$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34f0f1d4-6139-49b8-9058-a9edfdb19bed.roa File: 34f0f1d4-6139-49b8-9058-a9edfdb19bed.roa (raw, json) Hash identifier: ou0UN0+1phhzIB4rd5O4aaKyGGZVZ9fvcsKbf4hsd2k= Subject key identifier: 95:65:2D:DE:3A:82:A1:B4:F4:42:37:28:64:69:40:0A:06:73:63:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43974617FE4DA41CA45C5A8945EFB1069E97B6F1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34f0f1d4-6139-49b8-9058-a9edfdb19bed.roa Signing time: Fri 06 Jun 2025 00:31:29 +0000 ROA not before: Fri 06 Jun 2025 00:31:29 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:97:46:17:fe:4d:a4:1c:a4:5c:5a:89:45:ef:b1:06:9e:97:b6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 00:31:29 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=e4a2e40bbfa7c9eecefe589af7c320dce46b37dc1750aeda41345620f6f5bcf5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:eb:11:2e:e9:7d:bf:57:2f:c3:63:19:27:d4: 92:57:6b:d0:47:e6:95:84:f5:65:21:b8:2a:d6:b7: 57:be:b1:8c:d5:e7:df:fd:fe:77:82:9b:ef:4b:eb: 2f:9f:92:45:5c:e5:e9:42:92:c4:fe:78:35:15:6f: 61:73:fe:a0:4d:47:25:c5:e0:58:0d:f1:ad:42:f1: ff:cb:62:d0:ad:e0:fc:39:bd:05:72:c5:cf:6e:cc: 79:06:a5:59:b0:fc:8e:e3:e8:af:66:fe:a5:d0:2f: 03:d6:b0:3f:36:5c:67:48:d1:63:57:dc:3e:18:b5: 5f:c3:ef:ba:40:ff:1c:39:6a:7d:a5:6d:e1:aa:fc: b8:a6:49:80:e5:88:c0:5d:48:15:8c:79:2e:0d:d2: e2:d8:b7:ee:dd:f0:e5:14:9b:31:6e:84:01:7e:5f: 6e:cb:53:1c:6f:9d:41:5f:b4:f4:be:ee:d9:29:d3: 6c:1f:53:c1:fc:26:f6:98:18:89:cc:12:20:01:01: 0e:a9:1c:f2:86:1a:83:4b:79:59:77:4c:92:83:69: 8b:72:03:e2:4f:3f:61:a5:76:b8:7b:e1:e3:fb:76: d2:77:bd:49:65:6f:86:df:b5:29:63:6b:dc:82:86: e8:bf:ea:e0:87:07:2a:8a:b4:2d:22:5c:c7:80:2a: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:65:2D:DE:3A:82:A1:B4:F4:42:37:28:64:69:40:0A:06:73:63:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34f0f1d4-6139-49b8-9058-a9edfdb19bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.160.0/21 Signature Algorithm: sha256WithRSAEncryption 79:50:e3:e0:6b:9e:d4:0f:58:90:34:a2:41:bf:33:ee:6d:8e: 49:b8:76:5f:43:38:f8:57:6a:10:39:9b:18:ee:9f:65:55:39: ee:e6:42:2e:2a:f3:28:db:52:e0:40:81:d6:27:96:7c:24:de: a1:9f:4e:77:ea:77:8b:18:5a:0a:08:3a:7a:36:31:60:b2:5b: f3:b1:20:61:23:8e:db:65:02:e5:22:24:f8:b3:74:77:d8:35: 08:9f:01:03:e9:5e:84:2c:5c:10:b5:22:46:94:92:d2:b6:61: d4:a5:e8:17:07:90:db:24:2d:7c:5d:34:bc:e5:0d:c0:db:62: 6f:36:01:72:bc:3b:cd:6e:49:11:da:5b:bd:2c:05:bf:1f:85: 4b:fd:0b:0b:e9:5b:6e:e3:19:52:e9:1f:2f:5a:d2:73:af:de: 38:2a:6f:6f:70:53:ff:77:f4:c3:97:8c:18:a5:88:01:16:be: 95:db:cb:e6:53:30:48:5f:b2:f4:cd:bc:ec:01:bf:79:93:2d: 75:94:94:9e:91:15:e2:e2:93:b5:69:ee:45:fd:de:83:3c:95: 1d:59:9d:d8:8f:ef:0c:ca:8d:c2:ef:e9:cf:c0:87:a1:80:f0: 4e:40:e6:e1:58:08:4d:3a:0c:5f:42:10:a6:b6:e4:52:da:b2: a9:d5:e0:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQ5dGF/5NpBykXFqJRe+xBp6XtvEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MDAzMTI5WhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNGEyZTQwYmJmYTdjOWVlY2VmZTU4OWFmN2MzMjBkY2U0 NmIzN2RjMTc1MGFlZGE0MTM0NTYyMGY2ZjViY2Y1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCh6xEu6X2/Vy/DYxkn1JJXa9BH5pWE9WUhuCrWt1e+sYzV 59/9/neCm+9L6y+fkkVc5elCksT+eDUVb2Fz/qBNRyXF4FgN8a1C8f/LYtCt4Pw5 vQVyxc9uzHkGpVmw/I7j6K9m/qXQLwPWsD82XGdI0WNX3D4YtV/D77pA/xw5an2l beGq/LimSYDliMBdSBWMeS4N0uLYt+7d8OUUmzFuhAF+X27LUxxvnUFftPS+7tkp 02wfU8H8JvaYGInMEiABAQ6pHPKGGoNLeVl3TJKDaYtyA+JPP2Gldrh74eP7dtJ3 vUllb4bftSlja9yChui/6uCHByqKtC0iXMeAKkavAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUlWUt3jqCobT0QjcoZGlACgZzYxcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0ZjBmMWQ0LTYxMzktNDliOC05MDU4LWE5ZWRmZGIxOWJlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3KAwDQYJKoZIhvcNAQELBQADggEBAHlQ4+BrntQPWJA0okG/M+5tjkm4 dl9DOPhXahA5mxjun2VVOe7mQi4q8yjbUuBAgdYnlnwk3qGfTnfqd4sYWgoIOno2 MWCyW/OxIGEjjttlAuUiJPizdHfYNQifAQPpXoQsXBC1IkaUktK2YdSl6BcHkNsk LXxdNLzlDcDbYm82AXK8O81uSRHaW70sBb8fhUv9CwvpW27jGVLpHy9a0nOv3jgq b29wU/939MOXjBiliAEWvpXby+ZTMEhfsvTNvOwBv3mTLXWUlJ6RFeLik7Vp7kX9 3oM8lR1ZndiP7wzKjcLv6c/Ah6GA8E5A5uFYCE06DF9CEKa25FLasqnV4I4= -----END CERTIFICATE-----Generated at Sat Jun 14 05:48:26 2025 by rpki-client