$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e960561-3b88-48a1-8197-3c3465950fbb.roa File: 9e960561-3b88-48a1-8197-3c3465950fbb.roa (raw, json) Hash identifier: OFDXupdTP4W4RH88NY+KGReHe5sBqtD0J24HSEK3f/g= Subject key identifier: 9D:9A:C3:17:86:9A:BA:5E:01:C6:D5:69:F8:66:CB:A5:4D:3E:A4:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54483A4609AAA51A0C8161876214CE3E975C4410 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e960561-3b88-48a1-8197-3c3465950fbb.roa Signing time: Mon 30 Jun 2025 17:31:52 +0000 ROA not before: Mon 30 Jun 2025 17:31:52 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.215.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:48:3a:46:09:aa:a5:1a:0c:81:61:87:62:14:ce:3e:97:5c:44:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 17:31:52 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=4eaa26d99414fb17ae72c226b4bbe2f820096f889ad8f4cd6b9180e3b74014b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3a:8e:1f:64:2b:95:4b:73:88:4f:18:a0:84: 5f:40:8a:c5:d9:a0:47:a2:46:7c:a7:31:98:72:90: 46:80:cc:1d:34:b5:bd:9a:91:c3:85:86:b5:52:6b: 3b:fa:15:87:65:79:f4:1c:08:fa:59:79:a3:0f:75: 4f:4a:3d:12:10:59:91:15:a9:98:9b:ac:d3:2b:b0: 1e:6d:4c:c5:6a:c4:fd:8e:d1:ff:64:cb:50:64:17: 11:61:f7:80:ee:f9:34:c0:5d:61:c9:41:ac:0d:94: 9b:dd:27:61:45:32:e4:07:dd:91:94:f3:c9:45:b0: 54:f0:12:be:1a:7b:5a:75:e4:53:3e:d9:57:b5:cd: 67:db:c3:be:8a:07:5f:e6:55:b7:e6:a1:f8:3d:ee: 75:ee:32:b6:43:d7:58:b5:91:1e:56:76:f6:59:1e: 8b:fc:89:ca:90:c3:42:09:20:ea:f8:54:15:55:0e: 62:95:87:8f:48:4e:a8:54:8d:79:40:5f:ed:8c:bf: c3:5b:94:cc:74:17:61:9f:4d:bd:0e:c3:4c:96:a0: 58:fb:8d:c7:5a:a4:df:9e:a0:2b:c5:b8:d5:f5:54: ea:8f:15:53:81:eb:fc:34:f2:77:cb:ac:50:36:5a: 5e:3e:de:2d:3d:c1:5c:a1:34:31:7d:db:de:07:8f: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9A:C3:17:86:9A:BA:5E:01:C6:D5:69:F8:66:CB:A5:4D:3E:A4:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e960561-3b88-48a1-8197-3c3465950fbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.215.192.0/18 Signature Algorithm: sha256WithRSAEncryption 33:31:6e:65:72:25:91:37:82:25:17:d6:55:6e:ed:b0:36:c8: ab:6d:e7:15:46:af:35:b2:11:93:3a:fd:f6:6b:03:bf:38:01: cd:a2:f6:7f:82:44:f1:fb:ec:2f:08:fc:fb:fb:59:c7:5b:26: c1:ea:d4:dd:d5:d8:ff:82:c3:bf:bc:f0:9c:64:2f:01:a7:e7: c8:e4:3c:09:9f:f7:e0:46:e4:d3:9d:f6:7d:5a:1d:b0:fb:99: 4b:f4:c1:69:b7:38:db:a8:ec:cf:94:47:ce:2d:05:df:d5:b6: 4f:96:6c:ea:02:85:98:1d:18:d2:d5:8f:79:5d:6f:38:6b:9f: a0:e0:9a:6f:7c:46:df:1b:54:50:c2:01:bb:8f:65:2d:05:c4: 0b:6f:cf:43:c3:6e:ba:00:20:7b:06:a3:5e:3f:03:5f:ed:93: 88:74:31:c9:53:13:48:5c:8f:f9:05:33:17:ca:0f:0a:18:65: 4f:cc:9c:7a:33:4c:f8:68:87:d7:a5:f3:c6:bd:de:d1:19:d6: 9c:14:47:8d:59:64:30:8d:22:40:d2:0a:1e:7d:e7:d7:9d:67: 31:bd:37:0b:ac:98:84:de:91:cb:07:ec:0d:a8:30:ca:e0:de: 0f:e2:39:0d:5a:05:67:b2:23:2d:d2:74:ec:4c:eb:a5:5c:4a: ce:cc:93:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVEg6RgmqpRoMgWGHYhTOPpdcRBAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTczMTUyWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWFhMjZkOTk0MTRmYjE3YWU3MmMyMjZiNGJiZTJmODIw MDk2Zjg4OWFkOGY0Y2Q2YjkxODBlM2I3NDAxNGIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0Oo4fZCuVS3OITxighF9AisXZoEeiRnynMZhykEaAzB00 tb2akcOFhrVSazv6FYdlefQcCPpZeaMPdU9KPRIQWZEVqZibrNMrsB5tTMVqxP2O 0f9ky1BkFxFh94Du+TTAXWHJQawNlJvdJ2FFMuQH3ZGU88lFsFTwEr4ae1p15FM+ 2Ve1zWfbw76KB1/mVbfmofg97nXuMrZD11i1kR5WdvZZHov8icqQw0IJIOr4VBVV DmKVh49ITqhUjXlAX+2Mv8NblMx0F2GfTb0Ow0yWoFj7jcdapN+eoCvFuNX1VOqP FVOB6/w08nfLrFA2Wl4+3i09wVyhNDF9294Hj6WdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnZrDF4aaul4BxtVp+GbLpU0+pHkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzllOTYwNTYxLTNiODgtNDhhMS04MTk3LTNjMzQ2NTk1MGZiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY218AwDQYJKoZIhvcNAQELBQADggEBADMxbmVyJZE3giUX1lVu7bA2yKtt 5xVGrzWyEZM6/fZrA784Ac2i9n+CRPH77C8I/Pv7WcdbJsHq1N3V2P+Cw7+88Jxk LwGn58jkPAmf9+BG5NOd9n1aHbD7mUv0wWm3ONuo7M+UR84tBd/Vtk+WbOoChZgd GNLVj3ldbzhrn6Dgmm98Rt8bVFDCAbuPZS0FxAtvz0PDbroAIHsGo14/A1/tk4h0 MclTE0hcj/kFMxfKDwoYZU/MnHozTPhoh9el88a93tEZ1pwUR41ZZDCNIkDSCh59 59edZzG9NwusmITekcsH7A2oMMrg3g/iOQ1aBWeyIy3SdOxM66VcSs7Mk5g= -----END CERTIFICATE-----Generated at Tue Jul 1 00:28:29 2025 by rpki-client