$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe143ca3-bcfc-4814-a843-040ef14905bb.roa File: fe143ca3-bcfc-4814-a843-040ef14905bb.roa (raw, json) Hash identifier: CXS8cDHujEvGxA87I7EtZCoUFICI/MOFYeChRe/JSGc= Subject key identifier: D4:32:E5:91:BD:60:B6:E5:B3:B6:D6:67:3B:37:88:44:0F:F6:D1:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B669F916B38829207A0B5BD11E96249CD1DD501 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe143ca3-bcfc-4814-a843-040ef14905bb.roa Signing time: Mon 16 Jun 2025 17:00:18 +0000 ROA not before: Mon 16 Jun 2025 17:00:18 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.141.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:66:9f:91:6b:38:82:92:07:a0:b5:bd:11:e9:62:49:cd:1d:d5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:00:18 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=69c2f0c35b0d558d08ea25e3aabfa7e3d28b4941a93feb0650bb96e2418379b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:52:55:88:2c:52:f4:67:a5:ce:a6:d6:ff:55: 7d:c3:c1:76:33:67:9c:b8:3c:e9:9a:fc:83:51:d8: 5e:21:86:55:7e:a7:a1:64:80:49:59:16:1a:2d:1a: 33:32:a4:de:7f:05:c0:1c:b4:e6:00:ed:2a:da:f6: 27:b8:65:c7:1b:f7:6e:46:6e:72:f5:15:91:87:65: dd:e0:81:04:50:e2:c6:6b:9f:bc:7e:27:b2:2f:7b: e7:00:93:d5:ae:dd:7e:4f:8a:d4:e7:79:5b:11:b2: 92:32:00:19:80:cb:1d:16:d5:23:38:1f:42:25:1a: 38:44:83:e7:5e:a3:7f:17:98:85:96:c8:e5:a3:4a: 3d:9e:5c:4e:52:3f:40:68:1e:d5:40:f9:e4:88:05: d0:89:18:0f:78:57:fe:a0:d1:56:dc:ea:88:52:e7: 15:9c:2f:70:86:14:5c:7a:7d:92:8e:e1:33:db:02: 6e:78:6a:0d:ba:1e:80:bd:6e:1d:ee:83:85:71:ad: 12:4e:a4:23:79:29:af:ed:2c:38:a6:d8:2b:49:6c: 07:b5:dd:fd:49:22:85:5d:d1:bd:36:9c:6c:07:ab: eb:a4:51:ad:f9:59:0a:d8:08:57:34:5e:51:2c:90: a4:7b:03:a4:f0:1c:a8:ae:1f:ce:02:8a:2e:83:18: 60:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:32:E5:91:BD:60:B6:E5:B3:B6:D6:67:3B:37:88:44:0F:F6:D1:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fe143ca3-bcfc-4814-a843-040ef14905bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.141.192.0/18 Signature Algorithm: sha256WithRSAEncryption 6a:b5:9e:7d:21:76:fd:59:0d:fd:8a:ef:42:64:47:dd:91:e2: 02:58:cf:51:9f:bc:07:69:e1:4e:4e:4f:85:24:f8:20:eb:d8: 16:d4:48:8f:b1:61:b2:3c:f9:c5:80:79:65:ee:2c:02:bd:51: d2:f6:0c:d0:5e:52:27:4d:6d:2b:71:79:4a:a1:22:26:ec:27: db:cb:29:58:85:d6:14:ed:78:6c:a2:22:66:73:10:d6:17:99: 2b:ac:8b:a5:45:cc:7f:d7:b8:31:f0:6f:0a:5c:98:38:fc:27: 08:97:d0:3f:13:15:40:1b:51:55:43:e2:34:29:c6:26:43:d0: 61:d5:14:44:b6:b7:db:f7:6a:17:c8:b7:37:c5:77:09:0a:73: d4:b7:aa:d9:73:2c:66:4f:b8:92:b2:5d:13:86:c0:74:a2:a0: 2e:b8:80:51:8e:93:25:3b:72:96:d4:80:f6:7d:2c:33:39:cb: 44:32:38:c2:00:44:f8:48:ac:c3:c9:4a:fc:81:4a:cc:9a:aa: 41:10:4e:bd:a4:1d:a8:c5:03:7e:47:1b:50:f8:9b:67:2c:19: 07:09:b2:cb:09:8b:b9:06:68:d9:de:49:ac:6e:31:e4:29:d2: 7f:39:51:19:05:48:7d:16:88:74:b9:0c:f8:cb:96:e1:bd:aa: bb:64:56:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUa2afkWs4gpIHoLW9EeliSc0d1QEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTcwMDE4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWMyZjBjMzViMGQ1NThkMDhlYTI1ZTNhYWJmYTdlM2Qy OGI0OTQxYTkzZmViMDY1MGJiOTZlMjQxODM3OWIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdUlWILFL0Z6XOptb/VX3DwXYzZ5y4POma/INR2F4hhlV+ p6FkgElZFhotGjMypN5/BcActOYA7Sra9ie4Zccb925GbnL1FZGHZd3ggQRQ4sZr n7x+J7Ive+cAk9Wu3X5PitTneVsRspIyABmAyx0W1SM4H0IlGjhEg+deo38XmIWW yOWjSj2eXE5SP0BoHtVA+eSIBdCJGA94V/6g0Vbc6ohS5xWcL3CGFFx6fZKO4TPb Am54ag26HoC9bh3ug4VxrRJOpCN5Ka/tLDim2CtJbAe13f1JIoVd0b02nGwHq+uk Ua35WQrYCFc0XlEskKR7A6TwHKiuH84Cii6DGGC1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1DLlkb1gtuWzttZnOzeIRA/20RgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZlMTQzY2EzLWJjZmMtNDgxNC1hODQzLTA0MGVmMTQ5MDViYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYSjcAwDQYJKoZIhvcNAQELBQADggEBAGq1nn0hdv1ZDf2K70JkR92R4gJY z1GfvAdp4U5OT4Uk+CDr2BbUSI+xYbI8+cWAeWXuLAK9UdL2DNBeUidNbStxeUqh IibsJ9vLKViF1hTteGyiImZzENYXmSusi6VFzH/XuDHwbwpcmDj8JwiX0D8TFUAb UVVD4jQpxiZD0GHVFES2t9v3ahfItzfFdwkKc9S3qtlzLGZPuJKyXROGwHSioC64 gFGOkyU7cpbUgPZ9LDM5y0QyOMIARPhIrMPJSvyBSsyaqkEQTr2kHajFA35HG1D4 m2csGQcJsssJi7kGaNneSaxuMeQp0n85URkFSH0WiHS5DPjLluG9qrtkVps= -----END CERTIFICATE-----Generated at Mon Jun 30 23:14:51 2025 by rpki-client