$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676edaf9-eefc-4d15-806d-4e0758a8314a.roa File: 676edaf9-eefc-4d15-806d-4e0758a8314a.roa (raw, json) Hash identifier: Gm3fwD0klAZvxOWvzwFneqlRU7tvyd/cD4gcRaGz5ws= Subject key identifier: B7:BA:B1:A6:6A:CE:C5:BC:82:0F:6B:9B:94:24:67:57:FD:DF:81:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3F6D1F40762A2A2A83E3BC8ABE95E3A88509CE66 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676edaf9-eefc-4d15-806d-4e0758a8314a.roa Signing time: Mon 30 Jun 2025 17:31:39 +0000 ROA not before: Mon 30 Jun 2025 17:31:39 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.215.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:6d:1f:40:76:2a:2a:2a:83:e3:bc:8a:be:95:e3:a8:85:09:ce:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 17:31:39 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=c69269ba84c68ee31a32b5f93a7725c75b69f09cb63925cd3939abfceab7e230, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7f:ff:dc:52:35:46:ad:f2:d1:5b:b1:6c:48: e0:2f:c3:df:ec:03:2b:5a:cd:11:16:85:22:f6:61: 5e:f0:b9:38:6f:d3:bf:77:5b:b9:8d:af:6b:55:a6: 3a:0a:95:6f:e2:8d:21:b8:44:c7:6a:9b:17:24:bd: 60:a4:15:b0:97:a1:a8:9c:d5:e0:0f:a0:b2:88:54: 2c:49:51:a3:ac:dc:a2:fb:95:ba:47:66:15:db:45: d1:7b:67:5a:79:72:fb:ae:5f:b2:85:51:82:cf:1e: 97:a1:a6:a2:73:ed:11:91:a1:04:5d:3d:c3:3d:d3: 28:d1:7e:07:b2:87:8f:29:0c:8d:3a:bc:91:23:79: 8c:d6:a7:3d:03:cd:c6:33:b3:4a:07:2b:e3:ac:e0: f2:98:53:ea:09:3b:0a:35:d7:54:9c:59:15:62:2a: 61:e7:28:e3:4c:ba:16:11:c1:ea:52:99:26:da:8a: ff:b0:b5:8a:33:8a:b8:a7:53:11:15:1e:dc:b6:70: b6:32:7f:26:fd:82:74:d1:23:2c:04:4a:c7:e3:f3: 3e:1d:3d:5d:88:5f:3c:08:c2:8d:bd:a1:bc:2d:d3: c1:6d:06:29:6c:37:83:d2:58:73:96:ac:3c:4e:2a: e6:4f:db:20:d7:99:c1:19:01:56:fb:05:3f:7e:e9: 85:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:BA:B1:A6:6A:CE:C5:BC:82:0F:6B:9B:94:24:67:57:FD:DF:81:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/676edaf9-eefc-4d15-806d-4e0758a8314a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.215.0.0/20 Signature Algorithm: sha256WithRSAEncryption 74:0b:55:c5:15:de:14:f5:ce:f4:1b:55:e5:f2:6f:ce:64:d4: 87:c3:09:fe:a8:7d:49:c5:6a:74:c3:cc:3c:8e:af:14:34:b5: 4f:9a:6d:cf:6e:7e:19:1f:da:08:b2:cc:d7:22:bf:96:dd:37: e0:31:f0:7c:03:ce:c3:28:a1:d0:13:95:d2:66:2f:fb:64:5b: c1:c4:8a:d4:b0:4c:31:51:8e:aa:b6:06:2d:e0:36:0f:e8:dd: 21:8d:6a:d2:2f:a8:84:f5:d6:d3:e5:62:a8:dd:66:a8:14:d9: ea:42:fb:49:13:6b:8b:90:6e:2e:c6:e8:71:c4:f7:38:f5:90: b9:64:5d:a2:56:86:1e:ac:c4:66:c1:22:7c:55:4f:0f:33:4c: c3:86:71:74:58:27:8f:82:f0:af:fb:dc:68:e8:d4:ad:47:29: eb:52:44:77:88:39:78:c7:81:b2:93:1a:35:64:94:0d:4d:e1: f7:ff:9a:7f:39:4d:1a:d5:a9:9e:f6:a8:a1:a2:71:6e:83:d3: 49:6f:9e:01:ac:9a:7a:8c:85:49:b5:42:9c:11:19:48:1d:2c: 10:b0:fd:55:4d:ef:e0:06:79:c6:50:c7:03:fe:80:41:43:6f: 90:18:1e:9e:ae:34:fc:af:53:20:e6:35:93:42:40:d4:91:f4: 8e:c1:d7:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP20fQHYqKiqD47yKvpXjqIUJzmYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTczMTM5WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjkyNjliYTg0YzY4ZWUzMWEzMmI1ZjkzYTc3MjVjNzVi NjlmMDljYjYzOTI1Y2QzOTM5YWJmY2VhYjdlMjMwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVf//cUjVGrfLRW7FsSOAvw9/sAytazREWhSL2YV7wuThv 0793W7mNr2tVpjoKlW/ijSG4RMdqmxckvWCkFbCXoaic1eAPoLKIVCxJUaOs3KL7 lbpHZhXbRdF7Z1p5cvuuX7KFUYLPHpehpqJz7RGRoQRdPcM90yjRfgeyh48pDI06 vJEjeYzWpz0DzcYzs0oHK+Os4PKYU+oJOwo111ScWRViKmHnKONMuhYRwepSmSba iv+wtYozirinUxEVHty2cLYyfyb9gnTRIywESsfj8z4dPV2IXzwIwo29obwt08Ft BilsN4PSWHOWrDxOKuZP2yDXmcEZAVb7BT9+6YW3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUt7qxpmrOxbyCD2ublCRnV/3fgWAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3NmVkYWY5LWVlZmMtNGQxNS04MDZkLTRlMDc1OGE4MzE0YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ21wAwDQYJKoZIhvcNAQELBQADggEBAHQLVcUV3hT1zvQbVeXyb85k1IfD Cf6ofUnFanTDzDyOrxQ0tU+abc9ufhkf2giyzNciv5bdN+Ax8HwDzsMoodATldJm L/tkW8HEitSwTDFRjqq2Bi3gNg/o3SGNatIvqIT11tPlYqjdZqgU2epC+0kTa4uQ bi7G6HHE9zj1kLlkXaJWhh6sxGbBInxVTw8zTMOGcXRYJ4+C8K/73Gjo1K1HKetS RHeIOXjHgbKTGjVklA1N4ff/mn85TRrVqZ72qKGicW6D00lvngGsmnqMhUm1QpwR GUgdLBCw/VVN7+AGecZQxwP+gEFDb5AYHp6uNPyvUyDmNZNCQNSR9I7B1zg= -----END CERTIFICATE-----Generated at Mon Jun 30 22:56:21 2025 by rpki-client