$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bf34255-ef04-4bef-bae8-9ba2597948a2.roa File: 3bf34255-ef04-4bef-bae8-9ba2597948a2.roa (raw, json) Hash identifier: YyVSS8NDJ2eqtaG+xFG5dae8bFbXbx09pD/et+mG2p8= Subject key identifier: E6:AE:87:8C:04:F6:45:4E:FB:4D:15:C4:24:8A:EB:7F:E4:5E:49:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2BEE06665FCFDCF35CAA9AD86796481C9B01C41D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bf34255-ef04-4bef-bae8-9ba2597948a2.roa Signing time: Tue 20 May 2025 15:40:17 +0000 ROA not before: Tue 20 May 2025 15:40:17 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.115.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ee:06:66:5f:cf:dc:f3:5c:aa:9a:d8:67:96:48:1c:9b:01:c4:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 15:40:17 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=72c6e00e9b56d348cdcd988a36848c2211ea674c8423116f50dc712b70f99c2e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:aa:96:3c:e7:f5:2c:ee:82:e4:58:ea:05:6d: c3:e3:45:71:77:71:8c:a8:24:8d:2b:77:3c:3f:ac: 3e:92:b7:60:99:6f:72:21:bb:19:a7:ee:11:ba:c0: f7:f2:13:39:34:30:b1:7b:44:ed:a0:d2:a4:36:41: 33:78:d1:d1:18:a9:67:13:af:31:24:81:e7:fa:5f: 49:80:7a:7f:e3:70:5b:61:f1:ec:d5:96:26:52:20: 32:9c:1f:83:32:ef:e4:32:9a:78:e9:f4:3b:ab:2c: 0d:30:59:40:3f:42:7e:90:d1:8e:02:60:d5:9d:83: 80:1e:42:b2:6b:cf:2b:9c:70:16:4e:4e:4d:09:3c: ea:96:5f:08:d2:9b:ce:e7:5a:21:71:f9:10:f0:9e: 98:66:54:9b:fa:df:39:92:a9:21:fc:fe:e0:dc:03: 79:01:9b:d9:f6:d5:6a:d4:26:c6:ad:5b:2c:23:8e: 0b:da:28:74:ff:11:2e:53:bb:cd:52:15:eb:ab:f2: ee:9d:00:ed:76:9f:3e:95:88:17:e0:6f:5e:31:f0: 04:e2:c2:93:34:85:a8:bc:77:b3:d4:ce:40:bc:bf: 30:81:f8:cd:d9:3c:9e:ae:c3:9c:d2:61:3d:5e:cf: ca:61:4e:87:18:a9:93:d6:66:fd:37:09:b9:19:cc: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AE:87:8C:04:F6:45:4E:FB:4D:15:C4:24:8A:EB:7F:E4:5E:49:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3bf34255-ef04-4bef-bae8-9ba2597948a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.115.128.0/18 Signature Algorithm: sha256WithRSAEncryption 6d:76:04:23:cd:16:b7:99:07:a9:e6:8c:7d:5f:b3:e4:8e:a8: 46:f1:53:18:2c:b4:03:81:8d:8e:16:ba:13:78:ec:06:e3:60: c6:41:70:f1:30:fe:49:4c:8d:05:48:12:58:c2:e5:af:e4:5a: cf:64:85:62:c0:63:f7:84:5c:40:0b:db:93:7d:b2:c8:47:5e: be:ee:b7:1f:e6:6d:e0:ac:b6:39:3d:84:d0:36:46:13:73:af: d5:63:75:6d:00:f0:f5:43:07:1c:10:6b:53:25:6d:6a:df:c8: af:30:35:96:58:d5:cb:b7:66:65:c5:f3:3f:99:a7:34:d6:d8: f8:08:1e:fa:c8:48:ad:d7:21:a1:37:bf:87:70:af:c6:9d:19: 26:d4:94:0b:2f:4b:e0:86:28:9c:7a:7a:52:bc:d9:27:e2:24: e8:40:e5:bf:42:cf:30:96:fe:c0:2e:a4:17:be:e6:d3:00:ce: 3e:2c:1f:ed:19:6e:4c:ce:fe:8b:f6:57:f2:5e:ea:5d:f6:52: b6:a5:8e:94:32:91:ba:33:64:83:cc:1e:e6:0c:62:11:4e:54: 9b:bb:57:4b:62:99:30:4d:c2:72:1c:13:7e:8a:a5:c1:b6:a9: 95:ef:ff:1b:ad:5c:5b:42:cd:c5:b6:55:ec:d2:ba:b1:47:ca: 03:1b:ac:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUK+4GZl/P3PNcqprYZ5ZIHJsBxB0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTU0MDE3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MmM2ZTAwZTliNTZkMzQ4Y2RjZDk4OGEzNjg0OGMyMjEx ZWE2NzRjODQyMzExNmY1MGRjNzEyYjcwZjk5YzJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtqpY85/Us7oLkWOoFbcPjRXF3cYyoJI0rdzw/rD6St2CZ b3Ihuxmn7hG6wPfyEzk0MLF7RO2g0qQ2QTN40dEYqWcTrzEkgef6X0mAen/jcFth 8ezVliZSIDKcH4My7+Qymnjp9DurLA0wWUA/Qn6Q0Y4CYNWdg4AeQrJrzyuccBZO Tk0JPOqWXwjSm87nWiFx+RDwnphmVJv63zmSqSH8/uDcA3kBm9n21WrUJsatWywj jgvaKHT/ES5Tu81SFeur8u6dAO12nz6ViBfgb14x8ATiwpM0hai8d7PUzkC8vzCB +M3ZPJ6uw5zSYT1ez8phTocYqZPWZv03CbkZzPrxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5q6HjAT2RU77TRXEJIrrf+ReSfYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNiZjM0MjU1LWVmMDQtNGJlZi1iYWU4LTliYTI1OTc5NDhhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNc4AwDQYJKoZIhvcNAQELBQADggEBAG12BCPNFreZB6nmjH1fs+SOqEbx UxgstAOBjY4WuhN47AbjYMZBcPEw/klMjQVIEljC5a/kWs9khWLAY/eEXEAL25N9 sshHXr7utx/mbeCstjk9hNA2RhNzr9VjdW0A8PVDBxwQa1MlbWrfyK8wNZZY1cu3 ZmXF8z+ZpzTW2PgIHvrISK3XIaE3v4dwr8adGSbUlAsvS+CGKJx6elK82SfiJOhA 5b9CzzCW/sAupBe+5tMAzj4sH+0ZbkzO/ov2V/Je6l32UraljpQykbozZIPMHuYM YhFOVJu7V0timTBNwnIcE36KpcG2qZXv/xutXFtCzcW2VezSurFHygMbrBw= -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:46 2025 by rpki-client