$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8537643f-e367-4b6f-a6e6-836381149426.roa File: 8537643f-e367-4b6f-a6e6-836381149426.roa (raw, json) Hash identifier: aQJHnpgmUtyTe1PztG2iqfSeMl20QDcVX3PlvARVIuc= Subject key identifier: 93:31:57:7D:FD:E1:79:93:35:C9:0A:B8:3B:0D:7B:6D:8A:42:43:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09B346615AD9A066E0A6F52E9FCCFB36F04819ED Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8537643f-e367-4b6f-a6e6-836381149426.roa Signing time: Fri 27 Jun 2025 15:11:01 +0000 ROA not before: Fri 27 Jun 2025 15:11:01 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.56.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:b3:46:61:5a:d9:a0:66:e0:a6:f5:2e:9f:cc:fb:36:f0:48:19:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 27 15:11:01 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=8c512d0e6f54352447f2ce0c1fcd29cf2b218c3e0b51ca30ea8493c30c0875e4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:91:3d:99:db:05:8e:8b:23:eb:b1:79:71:a7: 0f:8a:51:25:56:34:03:8f:b0:36:85:bc:78:fb:01: ee:5f:91:e7:7e:4e:f2:cb:2c:39:59:6b:67:31:44: c1:19:28:87:b3:da:2b:92:4e:82:9a:b8:41:14:3e: 10:b0:c5:60:0d:67:b2:b8:7d:74:eb:e7:0e:ce:45: d0:8a:b9:36:e7:bf:95:dc:34:bb:de:17:f0:0e:70: da:98:c9:c2:93:bd:36:a4:2c:04:59:9a:a5:29:fb: 27:94:71:51:5a:eb:7d:d2:25:f5:dc:27:ae:5d:0d: d2:09:bc:93:aa:c2:92:e5:87:7b:50:c3:cf:68:16: a1:b9:ae:a8:0b:aa:0b:95:55:20:06:77:fe:0d:31: 29:15:63:9f:f4:99:e4:2c:ef:12:5b:dc:17:e0:1d: ae:f9:72:c0:98:11:7b:d5:da:08:95:8f:0c:0e:7b: a9:7d:4f:a8:66:9b:47:50:34:a7:2d:7c:4a:73:a9: 2a:72:d5:9c:ed:3d:92:f4:a8:1a:2f:fd:e9:38:7c: 52:e6:c1:b9:e4:4a:6a:f6:9f:1b:67:37:47:70:9d: 59:44:d3:d8:d9:32:ad:ca:f1:45:4d:93:89:80:7d: b2:1d:87:9f:3c:3b:7d:a6:1c:8c:94:f1:10:21:69: 86:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:31:57:7D:FD:E1:79:93:35:C9:0A:B8:3B:0D:7B:6D:8A:42:43:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8537643f-e367-4b6f-a6e6-836381149426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 34:e4:4e:e0:b8:a0:62:d9:a0:7f:2e:1e:7f:43:83:74:92:09: da:56:0a:30:c3:80:21:bd:ea:bc:cd:96:9d:78:3a:45:ed:78: 0f:0f:28:0b:cd:fb:7a:27:9c:48:d6:e1:53:8d:90:88:e7:52: 81:24:c5:8c:55:52:4d:bc:a7:1c:80:a8:d2:af:0d:a3:77:8a: ae:5e:70:58:5d:b3:5d:35:4c:2c:b0:b1:79:71:6e:4d:f7:d8: ae:6c:26:d8:59:f9:ce:3f:51:cb:24:3d:dc:4b:2e:3b:b7:81: af:1f:79:a6:22:ed:c9:7b:4a:9c:69:47:b0:d8:45:a9:f5:88: df:e3:9a:8f:b3:af:88:be:4e:e3:55:3c:b3:d8:c1:95:8b:98: c2:be:eb:98:0e:f7:5c:c0:ac:3a:41:2f:86:38:8c:e0:34:6a: 19:dd:70:54:f7:ad:50:9d:15:fd:63:0f:c8:7f:4d:a6:84:3b: 73:19:a9:97:45:08:24:40:18:9b:e9:d4:82:14:7d:9e:7d:b5: 16:30:52:79:21:1e:93:69:11:61:72:20:24:3e:ce:b0:47:50: 98:41:90:1f:36:eb:f2:c8:4e:e4:9e:5c:84:8b:2f:c8:9a:58: a2:e8:24:0a:d8:cc:12:72:27:6c:6f:8c:dd:17:5d:5e:59:6f: c4:1e:21:47 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUCbNGYVrZoGbgpvUun8z7NvBIGe0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI3MTUxMTAxWhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YzUxMmQwZTZmNTQzNTI0NDdmMmNlMGMxZmNkMjljZjJi MjE4YzNlMGI1MWNhMzBlYTg0OTNjMzBjMDg3NWU0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCckT2Z2wWOiyPrsXlxpw+KUSVWNAOPsDaFvHj7Ae5fked+ TvLLLDlZa2cxRMEZKIez2iuSToKauEEUPhCwxWANZ7K4fXTr5w7ORdCKuTbnv5Xc NLveF/AOcNqYycKTvTakLARZmqUp+yeUcVFa633SJfXcJ65dDdIJvJOqwpLlh3tQ w89oFqG5rqgLqguVVSAGd/4NMSkVY5/0meQs7xJb3BfgHa75csCYEXvV2giVjwwO e6l9T6hmm0dQNKctfEpzqSpy1ZztPZL0qBov/ek4fFLmwbnkSmr2nxtnN0dwnVlE 09jZMq3K8UVNk4mAfbIdh588O32mHIyU8RAhaYZ5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUkzFXff3heZM1yQq4Ow17bYpCQ4kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg1Mzc2NDNmLWUzNjctNGI2Zi1hNmU2LTgzNjM4MTE0OTQyNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwANODANBgkqhkiG9w0BAQsFAAOCAQEANORO4LigYtmgfy4ef0ODdJIJ2lYK MMOAIb3qvM2WnXg6Re14Dw8oC837eiecSNbhU42QiOdSgSTFjFVSTbynHICo0q8N o3eKrl5wWF2zXTVMLLCxeXFuTffYrmwm2Fn5zj9RyyQ93EsuO7eBrx95piLtyXtK nGlHsNhFqfWI3+Oaj7OviL5O41U8s9jBlYuYwr7rmA73XMCsOkEvhjiM4DRqGd1w VPetUJ0V/WMPyH9NpoQ7cxmpl0UIJEAYm+nUghR9nn21FjBSeSEek2kRYXIgJD7O sEdQmEGQHzbr8shO5J5chIsvyJpYougkCtjMEnInbG+M3RddXllvxB4hRw== -----END CERTIFICATE-----Generated at Sun Jun 29 04:34:43 2025 by rpki-client