$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bd60fdb-b627-4f87-ac6e-9998f64edce4.roa File: 1bd60fdb-b627-4f87-ac6e-9998f64edce4.roa (raw, json) Hash identifier: aDF+46B8Q498WzcmAvEViJOhoOihaod3texuu6zbXHA= Subject key identifier: 52:50:4A:D7:1C:75:11:9E:9C:BA:BC:9B:8B:4F:A3:90:69:38:5E:A8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 782FDC1D492A806BED0B532295D604D62C865837 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bd60fdb-b627-4f87-ac6e-9998f64edce4.roa Signing time: Tue 20 May 2025 15:41:06 +0000 ROA not before: Tue 20 May 2025 15:41:06 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.4.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:2f:dc:1d:49:2a:80:6b:ed:0b:53:22:95:d6:04:d6:2c:86:58:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 15:41:06 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=555bcd6693e4fc071e2f91eb5f0c9f4875bd6130b49bccd906eec1a3aad68c74, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:92:af:f8:61:d3:2d:f8:b4:bd:33:ec:f9:1b: 8d:34:39:19:8a:ba:6b:a5:87:b5:cd:2f:8f:d3:ba: 5d:ec:a1:b5:2c:b6:84:55:40:ff:90:54:8a:52:a0: bd:37:ee:2f:a1:16:52:c4:a6:42:67:f8:b9:ac:d0: 39:f4:1e:8d:11:4a:f5:61:19:94:78:74:d6:94:bd: 79:36:c1:06:6c:33:ae:a1:a5:58:76:c5:14:b1:18: a5:fd:cd:1f:2a:e2:a8:77:e4:41:88:e4:e4:f6:fa: 1a:86:7a:de:49:ce:17:1e:42:95:26:05:a2:67:14: 75:a9:c3:e9:85:f6:3e:d9:4f:48:ef:c5:e4:8f:dc: 12:69:0e:d3:12:9b:c9:2b:47:bc:a6:44:8c:ac:58: 81:da:79:3f:fe:1e:19:3b:c5:5e:5b:71:61:26:75: 9a:72:36:db:92:cd:63:6a:e1:70:f9:15:44:53:d2: b1:99:2a:54:a0:bf:08:11:47:96:6b:c0:1a:a8:97: bc:ce:33:00:2d:db:49:c6:6a:69:b4:9f:20:d9:75: 31:d8:38:72:e6:71:46:91:8b:f9:e7:80:9d:f4:b2: 3d:34:07:94:8e:c3:4e:d0:33:8e:32:da:84:66:46: a6:73:48:de:64:55:f4:c8:4a:d5:f8:ff:1a:63:a1: d2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:50:4A:D7:1C:75:11:9E:9C:BA:BC:9B:8B:4F:A3:90:69:38:5E:A8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1bd60fdb-b627-4f87-ac6e-9998f64edce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.4.0.0/14 Signature Algorithm: sha256WithRSAEncryption 5d:e6:e9:8d:62:67:e5:2a:1c:1a:3f:35:d7:08:97:63:d0:f1: 09:5d:2e:07:67:75:92:08:6b:c7:b7:91:08:62:68:8d:38:aa: c2:03:c1:5e:30:51:78:6b:57:6d:8b:ec:37:cf:bf:2b:a5:08: 8d:e7:d6:ea:a2:97:8d:2d:a2:dd:51:d5:4f:e4:8c:42:1f:62: 52:65:83:bb:b5:94:7e:5b:ca:68:3f:be:77:93:b3:d2:92:f7: ea:9b:b4:a6:f4:7c:3a:bb:6e:1a:64:40:1d:16:4f:2b:de:2c: 8c:03:74:d7:ff:c0:1c:da:90:61:5a:c6:18:01:b6:51:4f:88: 83:e9:fb:bc:83:8e:09:0e:8d:f0:c0:3a:60:49:8f:e4:60:56: ed:ad:11:23:a8:bd:94:13:f6:bf:a6:dc:8e:f7:77:8b:64:26: 81:a7:fb:fd:bf:22:4e:97:8a:f6:52:d7:df:bc:8d:d0:30:4f: 70:b8:7d:7a:d8:81:40:a9:92:57:0d:a8:d7:79:3e:c2:da:49: e3:1e:1d:cf:99:6d:f6:71:b5:d6:dd:af:da:9e:2c:47:60:8c: ed:f9:18:97:1c:35:6f:2b:13:d0:09:06:a6:d0:db:45:56:ad: 55:5a:c1:bf:de:d1:99:5f:18:6c:2f:cf:a5:99:d4:51:46:03: b5:0b:ba:29 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeC/cHUkqgGvtC1MildYE1iyGWDcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTU0MTA2WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1NTViY2Q2NjkzZTRmYzA3MWUyZjkxZWI1ZjBjOWY0ODc1 YmQ2MTMwYjQ5YmNjZDkwNmVlYzFhM2FhZDY4Yzc0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJkq/4YdMt+LS9M+z5G400ORmKumulh7XNL4/Tul3sobUs toRVQP+QVIpSoL037i+hFlLEpkJn+Lms0Dn0Ho0RSvVhGZR4dNaUvXk2wQZsM66h pVh2xRSxGKX9zR8q4qh35EGI5OT2+hqGet5JzhceQpUmBaJnFHWpw+mF9j7ZT0jv xeSP3BJpDtMSm8krR7ymRIysWIHaeT/+Hhk7xV5bcWEmdZpyNtuSzWNq4XD5FURT 0rGZKlSgvwgRR5ZrwBqol7zOMwAt20nGamm0nyDZdTHYOHLmcUaRi/nngJ30sj00 B5SOw07QM44y2oRmRqZzSN5kVfTIStX4/xpjodK9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUlBK1xx1EZ6curybi0+jkGk4XqgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiZDYwZmRiLWI2MjctNGY4Ny1hYzZlLTk5OThmNjRlZGNlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwKIBDANBgkqhkiG9w0BAQsFAAOCAQEAXebpjWJn5SocGj811wiXY9DxCV0u B2d1kghrx7eRCGJojTiqwgPBXjBReGtXbYvsN8+/K6UIjefW6qKXjS2i3VHVT+SM Qh9iUmWDu7WUflvKaD++d5Oz0pL36pu0pvR8OrtuGmRAHRZPK94sjAN01//AHNqQ YVrGGAG2UU+Ig+n7vIOOCQ6N8MA6YEmP5GBW7a0RI6i9lBP2v6bcjvd3i2Qmgaf7 /b8iTpeK9lLX37yN0DBPcLh9etiBQKmSVw2o13k+wtpJ4x4dz5lt9nG11t2v2p4s R2CM7fkYlxw1bysT0AkGptDbRVatVVrBv97RmV8YbC/PpZnUUUYDtQu6KQ== -----END CERTIFICATE-----Generated at Sat Jun 14 05:41:06 2025 by rpki-client