$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa File: 17beaf1d-23cc-42f2-907d-15cc6155337a.roa (raw, json) Hash identifier: /eyztGbv3Xm403ir3yyeg0PWa/GeKaUQuASj3qb/4yY= Subject key identifier: 0A:61:68:A6:2B:86:41:6B:AA:23:A6:2A:3E:AB:E5:94:18:84:3A:3E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A4D3CB1775BF0ECECF2962E76F8C198756FC5FE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa Signing time: Fri 27 Jun 2025 15:11:05 +0000 ROA not before: Fri 27 Jun 2025 15:11:05 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.56.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4d:3c:b1:77:5b:f0:ec:ec:f2:96:2e:76:f8:c1:98:75:6f:c5:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 27 15:11:05 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=52c26077850a60d8e6460e77893b418cc37def3025981660747966b216f89d07, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:1d:59:2e:71:f9:b3:52:d7:92:9a:b1:b0: dc:e7:14:4e:16:55:3c:5b:3a:3a:ef:c2:95:7d:0c: 56:0e:fe:95:50:6d:2b:74:20:2a:5c:c9:86:53:34: ec:1c:e4:30:3d:74:cd:a5:9d:38:23:bc:26:66:9b: ee:13:58:91:85:fd:03:21:bb:ba:12:61:7f:8c:84: da:2a:94:37:13:8b:01:cb:b9:7b:84:05:d7:91:8f: 5d:83:d6:a1:b1:c6:50:04:9f:cb:13:53:d7:6b:22: 90:03:63:b5:57:c2:8d:0b:97:98:68:18:30:0a:bf: 0e:53:27:be:0f:7d:62:50:7b:5e:d5:4a:65:e2:bb: a0:69:39:d9:77:c8:3f:69:d7:9f:49:47:46:d1:ee: 2a:68:84:f4:32:ad:75:f4:31:60:a2:1b:bb:14:a6: b9:77:51:fa:c5:b0:3b:80:95:7f:8e:ae:3c:e1:2c: 54:73:e2:82:82:65:5d:4c:14:11:17:93:d3:85:7c: 13:01:87:fd:26:d6:1d:a7:09:db:86:14:c5:11:ea: d8:61:0f:6b:71:cc:c7:6c:c3:e1:59:8e:70:45:89: 3c:cf:1c:48:6c:2d:a8:a6:4b:66:a9:a9:f1:51:a1: c7:51:4c:34:4b:a3:79:ef:7c:8b:a7:f6:c1:f1:0c: fb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:61:68:A6:2B:86:41:6B:AA:23:A6:2A:3E:AB:E5:94:18:84:3A:3E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.56.0.0/18 Signature Algorithm: sha256WithRSAEncryption 42:a5:a1:b9:64:fe:2a:a9:ce:a9:9d:2b:2b:8b:5b:6f:73:a2: 88:a1:80:97:f2:af:55:8b:b7:b1:29:68:dd:bd:f6:73:17:68: 33:45:04:31:09:90:98:69:e6:76:e8:f8:17:11:a6:fe:16:23: 05:f4:0d:c8:53:bb:c6:d3:de:98:6f:c9:08:59:b3:12:bc:16: c6:bc:24:73:4b:5f:ee:1a:20:ae:c2:81:18:f9:05:26:86:0a: f4:8b:e8:24:8d:ce:ae:be:da:f6:ff:32:01:5f:0e:7b:e7:f8: 45:e5:f2:d9:7d:62:c4:1a:bd:73:ec:b8:f3:f7:32:79:5a:e4: ae:69:3c:ea:1b:9f:15:04:1d:d1:b8:a6:dc:f5:05:38:44:e7: f8:64:ec:39:10:23:3c:76:01:b6:24:71:10:5e:ed:c0:8b:66: eb:a8:73:38:08:25:93:a6:be:3c:e9:e4:fa:0e:0a:e0:2b:6b: 80:65:12:42:36:71:95:8a:6c:11:50:0b:6c:ac:12:e1:e1:35: 1c:82:2c:bb:bd:89:71:f8:b7:c0:54:b4:de:5d:81:52:df:74: 93:bf:5e:e1:06:d0:e3:5d:4e:bc:36:d0:59:59:61:5e:a5:3a: 10:c9:1e:21:6b:c5:19:dd:bd:03:2e:1b:b3:36:b4:dc:7b:80: 23:4f:89:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOk08sXdb8Ozs8pYudvjBmHVvxf4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI3MTUxMTA1WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmMyNjA3Nzg1MGE2MGQ4ZTY0NjBlNzc4OTNiNDE4Y2Mz N2RlZjMwMjU5ODE2NjA3NDc5NjZiMjE2Zjg5ZDA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7zR1ZLnH5s1LXkpqxsNznFE4WVTxbOjrvwpV9DFYO/pVQ bSt0ICpcyYZTNOwc5DA9dM2lnTgjvCZmm+4TWJGF/QMhu7oSYX+MhNoqlDcTiwHL uXuEBdeRj12D1qGxxlAEn8sTU9drIpADY7VXwo0Ll5hoGDAKvw5TJ74PfWJQe17V SmXiu6BpOdl3yD9p159JR0bR7ipohPQyrXX0MWCiG7sUprl3UfrFsDuAlX+Orjzh LFRz4oKCZV1MFBEXk9OFfBMBh/0m1h2nCduGFMUR6thhD2txzMdsw+FZjnBFiTzP HEhsLaimS2apqfFRocdRTDRLo3nvfIun9sHxDPtdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCmFopiuGQWuqI6YqPqvllBiEOj4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE3YmVhZjFkLTIzY2MtNDJmMi05MDdkLTE1Y2M2MTU1MzM3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNOAAwDQYJKoZIhvcNAQELBQADggEBAEKloblk/iqpzqmdKyuLW29zooih gJfyr1WLt7EpaN299nMXaDNFBDEJkJhp5nbo+BcRpv4WIwX0DchTu8bT3phvyQhZ sxK8Fsa8JHNLX+4aIK7CgRj5BSaGCvSL6CSNzq6+2vb/MgFfDnvn+EXl8tl9YsQa vXPsuPP3Mnla5K5pPOobnxUEHdG4ptz1BThE5/hk7DkQIzx2AbYkcRBe7cCLZuuo czgIJZOmvjzp5PoOCuAra4BlEkI2cZWKbBFQC2ysEuHhNRyCLLu9iXH4t8BUtN5d gVLfdJO/XuEG0ONdTrw20FlZYV6lOhDJHiFrxRndvQMuG7M2tNx7gCNPiaM= -----END CERTIFICATE-----Generated at Sun Jun 29 03:59:21 2025 by rpki-client