$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64db4ee8-8580-4678-aaeb-ac8bcfca57ed.roa File: 64db4ee8-8580-4678-aaeb-ac8bcfca57ed.roa (raw, json) Hash identifier: yRZX5dJYePS2lEpZ/a20VJwDHvRbwFt0N1uCK5eGqf0= Subject key identifier: E1:D5:C7:72:41:A3:C6:B4:66:D8:A3:CF:A4:6D:F4:E6:C2:32:A8:FE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 04757E334AAA00D0D889EBB34ECAA2B768DD13B8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64db4ee8-8580-4678-aaeb-ac8bcfca57ed.roa Signing time: Mon 16 Jun 2025 17:30:22 +0000 ROA not before: Mon 16 Jun 2025 17:30:22 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 18.252.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:75:7e:33:4a:aa:00:d0:d8:89:eb:b3:4e:ca:a2:b7:68:dd:13:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:30:22 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=a7e36bbb0eba3c379a127c604e61c77787022593cfcea81c31655395b04a1061, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:02:43:22:d2:89:e7:c5:8d:7e:83:c9:01: 81:38:0e:64:91:99:01:7a:c8:79:d8:27:6d:5b:9d: 05:10:16:eb:d8:d0:7e:a2:03:bc:2e:3a:60:d9:ab: 15:99:ee:74:38:16:fd:e6:3c:79:f5:b5:93:a6:05: fa:0d:e8:b8:60:e0:fa:f0:85:b4:55:92:cf:22:e3: 87:b0:e7:2a:a4:83:82:17:b6:89:80:06:82:66:6f: 83:13:ed:c4:a4:2a:99:04:59:f1:4c:d4:be:d2:bb: b9:8f:bc:b0:1b:cc:3b:26:fb:be:9e:d0:36:e4:07: 29:8f:f0:28:cf:ac:dd:14:f9:29:87:67:ed:2d:f3: 52:99:f1:87:e1:a1:c9:d7:86:9d:fc:42:d8:89:cd: 0f:97:43:ef:ad:a2:49:77:dd:24:ce:0f:93:52:cc: f0:25:38:c1:59:fd:85:7f:b8:d8:f5:10:1c:b2:78: 12:f0:da:ad:cd:d2:df:06:bc:19:34:b6:99:ae:6f: 53:39:fc:fe:f8:96:eb:bd:09:42:fc:07:64:c4:ef: 3b:50:23:05:db:6e:c2:88:ce:41:f6:57:49:ad:e1: 21:89:22:5a:4f:1e:9d:b2:6a:f8:ac:69:e5:5f:34: 20:8e:74:7c:bc:bd:a0:b6:e1:c6:be:f8:a2:9a:ba: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D5:C7:72:41:A3:C6:B4:66:D8:A3:CF:A4:6D:F4:E6:C2:32:A8:FE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64db4ee8-8580-4678-aaeb-ac8bcfca57ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.252.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:49:3f:ba:47:20:a0:a9:a0:01:ba:5a:a0:12:8d:f7:3e:e4: 16:cf:77:7a:8b:af:ca:e8:42:1b:18:59:25:29:f8:51:6d:5d: fe:3d:0b:96:89:7b:0c:98:4f:7f:e1:77:9a:d4:8f:98:1f:f6: 2e:42:e8:ba:f0:3b:ac:d1:af:52:cb:a5:40:81:2c:8a:ff:cb: dc:6e:be:ac:00:10:f9:d7:a3:eb:24:86:f3:92:db:f4:dd:8b: 81:28:03:ab:f2:51:e2:5c:e1:48:bb:1a:71:49:12:8a:ae:de: 65:da:d2:c3:b1:8c:d8:27:c0:74:3a:41:af:ed:46:57:9f:35: 06:04:a0:52:61:d8:22:2d:39:51:07:60:8a:58:6b:e6:bc:d1: 99:8e:d7:df:cb:b9:3b:46:4d:1d:73:c5:45:1c:5f:06:ff:8c: 09:ae:61:8c:f9:f3:ec:80:bd:a5:a5:9f:f1:6d:73:59:ce:a2: 15:f8:dd:8f:dc:47:f9:a9:e6:34:a6:64:02:7f:21:d6:ca:94: 4e:70:c3:2f:10:0b:30:27:cc:ea:24:35:46:86:69:d4:49:de: 87:39:47:f1:a3:57:ac:a5:35:2c:7e:fe:06:ce:1e:28:0e:b6: 65:8c:b6:26:3e:e7:9b:66:ba:0b:1e:60:2d:01:aa:32:83:55: 29:e7:82:d0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUBHV+M0qqANDYieuzTsqit2jdE7gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTczMDIyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhN2UzNmJiYjBlYmEzYzM3OWExMjdjNjA0ZTYxYzc3Nzg3 MDIyNTkzY2ZjZWE4MWMzMTY1NTM5NWIwNGExMDYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrJAJDItKJ58WNfoPJAYE4DmSRmQF6yHnYJ21bnQUQFuvY 0H6iA7wuOmDZqxWZ7nQ4Fv3mPHn1tZOmBfoN6Lhg4PrwhbRVks8i44ew5yqkg4IX tomABoJmb4MT7cSkKpkEWfFM1L7Su7mPvLAbzDsm+76e0DbkBymP8CjPrN0U+SmH Z+0t81KZ8YfhocnXhp38QtiJzQ+XQ++tokl33STOD5NSzPAlOMFZ/YV/uNj1EByy eBLw2q3N0t8GvBk0tpmub1M5/P74luu9CUL8B2TE7ztQIwXbbsKIzkH2V0mt4SGJ IlpPHp2yavisaeVfNCCOdHy8vaC24ca++KKautc9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4dXHckGjxrRm2KPPpG305sIyqP4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0ZGI0ZWU4LTg1ODAtNDY3OC1hYWViLWFjOGJjZmNhNTdlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAS/DANBgkqhkiG9w0BAQsFAAOCAQEARUk/ukcgoKmgAbpaoBKN9z7kFs93 eouvyuhCGxhZJSn4UW1d/j0Llol7DJhPf+F3mtSPmB/2LkLouvA7rNGvUsulQIEs iv/L3G6+rAAQ+dej6ySG85Lb9N2LgSgDq/JR4lzhSLsacUkSiq7eZdrSw7GM2CfA dDpBr+1GV581BgSgUmHYIi05UQdgilhr5rzRmY7X38u5O0ZNHXPFRRxfBv+MCa5h jPnz7IC9paWf8W1zWc6iFfjdj9xH+anmNKZkAn8h1sqUTnDDLxALMCfM6iQ1RoZp 1EnehzlH8aNXrKU1LH7+Bs4eKA62ZYy2Jj7nm2a6Cx5gLQGqMoNVKeeC0A== -----END CERTIFICATE-----Generated at Sun Jun 29 15:21:35 2025 by rpki-client