$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87da9c11-1cc0-4eb6-987c-c6c62b4c757d.roa File: 87da9c11-1cc0-4eb6-987c-c6c62b4c757d.roa (raw, json) Hash identifier: QXa8hzVL7XvPUtJKeN0kdyjggzHFuINmBxLtQnJUQLA= Subject key identifier: DB:D5:F9:6F:90:D2:6D:AF:66:35:08:ED:37:F5:10:F2:CE:DD:50:19 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7108D116CBD0BDF06AFFDBDA7605EDAFF86DFFD2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87da9c11-1cc0-4eb6-987c-c6c62b4c757d.roa Signing time: Mon 30 Jun 2025 17:31:17 +0000 ROA not before: Mon 30 Jun 2025 17:31:17 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.217.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:08:d1:16:cb:d0:bd:f0:6a:ff:db:da:76:05:ed:af:f8:6d:ff:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 17:31:17 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=0fd7f7ea22f636f352ac0f44645dc6fc844a9ce9d9db94dac55ea3c1c3c66567, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:a3:23:79:40:3f:6d:06:ab:d0:6f:ca:ca: ca:2b:6e:d9:e3:db:27:44:67:70:fc:c2:58:fc:00: 72:01:5f:57:d8:67:c9:f1:ca:e7:44:7b:81:f3:60: 2d:fa:71:9a:b4:e7:77:e9:7d:0e:f0:55:d9:3d:bb: 3f:02:8f:af:4d:9f:43:94:3e:48:81:ee:90:83:d1: cb:c7:69:ef:1b:8a:e2:05:9f:c7:0d:6f:e8:87:da: 79:57:e5:f4:12:14:fb:51:55:cf:79:c3:50:bd:ba: ce:aa:57:c6:87:4e:7e:73:14:da:1a:c5:22:71:00: 13:d3:8a:d4:a6:93:b4:79:96:00:09:3b:83:ff:f1: 2d:09:5d:40:16:ce:8d:db:2d:96:6f:b1:98:11:00: 13:bd:d3:1d:66:43:2d:bc:22:3a:40:2a:73:8a:df: 0a:83:6c:bf:dd:d4:82:67:55:9e:3e:4b:64:a8:26: 02:ee:b6:08:f4:4b:19:88:0b:9a:83:f4:d9:3a:1d: 65:8a:9e:f2:8a:67:cb:cb:b9:e6:54:cc:fe:25:bc: b3:61:9a:38:7b:dc:8d:d5:33:af:b5:5d:92:3b:89: 72:c5:9c:e5:f5:05:5d:4e:95:e0:0a:60:9e:25:49: e7:59:80:89:23:2a:23:c5:4a:6c:47:0b:90:a6:e2: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D5:F9:6F:90:D2:6D:AF:66:35:08:ED:37:F5:10:F2:CE:DD:50:19 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/87da9c11-1cc0-4eb6-987c-c6c62b4c757d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.217.113.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:0a:70:23:9d:84:5c:dd:ca:09:29:25:ad:bd:95:f8:29:52: cb:55:f8:06:bd:6f:a3:2e:b3:2f:83:cc:d0:64:cf:66:d4:35: e1:d4:ec:8b:29:d5:47:f8:14:13:d0:3c:bb:0c:5e:d7:93:ed: 0c:7c:90:a3:bb:10:87:ea:77:42:c6:b3:5e:8c:57:bd:03:b1: 4c:85:b1:23:34:ad:ae:93:1d:ca:02:79:d0:56:59:6f:18:f7: cc:f6:d9:c4:25:c9:b7:33:1b:7e:34:a3:ed:25:a1:4f:64:11: b1:a6:09:d5:b6:fe:4e:72:4d:eb:84:b8:8a:9c:10:c7:c5:ca: 7a:ec:14:4b:5b:77:a5:01:f2:b3:58:1f:fb:38:35:fa:81:a7: 4f:e9:f1:5e:0c:0c:55:2e:9a:ce:0c:d9:9a:eb:f7:a2:6f:76: ea:d8:2d:84:6e:c4:1f:a4:09:10:62:c8:19:e1:cf:9f:38:18: 1c:d7:ca:11:0f:8c:f8:e9:32:6b:dd:fe:e3:88:cc:60:25:ff: a4:fd:13:a4:f8:7b:84:1f:53:e7:b7:0a:af:f9:68:f4:5a:0f: 52:bb:24:c6:bf:9e:92:85:e6:74:c5:32:ff:3a:0c:bc:a0:52: 3f:40:dc:42:5d:bb:73:c8:7b:39:ac:fe:24:44:8e:e9:32:30: b6:55:01:71 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcQjRFsvQvfBq/9vadgXtr/ht/9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTczMTE3WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZmQ3ZjdlYTIyZjYzNmYzNTJhYzBmNDQ2NDVkYzZmYzg0 NGE5Y2U5ZDlkYjk0ZGFjNTVlYTNjMWMzYzY2NTY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDRkaMjeUA/bQar0G/Kysorbtnj2ydEZ3D8wlj8AHIBX1fY Z8nxyudEe4HzYC36cZq053fpfQ7wVdk9uz8Cj69Nn0OUPkiB7pCD0cvHae8biuIF n8cNb+iH2nlX5fQSFPtRVc95w1C9us6qV8aHTn5zFNoaxSJxABPTitSmk7R5lgAJ O4P/8S0JXUAWzo3bLZZvsZgRABO90x1mQy28IjpAKnOK3wqDbL/d1IJnVZ4+S2So JgLutgj0SxmIC5qD9Nk6HWWKnvKKZ8vLueZUzP4lvLNhmjh73I3VM6+1XZI7iXLF nOX1BV1OleAKYJ4lSedZgIkjKiPFSmxHC5Cm4jVBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU29X5b5DSba9mNQjtN/UQ8s7dUBkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3ZGE5YzExLTFjYzAtNGViNi05ODdjLWM2YzYyYjRjNzU3ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA22XEwDQYJKoZIhvcNAQELBQADggEBAC8KcCOdhFzdygkpJa29lfgpUstV +Aa9b6Musy+DzNBkz2bUNeHU7Isp1Uf4FBPQPLsMXteT7Qx8kKO7EIfqd0LGs16M V70DsUyFsSM0ra6THcoCedBWWW8Y98z22cQlybczG340o+0loU9kEbGmCdW2/k5y TeuEuIqcEMfFynrsFEtbd6UB8rNYH/s4NfqBp0/p8V4MDFUums4M2Zrr96JvdurY LYRuxB+kCRBiyBnhz584GBzXyhEPjPjpMmvd/uOIzGAl/6T9E6T4e4QfU+e3Cq/5 aPRaD1K7JMa/npKF5nTFMv86DLygUj9A3EJdu3PIezms/iREjukyMLZVAXE= -----END CERTIFICATE-----Generated at Tue Jul 1 01:31:30 2025 by rpki-client