$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/914f6f5f-75bc-47f1-8c60-8a8ce67efc07.roa File: 914f6f5f-75bc-47f1-8c60-8a8ce67efc07.roa (raw, json) Hash identifier: hEmJJsMskQxl4StLvvfZH6vbRof8eIFbrnmPWIBHi5I= Subject key identifier: 9A:44:37:6B:DC:94:7E:84:23:0D:E2:F7:28:8F:CC:B6:25:02:48:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 06CD46B7A169E47963E7F57BB39DAD5E9DC4A99F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/914f6f5f-75bc-47f1-8c60-8a8ce67efc07.roa Signing time: Tue 20 May 2025 16:31:54 +0000 ROA not before: Tue 20 May 2025 16:31:54 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.141.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:cd:46:b7:a1:69:e4:79:63:e7:f5:7b:b3:9d:ad:5e:9d:c4:a9:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 16:31:54 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=c310393b034c11aa7d9304d41e9ac73df56e3166ed3da15a9f23bc0a9398544d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b2:96:2c:26:80:7f:7e:74:53:b1:45:43:46: 86:dc:14:36:29:3e:da:bd:6d:2c:d7:0e:fc:4c:ed: 57:df:57:08:be:7e:8a:eb:83:14:11:98:5e:43:4c: 93:3b:f1:76:1d:80:42:37:7a:41:b1:a5:16:56:19: 38:ac:b5:22:fb:6f:95:f6:11:4b:34:45:6d:b0:50: 06:da:aa:7c:50:8a:7c:bc:4c:4e:6c:f7:96:08:12: c0:43:84:2c:13:ab:05:7b:93:f6:ee:f5:6c:9f:63: a1:45:2e:61:a3:3e:31:66:fa:61:47:cc:dd:b7:99: 34:0a:37:aa:c2:34:98:03:9f:7c:54:83:13:75:58: 50:3e:73:86:c3:d8:49:03:45:2f:ce:a8:88:13:ce: 73:50:4b:c5:70:a3:e5:0b:3e:b4:25:0b:bd:59:14: b0:33:15:b5:14:b6:c9:40:04:4a:b0:38:eb:55:1e: f3:89:7e:57:81:99:a5:0f:9d:d2:24:59:0b:6b:25: 6f:51:6b:a0:58:83:df:97:3a:5f:b3:5e:a4:29:ea: 59:b1:c8:f3:62:1e:c7:fc:dd:e4:19:ae:df:94:8b: d7:d8:18:f7:53:17:06:cd:15:79:02:2a:43:68:6a: 41:aa:fd:bd:c4:c9:7e:b0:63:7a:72:22:f3:79:3c: 41:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:44:37:6B:DC:94:7E:84:23:0D:E2:F7:28:8F:CC:B6:25:02:48:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/914f6f5f-75bc-47f1-8c60-8a8ce67efc07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.141.226.0/23 Signature Algorithm: sha256WithRSAEncryption 72:5e:64:73:1c:76:0e:61:c3:85:27:28:b1:e0:64:20:b2:f1: d8:c4:97:80:dd:d5:e2:3a:96:0c:17:ac:60:c3:d8:c4:0b:28: 6f:db:b6:8c:52:7b:50:b5:8f:42:2b:5d:44:46:f9:8e:c3:4c: ba:11:14:0c:45:09:68:ac:9b:89:86:4e:8e:60:24:29:8c:e4: fd:c5:28:fc:8a:e1:ee:ca:5a:c6:46:3e:fc:e9:ec:55:a0:50: c0:3d:a3:39:f7:00:7a:c8:73:94:d5:52:64:db:b9:e0:57:aa: bf:e0:c8:6f:c5:eb:3a:ba:56:80:3e:7e:3d:fa:c4:92:51:0e: da:e2:c5:98:69:b7:fd:6f:84:41:16:73:cc:d9:c2:51:a7:b1: 72:d2:37:df:b8:f0:38:b6:df:5f:01:42:42:6d:c0:e1:8d:d2: 6d:ad:04:c2:b5:82:6a:9a:f6:ce:68:a5:c0:1d:56:2b:87:55: 48:fb:39:a8:39:df:2e:d3:29:ea:04:df:8e:e7:a1:b5:b3:c5: 75:60:33:af:bd:20:a3:95:cf:0a:3e:97:04:a3:b8:91:43:84: c1:26:af:19:92:c4:ca:f1:58:8b:c5:af:2e:a9:40:86:01:6e: 48:cc:e3:d9:b6:91:57:39:e5:d0:8e:df:4c:5a:12:7a:5d:cc: ed:9a:08:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBs1Gt6Fp5Hlj5/V7s52tXp3EqZ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTYzMTU0WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMzEwMzkzYjAzNGMxMWFhN2Q5MzA0ZDQxZTlhYzczZGY1 NmUzMTY2ZWQzZGExNWE5ZjIzYmMwYTkzOTg1NDRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPspYsJoB/fnRTsUVDRobcFDYpPtq9bSzXDvxM7VffVwi+ forrgxQRmF5DTJM78XYdgEI3ekGxpRZWGTistSL7b5X2EUs0RW2wUAbaqnxQiny8 TE5s95YIEsBDhCwTqwV7k/bu9WyfY6FFLmGjPjFm+mFHzN23mTQKN6rCNJgDn3xU gxN1WFA+c4bD2EkDRS/OqIgTznNQS8Vwo+ULPrQlC71ZFLAzFbUUtslABEqwOOtV HvOJfleBmaUPndIkWQtrJW9Ra6BYg9+XOl+zXqQp6lmxyPNiHsf83eQZrt+Ui9fY GPdTFwbNFXkCKkNoakGq/b3EyX6wY3pyIvN5PEGlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmkQ3a9yUfoQjDeL3KI/MtiUCSOQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkxNGY2ZjVmLTc1YmMtNDdmMS04YzYwLThhOGNlNjdlZmMwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAESjeIwDQYJKoZIhvcNAQELBQADggEBAHJeZHMcdg5hw4UnKLHgZCCy8djE l4Dd1eI6lgwXrGDD2MQLKG/btoxSe1C1j0IrXURG+Y7DTLoRFAxFCWism4mGTo5g JCmM5P3FKPyK4e7KWsZGPvzp7FWgUMA9ozn3AHrIc5TVUmTbueBXqr/gyG/F6zq6 VoA+fj36xJJRDtrixZhpt/1vhEEWc8zZwlGnsXLSN9+48Di2318BQkJtwOGN0m2t BMK1gmqa9s5opcAdViuHVUj7Oag53y7TKeoE347nobWzxXVgM6+9IKOVzwo+lwSj uJFDhMEmrxmSxMrxWIvFry6pQIYBbkjM49m2kVc55dCO30xaEnpdzO2aCAE= -----END CERTIFICATE-----Generated at Sat Jun 14 06:05:18 2025 by rpki-client