$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac129866-e40c-4b2b-adc8-dad9d3e140ef.roa File: ac129866-e40c-4b2b-adc8-dad9d3e140ef.roa (raw, json) Hash identifier: YZBJZRboSKhvK0JLrCUje0Arx8UrSAo+0PJJIrsTd94= Subject key identifier: 9A:11:ED:AB:1D:23:A6:96:3A:A2:06:4F:B6:31:70:65:C9:66:AF:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4ED56C96BB12F39C4294C20CDFA28492ED56530E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac129866-e40c-4b2b-adc8-dad9d3e140ef.roa Signing time: Tue 03 Jun 2025 00:50:17 +0000 ROA not before: Tue 03 Jun 2025 00:50:17 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.128.0.0/10 maxlen: 10 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d5:6c:96:bb:12:f3:9c:42:94:c2:0c:df:a2:84:92:ed:56:53:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 00:50:17 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=886db7cabf97e4501623d2af665ed7e8263af6bedf9531bddd1c427a9bf91463, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:17:53:f0:f9:fa:f3:51:ff:ea:bf:d0:69:64: 5d:9b:37:30:3b:88:e5:9a:e1:07:33:11:a1:5a:10: 29:d9:82:2f:e2:74:51:1f:68:f3:e7:01:0f:51:ad: b8:ac:95:55:55:cc:2d:79:6b:58:75:95:3a:a3:81: a2:7f:5b:04:3c:e3:aa:66:91:e4:98:3e:b4:5a:99: ce:eb:08:07:3c:0d:26:92:3b:a9:80:9b:aa:bd:27: ee:8f:c4:fa:3e:34:2d:16:0e:12:26:18:f8:68:c2: 75:15:4b:4a:cd:c0:64:55:59:85:d7:0f:f0:0c:62: 80:0a:ab:9f:18:a8:34:51:11:80:ba:0f:09:9b:c2: e2:39:7b:d0:b3:26:dd:b8:52:78:a7:0d:54:84:b5: fc:57:c3:cc:83:48:25:cd:59:35:19:e2:d4:3a:ce: 25:79:5d:cc:4f:24:99:77:1e:76:3c:00:f8:cc:9e: 66:79:91:4a:37:a2:c0:30:2c:e1:15:48:47:54:9e: 23:35:fe:e6:04:3f:68:5f:6b:02:2a:33:b5:79:e1: 54:fb:3d:1c:90:5b:1d:fc:73:c8:37:fc:8f:13:11: 76:87:07:41:7c:54:de:ed:58:17:0c:b6:2c:3e:24: e0:07:99:e1:f8:d0:06:2b:c4:f3:af:23:56:2f:6a: 8d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:11:ED:AB:1D:23:A6:96:3A:A2:06:4F:B6:31:70:65:C9:66:AF:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac129866-e40c-4b2b-adc8-dad9d3e140ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.128.0.0/10 Signature Algorithm: sha256WithRSAEncryption 9b:8a:10:3b:6a:f7:b0:70:10:0e:b9:40:4b:bf:54:f5:c8:27: a7:86:cd:47:f3:e6:1e:3b:45:1b:af:7c:ad:e7:3c:1f:91:1e: e6:c0:ae:5c:dd:60:72:ab:75:bd:7a:11:09:51:f0:07:b5:bd: 2d:2f:54:3f:1f:f2:94:7a:e2:9f:21:97:6e:7b:e5:d4:5a:03: bc:af:95:ed:b7:28:7d:ac:a7:9f:d3:aa:c0:89:2c:ba:19:28: b4:76:a3:d3:a6:e5:fc:30:ee:2d:54:78:74:7c:77:85:eb:b0: 32:28:f9:d0:51:16:d6:8b:c7:67:ba:70:c8:88:23:a6:0a:e8: 22:24:3c:a3:cd:75:11:c4:99:6f:80:0d:af:50:fb:82:8b:2e: ce:dc:44:38:38:47:cd:07:dd:aa:35:25:49:98:7f:5e:1c:93: 79:b9:85:ec:7f:69:ce:c1:e2:01:cf:31:82:f7:3b:25:38:32: 30:a0:49:fa:85:0e:d6:64:31:45:4c:15:30:cb:77:e9:71:78: 60:24:ae:dd:a7:18:dd:5c:27:a5:13:d6:07:2a:63:7f:8d:f9: 55:f5:88:2e:fa:87:5d:0f:ec:8a:c6:9b:72:21:f6:f0:42:0a: 59:f4:8e:c3:5c:5f:aa:28:8c:74:41:be:04:20:a2:fa:b6:32: dd:6b:33:fc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTtVslrsS85xClMIM36KEku1WUw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMDA1MDE3WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODZkYjdjYWJmOTdlNDUwMTYyM2QyYWY2NjVlZDdlODI2 M2FmNmJlZGY5NTMxYmRkZDFjNDI3YTliZjkxNDYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtF1Pw+frzUf/qv9BpZF2bNzA7iOWa4QczEaFaECnZgi/i dFEfaPPnAQ9RrbislVVVzC15a1h1lTqjgaJ/WwQ846pmkeSYPrRamc7rCAc8DSaS O6mAm6q9J+6PxPo+NC0WDhImGPhownUVS0rNwGRVWYXXD/AMYoAKq58YqDRREYC6 DwmbwuI5e9CzJt24UninDVSEtfxXw8yDSCXNWTUZ4tQ6ziV5XcxPJJl3HnY8APjM nmZ5kUo3osAwLOEVSEdUniM1/uYEP2hfawIqM7V54VT7PRyQWx38c8g3/I8TEXaH B0F8VN7tWBcMtiw+JOAHmeH40AYrxPOvI1Yvao11AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmhHtqx0jppY6ogZPtjFwZclmr84wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjMTI5ODY2LWU0MGMtNGIyYi1hZGM4LWRhZDlkM2UxNDBlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwYDgDANBgkqhkiG9w0BAQsFAAOCAQEAm4oQO2r3sHAQDrlAS79U9cgnp4bN R/PmHjtFG698rec8H5Ee5sCuXN1gcqt1vXoRCVHwB7W9LS9UPx/ylHrinyGXbnvl 1FoDvK+V7bcofaynn9OqwIksuhkotHaj06bl/DDuLVR4dHx3heuwMij50FEW1ovH Z7pwyIgjpgroIiQ8o811EcSZb4ANr1D7gosuztxEODhHzQfdqjUlSZh/XhyTebmF 7H9pzsHiAc8xgvc7JTgyMKBJ+oUO1mQxRUwVMMt36XF4YCSu3acY3VwnpRPWBypj f435VfWILvqHXQ/sisabciH28EIKWfSOw1xfqiiMdEG+BCCi+rYy3Wsz/A== -----END CERTIFICATE-----Generated at Sat Jun 14 05:52:53 2025 by rpki-client