$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ecf3526-71b3-4c2f-8d48-4793c22b4fc9.roa File: 8ecf3526-71b3-4c2f-8d48-4793c22b4fc9.roa (raw, json) Hash identifier: TulU7stykpRn+dpjnbDckvK0qGptdNTzViu2tHCHGN4= Subject key identifier: 39:60:BC:A0:0B:A5:B6:DA:68:5F:04:7A:4A:AA:00:2D:4B:E3:E3:E1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 41DD7E0C62853B3C0DBD93A566F364152912902E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ecf3526-71b3-4c2f-8d48-4793c22b4fc9.roa Signing time: Tue 20 May 2025 15:40:58 +0000 ROA not before: Tue 20 May 2025 15:40:58 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 134.64.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:dd:7e:0c:62:85:3b:3c:0d:bd:93:a5:66:f3:64:15:29:12:90:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 15:40:58 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=fe9775b096530ac5008b79e19ad3c47f0fe3c1531f25defc144323ddb967998a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8e:48:ce:a9:a4:f9:57:e6:13:7e:12:da:b7: 84:49:47:ba:bd:09:45:d3:dc:a7:a0:b4:32:ad:a2: 46:ec:4a:d6:f1:c1:9d:8c:b6:db:51:44:d9:39:ec: 6b:e5:e0:46:f8:12:97:d8:5f:9c:28:46:53:32:30: 9b:01:5c:08:91:a1:9b:55:fc:7a:69:4c:1a:2f:bd: 6b:38:16:9f:11:67:c0:ed:2e:33:82:d6:68:62:3c: ad:ea:2e:50:1c:dc:0c:c7:23:26:db:16:40:ed:b1: a0:1c:b6:83:4c:ba:80:99:4f:73:88:19:0e:c0:f2: f3:2a:c2:17:c8:1f:e9:d3:18:f8:71:00:60:20:61: e1:f5:8f:e4:0b:ef:43:34:97:38:36:73:f7:cb:44: af:e9:f5:39:b0:7c:7a:d7:fe:95:7c:d4:b1:da:73: d0:4d:51:95:16:82:8a:37:6d:2a:03:ee:1f:9d:6e: 8e:4b:ab:d4:f3:79:7c:e8:da:41:a1:73:6e:f9:d3: 72:60:b6:a4:6c:db:48:a3:fc:7d:b1:5c:d9:0c:16: b1:10:95:6b:ba:49:2a:a4:3b:5b:57:f0:b1:ad:ba: 46:4a:e7:1c:ee:f8:70:7b:67:bf:41:3d:59:e6:2d: 8e:23:39:64:3a:f8:69:25:56:78:8d:d8:6f:21:65: 29:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:60:BC:A0:0B:A5:B6:DA:68:5F:04:7A:4A:AA:00:2D:4B:E3:E3:E1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ecf3526-71b3-4c2f-8d48-4793c22b4fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5e:76:5c:b3:f2:6c:91:fe:c6:a9:fc:c2:b5:b2:3e:60:d0:31: 61:88:78:dd:00:32:4b:68:14:f2:f1:59:db:51:2f:1c:87:ba: 33:16:21:3b:ab:d4:0e:3d:e1:35:dc:43:58:b6:06:1b:f8:b3: bd:42:ce:17:1e:97:30:03:f1:69:e6:29:05:3e:29:6b:1b:cc: 66:9a:f2:e1:04:ae:bb:67:90:9c:09:42:18:af:6f:29:92:59: 6d:c8:73:52:f8:de:21:a6:fe:9f:19:8f:cb:65:f8:11:3b:1d: 27:d6:19:04:2c:1f:85:cc:3c:98:32:69:b0:c7:e6:7f:77:4d: e6:64:a6:74:e8:ef:bc:f1:bf:ff:cd:68:8b:de:ba:29:85:30: e3:d3:a2:3a:92:a1:77:35:5b:a6:80:43:d3:cb:6c:89:21:f3: 05:7e:4e:23:9c:0a:0b:13:06:56:f9:77:04:57:27:c0:3f:3a: 8c:d2:98:17:3e:6f:20:50:da:ae:d1:31:ea:ef:df:83:f5:c3: 63:d3:74:8a:fb:e0:d9:a4:a1:b0:17:03:c4:25:59:f8:90:a0: c8:6b:24:03:84:92:a2:4f:a9:b7:a9:df:90:c2:34:e7:f8:1e: da:ec:46:4d:3b:bb:48:70:00:e0:96:0e:2e:4e:7f:16:9d:14: 33:0a:40:c2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQd1+DGKFOzwNvZOlZvNkFSkSkC4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTU0MDU4WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZTk3NzViMDk2NTMwYWM1MDA4Yjc5ZTE5YWQzYzQ3ZjBm ZTNjMTUzMWYyNWRlZmMxNDQzMjNkZGI5Njc5OThhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCljkjOqaT5V+YTfhLat4RJR7q9CUXT3KegtDKtokbsStbx wZ2MtttRRNk57Gvl4Eb4EpfYX5woRlMyMJsBXAiRoZtV/HppTBovvWs4Fp8RZ8Dt LjOC1mhiPK3qLlAc3AzHIybbFkDtsaActoNMuoCZT3OIGQ7A8vMqwhfIH+nTGPhx AGAgYeH1j+QL70M0lzg2c/fLRK/p9TmwfHrX/pV81LHac9BNUZUWgoo3bSoD7h+d bo5Lq9TzeXzo2kGhc27503JgtqRs20ij/H2xXNkMFrEQlWu6SSqkO1tX8LGtukZK 5xzu+HB7Z79BPVnmLY4jOWQ6+GklVniN2G8hZSkfAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUOWC8oAulttpoXwR6SqoALUvj4+EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhlY2YzNTI2LTcxYjMtNGMyZi04ZDQ4LTQ3OTNjMjJiNGZjOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCGQDANBgkqhkiG9w0BAQsFAAOCAQEAXnZcs/Jskf7GqfzCtbI+YNAxYYh4 3QAyS2gU8vFZ21EvHIe6MxYhO6vUDj3hNdxDWLYGG/izvULOFx6XMAPxaeYpBT4p axvMZpry4QSuu2eQnAlCGK9vKZJZbchzUvjeIab+nxmPy2X4ETsdJ9YZBCwfhcw8 mDJpsMfmf3dN5mSmdOjvvPG//81oi966KYUw49OiOpKhdzVbpoBD08tsiSHzBX5O I5wKCxMGVvl3BFcnwD86jNKYFz5vIFDartEx6u/fg/XDY9N0ivvg2aShsBcDxCVZ +JCgyGskA4SSok+pt6nfkMI05/ge2uxGTTu7SHAA4JYOLk5/Fp0UMwpAwg== -----END CERTIFICATE-----Generated at Sat Jun 14 05:49:31 2025 by rpki-client