$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/962a97b8-aceb-40a5-bf34-ae02e5895d46.roa File: 962a97b8-aceb-40a5-bf34-ae02e5895d46.roa (raw, json) Hash identifier: BXY3PesgFJ9FF2Y4f6zZDB3A02JW6yVYhsqybuvc7nM= Subject key identifier: 70:01:9A:FD:30:10:B7:11:DF:CF:7B:77:61:8C:7E:37:5A:B2:DA:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09C8981F85F1AE5FB77350E60FABBF7F4EF4C6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/962a97b8-aceb-40a5-bf34-ae02e5895d46.roa Signing time: Tue 03 Jun 2025 15:10:32 +0000 ROA not before: Tue 03 Jun 2025 15:10:32 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.248.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:c8:98:1f:85:f1:ae:5f:b7:73:50:e6:0f:ab:bf:7f:4e:f4:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:10:32 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=48e762fb3acfd97fda6e068296a95b06e208ec16f47badf835d056b8c59b167f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ae:f7:b4:1e:c4:ce:10:9a:d3:cf:c7:17:22: 0a:98:43:62:a2:58:f5:db:34:12:13:9a:10:0a:13: 93:9a:c8:37:5b:5f:4b:42:ee:75:1f:ad:51:73:1c: b0:7d:3d:87:e1:a8:05:3f:ae:cf:6c:64:70:3c:27: d2:83:e7:a9:f4:fe:fe:59:35:2e:ef:fa:a2:24:84: 39:2f:8d:46:64:89:0f:41:bf:25:fb:cc:3f:03:9c: a5:ec:20:25:43:df:c3:7d:1d:77:66:66:3b:4c:6e: d2:dc:4d:25:1a:0f:cd:dc:3f:51:c1:87:e9:e7:c1: 36:90:ec:44:27:6d:8d:84:2d:e9:b8:25:c5:c9:26: 9f:58:21:81:4c:9d:5c:ea:52:4f:a9:d1:97:25:d8: 43:6d:36:64:02:ac:4e:ef:95:08:a4:0d:7f:8d:d9: e5:ad:09:3b:6f:1b:dd:be:05:ab:90:3a:23:af:ad: de:ea:96:68:80:5b:90:bf:1a:01:ed:cc:f0:a2:89: a3:f7:66:31:fb:fe:da:e0:ad:5f:d7:5a:65:18:11: 53:7c:96:dd:04:fa:42:9a:c4:f4:f4:0a:f9:2a:81: 27:68:9f:bb:d8:23:3c:4e:4b:7b:71:6e:f2:b9:7f: 53:21:8a:5a:1e:4b:4a:69:b0:a4:1c:2b:f1:f2:68: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:9A:FD:30:10:B7:11:DF:CF:7B:77:61:8C:7E:37:5A:B2:DA:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/962a97b8-aceb-40a5-bf34-ae02e5895d46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.248.0.0/13 Signature Algorithm: sha256WithRSAEncryption 41:6e:11:2b:05:61:63:01:ed:89:27:10:80:f0:6c:d5:74:bd: 24:83:6f:d3:93:ea:9a:85:0a:85:5a:73:68:3d:e5:29:c7:66: f7:6e:08:52:95:9c:ae:a5:2c:78:41:49:d6:78:70:ee:51:cf: 19:bd:08:5c:ba:e6:99:b1:3e:ad:f7:f2:8f:23:da:1e:88:aa: d3:13:58:5b:3b:60:ff:d1:c4:a3:3f:39:77:66:a9:7d:56:07: 9b:c9:eb:c1:3f:da:e8:9a:48:f0:16:ae:52:52:ae:93:aa:60: a2:e8:bd:03:63:cb:0c:46:2e:bd:75:9a:04:45:16:a1:52:25: 47:ac:f3:3e:e5:e2:93:03:b8:39:c4:fa:fa:4b:de:83:c7:7e: bf:bc:47:e1:d5:68:03:c2:33:92:eb:d8:11:2a:78:4c:6f:21: 24:80:20:aa:20:fe:7f:eb:1e:16:b6:45:c5:61:c7:a1:c1:c3: 86:2a:14:81:d0:fc:5e:30:19:8a:66:ce:1b:ce:97:57:8d:51: ca:81:a7:1a:cf:62:3e:3b:9d:7f:be:72:4e:ad:68:a3:17:50: b7:8c:7c:3f:fa:dc:a7:4e:14:e6:04:a0:db:25:43:13:0c:64: 42:c1:69:be:1f:c8:85:02:85:ae:0a:74:50:56:87:32:4e:5f: ff:45:6a:68 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITCciYH4Xxrl+3c1DmD6u/f070xjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MDMxNTEwMzJaFw0yNTA3MDgyMzU5NTla MHoxSTBHBgNVBAUTQDQ4ZTc2MmZiM2FjZmQ5N2ZkYTZlMDY4Mjk2YTk1YjA2ZTIw OGVjMTZmNDdiYWRmODM1ZDA1NmI4YzU5YjE2N2YxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL+u97QexM4QmtPPxxciCphDYqJY9ds0EhOaEAoTk5rIN1tf S0LudR+tUXMcsH09h+GoBT+uz2xkcDwn0oPnqfT+/lk1Lu/6oiSEOS+NRmSJD0G/ JfvMPwOcpewgJUPfw30dd2ZmO0xu0txNJRoPzdw/UcGH6efBNpDsRCdtjYQt6bgl xckmn1ghgUydXOpST6nRlyXYQ202ZAKsTu+VCKQNf43Z5a0JO28b3b4Fq5A6I6+t 3uqWaIBbkL8aAe3M8KKJo/dmMfv+2uCtX9daZRgRU3yW3QT6QprE9PQK+SqBJ2if u9gjPE5Le3Fu8rl/UyGKWh5LSmmwpBwr8fJovQMCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBRwAZr9MBC3Ed/Pe3dhjH43WrLa/zAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvOTYyYTk3YjgtYWNlYi00MGE1LWJmMzQtYWUwMmU1ODk1ZDQ2LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAwP4MA0GCSqGSIb3DQEBCwUAA4IBAQBBbhErBWFjAe2JJxCA8GzVdL0kg2/T k+qahQqFWnNoPeUpx2b3bghSlZyupSx4QUnWeHDuUc8ZvQhcuuaZsT6t9/KPI9oe iKrTE1hbO2D/0cSjPzl3Zql9VgebyevBP9romkjwFq5SUq6TqmCi6L0DY8sMRi69 dZoERRahUiVHrPM+5eKTA7g5xPr6S96Dx36/vEfh1WgDwjOS69gRKnhMbyEkgCCq IP5/6x4WtkXFYcehwcOGKhSB0PxeMBmKZs4bzpdXjVHKgacaz2I+O51/vnJOrWij F1C3jHw/+tynThTmBKDbJUMTDGRCwWm+H8iFAoWuCnRQVocyTl//RWpo -----END CERTIFICATE-----Generated at Sat Jun 14 05:57:00 2025 by rpki-client