$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90f25062-dd29-4e47-9fe1-d1c03db8865d.roa File: 90f25062-dd29-4e47-9fe1-d1c03db8865d.roa (raw, json) Hash identifier: LYEShOVQtX5iGs95BKSY7tzUYb2cl/3YnPcNaP1OVAE= Subject key identifier: AC:E8:8F:AE:1A:9C:0B:D4:1D:67:C2:F4:D8:CF:2B:0C:B4:E7:42:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B16E243594CC5CA542CB7D7A536CB4A59BECAD9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90f25062-dd29-4e47-9fe1-d1c03db8865d.roa Signing time: Tue 03 Jun 2025 00:51:06 +0000 ROA not before: Tue 03 Jun 2025 00:51:06 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.248.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:16:e2:43:59:4c:c5:ca:54:2c:b7:d7:a5:36:cb:4a:59:be:ca:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 00:51:06 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=b6db08631f595306c02475744dc7f8da97b807442cfec35fcc2c1f3b344fed0f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d1:b4:23:b4:da:3e:18:c9:ef:8c:dc:5a:29: da:e9:0a:0b:2b:5a:51:65:bd:30:f9:4c:1f:75:ee: 40:88:4f:02:af:d3:8b:be:55:13:54:9c:57:42:c8: d5:ea:8a:29:02:6f:a9:99:0f:9d:51:98:3e:31:60: 31:39:ed:d1:ab:6d:cd:c8:b7:38:35:a6:1f:2e:53: ac:08:c3:6c:31:35:40:69:40:8f:6c:ff:d5:b0:93: f4:3e:6c:f8:e2:ea:3c:62:c1:5e:a8:ec:86:6f:c7: 0b:6b:1a:7d:db:18:43:b6:ea:b9:4f:47:b2:83:b5: c0:6b:d6:2d:be:08:f4:4e:69:89:93:6a:10:97:af: 0a:9f:84:23:55:b2:e2:b7:b1:05:63:ab:cf:90:f0: 4d:b2:52:9f:bc:48:ab:1e:04:3b:39:f7:02:b9:9c: 35:64:03:32:7d:7c:9c:68:c5:4d:83:c2:43:78:9e: 45:9c:8b:28:e6:d9:ff:f4:ee:49:7a:66:a2:4a:35: 3e:f8:dd:45:18:29:25:54:5b:11:96:d9:c2:76:dd: 66:0e:be:9e:0d:83:66:c3:46:db:5e:89:89:e0:57: 72:d8:23:b4:da:39:2c:2a:d5:13:ec:7b:ae:2a:f9: f6:76:d8:23:b8:cf:64:4d:60:99:a4:d9:8a:13:a7: fb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E8:8F:AE:1A:9C:0B:D4:1D:67:C2:F4:D8:CF:2B:0C:B4:E7:42:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90f25062-dd29-4e47-9fe1-d1c03db8865d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.248.242.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:0b:92:7a:ee:3d:02:2b:02:4f:a8:6e:8f:93:dd:91:21:ad: fb:8c:a3:e1:90:ee:f7:71:a4:7a:d3:43:74:25:05:ac:20:8d: dd:d3:c1:57:e5:4f:75:2e:0d:dd:5f:81:7e:03:fd:4c:69:19: a2:0c:9f:0f:0b:64:9b:f6:77:f6:ea:a5:72:79:78:62:55:c0: 3c:87:a7:b8:6e:3f:2b:f5:f3:df:de:0b:41:4e:85:46:30:bc: be:fa:7d:8d:af:44:eb:d2:99:71:46:a4:75:a7:9b:fa:f8:55: 55:d9:95:f5:42:fb:94:52:4f:c6:c7:2f:ad:47:82:47:5b:d3: 03:8e:c2:6c:0f:0b:01:38:c6:2c:31:11:68:47:65:c7:84:6b: 5f:7e:f4:10:a3:90:08:c3:59:8b:a0:51:1c:55:01:90:8c:63: 08:2a:29:80:c2:09:dc:e9:02:35:36:9a:9a:fe:a3:94:d1:39: cb:92:94:23:75:0c:dc:00:64:f3:32:8f:ad:f7:c2:3f:56:ef: e7:6b:e1:71:de:70:09:7b:3f:1c:bc:2a:7e:cd:b0:d7:69:85: 19:fc:fa:8e:ac:91:78:46:f6:73:a8:4b:c5:32:98:b2:79:b6: 0e:8d:44:f0:72:8f:f8:0e:c2:cb:c7:73:2b:ff:2d:92:a6:97: 92:a9:a8:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKxbiQ1lMxcpULLfXpTbLSlm+ytkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMDA1MTA2WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BiNmRiMDg2MzFmNTk1MzA2YzAyNDc1NzQ0ZGM3ZjhkYTk3 YjgwNzQ0MmNmZWMzNWZjYzJjMWYzYjM0NGZlZDBmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx0bQjtNo+GMnvjNxaKdrpCgsrWlFlvTD5TB917kCITwKv 04u+VRNUnFdCyNXqiikCb6mZD51RmD4xYDE57dGrbc3Itzg1ph8uU6wIw2wxNUBp QI9s/9Wwk/Q+bPji6jxiwV6o7IZvxwtrGn3bGEO26rlPR7KDtcBr1i2+CPROaYmT ahCXrwqfhCNVsuK3sQVjq8+Q8E2yUp+8SKseBDs59wK5nDVkAzJ9fJxoxU2DwkN4 nkWciyjm2f/07kl6ZqJKNT743UUYKSVUWxGW2cJ23WYOvp4Ng2bDRtteiYngV3LY I7TaOSwq1RPse64q+fZ22CO4z2RNYJmk2YoTp/srAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrOiPrhqcC9QdZ8L02M8rDLTnQgIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkwZjI1MDYyLWRkMjktNGU0Ny05ZmUxLWQxYzAzZGI4ODY1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAED+PIwDQYJKoZIhvcNAQELBQADggEBAFoLknruPQIrAk+obo+T3ZEhrfuM o+GQ7vdxpHrTQ3QlBawgjd3TwVflT3UuDd1fgX4D/UxpGaIMnw8LZJv2d/bqpXJ5 eGJVwDyHp7huPyv189/eC0FOhUYwvL76fY2vROvSmXFGpHWnm/r4VVXZlfVC+5RS T8bHL61Hgkdb0wOOwmwPCwE4xiwxEWhHZceEa19+9BCjkAjDWYugURxVAZCMYwgq KYDCCdzpAjU2mpr+o5TROcuSlCN1DNwAZPMyj633wj9W7+dr4XHecAl7Pxy8Kn7N sNdphRn8+o6skXhG9nOoS8UymLJ5tg6NRPByj/gOwsvHcyv/LZKml5KpqIQ= -----END CERTIFICATE-----Generated at Sat Jun 14 06:07:24 2025 by rpki-client