$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95363cde-c3f1-418f-9f01-814a616cfe76.roa File: 95363cde-c3f1-418f-9f01-814a616cfe76.roa (raw, json) Hash identifier: yVwyvkNooYMgU5ncqFyyqFcG+R2BwYaeHHMTXhxYp6c= Subject key identifier: 49:0D:F8:90:2A:86:E2:18:22:50:DE:8D:38:2F:29:03:A1:84:68:48 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3043830722D9C2848809D95C89B1F9A9BDD4442F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95363cde-c3f1-418f-9f01-814a616cfe76.roa Signing time: Tue 03 Jun 2025 15:10:09 +0000 ROA not before: Tue 03 Jun 2025 15:10:09 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.212.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:43:83:07:22:d9:c2:84:88:09:d9:5c:89:b1:f9:a9:bd:d4:44:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:10:09 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=ee22d9d7026f0b29a39ec76384188f693c4d4e1182d6a4120276c4452fde01ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:55:82:10:c6:1c:f7:d3:6c:c7:0a:22:c2: 7d:60:20:46:c8:f1:b1:b9:3c:60:e3:87:bb:d6:b3: 1f:e1:9d:8b:98:04:7f:29:bb:16:b6:2e:2b:25:b2: ee:d7:67:cc:67:b6:91:f1:a0:bd:61:ac:41:d6:0e: 04:a0:71:71:4d:64:2f:28:b7:90:fd:2c:3f:3d:b2: 67:ed:e8:66:5e:8f:a4:55:6e:29:4c:f2:57:59:02: e1:8a:c6:28:4b:78:16:e4:37:f1:fc:94:ba:23:4b: a8:09:09:60:ff:bb:b3:37:01:3a:ab:9a:6e:e4:c0: 77:da:2e:9e:13:85:83:39:dd:e4:89:c1:04:7a:a6: fc:a6:d8:3b:44:1c:b0:d3:df:a4:b4:33:8f:e9:c0: ac:d5:70:a2:b9:2a:a5:69:a0:c8:13:07:40:f2:0d: 0b:ac:dc:df:b0:09:b7:54:98:e9:fd:19:cd:d1:7f: c7:a2:61:0f:9e:e8:78:d8:dd:93:f7:b0:aa:32:a1: 2f:b9:9f:16:89:2b:e0:d8:05:f5:ab:ea:14:31:08: 8c:ae:0b:8d:aa:d9:f2:c0:dc:0c:55:9d:64:b7:68: 4e:6a:0e:fe:14:c9:c7:71:18:91:0d:c3:41:63:73: fb:60:db:b2:84:27:91:09:d9:2e:72:38:56:dd:c8: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0D:F8:90:2A:86:E2:18:22:50:DE:8D:38:2F:29:03:A1:84:68:48 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95363cde-c3f1-418f-9f01-814a616cfe76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.212.0.0/15 Signature Algorithm: sha256WithRSAEncryption 62:48:df:c1:1d:d3:56:bf:15:92:2a:ba:3a:8d:e9:a3:b8:17: 7f:80:45:8c:3c:65:3b:e8:30:86:a1:53:32:e6:6a:aa:f4:0a: 38:ff:b5:cb:d4:3b:e3:05:5c:a2:32:b9:af:22:18:53:8f:94: 63:d2:33:67:4f:84:96:24:cf:7d:22:cf:d5:44:14:93:78:35: 13:19:9a:8e:3c:96:55:0f:35:6b:d9:f6:7c:72:c3:d9:8c:c2: d4:5d:fe:be:35:5e:40:8b:91:6c:cc:ff:23:87:94:c8:50:7d: 15:ec:5c:a1:70:3d:2a:80:3d:26:05:58:03:bd:13:97:29:c1: b2:a2:79:1c:ec:e9:d3:84:bf:14:c1:00:ea:b9:5e:f2:8d:6c: 50:86:0d:22:bc:83:84:83:53:ce:7d:5b:28:e4:d9:25:f1:8a: 2a:95:e3:d0:99:99:89:0a:db:e9:33:36:40:a4:3e:f1:e3:72: 76:4b:d3:c6:29:da:84:b2:84:bf:87:a3:1e:54:1e:51:a1:dd: 21:d9:03:75:67:d8:c6:5a:68:28:40:bc:50:1f:81:b1:37:5d: 54:6d:cd:d2:d8:b7:d7:2f:16:70:0d:2d:2d:e0:5b:36:a6:24: 8b:ca:eb:bb:4b:7d:e8:ba:2d:7a:df:26:d7:fc:78:ca:9c:1b: 40:00:37:f3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUMEODByLZwoSICdlcibH5qb3URC8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUxMDA5WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTIyZDlkNzAyNmYwYjI5YTM5ZWM3NjM4NDE4OGY2OTNj NGQ0ZTExODJkNmE0MTIwMjc2YzQ0NTJmZGUwMWJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvmVWCEMYc99Nsxwoiwn1gIEbI8bG5PGDjh7vWsx/hnYuY BH8puxa2Lislsu7XZ8xntpHxoL1hrEHWDgSgcXFNZC8ot5D9LD89smft6GZej6RV bilM8ldZAuGKxihLeBbkN/H8lLojS6gJCWD/u7M3ATqrmm7kwHfaLp4ThYM53eSJ wQR6pvym2DtEHLDT36S0M4/pwKzVcKK5KqVpoMgTB0DyDQus3N+wCbdUmOn9Gc3R f8eiYQ+e6HjY3ZP3sKoyoS+5nxaJK+DYBfWr6hQxCIyuC42q2fLA3AxVnWS3aE5q Dv4UycdxGJENw0Fjc/tg27KEJ5EJ2S5yOFbdyI/dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUSQ34kCqG4hgiUN6NOC8pA6GEaEgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1MzYzY2RlLWMzZjEtNDE4Zi05ZjAxLTgxNGE2MTZjZmU3Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEN1DANBgkqhkiG9w0BAQsFAAOCAQEAYkjfwR3TVr8Vkiq6Oo3po7gXf4BF jDxlO+gwhqFTMuZqqvQKOP+1y9Q74wVcojK5ryIYU4+UY9IzZ0+EliTPfSLP1UQU k3g1ExmajjyWVQ81a9n2fHLD2YzC1F3+vjVeQIuRbMz/I4eUyFB9FexcoXA9KoA9 JgVYA70TlynBsqJ5HOzp04S/FMEA6rle8o1sUIYNIryDhINTzn1bKOTZJfGKKpXj 0JmZiQrb6TM2QKQ+8eNydkvTxinahLKEv4ejHlQeUaHdIdkDdWfYxlpoKEC8UB+B sTddVG3N0ti31y8WcA0tLeBbNqYki8rru0t96Lotet8m1/x4ypwbQAA38w== -----END CERTIFICATE-----Generated at Sat Jun 14 06:02:15 2025 by rpki-client