$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2abb9321-cc59-464b-bbc7-868fa403618a.roa File: 2abb9321-cc59-464b-bbc7-868fa403618a.roa (raw, json) Hash identifier: 42DtNJfo9gBD6N+rJHhnRTggoQ11ItRwejZC6W6Vd9s= Subject key identifier: E5:C0:3C:88:C8:8D:71:3D:63:52:A9:60:DD:B4:6C:D8:DC:55:2C:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1215B08367ED9669BBBAEB35EB6B185A3A2138EA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2abb9321-cc59-464b-bbc7-868fa403618a.roa Signing time: Mon 16 Jun 2025 17:20:12 +0000 ROA not before: Mon 16 Jun 2025 17:20:12 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.229.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:15:b0:83:67:ed:96:69:bb:ba:eb:35:eb:6b:18:5a:3a:21:38:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:20:12 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=6bf8a98a44def91fc6397b9fe0e6360b3cca38e259a9b42ed89ff0538f462dd4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:0e:e0:fa:8f:c6:37:09:9b:9e:09:46:d1: ed:d1:04:d6:aa:9d:95:04:e2:80:19:2b:8f:1d:68: d4:de:21:4f:8c:8f:2e:c9:1b:67:f9:72:59:17:e9: 15:f3:f5:3d:4c:74:a1:78:c8:bc:3d:c8:c5:5f:fc: 57:c9:79:bd:78:9e:0e:4b:73:3e:0b:36:d4:3e:2c: 83:82:4d:20:e1:97:a1:65:00:ef:4b:53:87:56:36: 54:6d:a6:d9:b7:f3:3c:73:7a:db:b5:1f:87:66:e0: 8e:d0:25:b6:91:26:ba:c0:84:9e:ee:8d:1c:89:83: 64:a0:2a:62:44:c4:16:72:d8:a6:f4:4b:23:2e:32: c3:86:bd:59:60:37:7d:9a:04:bd:19:b1:1e:91:a1: ab:27:3e:9c:be:3c:1f:ac:e9:7c:50:af:17:d4:4a: 38:ac:44:a7:a8:6c:66:4c:1d:0d:6b:15:0c:b7:e5: 32:ad:c4:41:51:b5:dd:07:f7:8c:0d:42:6a:13:cb: b0:53:da:0f:84:5a:8d:9d:01:f8:9a:fb:69:3f:05: b2:8f:9d:cf:ab:cc:da:ea:fa:18:18:8d:aa:03:ca: d3:c2:68:47:ef:18:2b:28:c0:a8:a3:57:2d:fb:ea: 47:a6:d4:9d:d4:bd:78:5e:ed:11:4a:6b:76:6d:2e: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C0:3C:88:C8:8D:71:3D:63:52:A9:60:DD:B4:6C:D8:DC:55:2C:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2abb9321-cc59-464b-bbc7-868fa403618a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.229.0.0/16 Signature Algorithm: sha256WithRSAEncryption 49:1f:ea:d9:6e:d7:6f:9e:1e:e8:53:c0:9e:c5:00:94:77:7c: 15:02:cb:75:89:72:2b:a8:10:63:6b:f3:ee:72:78:ea:0b:c6: bd:8d:a7:71:21:9e:13:57:3d:b3:4c:dd:22:44:61:8e:b1:92: f3:e0:20:c0:f7:b5:28:b2:6d:0b:b9:52:1c:09:49:d8:26:4c: d4:27:09:9b:78:08:9d:78:87:f4:ff:0c:d4:0f:4f:07:6c:9b: 4e:b0:b6:69:d7:0a:63:a2:6c:05:06:43:a5:5d:57:af:17:81: 2f:97:f7:02:97:0c:09:f0:6f:d6:65:1a:3d:05:39:8c:a5:a7: 31:9a:ba:be:e4:8d:5a:b7:26:78:83:d8:02:d8:e4:cd:6d:86: ec:9c:15:62:02:45:e8:85:c2:e9:eb:a3:62:36:af:e8:54:0c: c7:33:e4:19:a2:96:68:55:83:0e:d4:22:ca:3c:a8:42:66:e8: b9:00:e9:80:6f:3d:e2:7a:16:b3:a8:b5:84:1d:34:25:c5:f8: 8d:90:af:9e:ce:81:2d:a9:ec:f3:7b:48:00:87:39:79:c7:eb: 9b:4f:c4:96:77:7f:d3:62:f8:c6:8b:c8:97:96:1b:4f:43:c7: 51:8d:da:58:c2:97:b3:39:95:04:82:06:2c:3b:e5:7d:f8:14: ab:86:ce:78 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEhWwg2ftlmm7uus162sYWjohOOowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTcyMDEyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmY4YTk4YTQ0ZGVmOTFmYzYzOTdiOWZlMGU2MzYwYjNj Y2EzOGUyNTlhOWI0MmVkODlmZjA1MzhmNDYyZGQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8tw7g+o/GNwmbnglG0e3RBNaqnZUE4oAZK48daNTeIU+M jy7JG2f5clkX6RXz9T1MdKF4yLw9yMVf/FfJeb14ng5Lcz4LNtQ+LIOCTSDhl6Fl AO9LU4dWNlRtptm38zxzetu1H4dm4I7QJbaRJrrAhJ7ujRyJg2SgKmJExBZy2Kb0 SyMuMsOGvVlgN32aBL0ZsR6RoasnPpy+PB+s6XxQrxfUSjisRKeobGZMHQ1rFQy3 5TKtxEFRtd0H94wNQmoTy7BT2g+EWo2dAfia+2k/BbKPnc+rzNrq+hgYjaoDytPC aEfvGCsowKijVy376kem1J3UvXhe7RFKa3ZtLsxzAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU5cA8iMiNcT1jUqlg3bRs2NxVLMMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJhYmI5MzIxLWNjNTktNDY0Yi1iYmM3LTg2OGZhNDAzNjE4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAS5TANBgkqhkiG9w0BAQsFAAOCAQEASR/q2W7Xb54e6FPAnsUAlHd8FQLL dYlyK6gQY2vz7nJ46gvGvY2ncSGeE1c9s0zdIkRhjrGS8+AgwPe1KLJtC7lSHAlJ 2CZM1CcJm3gInXiH9P8M1A9PB2ybTrC2adcKY6JsBQZDpV1XrxeBL5f3ApcMCfBv 1mUaPQU5jKWnMZq6vuSNWrcmeIPYAtjkzW2G7JwVYgJF6IXC6eujYjav6FQMxzPk GaKWaFWDDtQiyjyoQmbouQDpgG894noWs6i1hB00JcX4jZCvns6BLans83tIAIc5 ecfrm0/Elnd/02L4xovIl5YbT0PHUY3aWMKXszmVBIIGLDvlffgUq4bOeA== -----END CERTIFICATE-----Generated at Sun Jun 29 07:40:37 2025 by rpki-client