$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc0563f2-cf5f-42c5-af7b-395663d5e4a8.roa File: dc0563f2-cf5f-42c5-af7b-395663d5e4a8.roa (raw, json) Hash identifier: oVuPwU+0sMdLgtzq3cjjli7aCmlD/GBR07p67mnjfFU= Subject key identifier: 0C:F2:B9:D5:23:E6:EA:B1:5D:72:5D:DE:C2:32:F7:83:1D:F3:5B:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C27BA8B39928DF3DAAB26EF6559F68B9AD8715F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc0563f2-cf5f-42c5-af7b-395663d5e4a8.roa Signing time: Mon 16 Jun 2025 18:20:12 +0000 ROA not before: Mon 16 Jun 2025 18:20:12 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:27:ba:8b:39:92:8d:f3:da:ab:26:ef:65:59:f6:8b:9a:d8:71:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:20:12 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=b8d2c640d7f1a453cf25f1bb8fe4a0e120028b91b02a492fdd10815f1e534dfe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:04:b4:79:d8:92:ec:0b:22:86:e7:68:0e:50: fe:77:98:3d:fc:ce:48:a0:0d:d8:a6:d2:5b:2d:dd: 6d:ae:ce:c9:9d:15:a1:55:d5:c7:6f:7c:c9:99:1f: 8d:3a:c7:35:7f:a6:89:75:5c:93:9a:55:15:9b:39: 83:ae:94:8e:71:8e:c8:5c:05:3d:42:d1:5d:76:a5: 2d:a2:3f:76:f9:76:97:a6:8e:dd:87:60:18:98:e2: ea:e1:74:b3:df:eb:6b:6d:10:f4:fb:a8:0c:93:f6: 91:99:6d:fc:6f:79:c1:33:49:aa:ab:17:19:3e:f3: f8:f9:8c:8e:e7:41:78:42:7b:08:b1:ef:62:37:c3: b9:aa:a3:5e:7b:32:0a:2e:b2:74:7c:f2:aa:a2:fb: 58:db:53:98:f1:6c:c1:fd:44:92:28:4b:19:6b:b8: 1b:32:2b:97:94:ab:d3:c9:76:9c:ca:4c:ed:a9:e5: 70:ff:a5:28:01:25:da:88:7f:27:ee:b7:06:e9:e2: b7:34:ff:12:9a:0a:e8:97:fc:d5:eb:91:f4:4e:07: bd:26:a0:39:17:1c:37:18:10:1e:ae:69:e7:eb:7f: 51:00:7e:e1:9e:a4:7a:2c:cf:79:64:52:f7:4c:a4: 4c:48:cb:2f:30:86:04:fa:df:05:7d:99:cd:eb:18: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F2:B9:D5:23:E6:EA:B1:5D:72:5D:DE:C2:32:F7:83:1D:F3:5B:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dc0563f2-cf5f-42c5-af7b-395663d5e4a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.116.0/22 Signature Algorithm: sha256WithRSAEncryption 98:62:b1:9d:ba:74:9e:0f:95:58:9b:ee:5b:71:6b:27:11:75: 1b:5e:55:94:e6:74:6d:e7:42:67:70:94:61:40:4b:2a:95:bf: 57:c7:f8:85:86:85:40:4c:74:94:ca:6d:e4:83:64:74:16:af: c1:f0:0e:ab:0c:bf:5c:63:74:1b:aa:dc:62:3c:82:13:66:9c: 2c:89:e5:28:16:fe:50:6f:5c:4f:70:2d:09:d9:6c:da:f8:78: 96:22:20:a6:fc:3a:57:cd:4a:cc:0d:2f:75:ab:07:b8:fc:4d: 5b:a2:09:b0:1d:4f:e0:37:14:2d:91:85:19:c8:67:97:87:9f: 34:45:83:d3:9f:b4:c3:d6:b6:56:c1:81:f3:9e:99:85:5a:c0: 6e:e8:b4:68:ef:6b:7a:98:f5:03:b1:4a:34:70:9d:1f:5a:b1: 48:b0:bb:5c:1e:3f:02:ad:60:ca:bd:b0:a6:17:5a:16:a6:43: 75:4a:4f:f3:2b:91:e0:8e:80:9b:01:c2:de:7a:ec:b2:3c:dd: 85:60:a9:a9:d1:be:b0:51:bd:ed:34:7f:50:30:db:c3:76:5f: ce:2a:9b:76:fc:52:b7:9e:a7:16:01:cf:3c:28:d8:05:c9:bd: 21:e5:f8:7d:57:1d:c2:29:f8:98:61:51:e7:6a:c7:45:de:2a: 4d:3f:c1:cb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTCe6izmSjfPaqybvZVn2i5rYcV8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgyMDEyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGQyYzY0MGQ3ZjFhNDUzY2YyNWYxYmI4ZmU0YTBlMTIw MDI4YjkxYjAyYTQ5MmZkZDEwODE1ZjFlNTM0ZGZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeBLR52JLsCyKG52gOUP53mD38zkigDdim0lst3W2uzsmd FaFV1cdvfMmZH406xzV/pol1XJOaVRWbOYOulI5xjshcBT1C0V12pS2iP3b5dpem jt2HYBiY4urhdLPf62ttEPT7qAyT9pGZbfxvecEzSaqrFxk+8/j5jI7nQXhCewix 72I3w7mqo157MgousnR88qqi+1jbU5jxbMH9RJIoSxlruBsyK5eUq9PJdpzKTO2p 5XD/pSgBJdqIfyfutwbp4rc0/xKaCuiX/NXrkfROB70moDkXHDcYEB6uaefrf1EA fuGepHosz3lkUvdMpExIyy8whgT63wV9mc3rGFvlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDPK51SPm6rFdcl3ewjL3gx3zWxswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RjMDU2M2YyLWNmNWYtNDJjNS1hZjdiLTM5NTY2M2Q1ZTRhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI273QwDQYJKoZIhvcNAQELBQADggEBAJhisZ26dJ4PlVib7ltxaycRdRte VZTmdG3nQmdwlGFASyqVv1fH+IWGhUBMdJTKbeSDZHQWr8HwDqsMv1xjdBuq3GI8 ghNmnCyJ5SgW/lBvXE9wLQnZbNr4eJYiIKb8OlfNSswNL3WrB7j8TVuiCbAdT+A3 FC2RhRnIZ5eHnzRFg9OftMPWtlbBgfOemYVawG7otGjva3qY9QOxSjRwnR9asUiw u1wePwKtYMq9sKYXWhamQ3VKT/MrkeCOgJsBwt567LI83YVgqanRvrBRve00f1Aw 28N2X84qm3b8UreepxYBzzwo2AXJvSHl+H1XHcIp+JhhUedqx0XeKk0/wcs= -----END CERTIFICATE-----Generated at Sun Jun 29 05:04:59 2025 by rpki-client