$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db3be233-1f71-45d1-8421-fcbf700976f3.roa File: db3be233-1f71-45d1-8421-fcbf700976f3.roa (raw, json) Hash identifier: UXB18nzdFnHX2aoMnm0niPJIYELA03ZRQ/jEJzJljQA= Subject key identifier: 2B:B1:E3:BE:E3:59:63:BB:91:23:35:07:8A:7C:1A:13:1E:A6:1E:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2D6EA5B6D849A61CE0DD9A860717A99764C138 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db3be233-1f71-45d1-8421-fcbf700976f3.roa Signing time: Mon 16 Jun 2025 18:31:24 +0000 ROA not before: Mon 16 Jun 2025 18:31:24 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.83.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6e:a5:b6:d8:49:a6:1c:e0:dd:9a:86:07:17:a9:97:64:c1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:31:24 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=e14b43383b1fccff549fc4e233e099ba0325dbf7a7c1c04fc40f57ceaa551aa1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:0b:87:64:22:ee:c7:60:15:26:13:7d:1b: 0e:a8:22:04:09:30:52:4c:ce:1d:23:b5:31:d5:99: 05:9c:45:f6:eb:50:af:a4:30:a7:43:54:6b:9f:c1: 70:6e:4a:e3:76:c4:29:a3:f4:f5:35:d2:24:a3:49: 71:30:c7:bc:25:7d:e0:2d:9c:ac:d3:4d:8c:97:b4: 46:a8:fa:5e:9f:e8:88:62:61:b6:92:75:34:49:2b: 5e:6e:17:c2:71:34:75:03:f5:bc:f9:76:88:05:8f: 25:79:01:12:da:1e:2e:62:ad:fe:9c:0f:7e:07:2a: 88:bf:56:01:4d:44:5f:4f:55:08:fc:08:ca:98:15: 61:a7:65:ee:55:16:30:dc:32:6b:62:f9:5a:be:ed: 0d:e4:f4:4b:99:73:38:01:c4:a3:7b:fa:bf:0d:89: 51:4b:c0:2b:bd:55:1c:83:17:a5:f7:79:58:f7:76: 25:1a:cd:20:c7:3c:81:96:1a:44:89:bb:13:42:74: c7:36:bb:ab:71:78:61:3c:f3:15:20:2f:22:fa:d2: ef:bd:5e:31:a0:94:93:ef:ff:91:0f:12:b9:e1:66: 7e:89:bc:38:00:19:00:11:19:e9:a9:80:c7:f7:27: e9:37:dd:99:4c:44:32:d5:94:72:52:b5:83:60:24: fa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B1:E3:BE:E3:59:63:BB:91:23:35:07:8A:7C:1A:13:1E:A6:1E:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db3be233-1f71-45d1-8421-fcbf700976f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.83.224.0/19 Signature Algorithm: sha256WithRSAEncryption 1e:a7:9e:d6:08:af:52:f9:f8:ff:0c:db:be:47:81:ad:02:06: 8e:90:bb:07:76:da:27:c0:c9:59:d1:c1:22:58:48:09:ce:bb: 41:f0:36:6d:3b:81:d4:7b:43:2d:89:10:9c:09:30:10:08:12: 14:f7:c6:36:1f:d2:d0:c2:c9:e4:aa:08:54:70:51:43:ad:9e: 86:23:82:67:f7:66:45:8e:07:e4:98:b2:8d:ff:2b:3c:da:16: b0:87:c3:70:e0:3f:d7:1d:d8:c9:60:67:db:f8:87:8d:21:74: 09:72:01:2d:bc:e1:28:05:e0:92:ea:84:d2:ea:75:ef:43:3f: 2b:dd:f2:fb:ed:86:d3:55:c5:e0:5e:3d:64:3b:9b:b2:3a:f5: 1d:91:ff:35:53:ae:7d:fa:19:f0:22:f3:16:cc:8d:d9:6d:df: 23:2e:69:52:a6:f5:75:f8:a9:aa:34:ff:4c:79:c0:ba:37:6c: 3b:de:26:65:ce:de:b9:5a:52:c7:98:b2:88:49:ad:0c:c7:5a: 09:35:d7:a4:f6:60:f5:a0:7e:9c:ab:e2:28:2b:63:40:e2:29: 0e:ab:a8:7b:69:a2:ab:48:8d:5a:31:31:41:4a:fa:08:9d:76: 59:bf:49:20:5c:7a:5a:ce:83:46:50:2f:b2:53:33:c5:ce:ab: b5:37:9b:bf -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITLW6ltthJphzg3ZqGBxepl2TBODANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MTYxODMxMjRaFw0yNTA3MjEyMzU5NTla MHoxSTBHBgNVBAUTQGUxNGI0MzM4M2IxZmNjZmY1NDlmYzRlMjMzZTA5OWJhMDMy NWRiZjdhN2MxYzA0ZmM0MGY1N2NlYWE1NTFhYTExLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJz7C4dkIu7HYBUmE30bDqgiBAkwUkzOHSO1MdWZBZxF9utQ r6Qwp0NUa5/BcG5K43bEKaP09TXSJKNJcTDHvCV94C2crNNNjJe0Rqj6Xp/oiGJh tpJ1NEkrXm4XwnE0dQP1vPl2iAWPJXkBEtoeLmKt/pwPfgcqiL9WAU1EX09VCPwI ypgVYadl7lUWMNwya2L5Wr7tDeT0S5lzOAHEo3v6vw2JUUvAK71VHIMXpfd5WPd2 JRrNIMc8gZYaRIm7E0J0xza7q3F4YTzzFSAvIvrS771eMaCUk+//kQ8SueFmfom8 OAAZABEZ6amAx/cn6TfdmUxEMtWUclK1g2Ak+uECAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQrseO+41lju5EjNQeKfBoTHqYeCTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZGIzYmUyMzMtMWY3MS00NWQxLTg0MjEtZmNiZjcwMDk3NmYzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTZT4DANBgkqhkiG9w0BAQsFAAOCAQEAHqee1givUvn4/wzbvkeBrQIGjpC7 B3baJ8DJWdHBIlhICc67QfA2bTuB1HtDLYkQnAkwEAgSFPfGNh/S0MLJ5KoIVHBR Q62ehiOCZ/dmRY4H5Jiyjf8rPNoWsIfDcOA/1x3YyWBn2/iHjSF0CXIBLbzhKAXg kuqE0up170M/K93y++2G01XF4F49ZDubsjr1HZH/NVOuffoZ8CLzFsyN2W3fIy5p Uqb1dfipqjT/THnAujdsO94mZc7euVpSx5iyiEmtDMdaCTXXpPZg9aB+nKviKCtj QOIpDquoe2miq0iNWjExQUr6CJ12Wb9JIFx6Ws6DRlAvslMzxc6rtTebvw== -----END CERTIFICATE-----Generated at Sun Jun 29 03:43:59 2025 by rpki-client