$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceb48abc-00bf-4136-afb7-4416d65fd3f8.roa File: ceb48abc-00bf-4136-afb7-4416d65fd3f8.roa (raw, json) Hash identifier: urWr4tX9X1oEs+dA+MA2mpz0MQ8GENmU2IoPiZYlKm4= Subject key identifier: 75:BD:5C:F0:9C:ED:11:9D:D0:82:C8:2A:9E:48:E9:46:D0:00:5D:3F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7446B9288E8EDD23AC9D8B1FCAE156BBB24AB4E0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceb48abc-00bf-4136-afb7-4416d65fd3f8.roa Signing time: Mon 09 Jun 2025 16:10:13 +0000 ROA not before: Mon 09 Jun 2025 16:10:13 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.150.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:46:b9:28:8e:8e:dd:23:ac:9d:8b:1f:ca:e1:56:bb:b2:4a:b4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:10:13 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=576b4744bc5a90127c3b7ee0f4f04cd3bb686b5bfe37ac64809a0db50ba077a7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:2a:28:df:3d:db:89:ae:b3:4d:1c:67:66: 0d:b6:57:d6:5e:cb:f6:99:18:ed:c6:ef:ac:f8:73: de:aa:85:fc:f4:d8:58:04:f3:f7:b5:3d:4e:51:a7: 3a:e6:38:23:cb:a2:75:8e:a5:02:59:80:7e:67:40: 6b:37:10:fb:20:9a:ec:15:5b:6a:98:7e:0e:5c:1c: 1c:13:7d:1b:8d:f8:77:3c:78:b5:ae:93:6a:7f:91: 74:79:37:67:4b:d5:46:20:ce:4a:99:9c:b8:e3:00: 57:28:af:df:d6:25:99:1c:2b:c1:96:31:db:9a:d5: c7:e2:63:73:35:1c:3b:83:96:45:3f:a9:c9:f4:9d: ad:22:08:f7:5a:1a:cb:5d:4c:99:42:20:84:b9:b3: d5:54:eb:cd:70:8e:c7:1b:26:8c:d4:74:5d:62:26: 41:00:57:87:e7:ef:71:69:78:cd:8c:fb:e5:8b:57: 02:18:48:b2:0e:4b:c4:aa:54:95:d7:a7:54:e6:c4: bd:21:0f:b1:23:8a:e9:ee:8b:7b:a2:38:b5:4d:97: e1:a1:3a:6c:40:b2:19:a4:e4:bd:22:5b:43:e8:9e: d8:4d:4b:21:76:b9:e2:71:60:7f:6d:08:24:9d:dd: 4d:e1:74:0c:4b:03:36:c1:70:00:46:c7:eb:26:3b: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:BD:5C:F0:9C:ED:11:9D:D0:82:C8:2A:9E:48:E9:46:D0:00:5D:3F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ceb48abc-00bf-4136-afb7-4416d65fd3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.150.130.0/23 Signature Algorithm: sha256WithRSAEncryption 17:e6:3c:6b:39:23:21:52:54:ba:4e:36:26:aa:11:45:c2:0a: 89:a1:69:9c:fd:19:d8:82:90:c2:d2:02:d1:bc:fd:60:83:44: 1f:73:9a:66:c9:1c:04:a2:6c:26:bd:1b:56:e2:17:29:bc:3c: 7f:d9:6d:b5:ec:12:ab:24:11:e6:4a:25:fa:c2:f5:4c:e1:97: ea:ca:ef:be:1d:53:ce:02:9f:9c:74:b1:16:e6:82:4f:7a:38: 5b:4c:83:06:30:68:f8:de:63:ff:67:1e:7a:b6:59:41:61:11: 51:d7:b3:6a:6f:6a:ae:17:50:b6:43:93:57:ae:b8:4d:03:64: 11:5b:a6:c5:81:85:87:cb:32:c5:49:7b:a9:77:5b:20:e2:0b: 5d:64:ea:39:43:2f:62:e4:3e:81:d5:12:5d:de:c8:16:09:24: 5f:b2:a2:60:74:21:b7:70:93:1d:06:bd:a6:95:60:4f:9e:cf: dc:54:35:cc:b5:35:d3:b2:02:c4:2e:ee:42:a3:42:c2:88:3b: f5:62:7a:78:a9:f9:c3:af:a2:06:90:38:6d:ae:62:af:3a:81: 22:eb:fa:67:14:44:2b:41:fa:77:73:96:74:ad:42:9d:c0:46: ca:02:db:50:b8:1a:b5:32:f9:ca:41:5e:f9:d5:ae:15:11:a3: a5:1d:14:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdEa5KI6O3SOsnYsfyuFWu7JKtOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYxMDEzWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NzZiNDc0NGJjNWE5MDEyN2MzYjdlZTBmNGYwNGNkM2Ji Njg2YjViZmUzN2FjNjQ4MDlhMGRiNTBiYTA3N2E3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/ICoo3z3bia6zTRxnZg22V9Zey/aZGO3G76z4c96qhfz0 2FgE8/e1PU5RpzrmOCPLonWOpQJZgH5nQGs3EPsgmuwVW2qYfg5cHBwTfRuN+Hc8 eLWuk2p/kXR5N2dL1UYgzkqZnLjjAFcor9/WJZkcK8GWMdua1cfiY3M1HDuDlkU/ qcn0na0iCPdaGstdTJlCIIS5s9VU681wjscbJozUdF1iJkEAV4fn73FpeM2M++WL VwIYSLIOS8SqVJXXp1TmxL0hD7Ejiunui3uiOLVNl+GhOmxAshmk5L0iW0PonthN SyF2ueJxYH9tCCSd3U3hdAxLAzbBcABGx+smO3MNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdb1c8JztEZ3QgsgqnkjpRtAAXT8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlYjQ4YWJjLTAwYmYtNDEzNi1hZmI3LTQ0MTZkNjVmZDNmOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE2loIwDQYJKoZIhvcNAQELBQADggEBABfmPGs5IyFSVLpONiaqEUXCComh aZz9GdiCkMLSAtG8/WCDRB9zmmbJHASibCa9G1biFym8PH/ZbbXsEqskEeZKJfrC 9Uzhl+rK774dU84Cn5x0sRbmgk96OFtMgwYwaPjeY/9nHnq2WUFhEVHXs2pvaq4X ULZDk1euuE0DZBFbpsWBhYfLMsVJe6l3WyDiC11k6jlDL2LkPoHVEl3eyBYJJF+y omB0Ibdwkx0GvaaVYE+ez9xUNcy1NdOyAsQu7kKjQsKIO/Vienip+cOvogaQOG2u Yq86gSLr+mcURCtB+ndzlnStQp3ARsoC21C4GrUy+cpBXvnVrhURo6UdFCc= -----END CERTIFICATE-----Generated at Sun Jun 29 03:17:55 2025 by rpki-client