$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8933f44-d5f7-42f5-a6eb-217be17a290d.roa File: f8933f44-d5f7-42f5-a6eb-217be17a290d.roa (raw, json) Hash identifier: ISzae60QPTUVXUIHOPnAxaaxTtx42ZfquU1DXPBbIXM= Subject key identifier: 09:13:45:D5:81:4C:B0:21:8E:A7:02:86:90:45:06:B2:D3:AA:4A:AE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73AFB0AA3A9204197EF0E54A683FBF2E3C6D4412 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8933f44-d5f7-42f5-a6eb-217be17a290d.roa Signing time: Mon 30 Jun 2025 17:40:11 +0000 ROA not before: Mon 30 Jun 2025 17:40:11 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.217.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:af:b0:aa:3a:92:04:19:7e:f0:e5:4a:68:3f:bf:2e:3c:6d:44:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 17:40:11 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=e921918f09587a7b3757be3b006ee1041e7db4e82cefa85b2414e7be870c45ac, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:38:e7:fd:92:fa:ea:9c:25:60:4b:d5:23: 16:d2:8a:67:23:27:0b:9d:dd:89:57:c9:4d:3a:de: ad:8d:e4:e8:55:5c:46:c9:fe:10:af:e4:af:92:e9: c5:5a:a3:dd:70:9f:75:ee:6d:04:ca:74:e9:7a:17: cd:57:96:1f:4f:1b:8c:fa:15:01:2e:55:a6:2d:f3: 96:32:0d:f6:10:7e:6b:71:e3:4a:b3:3c:3b:94:ac: 94:00:7b:20:64:9e:f8:09:0d:48:3e:b8:70:30:1c: 66:8f:5e:54:d9:93:6e:1c:a4:42:63:4d:31:db:f7: 10:6e:c8:66:ae:7f:e0:08:03:78:c6:65:1b:b0:cb: 40:df:1c:ca:fc:0d:17:7c:c5:e0:a6:50:7b:7c:01: 9c:1d:47:65:f3:e5:5b:74:de:b0:34:89:ce:bd:e8: 4a:f7:30:9b:3a:b8:cc:ba:e3:51:fe:9e:16:4c:cf: 18:81:a8:81:7e:55:22:cb:9d:5e:e3:83:e9:4b:51: eb:d4:82:5f:e6:3d:5b:2b:8a:19:76:c1:20:dd:56: f0:d8:9e:76:dc:05:89:6a:b7:42:55:f3:11:55:44: a9:d4:17:04:15:ff:24:0b:0c:b3:42:aa:9f:64:49: a8:79:31:9c:93:c7:fb:b3:cf:2f:cd:e1:7a:86:3e: 68:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:13:45:D5:81:4C:B0:21:8E:A7:02:86:90:45:06:B2:D3:AA:4A:AE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8933f44-d5f7-42f5-a6eb-217be17a290d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.217.128.0/18 Signature Algorithm: sha256WithRSAEncryption 05:23:35:f2:07:8f:7b:cf:81:7a:5f:24:7e:a3:68:a7:58:00: 48:82:15:52:fb:4a:30:b9:af:42:ee:b3:90:b9:51:a6:9c:88: d5:1c:80:a3:c2:bd:86:7a:ba:1f:33:ba:85:ea:82:4c:a8:28: 97:ec:de:f7:c3:a0:47:8e:74:d6:23:f1:4e:fb:6b:b3:d7:f6: 68:83:31:a4:d7:84:19:fc:ab:a5:44:61:c4:49:89:63:f5:39: f8:9c:5d:bd:55:7c:d3:36:41:cf:85:5c:28:38:11:b3:26:f0: 99:e7:8b:b5:d9:e9:16:bb:dc:62:95:08:af:dd:ce:1f:9c:c1: 32:f7:bb:f4:a1:a0:c7:0a:1a:c0:ad:f1:1f:42:74:68:a0:ab: d7:08:1b:d1:2f:94:90:97:09:af:2f:35:21:23:8c:df:00:0d: aa:8f:20:86:4e:59:db:87:6d:d1:0c:06:fe:e0:94:9e:55:8b: dd:47:68:c0:96:e4:4f:c9:f7:96:05:dc:fb:3f:56:5a:e0:8e: 37:03:e4:c8:74:5e:00:44:da:b8:bc:12:90:ca:98:a6:3e:aa: c8:8e:65:cf:69:16:0b:3a:ae:17:e8:19:5d:d0:76:c0:5d:a7: 00:02:7b:cd:13:a7:84:9e:f6:e2:76:82:8f:8f:87:3a:31:71: 90:b3:27:b3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc6+wqjqSBBl+8OVKaD+/LjxtRBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTc0MDExWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTIxOTE4ZjA5NTg3YTdiMzc1N2JlM2IwMDZlZTEwNDFl N2RiNGU4MmNlZmE4NWIyNDE0ZTdiZTg3MGM0NWFjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpATjn/ZL66pwlYEvVIxbSimcjJwud3YlXyU063q2N5OhV XEbJ/hCv5K+S6cVao91wn3XubQTKdOl6F81Xlh9PG4z6FQEuVaYt85YyDfYQfmtx 40qzPDuUrJQAeyBknvgJDUg+uHAwHGaPXlTZk24cpEJjTTHb9xBuyGauf+AIA3jG ZRuwy0DfHMr8DRd8xeCmUHt8AZwdR2Xz5Vt03rA0ic696Er3MJs6uMy641H+nhZM zxiBqIF+VSLLnV7jg+lLUevUgl/mPVsrihl2wSDdVvDYnnbcBYlqt0JV8xFVRKnU FwQV/yQLDLNCqp9kSah5MZyTx/uzzy/N4XqGPmjlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCRNF1YFMsCGOpwKGkEUGstOqSq4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4OTMzZjQ0LWQ1ZjctNDJmNS1hNmViLTIxN2JlMTdhMjkwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY22YAwDQYJKoZIhvcNAQELBQADggEBAAUjNfIHj3vPgXpfJH6jaKdYAEiC FVL7SjC5r0Lus5C5UaaciNUcgKPCvYZ6uh8zuoXqgkyoKJfs3vfDoEeOdNYj8U77 a7PX9miDMaTXhBn8q6VEYcRJiWP1OficXb1VfNM2Qc+FXCg4EbMm8Jnni7XZ6Ra7 3GKVCK/dzh+cwTL3u/ShoMcKGsCt8R9CdGigq9cIG9EvlJCXCa8vNSEjjN8ADaqP IIZOWduHbdEMBv7glJ5Vi91HaMCW5E/J95YF3Ps/VlrgjjcD5Mh0XgBE2ri8EpDK mKY+qsiOZc9pFgs6rhfoGV3QdsBdpwACe80Tp4Se9uJ2go+PhzoxcZCzJ7M= -----END CERTIFICATE-----Generated at Mon Jun 30 22:32:48 2025 by rpki-client