$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a52de9c-b582-4709-85af-fe3c786c138f.roa File: 8a52de9c-b582-4709-85af-fe3c786c138f.roa (raw, json) Hash identifier: G6CXxmoUmAP2MsnKKlt+LP84YyT2ZNVurcnPGBkSLgI= Subject key identifier: 33:6E:F1:D5:8A:DA:A8:75:B5:CF:AC:35:41:A4:A2:0B:A0:DA:56:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4AA942D1CF948E6EC502E7F281E1FED2F81F892A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a52de9c-b582-4709-85af-fe3c786c138f.roa Signing time: Wed 21 May 2025 00:20:18 +0000 ROA not before: Wed 21 May 2025 00:20:18 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 151.149.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a9:42:d1:cf:94:8e:6e:c5:02:e7:f2:81:e1:fe:d2:f8:1f:89:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:20:18 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=3cf1fc3655ed80a6ec5c52fa82486d0400584a962bf75ac8a0156438ab21c567, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:e5:8b:ee:59:ad:ec:11:da:2e:cc:f6:74: 0f:5b:34:03:25:fe:75:c7:02:f4:23:65:70:a9:52: 60:4c:06:22:0c:67:7b:d4:44:19:20:ef:4c:32:82: 42:fa:67:23:35:c6:87:52:fe:e7:f7:08:b2:e5:5b: 1f:b4:e3:2c:f9:f1:92:08:9f:8c:a0:b0:20:8e:05: 2c:16:f9:ff:4a:df:1b:aa:78:01:82:83:04:62:32: 07:79:60:0f:46:5b:a6:c4:7b:1b:aa:04:61:ba:51: 7e:69:67:4b:b3:48:6f:92:3c:1b:78:51:62:6b:ad: 64:9e:bb:8f:10:b9:9f:3e:e7:d4:66:9d:20:d7:4a: 9b:13:03:a4:5a:eb:e5:6e:1f:24:e9:f0:df:55:6b: 66:25:c1:69:3a:5f:22:eb:d4:20:92:89:37:09:a1: 44:11:d3:b0:ef:43:01:31:25:56:ad:c0:3c:e0:85: bc:6b:db:9e:65:b6:df:9b:8f:1d:a8:9c:ed:d9:b6: 12:f0:a6:20:86:40:7c:df:32:9d:a3:f4:f1:52:69: 29:93:1d:71:b0:57:8b:1f:a9:9e:d1:f2:11:14:26: b3:61:0f:bd:d6:67:0c:4c:21:70:60:b5:91:e8:98: 35:c2:15:90:87:c0:d0:7b:bb:ce:e9:71:96:94:84: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6E:F1:D5:8A:DA:A8:75:B5:CF:AC:35:41:A4:A2:0B:A0:DA:56:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8a52de9c-b582-4709-85af-fe3c786c138f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.149.0.0/16 Signature Algorithm: sha256WithRSAEncryption 84:1a:9f:d7:f2:de:fd:29:98:89:07:4e:3f:c9:7a:fa:0b:e1: fc:dc:a6:ed:06:b2:dd:51:68:2d:65:65:f3:1e:f9:1f:72:63: d6:a2:f6:21:d4:e5:f6:5b:e9:04:0a:69:d9:a0:7e:59:9d:66: 2f:19:5b:21:04:57:ea:7b:d1:4d:40:fb:64:d4:ab:88:0f:21: 3f:74:29:a4:fe:24:ec:37:bd:6f:e1:ad:ef:27:91:73:f8:ac: 68:b5:75:cf:49:16:2b:a9:3b:b6:71:0a:6d:20:d8:aa:b4:f0: 50:f6:16:7f:ad:64:c8:8b:1c:8f:75:83:ba:13:90:05:62:70: c0:ce:ed:3a:4f:ed:bc:5f:31:95:84:8c:29:ad:13:9b:88:49: d0:b2:8b:2c:7d:28:4c:4c:20:7c:1e:d8:05:2c:6c:b0:de:56: 3b:b9:ce:7f:2c:d0:e6:b8:e6:e9:c3:65:9e:93:69:5b:79:b5: bf:97:d8:5f:b7:3e:47:24:e6:ff:2d:71:9b:b6:fb:22:94:5a: 53:61:96:9d:44:db:68:cc:14:34:0d:f9:43:52:ea:00:41:1f: f1:df:e5:ce:09:4e:a7:fa:03:0e:8c:d0:e1:a0:fe:8f:71:d9: c2:a0:05:1b:15:b5:90:6f:63:02:71:e6:9a:7c:c9:bd:51:1a: a6:e0:36:6c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSqlC0c+Ujm7FAufygeH+0vgfiSowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDAyMDE4WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AzY2YxZmMzNjU1ZWQ4MGE2ZWM1YzUyZmE4MjQ4NmQwNDAw NTg0YTk2MmJmNzVhYzhhMDE1NjQzOGFiMjFjNTY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEBeWL7lmt7BHaLsz2dA9bNAMl/nXHAvQjZXCpUmBMBiIM Z3vURBkg70wygkL6ZyM1xodS/uf3CLLlWx+04yz58ZIIn4ygsCCOBSwW+f9K3xuq eAGCgwRiMgd5YA9GW6bEexuqBGG6UX5pZ0uzSG+SPBt4UWJrrWSeu48QuZ8+59Rm nSDXSpsTA6Ra6+VuHyTp8N9Va2YlwWk6XyLr1CCSiTcJoUQR07DvQwExJVatwDzg hbxr255ltt+bjx2onO3ZthLwpiCGQHzfMp2j9PFSaSmTHXGwV4sfqZ7R8hEUJrNh D73WZwxMIXBgtZHomDXCFZCHwNB7u87pcZaUhCdjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUM27x1YraqHW1z6w1QaSiC6DaVlgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhNTJkZTljLWI1ODItNDcwOS04NWFmLWZlM2M3ODZjMTM4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCXlTANBgkqhkiG9w0BAQsFAAOCAQEAhBqf1/Le/SmYiQdOP8l6+gvh/Nym 7Qay3VFoLWVl8x75H3Jj1qL2IdTl9lvpBApp2aB+WZ1mLxlbIQRX6nvRTUD7ZNSr iA8hP3QppP4k7De9b+Gt7yeRc/isaLV1z0kWK6k7tnEKbSDYqrTwUPYWf61kyIsc j3WDuhOQBWJwwM7tOk/tvF8xlYSMKa0Tm4hJ0LKLLH0oTEwgfB7YBSxssN5WO7nO fyzQ5rjm6cNlnpNpW3m1v5fYX7c+RyTm/y1xm7b7IpRaU2GWnUTbaMwUNA35Q1Lq AEEf8d/lzglOp/oDDozQ4aD+j3HZwqAFGxW1kG9jAnHmmnzJvVEapuA2bA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:14 2025 by rpki-client