$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22d35498-5edd-4966-b233-0a25ecd87dd4.roa File: 22d35498-5edd-4966-b233-0a25ecd87dd4.roa (raw, json) Hash identifier: UuESpmdRD1uMdX5ajp4WZs/PXV4xidRpZhqn16y/dFk= Subject key identifier: A1:E1:79:BF:76:FF:69:0C:BA:78:75:7D:C4:0A:3C:02:58:55:F0:F0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 157A8139DF3768342CBF573890FA5549E5EDC698 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22d35498-5edd-4966-b233-0a25ecd87dd4.roa Signing time: Mon 09 Jun 2025 17:20:08 +0000 ROA not before: Mon 09 Jun 2025 17:20:08 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.20.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7a:81:39:df:37:68:34:2c:bf:57:38:90:fa:55:49:e5:ed:c6:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 17:20:08 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=b171bcafccb1d2c0d0510e024077d6aa6bb4c53615e438e2ece545f4a7a06cb6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e1:9f:7d:d3:b3:e4:ef:5a:c6:ef:10:4b:e3: 9a:96:e5:ad:f6:25:a1:58:48:7d:ad:1a:b5:8f:31: e2:d6:c9:98:fc:7b:ec:2e:e3:8d:31:64:6e:4f:c9: b6:94:c2:ee:11:a1:4f:1b:9e:83:1f:a8:87:c1:08: 47:e4:92:7b:8f:3f:13:39:77:d7:26:f7:99:13:3b: 5e:9f:12:88:99:6f:d2:9c:23:b6:68:07:d8:ac:f2: 1c:8c:a6:e1:8c:e0:13:b4:69:f0:9d:fe:72:fd:00: 62:28:08:21:3d:b5:db:ff:84:9a:25:3a:23:f4:8a: c9:ce:7d:59:8a:87:f6:5c:e3:dd:94:85:a5:70:88: 66:36:74:db:8b:0a:fb:30:35:8d:d2:29:ce:24:0c: ba:36:82:74:2c:81:c1:68:5d:df:09:93:a1:75:b0: a4:20:f0:cb:d6:86:86:07:16:ba:5a:62:7e:29:13: 4c:17:4e:63:5f:ff:2d:4a:f3:0d:28:4f:56:93:16: 54:3d:35:a2:79:cf:09:40:59:c0:50:b7:32:48:7d: 84:0a:8c:a7:81:be:e3:fa:7f:f9:bb:8e:86:70:ec: 2c:d7:77:5a:bd:bc:ea:66:b8:5a:65:09:1e:23:a1: 06:e0:fc:e4:bf:e9:3a:5f:24:41:b8:b0:8f:1b:af: d2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E1:79:BF:76:FF:69:0C:BA:78:75:7D:C4:0A:3C:02:58:55:F0:F0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/22d35498-5edd-4966-b233-0a25ecd87dd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.20.0.0/14 Signature Algorithm: sha256WithRSAEncryption 51:64:6b:d8:78:17:c6:bc:67:1c:83:ad:46:59:10:9f:a7:03: 25:55:ba:69:93:38:0b:4e:79:36:62:68:dc:8b:8a:b7:d5:fa: 77:eb:4d:a0:1b:87:25:d8:32:fc:61:03:78:43:d8:c0:24:5c: c6:56:d3:e3:20:18:bc:b5:5d:bc:c6:d3:14:7b:d9:da:d4:b9: 06:f2:9d:d6:7a:26:fd:08:3e:db:02:c4:03:f9:8c:b8:ce:7b: a1:87:97:ce:8c:86:e9:96:5b:de:5f:f6:a2:b5:06:fa:f4:f3: 27:63:ed:7d:90:57:be:58:d0:82:1a:07:a9:18:4f:a0:fb:33: f4:57:67:f7:40:68:dc:9a:57:cb:6a:33:ff:d2:7e:c9:14:69: 8c:e7:ea:94:18:0c:34:7b:ec:e6:30:b8:3e:9a:21:9e:3b:35: 12:9f:09:db:06:a6:bf:3d:4e:d8:02:d4:8f:a5:8a:4f:90:12: b4:5d:9d:74:61:31:42:91:29:e2:50:e5:bf:39:d2:b7:a0:47: 1b:ea:4e:9e:e7:f4:fe:ef:90:f8:26:5d:47:63:28:89:9d:1c: 44:6d:ea:b8:0b:bc:4e:4c:2a:6b:8b:da:87:94:6e:b9:20:4f: 49:71:2e:d0:f8:a6:b1:91:cd:e7:df:b1:92:93:f5:41:d1:43: b0:24:ee:ae -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFXqBOd83aDQsv1c4kPpVSeXtxpgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTcyMDA4WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTcxYmNhZmNjYjFkMmMwZDA1MTBlMDI0MDc3ZDZhYTZi YjRjNTM2MTVlNDM4ZTJlY2U1NDVmNGE3YTA2Y2I2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCn4Z9907Pk71rG7xBL45qW5a32JaFYSH2tGrWPMeLWyZj8 e+wu440xZG5PybaUwu4RoU8bnoMfqIfBCEfkknuPPxM5d9cm95kTO16fEoiZb9Kc I7ZoB9is8hyMpuGM4BO0afCd/nL9AGIoCCE9tdv/hJolOiP0isnOfVmKh/Zc492U haVwiGY2dNuLCvswNY3SKc4kDLo2gnQsgcFoXd8Jk6F1sKQg8MvWhoYHFrpaYn4p E0wXTmNf/y1K8w0oT1aTFlQ9NaJ5zwlAWcBQtzJIfYQKjKeBvuP6f/m7joZw7CzX d1q9vOpmuFplCR4joQbg/OS/6TpfJEG4sI8br9KNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUoeF5v3b/aQy6eHV9xAo8AlhV8PAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIyZDM1NDk4LTVlZGQtNDk2Ni1iMjMzLTBhMjVlY2Q4N2RkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIDFDANBgkqhkiG9w0BAQsFAAOCAQEAUWRr2HgXxrxnHIOtRlkQn6cDJVW6 aZM4C055NmJo3IuKt9X6d+tNoBuHJdgy/GEDeEPYwCRcxlbT4yAYvLVdvMbTFHvZ 2tS5BvKd1nom/Qg+2wLEA/mMuM57oYeXzoyG6ZZb3l/2orUG+vTzJ2PtfZBXvljQ ghoHqRhPoPsz9Fdn90Bo3JpXy2oz/9J+yRRpjOfqlBgMNHvs5jC4Ppohnjs1Ep8J 2wamvz1O2ALUj6WKT5AStF2ddGExQpEp4lDlvznSt6BHG+pOnuf0/u+Q+CZdR2Mo iZ0cRG3quAu8Tkwqa4vah5RuuSBPSXEu0PimsZHN59+xkpP1QdFDsCTurg== -----END CERTIFICATE-----Generated at Sat Jun 14 05:59:57 2025 by rpki-client