$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a0e06e8-a179-4fac-b725-de7baf6ab80c.roa File: 8a0e06e8-a179-4fac-b725-de7baf6ab80c.roa (raw, json) Hash identifier: HBOHy88ZdM9GmYCisfnSrhOkwz2BFYE6KFntcpRmpW8= Subject key identifier: 63:31:FA:68:0D:29:8E:4C:63:64:0B:F9:97:1C:C2:F0:C5:FE:2C:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3360E4DF6AB99825CEDA2A596B979C33BFE7F8B4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a0e06e8-a179-4fac-b725-de7baf6ab80c.roa Signing time: Mon 16 Jun 2025 18:40:59 +0000 ROA not before: Mon 16 Jun 2025 18:40:59 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.86.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:60:e4:df:6a:b9:98:25:ce:da:2a:59:6b:97:9c:33:bf:e7:f8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:40:59 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=c31c9ebfeb1b8596c3c1f58f4e01046b010f730ba3a15f5d6378fc081910c1f7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9d:f1:ae:09:de:9e:ff:36:e0:4c:1f:ce:0e: 76:77:66:7b:79:49:f8:6d:06:4e:cd:1f:34:e5:46: 5f:39:48:83:d8:5b:cf:b0:a1:95:0e:4c:6a:b6:44: ad:7d:9b:f9:59:a2:b6:8d:59:ee:fd:e3:b8:00:62: 20:41:9d:1a:db:df:11:1d:23:52:e5:24:08:dc:45: 42:42:57:41:90:d1:cc:63:32:20:c0:2c:59:28:22: 7d:30:a5:86:9f:2b:5d:f2:4e:3d:32:cb:b0:0e:89: 01:49:bf:30:e8:ec:54:d8:a8:3e:95:b0:6d:f0:1b: f3:72:b0:d1:13:53:f3:d2:0c:bc:01:d2:c0:bd:01: 73:ba:56:66:7e:22:48:89:6e:ef:08:a8:98:53:f7: 3e:75:cd:2e:3a:76:65:f2:ac:ac:a7:ef:50:4b:e3: 8b:9e:e1:69:32:82:87:a3:a5:c8:42:e6:88:45:97: 3e:75:c3:4b:5a:5b:08:a3:1d:d5:9b:a5:1d:93:46: b3:a2:8a:29:ee:8e:f6:7c:96:22:17:ba:0a:e8:8f: b2:d2:fb:8e:50:a7:85:28:2e:ca:eb:ac:21:6c:13: c4:76:67:29:ed:56:e1:29:60:9b:9a:de:61:86:77: 14:6d:44:a3:ba:4f:3a:a5:33:db:41:9e:3e:e0:3e: 94:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:31:FA:68:0D:29:8E:4C:63:64:0B:F9:97:1C:C2:F0:C5:FE:2C:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a0e06e8-a179-4fac-b725-de7baf6ab80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.86.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0f:c5:a0:4e:4a:61:a0:85:dc:de:05:14:32:43:54:b0:f5:64: 59:0f:67:47:57:3d:0e:b8:44:dc:a2:ab:20:fe:fb:2c:c0:85: e8:ed:74:bc:79:98:3e:ed:99:24:d8:05:68:1e:2e:56:54:f0: 31:63:d0:4a:bf:a7:28:73:53:69:89:35:ef:3d:52:c9:1f:24: a7:50:d7:f5:3a:cf:26:80:00:51:a7:ae:d6:8b:32:69:d9:6a: 5b:df:19:5b:ad:64:87:6d:24:70:50:b4:8f:59:ef:5e:3e:57: 40:66:0b:96:7b:e9:58:b8:3c:95:8e:31:1d:af:41:37:75:97: b6:78:14:9c:33:8d:33:04:28:77:f1:63:2a:69:76:d3:7a:37: d2:eb:31:10:ce:c1:91:8a:ef:f1:c1:98:55:07:56:b4:43:49: 2c:d2:fe:e3:3c:78:09:c2:d0:54:a9:ba:86:16:e6:de:a1:d5: 2c:50:d2:87:29:e9:da:66:67:ea:ce:81:75:ac:80:60:3c:29: ec:d4:46:37:a9:58:80:6e:b1:8c:7c:6b:c3:22:d6:ea:77:c5: 97:34:7f:30:b4:11:79:75:d0:e8:a6:29:c8:5a:23:ee:db:6f: 5a:d3:2b:39:76:53:b9:21:c5:c2:03:ec:79:97:65:b8:08:06: 9a:82:56:6f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUM2Dk32q5mCXO2ipZa5ecM7/n+LQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTg0MDU5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzFjOWViZmViMWI4NTk2YzNjMWY1OGY0ZTAxMDQ2YjAx MGY3MzBiYTNhMTVmNWQ2Mzc4ZmMwODE5MTBjMWY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCUnfGuCd6e/zbgTB/ODnZ3Znt5SfhtBk7NHzTlRl85SIPY W8+woZUOTGq2RK19m/lZoraNWe7947gAYiBBnRrb3xEdI1LlJAjcRUJCV0GQ0cxj MiDALFkoIn0wpYafK13yTj0yy7AOiQFJvzDo7FTYqD6VsG3wG/NysNETU/PSDLwB 0sC9AXO6VmZ+IkiJbu8IqJhT9z51zS46dmXyrKyn71BL44ue4WkygoejpchC5ohF lz51w0taWwijHdWbpR2TRrOiiinujvZ8liIXugroj7LS+45Qp4UoLsrrrCFsE8R2 ZyntVuEpYJua3mGGdxRtRKO6TzqlM9tBnj7gPpSlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUYzH6aA0pjkxjZAv5lxzC8MX+LCcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhMGUwNmU4LWExNzktNGZhYy1iNzI1LWRlN2JhZjZhYjgwYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2VjANBgkqhkiG9w0BAQsFAAOCAQEAD8WgTkphoIXc3gUUMkNUsPVkWQ9n R1c9DrhE3KKrIP77LMCF6O10vHmYPu2ZJNgFaB4uVlTwMWPQSr+nKHNTaYk17z1S yR8kp1DX9TrPJoAAUaeu1osyadlqW98ZW61kh20kcFC0j1nvXj5XQGYLlnvpWLg8 lY4xHa9BN3WXtngUnDONMwQod/FjKml203o30usxEM7BkYrv8cGYVQdWtENJLNL+ 4zx4CcLQVKm6hhbm3qHVLFDShynp2mZn6s6BdayAYDwp7NRGN6lYgG6xjHxrwyLW 6nfFlzR/MLQReXXQ6KYpyFoj7ttvWtMrOXZTuSHFwgPseZdluAgGmoJWbw== -----END CERTIFICATE-----Generated at Sun Jun 29 04:58:08 2025 by rpki-client