBbdZAzkJo4rIcUhwNdoJ89YkYhFs4O7Tvb+u92Nt5K46 Mockul62rUwGTlDq5fOHUKGjL1zYIRyQGWrd8Q9Bt3O0Ngj5EU37VC4RD61tohDq OQogjrd2BGv7qFZgqR2ie7btz8WSyFMnjawDiK8RJhYiMJcTrApCr0Ui60bs0Mlk UVICNC8svo211J3CBeO208dn8fBs+6TYqRpr3eECAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQnEPye5V5nSpd0s7zsy8awSG1tTTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvNjczNmQ5NGUtOGZjOS00ZjBiLTg2YWMtMmUxNThhMjYwNjNmLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEARKNqDANBgkqhkiG9w0BAQsFAAOCAQEAkpsFLgYHJAa/R/U4Rso/VBFCdfss k+iCwcfKGEW1YBZ6XfQAd9iQJXV0VQJzqrWmYb/9ed474VUy5EI3PtJABvrK/l5E wSYsdLNlG2swOY0T93f4F12xJg0oTcvkUYvJ8hsqbNmidi/X6uS3vgViEKraJfWN 0mC/ZEYXAELtK4F1Moaa/7jJ9/F51gGx2DF7OMb7r8CF7GbIOGB1woijm+cAPLmA JJShqYXx40pCVzC4uFUJxSL2gnvgesFWImHxEKDlsg6MVQ/FuS4/GzX4nh8o8APz OlNMYBnuouPWaEAF71UATMK8grzZfJ3GaP4wpAlvGc9x0+cMPRuQR9slZw== -----END CERTIFICATE-----Generated at Mon Jun 30 22:43:43 2025 by rpki-client