$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8affba05-d3e2-4910-8b99-b805b32a06fb.roa File: 8affba05-d3e2-4910-8b99-b805b32a06fb.roa (raw, json) Hash identifier: 5kOefBOCeelyRa2EesB/vnzb9cWCmHN6/MvBXMV4gSo= Subject key identifier: 40:05:FE:3E:73:D3:B3:BD:56:3C:FE:60:1E:B2:F3:A5:A4:89:70:4E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A3B2A2BCCB84D5A18BCA0D69D29A6A9BBFF254D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8affba05-d3e2-4910-8b99-b805b32a06fb.roa Signing time: Fri 27 Jun 2025 15:00:24 +0000 ROA not before: Fri 27 Jun 2025 15:00:24 +0000 ROA not after: Fri 01 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.204.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:3b:2a:2b:cc:b8:4d:5a:18:bc:a0:d6:9d:29:a6:a9:bb:ff:25:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 27 15:00:24 2025 GMT Not After : Aug 1 23:59:59 2025 GMT Subject: serialNumber=8aa5b1517cb4929564ea86cc2b6f5f9e82c2e0cfb0cb0b4064c08058845907d3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:7c:46:be:af:d3:cc:14:86:da:7f:23:c6: 98:f1:60:00:e7:e4:bd:a4:49:35:9d:d2:e4:ef:19: be:11:26:90:22:ec:0e:cc:ba:59:f2:70:9b:2c:ff: 54:63:a1:ef:59:aa:db:d9:dc:0e:04:e3:17:23:84: ba:44:bf:bd:95:8e:67:75:b3:ac:57:da:d8:71:6d: 46:22:2e:80:1e:df:b9:5b:b9:ce:bf:15:ca:1f:b6: 20:51:94:81:17:0d:c2:84:d1:56:23:74:3c:2c:cf: f8:3a:38:09:4a:e3:dd:33:26:ae:b5:92:96:e3:89: 2f:f0:b8:5b:fc:58:20:78:39:1a:93:c4:0c:71:3b: cd:83:56:9b:ea:7c:05:dd:23:cb:bc:df:73:dd:14: d8:84:87:bd:c5:a7:e8:40:39:10:d0:98:9f:24:65: c0:7c:d0:68:ac:eb:bb:5f:05:f9:ac:99:cb:ea:98: bc:12:cc:b2:8b:f5:78:f1:1b:fa:f6:66:0a:5c:92: 26:a9:ee:15:4e:f9:00:f6:83:b5:a8:6e:a1:43:a0: 6a:fb:07:de:8c:46:c3:c1:03:db:63:fc:18:4c:36: d7:61:9b:a5:10:c0:a1:cc:4b:d0:38:c8:5a:2f:7e: 15:5f:50:1b:75:0e:e6:0a:45:03:0d:2b:48:26:ba: 8d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:05:FE:3E:73:D3:B3:BD:56:3C:FE:60:1E:B2:F3:A5:A4:89:70:4E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8affba05-d3e2-4910-8b99-b805b32a06fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.204.0.0/14 Signature Algorithm: sha256WithRSAEncryption 2a:71:ec:d6:90:1f:43:1b:33:2f:d6:17:8b:e2:bd:4a:59:02: ba:ec:df:cb:d5:2c:d5:9c:fe:92:49:74:08:a4:aa:98:74:a7: c4:b9:74:2e:aa:6c:5f:89:53:a4:f6:60:02:91:83:a4:a0:b0: 5c:51:07:04:f2:77:8b:38:61:60:ec:fa:69:01:0c:df:7d:6c: f3:e8:da:e1:85:32:6c:e6:e5:ff:fe:9d:8c:e2:67:6a:05:9a: 64:06:54:0a:8f:75:19:da:84:e5:03:4e:7a:31:94:fb:aa:54: 32:a4:3e:ff:75:0d:d6:6e:5f:b6:40:d4:41:98:5f:15:37:43: e2:9b:60:ec:db:58:cf:47:07:34:cc:91:17:29:f6:4f:14:68: 3d:75:a5:8c:b5:91:15:8a:aa:64:4f:f0:03:5f:4a:52:de:97: ed:48:68:4c:cc:9a:9e:37:86:59:d1:44:67:a0:82:2b:94:4d: f8:be:60:f4:f5:3d:32:b2:f0:32:4a:ae:c4:15:00:00:24:ca: 56:1b:2a:66:be:24:ec:f1:b4:33:7e:a3:b4:f8:7f:e3:bb:0d: dd:eb:31:c8:08:06:39:e3:75:77:5f:55:3c:e0:d0:e5:05:0c: 64:2f:fa:28:c1:cd:37:02:e5:50:95:4d:56:7b:9b:0d:db:e2: 65:4e:35:b7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKjsqK8y4TVoYvKDWnSmmqbv/JU0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI3MTUwMDI0WhcNMjUwODAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YWE1YjE1MTdjYjQ5Mjk1NjRlYTg2Y2MyYjZmNWY5ZTgy YzJlMGNmYjBjYjBiNDA2NGMwODA1ODg0NTkwN2QzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3bXxGvq/TzBSG2n8jxpjxYADn5L2kSTWd0uTvGb4RJpAi 7A7MulnycJss/1Rjoe9ZqtvZ3A4E4xcjhLpEv72Vjmd1s6xX2thxbUYiLoAe37lb uc6/FcoftiBRlIEXDcKE0VYjdDwsz/g6OAlK490zJq61kpbjiS/wuFv8WCB4ORqT xAxxO82DVpvqfAXdI8u833PdFNiEh73Fp+hAORDQmJ8kZcB80Gis67tfBfmsmcvq mLwSzLKL9XjxG/r2Zgpckiap7hVO+QD2g7WobqFDoGr7B96MRsPBA9tj/BhMNtdh m6UQwKHMS9A4yFovfhVfUBt1DuYKRQMNK0gmuo0dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQAX+PnPTs71WPP5gHrLzpaSJcE4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhZmZiYTA1LWQzZTItNDkxMC04Yjk5LWI4MDViMzJhMDZmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwINzDANBgkqhkiG9w0BAQsFAAOCAQEAKnHs1pAfQxszL9YXi+K9SlkCuuzf y9Us1Zz+kkl0CKSqmHSnxLl0LqpsX4lTpPZgApGDpKCwXFEHBPJ3izhhYOz6aQEM 331s8+ja4YUybObl//6djOJnagWaZAZUCo91GdqE5QNOejGU+6pUMqQ+/3UN1m5f tkDUQZhfFTdD4ptg7NtYz0cHNMyRFyn2TxRoPXWljLWRFYqqZE/wA19KUt6X7Uho TMyanjeGWdFEZ6CCK5RN+L5g9PU9MrLwMkquxBUAACTKVhsqZr4k7PG0M36jtPh/ 47sN3esxyAgGOeN1d19VPODQ5QUMZC/6KMHNNwLlUJVNVnubDdviZU41tw== -----END CERTIFICATE-----Generated at Sun Jun 29 05:15:42 2025 by rpki-client