$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3339c16d-f3bf-46fd-b081-6a78caf1d49f.roa File: 3339c16d-f3bf-46fd-b081-6a78caf1d49f.roa (raw, json) Hash identifier: +jTnJs1soxxiRJQ6MOx1Wht+dohJie2yW3exozrwShA= Subject key identifier: 0D:76:4B:84:30:2C:69:C1:48:55:7F:A9:28:BE:2E:E1:D9:90:9F:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 50ADF067E551AD706245F8DBA34E05AC72CF50 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3339c16d-f3bf-46fd-b081-6a78caf1d49f.roa Signing time: Tue 20 May 2025 16:20:10 +0000 ROA not before: Tue 20 May 2025 16:20:10 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 701 IP address blocks: 155.146.0.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ad:f0:67:e5:51:ad:70:62:45:f8:db:a3:4e:05:ac:72:cf:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 16:20:10 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=2ece71526c5fae64f23b903fddf3221d4d85d07a23e00ba7ed2c560fdae3e8d9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:68:0f:f3:cd:31:ae:21:d2:a3:4d:b9:22:4f: ca:82:92:67:cf:c1:7c:ab:eb:d1:5f:ca:d8:f8:a1: 61:eb:f8:33:d8:33:ab:2e:6b:dc:e1:2d:07:3f:9a: 3f:36:b5:88:7d:65:34:af:fb:32:e9:78:17:50:0f: 52:d6:08:11:76:26:b9:d7:ca:de:72:49:04:47:f1: 11:6d:91:ae:29:80:3f:97:13:65:d0:76:62:14:b5: 65:a0:a3:79:8e:7e:a9:ed:3d:9d:30:cd:94:8f:d8: e1:f5:56:ee:68:b2:a0:b8:44:8a:fd:66:da:5d:b0: 65:ef:23:cd:7e:cf:23:51:f7:5a:15:9b:b9:e0:71: 65:d5:0b:92:76:0d:37:5f:d9:cb:63:46:67:07:18: 7f:2f:2f:3c:af:2e:a0:4e:97:28:d3:47:22:d2:5c: d4:e7:dc:c1:4d:25:e4:1e:58:b1:b3:cc:9f:d9:cd: e1:fb:f3:16:a7:96:34:1a:e5:2e:23:50:98:f4:50: 5b:5e:5b:5c:4c:d0:1d:50:86:ab:b5:20:d7:bf:b2: f9:4d:59:45:99:5b:6a:18:f0:07:01:e9:72:a6:2a: 59:9d:87:b4:82:dc:12:7a:82:3f:29:e0:cf:a4:92: 79:83:cc:2d:2c:5f:fc:25:c3:ec:fa:e6:b8:4b:62: 2c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:76:4B:84:30:2C:69:C1:48:55:7F:A9:28:BE:2E:E1:D9:90:9F:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3339c16d-f3bf-46fd-b081-6a78caf1d49f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.146.0.0/20 Signature Algorithm: sha256WithRSAEncryption 28:be:75:ef:d6:a9:a7:72:05:fd:69:01:9c:18:f4:6c:84:33: 8f:61:5f:a4:5c:98:29:bb:7f:e6:b2:14:62:fe:28:c7:f5:81: 26:ab:2d:ee:de:eb:be:02:07:41:26:e2:92:3c:09:3d:5c:23: 29:77:1d:69:e4:24:18:71:62:fd:78:5c:d6:bb:bf:1f:f1:4d: e0:9c:5b:b6:30:7b:08:43:15:2f:67:98:5d:be:4b:40:e8:d9: 2c:a7:c7:81:a4:a0:a1:99:5e:e1:7a:0c:af:8a:75:df:63:8c: 8a:0a:88:23:4c:39:fb:a0:4c:70:dd:c9:9c:4b:33:a5:dd:31: a1:c1:1a:d9:12:bc:7e:5f:a4:be:7a:69:91:5a:23:4f:66:d1: 14:0d:08:83:87:58:f6:69:1f:a0:99:0b:c4:ca:07:b4:5a:17: 52:37:0c:ec:f7:79:af:06:8d:26:8b:12:9c:e1:f0:81:74:7c: 2a:c4:1a:04:b3:fe:73:6c:de:2b:78:27:ee:a0:e0:5e:dd:01: dc:a4:aa:ae:57:ac:16:54:ee:e4:c7:2b:0e:df:91:1f:6f:88: 42:70:49:4e:09:98:5f:37:72:97:92:86:c5:67:06:8f:61:d7: 65:49:4d:0c:03:ac:e7:a9:04:d6:94:77:84:0d:04:55:a8:56: 73:a7:c3:13 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITUK3wZ+VRrXBiRfjbo04FrHLPUDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA1MjAxNjIwMTBaFw0yNTA2MjQyMzU5NTla MHoxSTBHBgNVBAUTQDJlY2U3MTUyNmM1ZmFlNjRmMjNiOTAzZmRkZjMyMjFkNGQ4 NWQwN2EyM2UwMGJhN2VkMmM1NjBmZGFlM2U4ZDkxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMBoD/PNMa4h0qNNuSJPyoKSZ8/BfKvr0V/K2PihYev4M9gz qy5r3OEtBz+aPza1iH1lNK/7Mul4F1APUtYIEXYmudfK3nJJBEfxEW2RrimAP5cT ZdB2YhS1ZaCjeY5+qe09nTDNlI/Y4fVW7miyoLhEiv1m2l2wZe8jzX7PI1H3WhWb ueBxZdULknYNN1/Zy2NGZwcYfy8vPK8uoE6XKNNHItJc1OfcwU0l5B5YsbPMn9nN 4fvzFqeWNBrlLiNQmPRQW15bXEzQHVCGq7Ug17+y+U1ZRZlbahjwBwHpcqYqWZ2H tILcEnqCPyngz6SSeYPMLSxf/CXD7PrmuEtiLNUCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQNdkuEMCxpwUhVf6kovi7h2ZCfvDAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvMzMzOWMxNmQtZjNiZi00NmZkLWIwODEtNmE3OGNhZjFkNDlmLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBJuSADANBgkqhkiG9w0BAQsFAAOCAQEAKL5179app3IF/WkBnBj0bIQzj2Ff pFyYKbt/5rIUYv4ox/WBJqst7t7rvgIHQSbikjwJPVwjKXcdaeQkGHFi/Xhc1ru/ H/FN4JxbtjB7CEMVL2eYXb5LQOjZLKfHgaSgoZle4XoMr4p132OMigqII0w5+6BM cN3JnEszpd0xocEa2RK8fl+kvnppkVojT2bRFA0Ig4dY9mkfoJkLxMoHtFoXUjcM 7Pd5rwaNJosSnOHwgXR8KsQaBLP+c2zeK3gn7qDgXt0B3KSqrlesFlTu5McrDt+R H2+IQnBJTgmYXzdyl5KGxWcGj2HXZUlNDAOs56kE1pR3hA0EVahWc6fDEw== -----END CERTIFICATE-----Generated at Mon Jun 16 01:52:41 2025 by rpki-client