$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009f7560-232f-434f-b99f-abd8d7608034.roa File: 009f7560-232f-434f-b99f-abd8d7608034.roa (raw, json) Hash identifier: EPxD0m4O5xZky5V5b8sCaAarQMS7VPyfKm4lc2gq6pU= Subject key identifier: 70:53:4A:EE:4F:43:22:CC:48:49:2B:5F:ED:92:C6:76:56:1F:2A:0E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EE6325859825917DE35726046EDB16E9B25FB50 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009f7560-232f-434f-b99f-abd8d7608034.roa Signing time: Mon 16 Jun 2025 18:41:30 +0000 ROA not before: Mon 16 Jun 2025 18:41:30 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.94.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:e6:32:58:59:82:59:17:de:35:72:60:46:ed:b1:6e:9b:25:fb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:41:30 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=a5311f0d1e900b6ed8d6493ecd346af165fb0e9ba20ad2cd898ca6efebb1f450, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:11:37:79:b1:48:5e:b7:fd:57:07:e6:68: c4:69:7d:55:3a:76:6a:69:c9:41:2f:e1:56:6f:e5: 07:77:af:21:2d:49:cb:19:7b:76:b6:b3:1a:4e:50: 5d:3e:88:38:95:77:c5:ea:51:b3:09:98:68:4a:8f: 4c:f9:2e:ca:92:86:4e:72:b8:ca:82:46:79:97:9e: 7c:ad:25:72:9b:38:e7:5a:70:ac:a4:80:4d:36:04: f8:a5:2d:92:a0:1e:c0:40:12:4a:1b:44:f7:96:b3: 31:3b:25:9d:36:f8:a6:bd:d1:f8:f0:da:a8:40:92: c5:1b:57:c8:e2:0c:60:55:e0:4c:85:46:1a:2d:df: 1e:8c:60:ab:c6:1d:f1:64:0d:4b:8b:72:04:3b:3c: 8d:29:83:bf:b6:d5:47:86:45:54:97:e7:8b:69:1e: aa:cb:f9:ec:e3:a0:9c:6a:be:0b:4b:31:31:ea:cf: dd:ab:d2:e3:22:70:b5:13:c8:56:c3:79:28:fd:16: cf:a3:b0:16:7a:ab:b9:b7:84:15:96:42:b1:d3:0d: 95:2d:c2:45:57:c4:5a:01:eb:95:d3:82:e3:ec:c0: 44:83:d0:2c:34:cc:c6:55:98:a6:bc:c5:ea:04:67: 87:39:36:7e:d8:fa:b6:21:bc:36:6e:ec:af:6c:3e: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:53:4A:EE:4F:43:22:CC:48:49:2B:5F:ED:92:C6:76:56:1F:2A:0E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/009f7560-232f-434f-b99f-abd8d7608034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.94.0.0/18 Signature Algorithm: sha256WithRSAEncryption ab:90:8c:fb:47:a4:67:44:b9:4f:d4:34:85:bc:79:be:5b:9c: 06:7b:c4:9e:1b:a4:03:43:93:7a:3a:c5:5c:bb:75:64:19:0c: 03:7e:6a:45:2d:53:d7:50:70:94:08:ab:44:62:dd:cc:68:5b: 3e:c2:e8:c3:2f:3d:81:34:bf:77:3a:df:aa:05:9b:b7:84:88: a2:dd:c2:05:07:dd:b8:55:4a:ea:bd:d3:cb:c9:00:e8:6f:f0: 8b:18:d7:9c:24:4d:04:6b:d5:6e:50:19:96:5a:46:14:79:49: 1b:73:42:96:37:e1:63:21:18:28:ce:b2:54:dc:c0:1c:b7:27: 72:1c:a8:7e:11:f3:52:9d:02:80:5b:e1:34:7b:0d:96:e7:7b: 06:e4:93:d5:7f:c3:ea:28:24:04:c4:a3:bc:10:41:f3:25:bf: 50:2e:18:a5:89:5a:ad:e6:27:f2:39:ce:2c:5e:ae:1a:e7:21: fc:a7:d4:18:50:69:5c:5d:44:81:a8:4a:61:9b:89:24:ef:cc: 84:81:ea:39:ea:17:c0:30:fb:fd:2f:48:ac:41:91:b9:e1:24: e0:33:33:4e:ef:34:e4:25:f0:29:88:3b:4e:84:b4:cf:aa:31: b4:55:f3:10:98:cc:02:53:dc:03:5d:e6:f8:f5:6a:02:8b:0d: 65:0b:dc:5e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbuYyWFmCWRfeNXJgRu2xbpsl+1AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTg0MTMwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTMxMWYwZDFlOTAwYjZlZDhkNjQ5M2VjZDM0NmFmMTY1 ZmIwZTliYTIwYWQyY2Q4OThjYTZlZmViYjFmNDUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMsBE3ebFIXrf9VwfmaMRpfVU6dmppyUEv4VZv5Qd3ryEt ScsZe3a2sxpOUF0+iDiVd8XqUbMJmGhKj0z5LsqShk5yuMqCRnmXnnytJXKbOOda cKykgE02BPilLZKgHsBAEkobRPeWszE7JZ02+Ka90fjw2qhAksUbV8jiDGBV4EyF Rhot3x6MYKvGHfFkDUuLcgQ7PI0pg7+21UeGRVSX54tpHqrL+ezjoJxqvgtLMTHq z92r0uMicLUTyFbDeSj9Fs+jsBZ6q7m3hBWWQrHTDZUtwkVXxFoB65XTguPswESD 0Cw0zMZVmKa8xeoEZ4c5Nn7Y+rYhvDZu7K9sPlHbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcFNK7k9DIsxISStf7ZLGdlYfKg4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwOWY3NTYwLTIzMmYtNDM0Zi1iOTlmLWFiZDhkNzYwODAzNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2XgAwDQYJKoZIhvcNAQELBQADggEBAKuQjPtHpGdEuU/UNIW8eb5bnAZ7 xJ4bpANDk3o6xVy7dWQZDAN+akUtU9dQcJQIq0Ri3cxoWz7C6MMvPYE0v3c636oF m7eEiKLdwgUH3bhVSuq908vJAOhv8IsY15wkTQRr1W5QGZZaRhR5SRtzQpY34WMh GCjOslTcwBy3J3IcqH4R81KdAoBb4TR7DZbnewbkk9V/w+ooJATEo7wQQfMlv1Au GKWJWq3mJ/I5zixerhrnIfyn1BhQaVxdRIGoSmGbiSTvzISB6jnqF8Aw+/0vSKxB kbnhJOAzM07vNOQl8CmIO06EtM+qMbRV8xCYzAJT3ANd5vj1agKLDWUL3F4= -----END CERTIFICATE-----Generated at Sun Jun 29 03:10:29 2025 by rpki-client