$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa File: 63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa (raw, json) Hash identifier: dh7xGOPLwHsGH8+KtiN85uar823bKHQVjJYSL+nmAzo= Subject key identifier: B0:65:F1:BB:C3:C2:C8:87:B2:8B:59:73:13:7F:9B:C7:B4:07:DA:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 025BFBE522060A71CD7FCC45AB3EC350E0E4E01A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa Signing time: Fri 06 Jun 2025 00:51:23 +0000 ROA not before: Fri 06 Jun 2025 00:51:23 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 8987 IP address blocks: 3.32.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:5b:fb:e5:22:06:0a:71:cd:7f:cc:45:ab:3e:c3:50:e0:e4:e0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 00:51:23 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=e58469f4e36982e48868159eb5eb367b1e637f1311bb2a5591b28ac9e10074ad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a8:a5:dd:bf:96:1e:97:34:5d:70:12:f6:c9: 5e:58:0b:04:f5:1e:77:99:ea:00:1a:4b:7f:47:ba: 70:a3:6c:a3:3c:67:5d:ff:e9:4b:35:00:d1:77:7f: fd:51:60:a9:f4:44:10:ff:4a:92:65:29:23:39:25: 21:b3:cc:79:1b:c2:74:c1:1e:34:b0:61:cc:77:a8: 5a:67:be:5d:e0:33:ec:b6:f0:77:cf:34:0d:29:01: 0d:7c:6f:a4:0d:25:c1:d1:56:57:9f:d4:0d:ae:75: 32:b5:cf:21:ea:6f:e6:d9:b9:c9:bc:2e:a9:85:c9: 4e:e5:1f:d2:d8:85:9a:7f:50:e6:cd:4e:29:21:09: 96:ee:02:3b:07:c2:23:73:3f:e6:66:c7:c1:76:b9: 6c:91:ce:9c:b7:ee:f9:87:19:6b:5c:c6:1c:1e:88: 5d:c2:e9:2d:77:72:e6:6f:b0:68:95:b5:a1:48:f9: e1:6f:a4:48:25:e0:f6:57:00:9d:b9:1c:ea:97:c8: a3:eb:bd:fe:78:2e:69:24:60:a7:18:2a:ed:97:73: 28:a5:ff:70:84:32:12:ae:63:ff:b1:fa:38:0e:45: 26:d1:a3:7c:7c:76:83:a7:a3:26:c7:6d:ff:1d:9c: d3:2b:4f:c4:89:c3:22:00:f9:df:6a:58:00:2a:bb: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:65:F1:BB:C3:C2:C8:87:B2:8B:59:73:13:7F:9B:C7:B4:07:DA:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.32.0.0/16 Signature Algorithm: sha256WithRSAEncryption 59:81:d4:f8:2a:32:54:0b:b3:a8:7d:7b:b4:e1:89:56:fa:5c: ba:32:65:7a:6c:d0:1f:c7:e6:b8:16:e8:7e:ff:5e:3a:6f:66: b9:b4:ec:25:fb:82:88:a9:a4:76:45:11:0c:c3:31:db:81:15: 18:df:e4:62:a5:7a:7f:ff:6d:79:f3:11:d5:01:ae:30:70:64: 3d:ed:8c:48:c3:00:6b:ed:c6:40:64:eb:fb:cf:bc:b4:ac:74: 18:c0:49:2d:56:43:ca:e1:6c:00:90:ef:d2:27:d8:cc:ea:38: 41:90:46:03:ea:a5:d2:ff:13:0e:8b:35:47:a0:d9:97:29:6b: d6:14:b0:dd:08:1b:bb:af:ba:88:ae:68:10:a5:10:50:e6:aa: d8:07:f2:3b:32:60:f7:c4:5f:c2:a3:b8:57:d1:db:ea:2e:01: 92:1a:33:c9:cb:0a:8d:a7:13:73:56:73:8a:62:82:82:ff:ce: 37:50:45:4b:dc:08:3c:0a:8d:ad:3c:1e:5c:8e:be:1b:68:e8: 32:78:bd:75:c2:00:86:23:e2:60:d0:a2:8a:38:13:1f:69:33: 2f:6b:80:0b:8a:2a:8e:68:14:c6:eb:1a:bb:78:7a:f0:f9:e8: d0:44:ef:3d:c2:56:59:10:e9:5f:3d:a0:45:fd:0d:6b:7d:ca: 81:37:00:b6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAlv75SIGCnHNf8xFqz7DUODk4BowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MDA1MTIzWhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTg0NjlmNGUzNjk4MmU0ODg2ODE1OWViNWViMzY3YjFl NjM3ZjEzMTFiYjJhNTU5MWIyOGFjOWUxMDA3NGFkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBqKXdv5YelzRdcBL2yV5YCwT1HneZ6gAaS39HunCjbKM8 Z13/6Us1ANF3f/1RYKn0RBD/SpJlKSM5JSGzzHkbwnTBHjSwYcx3qFpnvl3gM+y2 8HfPNA0pAQ18b6QNJcHRVlef1A2udTK1zyHqb+bZucm8LqmFyU7lH9LYhZp/UObN TikhCZbuAjsHwiNzP+Zmx8F2uWyRzpy37vmHGWtcxhweiF3C6S13cuZvsGiVtaFI +eFvpEgl4PZXAJ25HOqXyKPrvf54LmkkYKcYKu2Xcyil/3CEMhKuY/+x+jgORSbR o3x8doOnoybHbf8dnNMrT8SJwyIA+d9qWAAqu+J1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsGXxu8PCyIeyi1lzE3+bx7QH2lswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYzZGEyN2EwLWI1NjktNGEzZS04ZjRmLWJmMmIxMjQ0NWUwYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwADIDANBgkqhkiG9w0BAQsFAAOCAQEAWYHU+CoyVAuzqH17tOGJVvpcujJl emzQH8fmuBbofv9eOm9mubTsJfuCiKmkdkURDMMx24EVGN/kYqV6f/9tefMR1QGu MHBkPe2MSMMAa+3GQGTr+8+8tKx0GMBJLVZDyuFsAJDv0ifYzOo4QZBGA+ql0v8T Dos1R6DZlylr1hSw3Qgbu6+6iK5oEKUQUOaq2AfyOzJg98RfwqO4V9Hb6i4Bkhoz ycsKjacTc1ZzimKCgv/ON1BFS9wIPAqNrTweXI6+G2joMni9dcIAhiPiYNCiijgT H2kzL2uAC4oqjmgUxusau3h68Pno0ETvPcJWWRDpXz2gRf0Na33KgTcAtg== -----END CERTIFICATE-----Generated at Sun Jun 15 19:27:08 2025 by rpki-client