$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34e76a27-e8fa-4152-ae04-d41461871f0f.roa File: 34e76a27-e8fa-4152-ae04-d41461871f0f.roa (raw, json) Hash identifier: UT6eQlBbM1znAO1siGaX4X+6avVZBi/bT+IUxsx2QjM= Subject key identifier: 8D:91:06:56:83:1C:7F:26:EA:4B:32:C5:0C:7E:BD:38:36:82:C8:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2FADD12B7E4E9A08353A5895D3CD55F170B23DE7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34e76a27-e8fa-4152-ae04-d41461871f0f.roa Signing time: Mon 16 Jun 2025 18:41:33 +0000 ROA not before: Mon 16 Jun 2025 18:41:33 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.90.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ad:d1:2b:7e:4e:9a:08:35:3a:58:95:d3:cd:55:f1:70:b2:3d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:41:33 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=78225fd3d52ad4cfe89548d8b468a14ba03f0cea4c9e773e1789e4ed7852cc6f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:66:67:5d:19:91:74:c9:64:fc:d3:b0:7f:79: c3:d0:17:94:69:df:14:3d:7c:28:92:30:b4:7a:43: a4:05:83:0c:34:0c:d5:71:a8:4e:77:97:ef:58:34: d8:9c:1c:cc:33:bd:94:f6:7d:91:47:38:ca:e9:8d: f5:97:15:22:27:36:ea:44:ae:01:80:a5:8f:48:ac: 09:5d:24:2f:98:0e:d1:bc:a3:6b:58:73:a9:c3:95: 84:31:55:e5:9f:fe:25:98:2b:02:01:40:9c:12:d4: af:ed:d1:cf:71:36:27:27:b9:7b:0b:09:6d:f2:1b: bc:67:40:cd:1b:aa:da:91:2e:26:b3:3e:f5:59:e7: 62:83:cd:e7:39:96:ff:a1:2e:2b:ed:1b:2e:92:5e: 6a:99:ce:a1:fd:a3:40:9f:20:0d:48:b9:29:1d:cc: a1:e6:91:09:4f:07:82:ad:40:d2:c8:dd:ab:50:91: df:cb:1a:e0:da:14:38:4f:5b:3a:ad:1f:82:65:1e: d3:cf:dd:b4:75:36:3c:e7:96:27:35:7c:60:f2:63: e4:44:99:11:7a:84:c0:f9:fa:d4:8d:8c:1d:05:89: 5f:09:2e:21:61:bb:76:a0:37:84:7e:f6:75:c2:2d: e4:67:83:c5:9d:49:cf:31:a0:ed:a1:2c:ea:19:fe: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:91:06:56:83:1C:7F:26:EA:4B:32:C5:0C:7E:BD:38:36:82:C8:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34e76a27-e8fa-4152-ae04-d41461871f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.90.0.0/18 Signature Algorithm: sha256WithRSAEncryption 7f:26:22:43:be:a7:ce:cc:65:e9:19:af:d8:b7:de:38:cc:48: 46:61:0c:00:a0:1a:fd:90:45:78:3d:e0:73:ac:6b:0c:11:e4: d1:20:50:36:40:a0:b7:7d:b4:77:d2:9e:98:c3:db:3e:11:3d: 94:bd:1f:ed:22:9f:a3:65:e9:a4:9b:60:47:19:2d:a3:60:52: 7f:d5:c3:5d:0f:5f:99:0f:b6:32:34:6a:d3:6e:e9:62:e8:3e: 85:ff:2a:81:f2:95:47:ad:e0:37:f4:37:6b:2d:fe:2d:f7:14: 28:52:e9:d1:89:8a:fa:58:dc:b4:97:d4:4f:62:3c:94:21:3d: 23:1d:ab:bd:a9:1d:1b:65:91:84:65:09:85:c2:b8:ff:a1:ec: 86:96:c8:39:39:24:12:f1:1a:8f:67:6f:e7:71:6b:aa:6b:56: 03:e9:ea:b3:74:ee:21:38:b3:25:c8:91:e6:62:56:7a:45:fa: 3f:4f:20:56:2d:de:20:b9:49:e2:2e:8d:90:21:c0:36:de:e4: 21:26:a4:e7:87:32:65:be:b2:74:54:bd:f3:72:fa:9f:53:a5: 75:5a:3e:ed:30:28:80:8b:09:60:97:36:20:d6:5d:c4:36:62: 5c:aa:14:38:2f:85:61:e8:78:a9:ef:a6:35:c2:60:5e:2b:4f: 2d:dd:ba:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL63RK35Omgg1OliV081V8XCyPecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTg0MTMzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ODIyNWZkM2Q1MmFkNGNmZTg5NTQ4ZDhiNDY4YTE0YmEw M2YwY2VhNGM5ZTc3M2UxNzg5ZTRlZDc4NTJjYzZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxZmddGZF0yWT807B/ecPQF5Rp3xQ9fCiSMLR6Q6QFgww0 DNVxqE53l+9YNNicHMwzvZT2fZFHOMrpjfWXFSInNupErgGApY9IrAldJC+YDtG8 o2tYc6nDlYQxVeWf/iWYKwIBQJwS1K/t0c9xNicnuXsLCW3yG7xnQM0bqtqRLiaz PvVZ52KDzec5lv+hLivtGy6SXmqZzqH9o0CfIA1IuSkdzKHmkQlPB4KtQNLI3atQ kd/LGuDaFDhPWzqtH4JlHtPP3bR1Njznlic1fGDyY+REmRF6hMD5+tSNjB0FiV8J LiFhu3agN4R+9nXCLeRng8WdSc8xoO2hLOoZ/gDhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjZEGVoMcfybqSzLFDH69ODaCyGwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0ZTc2YTI3LWU4ZmEtNDE1Mi1hZTA0LWQ0MTQ2MTg3MWYwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2WgAwDQYJKoZIhvcNAQELBQADggEBAH8mIkO+p87MZekZr9i33jjMSEZh DACgGv2QRXg94HOsawwR5NEgUDZAoLd9tHfSnpjD2z4RPZS9H+0in6Nl6aSbYEcZ LaNgUn/Vw10PX5kPtjI0atNu6WLoPoX/KoHylUet4Df0N2st/i33FChS6dGJivpY 3LSX1E9iPJQhPSMdq72pHRtlkYRlCYXCuP+h7IaWyDk5JBLxGo9nb+dxa6prVgPp 6rN07iE4syXIkeZiVnpF+j9PIFYt3iC5SeIujZAhwDbe5CEmpOeHMmW+snRUvfNy +p9TpXVaPu0wKICLCWCXNiDWXcQ2YlyqFDgvhWHoeKnvpjXCYF4rTy3dumw= -----END CERTIFICATE-----Generated at Sun Jun 29 05:19:54 2025 by rpki-client