$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21c415c9-5629-4fcd-bca5-da716abb7246.roa File: 21c415c9-5629-4fcd-bca5-da716abb7246.roa (raw, json) Hash identifier: rn30YbbA6VcJmdh82uFXex4Ouj5/1ntukEP7XwYTV0I= Subject key identifier: DD:A5:39:E6:00:DF:90:2D:B8:D3:F1:EC:F3:E2:CA:32:22:4B:D5:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2751489DE59DA9C86009D826BD2784E4A5570294 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21c415c9-5629-4fcd-bca5-da716abb7246.roa Signing time: Mon 09 Jun 2025 16:00:07 +0000 ROA not before: Mon 09 Jun 2025 16:00:07 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.4.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:51:48:9d:e5:9d:a9:c8:60:09:d8:26:bd:27:84:e4:a5:57:02:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:00:07 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=d69266edf2b52cfc53d2d9ccf33afce443b80d0e5f120259c5ba0699234effd8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:f6:bb:d1:a0:bc:dd:78:d2:1e:7a:f9:78: 66:86:11:f6:9d:99:3f:d7:f9:e6:1b:cb:50:24:8d: e0:96:0c:b0:da:6e:fe:44:31:1d:1c:ea:3c:4e:29: 40:5d:db:c3:7e:17:bf:ff:99:4b:14:62:fb:da:9e: e6:00:a4:0c:9f:ef:fe:a0:da:f0:29:07:bb:ab:96: ee:ec:c7:6c:6e:f3:5a:99:c5:33:f8:79:09:95:00: 52:66:88:07:55:b8:52:cb:7e:4e:f3:02:46:f6:6e: d3:ca:f3:f3:31:7e:53:7a:db:79:44:6e:c0:b2:40: ce:73:e3:af:35:58:53:be:84:40:3c:33:1e:58:91: f4:2f:a7:98:a9:d1:3a:3a:46:23:e9:a7:f1:cd:37: a5:bb:a0:bb:13:0b:86:47:33:19:01:9a:ff:c4:e9: 34:95:fd:b7:d4:b2:96:02:72:5f:e4:bd:07:fc:19: 79:a9:ad:9a:19:2a:00:3e:b2:fe:2b:a4:4c:e5:c4: 35:5f:ba:d3:29:5a:b6:5f:00:b7:4e:4f:2a:0a:23: 8c:09:eb:28:1c:b2:82:b9:f6:78:76:44:1c:d9:72: 4f:a9:ae:64:82:ee:d2:c1:c9:56:8c:70:2d:fd:21: 44:ba:c1:dd:04:4a:a9:8a:0f:b3:2f:2c:ff:19:7f: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A5:39:E6:00:DF:90:2D:B8:D3:F1:EC:F3:E2:CA:32:22:4B:D5:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/21c415c9-5629-4fcd-bca5-da716abb7246.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.4.12.0/22 Signature Algorithm: sha256WithRSAEncryption 82:18:c1:6c:72:19:7c:8b:5e:c8:0a:72:e2:23:45:85:f8:26: fe:9b:51:a2:cc:3b:4b:85:80:ae:87:c5:f0:8a:69:1c:40:c8: 67:48:50:6a:2d:1b:f6:45:02:ff:35:0e:fb:8c:e1:3b:ec:7f: 71:f4:52:6b:1a:1b:bb:31:0f:a2:cf:2b:0b:4f:44:c6:db:38: e3:df:b6:29:71:ac:b5:69:1e:f4:b3:ac:da:b4:11:6a:80:1c: f2:16:e6:5f:b4:99:6a:5d:86:6f:e2:22:f8:ce:8f:ce:9d:fa: ad:a1:19:eb:95:3c:b1:29:e2:07:28:29:59:79:f0:7b:7b:1f: 96:cc:d9:6b:53:42:73:d5:63:f3:f1:c9:0a:0d:5b:c9:40:b8: e1:4e:59:f6:d3:3f:ee:c3:1a:9f:0d:f8:2a:84:67:3c:c6:9c: e2:9b:8e:4f:98:e2:91:cd:05:ce:7c:b2:46:0d:31:c4:92:89: b5:79:38:07:d9:c4:19:f7:a7:3f:ad:be:13:e5:94:d1:38:62: d3:27:9f:70:8d:3a:8d:0d:9b:0a:7d:4e:8a:27:4b:94:9f:3a: 7d:c6:f3:53:6d:25:b1:43:8c:4a:55:8a:30:74:61:d5:f4:9c: d3:ee:f5:21:1f:90:bd:6b:a0:ba:80:d2:6a:9d:96:88:fd:67: da:1d:d4:c1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ1FIneWdqchgCdgmvSeE5KVXApQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTYwMDA3WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjkyNjZlZGYyYjUyY2ZjNTNkMmQ5Y2NmMzNhZmNlNDQz YjgwZDBlNWYxMjAyNTljNWJhMDY5OTIzNGVmZmQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjHfa70aC83XjSHnr5eGaGEfadmT/X+eYby1AkjeCWDLDa bv5EMR0c6jxOKUBd28N+F7//mUsUYvvanuYApAyf7/6g2vApB7urlu7sx2xu81qZ xTP4eQmVAFJmiAdVuFLLfk7zAkb2btPK8/MxflN623lEbsCyQM5z4681WFO+hEA8 Mx5YkfQvp5ip0To6RiPpp/HNN6W7oLsTC4ZHMxkBmv/E6TSV/bfUspYCcl/kvQf8 GXmprZoZKgA+sv4rpEzlxDVfutMpWrZfALdOTyoKI4wJ6ygcsoK59nh2RBzZck+p rmSC7tLByVaMcC39IUS6wd0ESqmKD7MvLP8ZfwNJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3aU55gDfkC240/Hs8+LKMiJL1VswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIxYzQxNWM5LTU2MjktNGZjZC1iY2E1LWRhNzE2YWJiNzI0Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDBAwwDQYJKoZIhvcNAQELBQADggEBAIIYwWxyGXyLXsgKcuIjRYX4Jv6b UaLMO0uFgK6HxfCKaRxAyGdIUGotG/ZFAv81DvuM4Tvsf3H0UmsaG7sxD6LPKwtP RMbbOOPftilxrLVpHvSzrNq0EWqAHPIW5l+0mWpdhm/iIvjOj86d+q2hGeuVPLEp 4gcoKVl58Ht7H5bM2WtTQnPVY/PxyQoNW8lAuOFOWfbTP+7DGp8N+CqEZzzGnOKb jk+Y4pHNBc58skYNMcSSibV5OAfZxBn3pz+tvhPllNE4YtMnn3CNOo0Nmwp9Toon S5SfOn3G81NtJbFDjEpVijB0YdX0nNPu9SEfkL1roLqA0mqdloj9Z9od1ME= -----END CERTIFICATE-----Generated at Sat Jun 14 06:06:24 2025 by rpki-client