$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0be22303-2442-4285-a074-ef6dde8f2f97.roa File: 0be22303-2442-4285-a074-ef6dde8f2f97.roa (raw, json) Hash identifier: 2wBljNzXWDLj9F/xNTmwjrFQ5Yt8wBcGvWjQVMAGw8Y= Subject key identifier: 74:17:B7:56:47:75:61:3A:70:30:A8:82:94:F5:DB:29:6E:37:58:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1F72BCD9F0DFA42C118CC528E9900E11CE3C9214 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0be22303-2442-4285-a074-ef6dde8f2f97.roa Signing time: Tue 20 May 2025 16:41:05 +0000 ROA not before: Tue 20 May 2025 16:41:05 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.168.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:72:bc:d9:f0:df:a4:2c:11:8c:c5:28:e9:90:0e:11:ce:3c:92:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 16:41:05 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=ee8c74a293960f70f47c9c720c611f2621c769ca24599f074c58cc45d616ee48, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:be:52:80:e8:9f:e0:d6:d0:5e:d0:4e:3a: 65:a2:38:bd:2a:8a:2c:03:1b:3d:3f:ef:de:44:9e: b1:0f:b7:af:14:34:61:2f:63:d0:d5:ce:6e:76:c3: d3:28:53:b3:bc:78:69:da:da:30:46:30:c3:9f:03: f2:c7:c5:cb:72:30:6d:22:62:5f:1a:fc:3b:e6:05: c7:6c:ea:c1:fc:01:92:36:8d:ce:67:a7:83:cc:f3: d5:67:c0:f3:d8:10:64:bf:ab:c6:b6:4a:db:23:c3: 0b:15:37:71:48:82:78:3a:14:2f:f5:89:47:a3:5b: a3:f1:d8:aa:20:82:8e:5c:c3:1f:81:91:57:fb:fd: 56:de:88:a8:db:21:eb:22:49:62:91:13:a1:a1:3c: dd:f0:19:f8:4a:b2:b9:ff:9f:55:52:54:cd:a0:88: b1:51:34:e1:35:8c:20:e7:88:32:ed:61:45:19:e0: 5f:15:d0:0d:9a:11:89:f2:be:ef:04:6d:69:7a:3d: 54:3a:66:f0:f8:78:ee:40:2d:88:a2:b3:4e:33:17: 41:8c:ca:eb:d2:9c:27:a4:16:02:50:6c:c1:41:4e: 6e:8a:7d:b4:a3:f4:f3:47:86:02:7a:42:dc:6f:d5: 95:90:bd:c3:83:16:68:3e:84:42:29:0d:fb:0b:fd: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:17:B7:56:47:75:61:3A:70:30:A8:82:94:F5:DB:29:6E:37:58:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0be22303-2442-4285-a074-ef6dde8f2f97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.168.0.0/14 Signature Algorithm: sha256WithRSAEncryption 7b:36:c3:63:a1:31:6d:a2:3b:b6:0d:15:1c:41:98:63:b2:63: 80:d2:46:9f:2b:3a:af:96:77:06:7d:e1:3d:57:09:2e:2a:af: 84:65:5c:a5:fc:85:b8:44:32:49:f6:ed:45:19:85:09:80:cc: c4:b9:aa:6f:6e:1c:d2:3f:f7:8a:10:24:f2:81:0a:13:8e:76: 9d:a8:61:e8:97:3e:7c:14:07:b3:1b:50:c0:08:79:63:ef:2d: 62:bc:81:20:36:33:08:e4:98:14:b0:a2:3c:1e:3f:01:c7:97: 5d:ec:47:f6:41:19:f9:36:ea:a0:44:ab:f6:67:20:fd:cc:af: e3:99:53:7e:8e:df:ad:5c:23:86:5a:81:4d:21:97:17:cb:67: 75:1c:d7:6d:b9:03:ab:7a:44:6b:6c:a6:16:b7:39:99:2d:da: ca:0c:5c:39:2c:b6:93:a5:22:40:f9:53:fc:a2:11:4c:d1:a3: 61:84:07:fc:a5:0a:b9:a6:54:fd:b9:96:0d:dd:00:62:ed:0b: d5:dc:25:00:e6:99:36:ff:fd:49:52:53:3b:b0:98:8a:fc:67: 06:ee:67:25:66:f1:21:f9:d6:53:92:2e:d5:34:d8:15:4a:39: f7:1b:a4:bf:bc:b0:db:2e:0f:b7:12:92:6b:7c:b5:0b:75:b8: b5:a4:c7:66 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUH3K82fDfpCwRjMUo6ZAOEc48khQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTY0MTA1WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZThjNzRhMjkzOTYwZjcwZjQ3YzljNzIwYzYxMWYyNjIx Yzc2OWNhMjQ1OTlmMDc0YzU4Y2M0NWQ2MTZlZTQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC39b5SgOif4NbQXtBOOmWiOL0qiiwDGz0/795EnrEPt68U NGEvY9DVzm52w9MoU7O8eGna2jBGMMOfA/LHxctyMG0iYl8a/DvmBcds6sH8AZI2 jc5np4PM89VnwPPYEGS/q8a2StsjwwsVN3FIgng6FC/1iUejW6Px2Koggo5cwx+B kVf7/VbeiKjbIesiSWKRE6GhPN3wGfhKsrn/n1VSVM2giLFRNOE1jCDniDLtYUUZ 4F8V0A2aEYnyvu8EbWl6PVQ6ZvD4eO5ALYiis04zF0GMyuvSnCekFgJQbMFBTm6K fbSj9PNHhgJ6Qtxv1ZWQvcODFmg+hEIpDfsL/cs5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdBe3Vkd1YTpwMKiClPXbKW43WD0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBiZTIyMzAzLTI0NDItNDI4NS1hMDc0LWVmNmRkZThmMmY5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwISqDANBgkqhkiG9w0BAQsFAAOCAQEAezbDY6ExbaI7tg0VHEGYY7JjgNJG nys6r5Z3Bn3hPVcJLiqvhGVcpfyFuEQySfbtRRmFCYDMxLmqb24c0j/3ihAk8oEK E452nahh6Jc+fBQHsxtQwAh5Y+8tYryBIDYzCOSYFLCiPB4/AceXXexH9kEZ+Tbq oESr9mcg/cyv45lTfo7frVwjhlqBTSGXF8tndRzXbbkDq3pEa2ymFrc5mS3aygxc OSy2k6UiQPlT/KIRTNGjYYQH/KUKuaZU/bmWDd0AYu0L1dwlAOaZNv/9SVJTO7CY ivxnBu5nJWbxIfnWU5Iu1TTYFUo59xukv7yw2y4PtxKSa3y1C3W4taTHZg== -----END CERTIFICATE-----Generated at Sat Jun 14 06:41:37 2025 by rpki-client