$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad746a5-4122-4fe1-a6c1-09c23d7c31f0.roa File: 3ad746a5-4122-4fe1-a6c1-09c23d7c31f0.roa (raw, json) Hash identifier: xnUELVtP8HjrlML8PlJJYD1vxCQhvdAEUZr0wxO4qDo= Subject key identifier: D3:70:7B:8C:5A:B2:A9:16:A9:07:0A:88:53:8A:77:06:1F:FC:AA:BC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 58A9524C62456B0AC8E6ED074D9F9B86E6A95554 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad746a5-4122-4fe1-a6c1-09c23d7c31f0.roa Signing time: Wed 21 May 2025 00:31:49 +0000 ROA not before: Wed 21 May 2025 00:31:49 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.44.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a9:52:4c:62:45:6b:0a:c8:e6:ed:07:4d:9f:9b:86:e6:a9:55:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:31:49 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=15c79e66048c6667983259c765b6cad729926669c734f65fbcdd35c980f100d7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c2:ea:a4:f6:56:1b:fe:da:d2:ce:23:5d:57: 61:f7:0a:15:39:d1:dd:bb:f9:73:d8:85:42:37:c0: 66:52:d0:90:06:91:95:8c:44:de:c6:0f:18:9d:80: 71:5f:ab:78:33:e5:f9:22:e5:84:a0:1d:ce:f5:5c: 24:ff:f3:06:ea:7b:92:14:5f:7a:c8:ba:01:00:ea: 7d:4a:d9:bb:de:3a:0b:61:34:5a:9d:37:b6:ee:8f: ca:2c:e6:72:85:82:e8:07:6f:dc:f6:6a:a9:c7:df: ed:a1:9f:61:08:f3:ee:b1:57:ae:b6:a0:f0:cd:af: f4:2b:d7:79:86:8c:bd:c8:c9:3a:9a:32:27:b0:dc: 36:20:30:17:8f:74:7b:2e:51:71:47:6a:3e:f0:71: 2e:b6:1b:8a:1d:0e:05:1d:18:82:70:6c:5c:ea:94: 22:51:0d:bf:ba:ac:f0:82:b8:e3:ed:f2:ae:cb:95: 3b:24:0c:51:80:00:e0:28:3f:99:22:89:7e:ed:a8: b7:73:3e:c2:2b:12:31:8f:56:9d:b4:e9:8b:75:bf: 40:3a:e1:78:77:35:08:87:3f:5f:15:96:1c:87:40: 9a:f9:af:9c:3f:02:f4:fc:6c:55:7b:ff:39:94:fd: 59:88:32:5b:7d:c6:6a:ba:9b:48:6b:0f:ad:7a:d5: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:7B:8C:5A:B2:A9:16:A9:07:0A:88:53:8A:77:06:1F:FC:AA:BC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad746a5-4122-4fe1-a6c1-09c23d7c31f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.44.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:ba:44:f7:c7:6e:ac:6a:39:ec:b4:c1:56:0f:d9:e0:c6:35: 4d:25:ba:9a:85:75:dc:d3:59:61:cd:c5:34:5d:a9:19:4e:62: 53:d5:a9:c3:c3:9d:2d:3e:db:3c:fa:66:7d:ad:1b:8d:6b:05: dd:61:88:e6:fb:96:7c:fa:1f:02:ed:3e:37:ff:84:5e:e9:47: 61:18:fa:65:12:cc:c6:3c:a2:36:a8:bc:a9:03:5e:dc:5a:fc: 9b:4b:af:6c:e2:8f:02:c6:34:5c:3f:86:c9:c9:ae:16:e7:b3: ce:51:3a:7b:1f:f7:47:d9:ca:e2:40:5b:36:c2:82:17:67:58: 37:b3:60:5e:81:bb:1c:f8:f5:11:2e:ad:d6:36:3e:04:c1:61: d7:b5:b9:10:3a:b2:e7:7a:9f:41:f2:b2:8d:15:68:59:36:7d: cb:d7:5d:92:99:14:e8:ed:c4:c7:2d:94:a9:3c:be:ed:bb:b6: cd:7b:69:c9:32:e2:45:2c:ce:a8:a3:48:5b:70:52:46:2b:c8: 7e:80:e0:3a:31:c4:df:04:7e:3c:1a:34:f2:d3:ef:92:80:8d: fc:ab:d1:31:33:28:53:5c:ca:e6:39:4f:3a:4b:bf:39:8c:97: 44:43:e9:cb:e2:77:09:b0:cb:8f:d4:69:8e:c7:d0:ce:9f:0a: ba:65:97:51 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWKlSTGJFawrI5u0HTZ+bhuapVVQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDAzMTQ5WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWM3OWU2NjA0OGM2NjY3OTgzMjU5Yzc2NWI2Y2FkNzI5 OTI2NjY5YzczNGY2NWZiY2RkMzVjOTgwZjEwMGQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0wuqk9lYb/trSziNdV2H3ChU50d27+XPYhUI3wGZS0JAG kZWMRN7GDxidgHFfq3gz5fki5YSgHc71XCT/8wbqe5IUX3rIugEA6n1K2bveOgth NFqdN7buj8os5nKFgugHb9z2aqnH3+2hn2EI8+6xV662oPDNr/Qr13mGjL3IyTqa Miew3DYgMBePdHsuUXFHaj7wcS62G4odDgUdGIJwbFzqlCJRDb+6rPCCuOPt8q7L lTskDFGAAOAoP5kiiX7tqLdzPsIrEjGPVp206Yt1v0A64Xh3NQiHP18VlhyHQJr5 r5w/AvT8bFV7/zmU/VmIMlt9xmq6m0hrD6161aL7AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU03B7jFqyqRapBwqIU4p3Bh/8qrwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhZDc0NmE1LTQxMjItNGZlMS1hNmMxLTA5YzIzZDdjMzFmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASLDANBgkqhkiG9w0BAQsFAAOCAQEANbpE98durGo57LTBVg/Z4MY1TSW6 moV13NNZYc3FNF2pGU5iU9Wpw8OdLT7bPPpmfa0bjWsF3WGI5vuWfPofAu0+N/+E XulHYRj6ZRLMxjyiNqi8qQNe3Fr8m0uvbOKPAsY0XD+GycmuFuezzlE6ex/3R9nK 4kBbNsKCF2dYN7NgXoG7HPj1ES6t1jY+BMFh17W5EDqy53qfQfKyjRVoWTZ9y9dd kpkU6O3Exy2UqTy+7bu2zXtpyTLiRSzOqKNIW3BSRivIfoDgOjHE3wR+PBo08tPv koCN/KvRMTMoU1zK5jlPOku/OYyXREPpy+J3CbDLj9RpjsfQzp8KumWXUQ== -----END CERTIFICATE-----Generated at Sat Jun 14 05:42:31 2025 by rpki-client