$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/525c9cd3-23c6-4487-859c-d061cf5c11cd.roa File: 525c9cd3-23c6-4487-859c-d061cf5c11cd.roa (raw, json) Hash identifier: XFJB/Suj8y7tjSrM5iwjp5OXYsWTPesniIT1v7g/VYg= Subject key identifier: 40:E7:3F:8E:EB:5D:A6:05:16:BD:56:57:0B:4B:95:77:17:AA:CD:29 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A0BD3396B00DE3802102918C12EF3384CD39755 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/525c9cd3-23c6-4487-859c-d061cf5c11cd.roa Signing time: Fri 06 Jun 2025 00:41:45 +0000 ROA not before: Fri 06 Jun 2025 00:41:45 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.3.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0b:d3:39:6b:00:de:38:02:10:29:18:c1:2e:f3:38:4c:d3:97:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 00:41:45 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=0339da91c2a964e94ec999c069874bd39fe0caaca27f53550f4288aa4f860e3d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:f1:d7:56:5c:92:fa:aa:6b:ee:dc:e6:28: de:4a:71:13:27:7e:6c:99:7e:c9:fc:7f:0f:6a:f5: 49:76:4b:bd:e9:d6:8e:e4:3c:d7:21:57:bb:a2:44: 5b:83:14:df:5f:27:d7:f2:76:97:11:37:63:ab:99: ee:5f:11:cd:6a:43:01:7b:4d:00:23:f5:af:93:f7: c2:cd:9a:d5:8f:59:8d:a1:6a:a5:bd:d3:99:11:e2: 62:2c:5f:40:ed:86:0d:07:0d:5d:cd:03:8c:77:1f: b1:ac:2b:11:40:09:7b:b0:d3:cd:b4:92:c8:9a:88: d2:94:4d:42:a8:44:6b:16:64:fa:26:f8:e7:92:a0: fb:20:c2:7f:13:88:ae:6a:8c:4d:04:dd:73:55:cb: 5f:25:55:f4:b5:f4:95:b5:55:f1:84:72:e4:b5:cf: 91:e2:96:32:e1:eb:35:87:17:9e:4f:08:56:4d:85: e1:03:79:f3:39:8b:01:7f:b9:41:1b:c6:3c:8e:8c: 7e:ad:45:96:21:4c:f2:11:a5:7d:0b:a8:af:4e:84: d2:c0:20:8e:5c:67:db:5e:7a:00:d4:d5:70:dc:df: 50:e3:1b:96:2a:0e:36:db:7c:1b:ed:3e:18:4c:bd: 2f:b9:b5:e9:0e:5c:0c:9e:0c:c6:58:3f:2b:b7:fd: a9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:3F:8E:EB:5D:A6:05:16:BD:56:57:0B:4B:95:77:17:AA:CD:29 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/525c9cd3-23c6-4487-859c-d061cf5c11cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.3.5.0/24 Signature Algorithm: sha256WithRSAEncryption 49:bb:0c:35:b9:1c:b0:ea:f7:c0:96:b6:dc:30:20:dc:b5:ae: 69:b3:20:a4:c7:88:92:8e:da:bd:c4:cd:54:ca:01:8d:c8:e6: e3:af:34:2d:d5:b2:8d:b8:3e:70:50:60:41:c4:3f:a5:48:6b: 28:62:a2:8d:1e:6d:94:f3:50:8e:82:fb:20:75:d3:b8:eb:e5: 05:54:78:6e:2b:46:4f:35:54:06:8e:47:e6:44:fa:5d:95:a7: 67:af:c6:bb:72:27:61:2e:f3:2e:60:bb:6e:47:54:c6:f5:18: bb:a4:02:79:dc:0f:12:a4:f4:b7:f0:f9:14:74:a8:41:51:0e: b5:70:66:10:09:f7:1e:69:47:79:9d:c1:e3:b4:c2:04:c3:83: 4a:02:67:97:13:1b:28:72:4d:cd:72:f6:f7:8a:44:db:10:f7: 4b:99:b2:93:3e:c9:bd:4b:31:d8:14:67:94:43:aa:ad:79:7f: bf:bb:5e:31:e9:98:33:c8:6b:42:ac:d6:7a:8e:67:74:09:35: d8:f9:02:de:37:2d:bd:fe:3b:db:ea:40:db:26:6e:ce:ec:31: 71:d4:22:ab:b6:45:a3:55:f1:c9:fe:96:c2:bf:41:82:cc:84: 0b:9a:d4:ee:a1:04:f1:b6:e4:4a:f0:ed:d3:c2:99:76:12:48: 5b:00:fe:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUegvTOWsA3jgCECkYwS7zOEzTl1UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MDA0MTQ1WhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMzM5ZGE5MWMyYTk2NGU5NGVjOTk5YzA2OTg3NGJkMzlm ZTBjYWFjYTI3ZjUzNTUwZjQyODhhYTRmODYwZTNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx0/HXVlyS+qpr7tzmKN5KcRMnfmyZfsn8fw9q9Ul2S73p 1o7kPNchV7uiRFuDFN9fJ9fydpcRN2Orme5fEc1qQwF7TQAj9a+T98LNmtWPWY2h aqW905kR4mIsX0Dthg0HDV3NA4x3H7GsKxFACXuw0820ksiaiNKUTUKoRGsWZPom +OeSoPsgwn8TiK5qjE0E3XNVy18lVfS19JW1VfGEcuS1z5HiljLh6zWHF55PCFZN heEDefM5iwF/uUEbxjyOjH6tRZYhTPIRpX0LqK9OhNLAII5cZ9teegDU1XDc31Dj G5YqDjbbfBvtPhhMvS+5tekOXAyeDMZYPyu3/akbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQOc/jutdpgUWvVZXC0uVdxeqzSkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUyNWM5Y2QzLTIzYzYtNDQ4Ny04NTljLWQwNjFjZjVjMTFjZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAwUwDQYJKoZIhvcNAQELBQADggEBAEm7DDW5HLDq98CWttwwINy1rmmz IKTHiJKO2r3EzVTKAY3I5uOvNC3Vso24PnBQYEHEP6VIayhioo0ebZTzUI6C+yB1 07jr5QVUeG4rRk81VAaOR+ZE+l2Vp2evxrtyJ2Eu8y5gu25HVMb1GLukAnncDxKk 9Lfw+RR0qEFRDrVwZhAJ9x5pR3mdweO0wgTDg0oCZ5cTGyhyTc1y9veKRNsQ90uZ spM+yb1LMdgUZ5RDqq15f7+7XjHpmDPIa0Ks1nqOZ3QJNdj5At43Lb3+O9vqQNsm bs7sMXHUIqu2RaNV8cn+lsK/QYLMhAua1O6hBPG25Erw7dPCmXYSSFsA/nA= -----END CERTIFICATE-----Generated at Sat Jun 14 05:58:05 2025 by rpki-client