$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2244b068-5cca-4798-9af8-3b0ddf2fab46.roa File: 2244b068-5cca-4798-9af8-3b0ddf2fab46.roa (raw, json) Hash identifier: klcMGbqDhU+89V22UvOiPCYxMfMp42t5HM4Ez60PQoI= Subject key identifier: CF:7E:7A:C0:D2:88:39:BC:C8:7A:0F:4F:9C:92:11:30:A7:EC:89:08 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70E6F7BA431F21024DEA11786B4F1EB91C9B2303 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2244b068-5cca-4798-9af8-3b0ddf2fab46.roa Signing time: Mon 09 Jun 2025 16:11:52 +0000 ROA not before: Mon 09 Jun 2025 16:11:52 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.145.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:e6:f7:ba:43:1f:21:02:4d:ea:11:78:6b:4f:1e:b9:1c:9b:23:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:11:52 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=026ffe1a7f106c0df92ef02bae2dcbc461e2929ac30d4f9dbb01ad8750960394, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:af:13:1d:15:77:92:87:a7:04:4d:82:11:b5: 69:24:d2:e7:6d:64:6c:64:b9:5b:ea:81:40:b7:ee: 7c:00:5d:03:d8:f4:df:f2:f4:6e:7b:e4:08:c2:28: b1:69:cf:5f:df:b6:aa:5a:cf:b3:ce:62:c7:97:36: 4f:42:78:2e:4b:d1:29:cf:16:ff:ee:a4:54:72:67: 59:5b:ab:c6:64:4a:8e:84:d1:bd:e1:39:a9:a5:ab: 90:51:3f:98:4f:86:85:fe:c1:6f:b2:73:ee:4c:ae: 9a:ec:30:f6:29:c1:e9:85:f6:43:c4:08:be:20:ba: 2c:6c:25:e2:78:78:f4:af:b5:2f:d1:5d:b1:37:3f: b9:2b:87:64:34:e2:85:82:ed:44:41:70:74:44:81: 60:b0:37:ba:f6:80:95:54:9f:44:17:46:af:c8:a4: 51:21:e3:1d:fe:ea:52:4a:db:60:b5:72:db:ff:8d: 85:8d:58:e6:fd:52:db:4e:ae:8f:88:32:b8:25:24: 04:f7:41:b4:b4:a1:79:3f:70:d4:6d:89:67:09:c4: 72:1f:5d:85:5f:ee:5e:dd:9d:3a:33:70:55:e1:7c: 95:c9:59:63:dd:70:c2:24:aa:7a:f7:01:f8:56:da: d7:03:0d:de:92:ed:dd:f5:be:0c:6d:1c:1b:43:2c: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:7E:7A:C0:D2:88:39:BC:C8:7A:0F:4F:9C:92:11:30:A7:EC:89:08 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2244b068-5cca-4798-9af8-3b0ddf2fab46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.145.128.0/17 Signature Algorithm: sha256WithRSAEncryption 96:8d:42:d6:68:3d:18:fb:24:e5:16:e3:1c:3d:b0:c1:7b:67: 0c:e3:fa:5e:db:bf:83:fc:58:57:cb:c7:44:ce:75:ff:3c:9a: d9:72:bb:3b:a9:a8:42:f9:7f:a2:14:26:e6:c3:d4:be:35:5e: bc:f5:bb:ab:3f:45:db:7a:fe:b5:76:5a:ea:b1:f8:80:79:b0: 0c:bd:30:aa:43:55:5e:be:62:06:35:d7:80:fb:fb:ce:f2:63: d4:65:ce:86:32:e7:4b:d1:46:70:94:37:5e:f3:f3:d7:7c:f7: 96:ec:01:8a:b4:74:e8:71:bd:09:3e:91:97:1a:b9:7b:ff:0d: 5a:7e:f3:e9:a7:53:b3:85:ee:57:27:54:8a:9e:40:bd:d6:5a: 8a:7d:79:18:e0:40:69:51:e6:ef:fb:a4:4e:d5:61:af:ed:78: 86:52:46:04:e5:66:a6:ad:67:43:a6:dc:87:c7:0e:a2:fb:31: 19:47:85:a7:d3:0f:c4:37:5a:21:c5:ea:6d:ff:7b:84:01:ac: 8d:e5:68:7a:50:0a:76:56:11:6d:97:8c:cb:40:5d:2e:bc:cd: dd:20:9b:3f:53:1f:04:ec:55:07:3d:5a:1b:c1:71:65:29:fc: 74:82:3d:50:07:92:ea:8b:2a:21:3b:fe:f3:c8:b2:84:7d:75: c5:26:c6:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcOb3ukMfIQJN6hF4a08euRybIwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYxMTUyWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMjZmZmUxYTdmMTA2YzBkZjkyZWYwMmJhZTJkY2JjNDYx ZTI5MjlhYzMwZDRmOWRiYjAxYWQ4NzUwOTYwMzk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlrxMdFXeSh6cETYIRtWkk0udtZGxkuVvqgUC37nwAXQPY 9N/y9G575AjCKLFpz1/ftqpaz7POYseXNk9CeC5L0SnPFv/upFRyZ1lbq8ZkSo6E 0b3hOamlq5BRP5hPhoX+wW+yc+5MrprsMPYpwemF9kPECL4guixsJeJ4ePSvtS/R XbE3P7krh2Q04oWC7URBcHREgWCwN7r2gJVUn0QXRq/IpFEh4x3+6lJK22C1ctv/ jYWNWOb9UttOro+IMrglJAT3QbS0oXk/cNRtiWcJxHIfXYVf7l7dnTozcFXhfJXJ WWPdcMIkqnr3AfhW2tcDDd6S7d31vgxtHBtDLIsJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUz356wNKIObzIeg9PnJIRMKfsiQgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyNDRiMDY4LTVjY2EtNDc5OC05YWY4LTNiMGRkZjJmYWI0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2kYAwDQYJKoZIhvcNAQELBQADggEBAJaNQtZoPRj7JOUW4xw9sMF7Zwzj +l7bv4P8WFfLx0TOdf88mtlyuzupqEL5f6IUJubD1L41Xrz1u6s/Rdt6/rV2Wuqx +IB5sAy9MKpDVV6+YgY114D7+87yY9RlzoYy50vRRnCUN17z89d895bsAYq0dOhx vQk+kZcauXv/DVp+8+mnU7OF7lcnVIqeQL3WWop9eRjgQGlR5u/7pE7VYa/teIZS RgTlZqatZ0Om3IfHDqL7MRlHhafTD8Q3WiHF6m3/e4QBrI3laHpQCnZWEW2XjMtA XS68zd0gmz9THwTsVQc9WhvBcWUp/HSCPVAHkuqLKiE7/vPIsoR9dcUmxrU= -----END CERTIFICATE-----Generated at Sun Jun 29 07:44:26 2025 by rpki-client