$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b897d5c-7132-4633-8be3-eff935c4f848.roa File: 6b897d5c-7132-4633-8be3-eff935c4f848.roa (raw, json) Hash identifier: peKAKMynG+3UlpBtAgePVIOBHzHiLKgyT663M6yeNXo= Subject key identifier: FE:D3:88:4D:F0:DD:07:EE:35:1D:4C:4F:D2:F9:E4:06:0D:05:D4:13 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1FBB5480B67BADD58629FBB5161C7FD339123DE9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b897d5c-7132-4633-8be3-eff935c4f848.roa Signing time: Mon 16 Jun 2025 18:40:07 +0000 ROA not before: Mon 16 Jun 2025 18:40:07 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.82.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bb:54:80:b6:7b:ad:d5:86:29:fb:b5:16:1c:7f:d3:39:12:3d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:40:07 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=89b70da994900a81b77504439df0806aedcc99e1ce0df4cf885c2cbbc2b903c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:46:f3:b3:d2:59:ea:86:1a:65:97:99:9f: af:11:07:d5:d9:c5:b6:fe:72:06:a0:3f:42:e3:a8: dd:92:ec:a2:6c:c2:b1:b1:ef:ea:e7:94:42:1e:34: 0d:18:f2:9e:60:2a:8e:ca:f2:67:3d:54:0b:d6:70: 83:51:c3:c0:64:0e:be:9e:6c:47:f8:aa:87:15:05: 88:17:e5:cb:f8:50:31:62:ed:8e:0b:90:46:d6:3b: 2c:a3:b1:1b:60:a9:3a:10:24:75:e0:79:e4:f4:1c: d3:0c:a0:73:39:86:af:cd:90:90:36:6a:b1:75:bb: cb:d5:b7:78:ae:75:87:44:8a:34:5f:25:11:69:84: ec:dc:6f:7e:53:db:c5:83:b9:4e:81:6d:39:81:20: 25:4e:c3:36:88:4d:69:c6:14:8d:7c:05:e4:81:14: 0a:5e:9e:23:f7:02:44:f3:b8:10:66:94:f2:a5:59: 0a:10:6f:29:37:be:09:c9:64:ec:aa:ad:72:d9:58: 25:40:e3:e3:93:44:54:90:86:41:e5:f1:19:48:d0: 4f:28:9c:f2:d2:4d:31:c0:90:0a:b2:17:10:17:c5: 8d:32:2c:f4:79:76:5e:0b:14:3b:ab:07:da:2b:6c: e8:db:57:5f:41:5a:ed:3c:d1:1f:72:79:c8:76:dc: 77:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D3:88:4D:F0:DD:07:EE:35:1D:4C:4F:D2:F9:E4:06:0D:05:D4:13 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6b897d5c-7132-4633-8be3-eff935c4f848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.82.192.0/18 Signature Algorithm: sha256WithRSAEncryption 3d:3d:11:fd:59:d2:7c:84:be:50:5a:8a:9b:6b:29:bc:b7:a5: 1d:be:1a:10:f3:ba:ce:92:18:3c:82:e2:12:e3:4d:11:65:7c: d3:3b:64:dd:06:79:51:67:77:9c:0e:84:a3:14:0d:88:9e:1c: 91:d0:a9:86:da:c0:19:0b:7d:39:77:c0:77:71:4e:a2:09:75: f3:cc:1a:74:d1:24:94:42:06:7f:e2:39:8d:8d:3d:0e:57:fa: 3b:2a:2e:a0:6d:ad:48:19:8d:32:67:51:88:05:f0:69:00:98: b9:f8:5d:cc:02:3c:2e:8a:07:f3:bb:dc:bb:9e:65:2b:e5:b7: b5:67:b4:a2:a9:87:ad:25:18:25:8f:fe:c8:7b:2f:a0:da:da: d2:42:e7:90:18:a0:b1:39:50:35:a1:8a:21:75:2e:4f:2d:90: 37:4e:05:61:0e:37:8e:f4:8f:ad:bd:78:31:ee:91:c3:21:b0: 00:ac:78:a9:89:3d:5c:df:0b:4a:e6:18:a6:c6:51:8b:60:ab: ca:0a:80:d0:fb:79:68:6b:be:f3:e7:b8:24:30:e8:41:89:d6: 5f:12:ea:83:1f:fb:ee:b4:cc:22:d9:be:23:c0:0a:dc:4c:aa: e7:46:dc:52:48:dc:97:b4:7a:dc:c4:16:75:98:73:c6:74:5b: d2:7a:a9:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH7tUgLZ7rdWGKfu1Fhx/0zkSPekwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTg0MDA3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4OWI3MGRhOTk0OTAwYTgxYjc3NTA0NDM5ZGYwODA2YWVk Y2M5OWUxY2UwZGY0Y2Y4ODVjMmNiYmMyYjkwM2M5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmGkbzs9JZ6oYaZZeZn68RB9XZxbb+cgagP0LjqN2S7KJs wrGx7+rnlEIeNA0Y8p5gKo7K8mc9VAvWcINRw8BkDr6ebEf4qocVBYgX5cv4UDFi 7Y4LkEbWOyyjsRtgqToQJHXgeeT0HNMMoHM5hq/NkJA2arF1u8vVt3iudYdEijRf JRFphOzcb35T28WDuU6BbTmBICVOwzaITWnGFI18BeSBFApeniP3AkTzuBBmlPKl WQoQbyk3vgnJZOyqrXLZWCVA4+OTRFSQhkHl8RlI0E8onPLSTTHAkAqyFxAXxY0y LPR5dl4LFDurB9orbOjbV19BWu080R9yech23HeDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/tOITfDdB+41HUxP0vnkBg0F1BMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZiODk3ZDVjLTcxMzItNDYzMy04YmUzLWVmZjkzNWM0Zjg0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2UsAwDQYJKoZIhvcNAQELBQADggEBAD09Ef1Z0nyEvlBaiptrKby3pR2+ GhDzus6SGDyC4hLjTRFlfNM7ZN0GeVFnd5wOhKMUDYieHJHQqYbawBkLfTl3wHdx TqIJdfPMGnTRJJRCBn/iOY2NPQ5X+jsqLqBtrUgZjTJnUYgF8GkAmLn4XcwCPC6K B/O73LueZSvlt7VntKKph60lGCWP/sh7L6Da2tJC55AYoLE5UDWhiiF1Lk8tkDdO BWEON470j629eDHukcMhsACseKmJPVzfC0rmGKbGUYtgq8oKgND7eWhrvvPnuCQw 6EGJ1l8S6oMf++60zCLZviPACtxMqudG3FJI3Je0etzEFnWYc8Z0W9J6qTk= -----END CERTIFICATE-----Generated at Sun Jun 29 00:34:18 2025 by rpki-client