$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb12eb37-7bbc-470a-bcc2-558de83b8b51.roa File: eb12eb37-7bbc-470a-bcc2-558de83b8b51.roa (raw, json) Hash identifier: kOIM8SHDf9/IllkghH71woFVAKdSOw5ahohzUNx9jXY= Subject key identifier: 8E:B6:12:33:6C:6D:D7:94:C9:F8:D8:A9:41:67:E5:DC:95:59:48:2A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5E190CDFD7CB77E46C9F31242F6F10C5774BCD70 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb12eb37-7bbc-470a-bcc2-558de83b8b51.roa Signing time: Mon 16 Jun 2025 18:20:52 +0000 ROA not before: Mon 16 Jun 2025 18:20:52 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.66.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:19:0c:df:d7:cb:77:e4:6c:9f:31:24:2f:6f:10:c5:77:4b:cd:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:20:52 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=add76545bbd7b65c64f0dc26613b382f93a791a65d70de5fae0492f94ff28866, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ae:23:51:4d:74:84:cb:89:38:58:3d:d3:93: 80:ad:f5:9a:46:aa:6e:28:a7:fa:b5:e1:37:57:0c: 1a:4e:96:c5:76:1a:d6:29:bb:c7:65:5b:71:57:f0: 47:01:fb:58:c3:33:62:6e:01:5d:a4:25:ab:83:bd: 97:e2:32:86:eb:8b:b6:a1:81:2d:72:c5:90:9d:c8: cf:52:4b:de:85:4f:ef:f5:f1:90:99:b0:c4:57:6c: 5c:d9:4b:52:e1:a6:b2:80:98:7c:d4:64:ab:ea:40: 0d:81:1a:33:22:a0:a1:69:d2:40:54:e1:79:74:5d: 27:25:4a:26:90:00:6c:a7:45:98:5f:2f:0b:cf:5a: 82:e1:ab:c2:9c:0c:3b:81:2e:69:91:ac:e3:d1:58: a1:2c:d0:69:87:46:fb:bd:4f:44:09:84:f8:b1:ca: 39:80:ef:5b:07:70:a5:7f:46:f7:e8:d7:71:67:77: 9f:6b:15:28:3a:77:09:86:1e:10:f5:2e:33:c0:2f: 8c:04:5e:ed:50:f2:98:e1:db:cd:cf:2d:b3:b3:1b: 3c:f6:af:83:f8:95:30:81:d6:a2:6e:9e:f0:93:bc: 08:b5:1a:cf:0e:69:b6:9a:c4:7f:29:3b:4a:94:81: c5:48:61:d1:03:ad:bc:eb:6b:54:5f:a2:7d:0f:3b: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B6:12:33:6C:6D:D7:94:C9:F8:D8:A9:41:67:E5:DC:95:59:48:2A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb12eb37-7bbc-470a-bcc2-558de83b8b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.66.128.0/17 Signature Algorithm: sha256WithRSAEncryption 36:a0:13:fc:35:7c:6b:8a:11:7e:c2:6f:16:1a:57:92:08:81: 1b:3c:5c:7f:53:18:7e:5c:92:ed:d6:d6:09:43:2d:1b:c9:ad: 66:51:ea:16:4e:ec:c7:c5:7c:9d:47:05:82:a8:15:4d:07:5a: cc:7f:d8:1d:a9:1f:15:be:01:63:5f:24:8a:c8:7a:6d:52:86: 9d:19:fe:ae:30:db:5f:39:e2:a6:b9:8c:de:d5:b6:0e:20:6f: 3d:ed:85:e5:7c:c3:9b:a7:a6:6a:91:c8:f9:3c:2f:23:7b:a0: 0e:a2:0f:bd:00:62:1a:ed:99:60:c9:6a:48:c8:c7:bb:cf:6b: c6:f0:56:80:26:0d:d3:07:88:e1:c1:ab:60:10:42:c3:29:68: 91:eb:74:3b:61:7a:65:1b:68:35:95:88:f7:c3:97:06:06:7e: 76:bc:89:d3:a5:71:7f:1f:9d:76:ae:8b:eb:d5:f5:f5:8c:a9: ca:86:f6:33:b4:7a:e6:65:78:91:c0:26:b0:6f:16:16:6d:c9: 47:3d:a2:ee:3a:81:c7:e1:81:3e:ff:dd:a3:e9:06:d4:c8:1e: 58:aa:e8:96:03:a0:ba:27:82:67:f6:d6:6d:53:d7:49:98:b5: 82:bd:5c:cb:74:92:53:b9:d0:e1:f7:fc:b5:c3:e0:86:fa:48: b8:f4:29:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXhkM39fLd+RsnzEkL28QxXdLzXAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgyMDUyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZGQ3NjU0NWJiZDdiNjVjNjRmMGRjMjY2MTNiMzgyZjkz YTc5MWE2NWQ3MGRlNWZhZTA0OTJmOTRmZjI4ODY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCariNRTXSEy4k4WD3Tk4Ct9ZpGqm4op/q14TdXDBpOlsV2 GtYpu8dlW3FX8EcB+1jDM2JuAV2kJauDvZfiMobri7ahgS1yxZCdyM9SS96FT+/1 8ZCZsMRXbFzZS1LhprKAmHzUZKvqQA2BGjMioKFp0kBU4Xl0XSclSiaQAGynRZhf LwvPWoLhq8KcDDuBLmmRrOPRWKEs0GmHRvu9T0QJhPixyjmA71sHcKV/Rvfo13Fn d59rFSg6dwmGHhD1LjPAL4wEXu1Q8pjh283PLbOzGzz2r4P4lTCB1qJunvCTvAi1 Gs8OabaaxH8pO0qUgcVIYdEDrbzra1Rfon0POz9fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjrYSM2xt15TJ+NipQWfl3JVZSCowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViMTJlYjM3LTdiYmMtNDcwYS1iY2MyLTU1OGRlODNiOGI1MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2QoAwDQYJKoZIhvcNAQELBQADggEBADagE/w1fGuKEX7CbxYaV5IIgRs8 XH9TGH5cku3W1glDLRvJrWZR6hZO7MfFfJ1HBYKoFU0HWsx/2B2pHxW+AWNfJIrI em1Shp0Z/q4w21854qa5jN7Vtg4gbz3theV8w5unpmqRyPk8LyN7oA6iD70AYhrt mWDJakjIx7vPa8bwVoAmDdMHiOHBq2AQQsMpaJHrdDthemUbaDWViPfDlwYGfna8 idOlcX8fnXaui+vV9fWMqcqG9jO0euZleJHAJrBvFhZtyUc9ou46gcfhgT7/3aPp BtTIHliq6JYDoLongmf21m1T10mYtYK9XMt0klO50OH3/LXD4Ib6SLj0KZk= -----END CERTIFICATE-----Generated at Sun Jun 29 04:51:17 2025 by rpki-client