$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa File: ebad4984-8328-4120-af6c-4583760d0aca.roa (raw, json) Hash identifier: UWcdkLaDRk/6MUfDxcAOEPKalSnNViy4ZFrl+Gt5zdc= Subject key identifier: 53:66:16:53:E7:4D:0C:E1:FF:6E:9F:7C:5F:CE:E1:04:16:C2:F8:B1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6B6C8A90075BA5FB7CE7754A994B17DE5F63AA52 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa Signing time: Mon 16 Jun 2025 16:21:18 +0000 ROA not before: Mon 16 Jun 2025 16:21:18 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.184.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:6c:8a:90:07:5b:a5:fb:7c:e7:75:4a:99:4b:17:de:5f:63:aa:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:21:18 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=ddb9b0f645e312ec3fe4ff7eddff16853cd3cae9dd011d31b679b4326fa65816, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:db:31:76:a8:07:9f:d1:7a:df:22:16:87: ba:81:9b:eb:51:7e:ee:07:d2:95:dd:e4:47:13:ff: 66:0d:fe:5c:10:64:bd:82:48:11:38:4b:ad:27:6c: 18:16:26:a4:3e:5f:34:42:06:f0:8c:5e:ff:58:3b: 18:21:8f:2d:01:8d:c1:3f:c8:f8:51:a7:15:cd:37: c8:20:b3:c5:58:69:e3:98:2c:af:8d:ff:d1:fa:17: b4:7c:6d:2c:f5:54:d8:c9:a9:10:64:a1:85:3c:ba: ad:e0:e3:ee:88:50:7f:ba:38:a0:fb:7a:69:c2:b0: a2:5b:dc:3e:99:04:cd:30:51:ae:3b:12:c8:46:49: ad:47:08:9d:9a:fd:8f:45:0e:64:93:09:e7:0d:1b: 26:58:1f:47:4c:22:c4:99:b7:a6:ef:61:b4:1d:e7: 60:1d:f6:1f:0a:45:88:c5:a7:ac:bb:5f:da:c3:9a: ee:63:61:f9:70:b9:99:55:eb:1b:3b:be:2a:f4:21: 82:cc:a9:98:14:30:2d:cd:1c:f0:fd:1a:c7:57:f6: e3:35:7f:bf:53:91:07:e1:e6:80:ea:c8:e4:a9:71: 36:e7:31:6c:40:13:c3:12:6c:90:ae:7d:c7:1a:df: 79:ba:08:d4:14:02:97:b8:a2:2b:18:ba:38:5b:51: 46:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:66:16:53:E7:4D:0C:E1:FF:6E:9F:7C:5F:CE:E1:04:16:C2:F8:B1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ebad4984-8328-4120-af6c-4583760d0aca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.184.0.0/16 Signature Algorithm: sha256WithRSAEncryption 03:ce:ac:2e:7c:a4:15:1e:fc:c6:b1:cd:b5:83:f9:f1:3e:c8: 1c:04:49:65:de:31:5f:6c:84:c9:f5:c4:36:dc:9c:5d:3c:d9: ba:16:9d:e3:db:ba:aa:a0:cf:c9:2d:15:55:bc:7b:96:d6:6c: 5a:56:a0:d4:74:a2:77:5a:f6:c9:3c:ad:1d:5a:e4:fe:82:92: 87:20:fd:e0:14:64:6f:38:b4:45:4a:fa:8a:a8:c6:d6:ac:23: 66:0b:75:63:22:80:90:4b:28:cf:95:12:c6:5d:63:03:a1:39: f5:ea:35:96:77:99:c2:fb:2b:10:f1:9a:c0:00:27:04:be:5c: ab:b2:8d:39:f1:ce:4a:a0:bb:72:cc:46:fc:fb:0b:d3:28:77: a7:fb:a1:a7:db:f5:c5:42:9d:46:df:cd:65:ef:be:70:aa:f1: ff:46:5e:78:12:51:5f:29:40:64:39:71:0a:36:8b:13:37:ba: 1d:78:1b:0a:2c:90:e2:4b:5f:5c:64:06:bf:6f:58:cf:83:10: 9a:1f:45:d7:33:b8:f6:41:5a:bd:86:c9:69:ad:31:cf:84:c7: 97:48:44:18:65:6f:10:ce:d1:20:64:e1:24:46:83:13:33:f6: d5:db:c8:ce:10:6d:58:c6:f9:91:97:64:cb:22:33:8d:a9:5e: db:31:a2:33 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUa2yKkAdbpft853VKmUsX3l9jqlIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYyMTE4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZGI5YjBmNjQ1ZTMxMmVjM2ZlNGZmN2VkZGZmMTY4NTNj ZDNjYWU5ZGQwMTFkMzFiNjc5YjQzMjZmYTY1ODE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDOftsxdqgHn9F63yIWh7qBm+tRfu4H0pXd5EcT/2YN/lwQ ZL2CSBE4S60nbBgWJqQ+XzRCBvCMXv9YOxghjy0BjcE/yPhRpxXNN8ggs8VYaeOY LK+N/9H6F7R8bSz1VNjJqRBkoYU8uq3g4+6IUH+6OKD7emnCsKJb3D6ZBM0wUa47 EshGSa1HCJ2a/Y9FDmSTCecNGyZYH0dMIsSZt6bvYbQd52Ad9h8KRYjFp6y7X9rD mu5jYflwuZlV6xs7vir0IYLMqZgUMC3NHPD9GsdX9uM1f79TkQfh5oDqyOSpcTbn MWxAE8MSbJCufcca33m6CNQUApe4oisYujhbUUaLAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUU2YWU+dNDOH/bp98X87hBBbC+LEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViYWQ0OTg0LTgzMjgtNDEyMC1hZjZjLTQ1ODM3NjBkMGFjYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPuDANBgkqhkiG9w0BAQsFAAOCAQEAA86sLnykFR78xrHNtYP58T7IHARJ Zd4xX2yEyfXENtycXTzZuhad49u6qqDPyS0VVbx7ltZsWlag1HSid1r2yTytHVrk /oKShyD94BRkbzi0RUr6iqjG1qwjZgt1YyKAkEsoz5USxl1jA6E59eo1lneZwvsr EPGawAAnBL5cq7KNOfHOSqC7csxG/PsL0yh3p/uhp9v1xUKdRt/NZe++cKrx/0Ze eBJRXylAZDlxCjaLEze6HXgbCiyQ4ktfXGQGv29Yz4MQmh9F1zO49kFavYbJaa0x z4THl0hEGGVvEM7RIGThJEaDEzP21dvIzhBtWMb5kZdkyyIzjale2zGiMw== -----END CERTIFICATE-----Generated at Sun Jun 29 02:58:54 2025 by rpki-client