$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2011ffc-3660-4473-82ae-f07e9df5c160.roa File: c2011ffc-3660-4473-82ae-f07e9df5c160.roa (raw, json) Hash identifier: +qiqoipa1oaten8OSf5QlW8nfPn75VPaX8lWiqd8wVI= Subject key identifier: 72:23:D1:FD:73:0F:34:AE:D2:5A:E6:2E:8F:44:08:5F:25:3B:DD:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 16D81AE24CB1BCCF85CEA8C04B82D346C2466E55 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2011ffc-3660-4473-82ae-f07e9df5c160.roa Signing time: Mon 30 Jun 2025 17:31:40 +0000 ROA not before: Mon 30 Jun 2025 17:31:40 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d8:1a:e2:4c:b1:bc:cf:85:ce:a8:c0:4b:82:d3:46:c2:46:6e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 17:31:40 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=a15106c5dd58552b6d4c2d245e12767bfe812205583a2bed39e3d7febcd4d4d7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f9:20:9a:6f:77:d0:32:9c:43:45:cb:8a:ce: 93:2a:26:a3:a3:78:1a:e0:62:3a:c0:05:f8:fc:f6: d6:fb:e0:f1:6c:b2:16:fc:3f:e9:e1:8a:97:12:c4: a0:5b:0a:88:b3:9b:dc:e6:2c:23:16:c3:ed:97:5e: f6:22:10:f7:3d:a9:39:82:2f:f1:ee:3c:f1:82:91: fe:8a:ac:58:2a:94:ff:eb:b5:08:1c:ac:d6:c8:b4: 10:df:8c:df:b4:e4:1e:3e:0b:91:60:e1:59:41:d4: 31:89:fb:32:d3:18:12:fa:0b:ea:fb:35:84:51:a5: d5:fb:9e:39:a8:c5:9f:20:46:e2:8e:1f:f5:02:26: 19:00:2e:61:69:13:66:90:84:a5:c2:f4:4e:88:fa: c5:56:0a:8c:67:11:bc:62:b3:e0:f2:d0:2e:8d:8d: f0:88:74:3a:be:3c:51:9c:7f:e2:ad:44:a3:a8:d7: 1a:01:6c:51:64:b3:cf:43:5e:67:da:dd:fa:f7:3f: 17:0a:25:3e:91:72:34:00:f4:bd:13:85:ab:4b:48: 7e:40:c4:5f:04:41:8d:1b:31:88:86:57:fb:a2:02: 37:4e:bd:6a:94:2c:25:31:12:44:69:5f:6c:c5:5c: 30:e1:a8:a2:1f:82:6f:9f:42:df:7d:fe:d0:54:24: e8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:23:D1:FD:73:0F:34:AE:D2:5A:E6:2E:8F:44:08:5F:25:3B:DD:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2011ffc-3660-4473-82ae-f07e9df5c160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3c:b2:a4:4b:09:0f:5b:f3:08:8b:8e:84:58:fb:04:8e:84:25: ac:3b:39:0d:bf:43:60:f1:dc:12:fe:79:9d:db:6c:29:c1:65: 97:7e:98:8c:6f:78:b6:c6:17:d6:42:54:39:69:b3:1d:c3:be: b7:ae:0b:83:b8:91:9b:fb:ef:56:1b:dd:0f:e5:a2:c1:30:ac: b2:1b:6d:8c:7f:9e:a6:aa:71:a2:f4:bf:f9:17:04:26:6d:2a: 9b:e9:c8:88:40:cd:5b:b5:c6:8f:79:17:21:4b:fd:f6:ee:e8: 98:e4:8e:71:68:2b:cb:db:a1:ab:37:c6:83:5d:b2:15:54:2b: 6e:b2:89:1a:d0:49:2a:db:0f:e8:e9:33:24:33:77:54:4e:c6: 43:08:76:53:85:ba:a2:a1:8d:c6:b2:71:5b:cb:a5:0a:df:61: 80:d7:f0:cc:dc:2c:d2:04:ed:3d:c5:09:38:54:9e:8a:f1:6b: 0c:64:cf:95:86:ac:42:7b:21:7a:6f:32:c9:68:7a:2f:3e:77: 58:ac:bf:02:1c:0a:6b:15:c7:a0:de:7e:58:e9:06:19:76:63: 51:89:4e:bd:d4:bc:e4:37:d2:b8:97:23:b9:de:bf:25:08:f3: 1b:1e:df:ec:c9:85:d2:52:7f:e9:d2:d1:c0:e1:08:c9:8f:30: 84:4f:41:68 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFtga4kyxvM+FzqjAS4LTRsJGblUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTczMTQwWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTUxMDZjNWRkNTg1NTJiNmQ0YzJkMjQ1ZTEyNzY3YmZl ODEyMjA1NTgzYTJiZWQzOWUzZDdmZWJjZDRkNGQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDr+SCab3fQMpxDRcuKzpMqJqOjeBrgYjrABfj89tb74PFs shb8P+nhipcSxKBbCoizm9zmLCMWw+2XXvYiEPc9qTmCL/HuPPGCkf6KrFgqlP/r tQgcrNbItBDfjN+05B4+C5Fg4VlB1DGJ+zLTGBL6C+r7NYRRpdX7njmoxZ8gRuKO H/UCJhkALmFpE2aQhKXC9E6I+sVWCoxnEbxis+Dy0C6NjfCIdDq+PFGcf+KtRKOo 1xoBbFFks89DXmfa3fr3PxcKJT6RcjQA9L0ThatLSH5AxF8EQY0bMYiGV/uiAjdO vWqULCUxEkRpX2zFXDDhqKIfgm+fQt99/tBUJOg5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUciPR/XMPNK7SWuYuj0QIXyU73dIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyMDExZmZjLTM2NjAtNDQ3My04MmFlLWYwN2U5ZGY1YzE2MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA21jANBgkqhkiG9w0BAQsFAAOCAQEAPLKkSwkPW/MIi46EWPsEjoQlrDs5 Db9DYPHcEv55ndtsKcFll36YjG94tsYX1kJUOWmzHcO+t64Lg7iRm/vvVhvdD+Wi wTCsshttjH+epqpxovS/+RcEJm0qm+nIiEDNW7XGj3kXIUv99u7omOSOcWgry9uh qzfGg12yFVQrbrKJGtBJKtsP6OkzJDN3VE7GQwh2U4W6oqGNxrJxW8ulCt9hgNfw zNws0gTtPcUJOFSeivFrDGTPlYasQnshem8yyWh6Lz53WKy/AhwKaxXHoN5+WOkG GXZjUYlOvdS85DfSuJcjud6/JQjzGx7f7MmF0lJ/6dLRwOEIyY8whE9BaA== -----END CERTIFICATE-----Generated at Mon Jun 30 23:25:39 2025 by rpki-client