$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa File: ac4b4084-36eb-4ac1-b740-50f184325fd8.roa (raw, json) Hash identifier: WO4S3Lfm5koCxvGMdbI1M38i73A9zHv0eeQ+fxTBwMY= Subject key identifier: 2C:62:A4:E7:99:A9:83:E6:06:AA:87:1C:65:57:3C:0B:70:06:E8:A1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 420EAA8D3DA8FD36447FA2F4ED92BBC5E3442460 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa Signing time: Tue 20 May 2025 16:50:14 +0000 ROA not before: Tue 20 May 2025 16:50:14 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.90.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0e:aa:8d:3d:a8:fd:36:44:7f:a2:f4:ed:92:bb:c5:e3:44:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 16:50:14 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=4dd6791751fbc3e001bee4d12e31577a8d539040ee9de879a2b91135d15fa6d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:03:49:38:0d:62:53:32:8f:8d:8e:32:36: a5:cf:d7:9c:f4:60:93:b5:79:34:f8:00:19:6c:b0: d9:3a:e6:9b:59:da:2b:c4:ae:bb:b9:d3:62:ef:64: 83:37:26:31:20:4f:f5:ad:ef:cb:43:88:c7:3e:b0: 6c:7c:39:ac:5b:74:68:b0:7f:7c:ea:d4:d0:10:01: 93:83:2e:39:11:7f:db:f2:5c:32:af:12:0e:45:5c: 85:a8:92:bb:06:8a:cb:a1:a0:26:f2:c2:43:bf:ac: cc:6c:c6:e0:b6:a8:7e:4e:21:69:e0:2a:61:49:ab: 01:be:a7:4c:4c:65:6e:39:d6:08:a9:df:cc:99:83: b5:8b:4a:7d:a9:85:46:51:5c:e6:5f:8a:c8:24:5e: 7e:a8:f4:f8:96:62:e9:98:60:a1:89:4c:3b:13:dc: 3e:72:15:32:6b:82:49:69:f5:73:5d:e1:31:76:6d: 93:29:11:37:31:db:4e:21:9f:88:2e:4b:93:6d:ff: 5f:c8:f9:7c:8a:e1:ac:c5:b0:f7:5b:10:42:aa:04: 25:a4:fe:79:da:cb:b4:1c:2e:9d:b8:0d:de:de:29: c2:ee:2c:f1:ce:3f:10:52:3a:57:d4:c1:84:06:5f: 0c:db:2b:5a:e8:99:75:84:52:bb:15:5a:33:bb:e6: 8a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:62:A4:E7:99:A9:83:E6:06:AA:87:1C:65:57:3C:0B:70:06:E8:A1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.90.0.0/16 Signature Algorithm: sha256WithRSAEncryption 63:c8:fc:9e:fb:45:5c:94:0b:b5:1d:d6:e1:ff:27:05:bf:3f: 33:fa:58:e8:77:56:43:8f:31:42:a4:d0:18:ec:bd:09:d1:ec: f7:26:87:96:37:e8:ce:17:f4:3f:48:c2:a3:e3:fb:c7:20:4f: 0e:46:a6:2e:ad:57:0e:c5:51:95:d7:3b:eb:bd:93:99:e6:86: d9:b8:1d:7f:99:6b:a0:f2:77:b9:ca:33:c7:a1:83:19:c5:4e: 0d:f9:61:41:c5:bd:26:8c:49:32:a8:8c:86:90:a0:d2:8d:c4: f8:8a:a7:19:59:08:6b:7b:46:e4:7a:e8:b9:c6:15:bc:9f:eb: 82:f7:fd:73:02:e6:9d:67:72:28:58:47:0f:63:c3:3a:7d:0d: 0e:51:9b:71:6a:db:72:03:33:19:e5:10:d0:3a:8a:d7:5a:2e: 5b:28:7a:c3:c9:29:4a:c5:58:31:99:1a:36:24:77:89:77:e6: 56:38:6a:65:24:f9:4e:72:de:61:53:b9:c1:df:75:d3:4c:56: 88:e2:95:ca:20:34:6d:c9:13:f7:b6:b6:3a:60:f0:88:e1:ef: fa:6f:cf:51:e4:6b:ed:ed:ec:b7:b4:1a:47:b5:5d:3d:cd:c9: 89:c0:ce:14:77:d3:59:3b:89:a0:7a:4e:27:20:66:e0:ac:e4: 04:73:b3:40 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQg6qjT2o/TZEf6L07ZK7xeNEJGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTY1MDE0WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZGQ2NzkxNzUxZmJjM2UwMDFiZWU0ZDEyZTMxNTc3YThk NTM5MDQwZWU5ZGU4NzlhMmI5MTEzNWQxNWZhNmQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNtQNJOA1iUzKPjY4yNqXP15z0YJO1eTT4ABlssNk65ptZ 2ivErru502LvZIM3JjEgT/Wt78tDiMc+sGx8OaxbdGiwf3zq1NAQAZODLjkRf9vy XDKvEg5FXIWokrsGisuhoCbywkO/rMxsxuC2qH5OIWngKmFJqwG+p0xMZW451gip 38yZg7WLSn2phUZRXOZfisgkXn6o9PiWYumYYKGJTDsT3D5yFTJrgklp9XNd4TF2 bZMpETcx204hn4guS5Nt/1/I+XyK4azFsPdbEEKqBCWk/nnay7QcLp24Dd7eKcLu LPHOPxBSOlfUwYQGXwzbK1romXWEUrsVWjO75ooDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQULGKk55mpg+YGqoccZVc8C3AG6KEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjNGI0MDg0LTM2ZWItNGFjMS1iNzQwLTUwZjE4NDMyNWZkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASWjANBgkqhkiG9w0BAQsFAAOCAQEAY8j8nvtFXJQLtR3W4f8nBb8/M/pY 6HdWQ48xQqTQGOy9CdHs9yaHljfozhf0P0jCo+P7xyBPDkamLq1XDsVRldc7672T meaG2bgdf5lroPJ3ucozx6GDGcVODflhQcW9JoxJMqiMhpCg0o3E+IqnGVkIa3tG 5HroucYVvJ/rgvf9cwLmnWdyKFhHD2PDOn0NDlGbcWrbcgMzGeUQ0DqK11ouWyh6 w8kpSsVYMZkaNiR3iXfmVjhqZST5TnLeYVO5wd9100xWiOKVyiA0bckT97a2OmDw iOHv+m/PUeRr7e3st7QaR7VdPc3JicDOFHfTWTuJoHpOJyBm4KzkBHOzQA== -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:45 2025 by rpki-client