$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/485009d1-d135-4106-a876-5dd2f923a157.roa File: 485009d1-d135-4106-a876-5dd2f923a157.roa (raw, json) Hash identifier: 2IRpJxdWLUTaNQHhRcA7IcsaxycLaEQCBXUYHNU4uuk= Subject key identifier: 2B:7B:EB:48:E0:47:31:BD:58:68:6F:32:1A:ED:FF:F2:08:E1:3C:80 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46328ED7EBFC2F2A09F708A4CE02B8A5555E4A3C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/485009d1-d135-4106-a876-5dd2f923a157.roa Signing time: Mon 02 Jun 2025 16:00:29 +0000 ROA not before: Mon 02 Jun 2025 16:00:29 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.210.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:32:8e:d7:eb:fc:2f:2a:09:f7:08:a4:ce:02:b8:a5:55:5e:4a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 2 16:00:29 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=e3b4ef0dad7901a520b0ed7a53052b86536f1ec576721b3a2d65d842006f5e5a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:da:1e:49:a3:08:a4:7b:8d:d2:77:d3:d8: 64:07:d3:17:49:f8:b8:da:f6:a7:5a:67:50:db:e2: 01:a8:1b:93:4b:96:9a:e1:d9:98:98:cc:06:aa:97: a3:dc:7b:73:90:ec:50:6d:9e:e7:1a:1c:13:11:90: 42:91:65:3a:47:5d:c4:03:bf:17:0e:4f:4f:13:40: d2:0b:d3:9b:db:72:71:a9:36:6b:35:33:9f:19:50: 4b:da:c5:32:60:eb:11:7b:00:7b:27:fc:1e:4f:b4: aa:b7:6e:6d:9d:c8:6e:df:d4:09:63:75:1c:29:eb: fa:46:0b:2c:1e:0c:78:a1:6e:e8:ea:85:4a:61:4a: b4:4a:b1:55:c9:a8:75:3e:8e:bf:94:f3:ba:7c:f9: f6:0d:47:b3:91:39:ef:43:b5:b8:84:3e:8d:b3:27: bd:59:ab:02:02:71:fe:a0:9b:2b:b4:1a:5e:d8:9d: f2:34:0e:bf:57:25:48:6e:ff:82:fb:6a:a2:35:29: 9f:b8:b0:e4:f3:a7:c1:f1:6d:49:16:01:b4:89:7d: c1:75:28:b0:f9:d0:25:97:c1:5a:d5:92:5a:6b:15: 3f:84:ca:f0:48:8c:fe:6a:0e:4f:52:ec:b2:b6:58: 06:fe:8d:0d:51:b5:f9:ff:12:a2:ee:50:38:92:95: 93:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:EB:48:E0:47:31:BD:58:68:6F:32:1A:ED:FF:F2:08:E1:3C:80 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/485009d1-d135-4106-a876-5dd2f923a157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.210.0.0/15 Signature Algorithm: sha256WithRSAEncryption 29:a8:bc:f9:02:6c:35:81:7e:2b:84:55:0d:28:e8:09:9f:e3: de:cc:33:45:4f:81:5c:ac:60:5a:bf:30:9c:63:63:4e:e3:ef: 09:a2:90:4f:38:4b:da:1e:d5:45:56:61:a0:a5:4a:41:a2:81: 0c:1f:6e:b5:66:c5:02:0e:fa:b7:5d:08:ee:0d:30:1f:6b:8c: ad:68:7d:b0:d3:9e:b2:91:eb:a0:78:71:d0:80:49:2a:6d:af: 64:f0:5a:4e:23:ad:c7:d6:d9:d9:9a:e3:a6:02:aa:c2:fc:78: 21:d2:07:ca:73:88:b0:80:13:1e:90:5e:4e:f4:59:c3:39:9e: ac:84:76:18:79:31:c5:ba:9b:94:b3:3f:c8:1c:8d:8b:8c:e9: 19:c4:4f:bc:4c:26:a5:5b:da:c3:49:da:9f:2f:02:f4:32:d5: 76:6a:a1:ef:60:7c:65:ed:eb:5d:ae:79:a1:cb:9f:0d:c0:dc: 1c:e6:fa:56:f8:3a:98:bd:83:92:c6:4d:47:05:b9:bc:82:9b: 93:3e:d4:b2:60:e9:7f:5b:c4:a3:82:62:4e:18:d9:60:40:bb: b7:6a:98:03:3a:af:bd:6d:c9:da:87:89:12:79:4c:d5:bf:15: aa:4f:07:be:15:1c:0c:70:e4:2a:dd:79:6b:a4:22:88:e1:87: 3c:4c:3e:7c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURjKO1+v8LyoJ9wikzgK4pVVeSjwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAyMTYwMDI5WhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlM2I0ZWYwZGFkNzkwMWE1MjBiMGVkN2E1MzA1MmI4NjUz NmYxZWM1NzY3MjFiM2EyZDY1ZDg0MjAwNmY1ZTVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD3doeSaMIpHuN0nfT2GQH0xdJ+Lja9qdaZ1Db4gGoG5NL lprh2ZiYzAaql6Pce3OQ7FBtnucaHBMRkEKRZTpHXcQDvxcOT08TQNIL05vbcnGp Nms1M58ZUEvaxTJg6xF7AHsn/B5PtKq3bm2dyG7f1AljdRwp6/pGCyweDHihbujq hUphSrRKsVXJqHU+jr+U87p8+fYNR7OROe9DtbiEPo2zJ71ZqwICcf6gmyu0Gl7Y nfI0Dr9XJUhu/4L7aqI1KZ+4sOTzp8HxbUkWAbSJfcF1KLD50CWXwVrVklprFT+E yvBIjP5qDk9S7LK2WAb+jQ1Rtfn/EqLuUDiSlZMTAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUK3vrSOBHMb1YaG8yGu3/8gjhPIAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ4NTAwOWQxLWQxMzUtNDEwNi1hODc2LTVkZDJmOTIzYTE1Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEN0jANBgkqhkiG9w0BAQsFAAOCAQEAKai8+QJsNYF+K4RVDSjoCZ/j3swz RU+BXKxgWr8wnGNjTuPvCaKQTzhL2h7VRVZhoKVKQaKBDB9utWbFAg76t10I7g0w H2uMrWh9sNOespHroHhx0IBJKm2vZPBaTiOtx9bZ2ZrjpgKqwvx4IdIHynOIsIAT HpBeTvRZwzmerIR2GHkxxbqblLM/yByNi4zpGcRPvEwmpVvaw0nany8C9DLVdmqh 72B8Ze3rXa55ocufDcDcHOb6Vvg6mL2DksZNRwW5vIKbkz7UsmDpf1vEo4JiThjZ YEC7t2qYAzqvvW3J2oeJEnlM1b8Vqk8HvhUcDHDkKt15a6QiiOGHPEw+fA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:16:24 2025 by rpki-client