$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3749fa0-7766-4bf7-bc0c-28a2646268c3.roa File: c3749fa0-7766-4bf7-bc0c-28a2646268c3.roa (raw, json) Hash identifier: UnAgX7OqoWTVFWfFMoe00EQzrPMbbA0y+eGgs1/o7CA= Subject key identifier: 81:A2:20:11:51:FE:44:CB:3F:21:33:4A:A5:5F:86:FE:5D:C7:C8:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1C666C18D5101A513536608145B8611C2ADBA01C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3749fa0-7766-4bf7-bc0c-28a2646268c3.roa Signing time: Fri 06 Jun 2025 00:41:00 +0000 ROA not before: Fri 06 Jun 2025 00:41:00 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:66:6c:18:d5:10:1a:51:35:36:60:81:45:b8:61:1c:2a:db:a0:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 00:41:00 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=6a85482d59a3452fede3dd87dce449846688d429404d71b812372f49a47c8c37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9f:56:a9:ed:63:d5:b8:27:2d:ad:93:21:b8: 33:5b:fa:93:49:cf:a6:de:84:67:3a:a9:1b:7a:91: 69:ba:c5:f3:8e:ff:ce:11:88:0b:7d:bd:29:e8:e8: c2:12:3b:1d:97:33:6c:bb:2a:f8:58:67:a2:1c:85: aa:74:1f:f7:2c:3d:c8:9f:24:4a:f6:34:e3:8c:cb: b8:b5:4f:d9:8c:e7:2e:b9:9b:30:b4:2d:44:04:ca: b2:a2:69:83:4f:7f:ab:d2:c3:18:ed:a0:8a:c3:cb: 72:74:f2:b6:9b:0a:82:40:09:65:88:bf:3e:15:36: 62:b9:15:5e:d5:e7:2e:7c:d0:d7:05:4a:33:01:7c: 50:1e:02:6e:d4:17:95:92:2e:e2:03:2a:c3:5c:ca: e5:a6:64:60:0d:cf:56:8d:a2:b3:57:dc:dd:bf:bb: 1b:02:f2:57:91:0f:ae:8e:f7:6a:51:73:76:8e:f9: 9e:a2:c1:23:0d:d4:b0:87:7d:24:2c:fc:48:e2:6c: 3e:92:50:0e:09:f1:55:97:35:cd:ad:8b:84:19:f6: 19:73:b9:7e:6e:ac:72:e5:fb:60:75:f0:5f:51:9f: 44:a4:87:b6:25:c2:71:7b:64:12:1c:da:e5:58:a3: c3:fb:e3:82:4f:be:97:cc:cb:70:4d:df:7e:ae:d0: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A2:20:11:51:FE:44:CB:3F:21:33:4A:A5:5F:86:FE:5D:C7:C8:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3749fa0-7766-4bf7-bc0c-28a2646268c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.56.0/24 Signature Algorithm: sha256WithRSAEncryption 14:6c:91:41:87:be:8a:ab:7c:b1:db:41:d6:93:f9:2b:9f:82: bd:f0:c0:44:45:1f:36:54:b8:1a:72:15:62:f9:80:ed:ce:c9: 9e:d2:6b:e8:f7:a3:fb:ea:07:ac:0f:41:03:06:c7:fe:bc:37: aa:a5:0f:b3:41:d8:43:ed:27:6a:7b:b5:74:1b:86:8c:62:ac: 44:d7:bc:42:9a:35:b0:39:4a:37:63:fa:09:7a:75:f8:cf:59: e7:05:52:40:2b:56:ab:80:da:ce:3b:cf:78:83:2f:72:69:f4: a7:cb:16:cf:1f:bd:68:17:ea:36:ed:d0:be:b2:3c:55:e2:1b: c5:72:ae:ab:37:96:0e:d1:c6:e1:76:44:31:7b:15:df:62:a0: 22:41:13:c4:7f:b3:60:30:64:b6:08:38:f8:fe:5b:5f:80:e6: 0f:53:41:8e:76:3e:b7:d4:e7:0a:44:1a:98:a5:7d:40:45:10: 1b:35:6d:95:3d:22:d8:54:f7:94:a9:5f:61:96:e5:b4:65:55: 1c:eb:6d:e3:58:8b:03:9b:ce:16:77:7c:a4:8f:e8:02:f8:65: b0:11:54:54:01:00:17:49:fb:05:d9:ec:16:48:c7:a3:c0:8b: e1:94:1c:6e:4e:24:0c:51:d3:52:4d:18:66:97:20:54:68:3b: 63:c6:12:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHGZsGNUQGlE1NmCBRbhhHCrboBwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MDA0MTAwWhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTg1NDgyZDU5YTM0NTJmZWRlM2RkODdkY2U0NDk4NDY2 ODhkNDI5NDA0ZDcxYjgxMjM3MmY0OWE0N2M4YzM3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCun1ap7WPVuCctrZMhuDNb+pNJz6behGc6qRt6kWm6xfOO /84RiAt9vSno6MISOx2XM2y7KvhYZ6Ichap0H/csPcifJEr2NOOMy7i1T9mM5y65 mzC0LUQEyrKiaYNPf6vSwxjtoIrDy3J08rabCoJACWWIvz4VNmK5FV7V5y580NcF SjMBfFAeAm7UF5WSLuIDKsNcyuWmZGANz1aNorNX3N2/uxsC8leRD66O92pRc3aO +Z6iwSMN1LCHfSQs/EjibD6SUA4J8VWXNc2ti4QZ9hlzuX5urHLl+2B18F9Rn0Sk h7YlwnF7ZBIc2uVYo8P744JPvpfMy3BN336u0FQrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgaIgEVH+RMs/ITNKpV+G/l3HyEAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzNzQ5ZmEwLTc3NjYtNGJmNy1iYzBjLTI4YTI2NDYyNjhjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5jgwDQYJKoZIhvcNAQELBQADggEBABRskUGHvoqrfLHbQdaT+Sufgr3w wERFHzZUuBpyFWL5gO3OyZ7Sa+j3o/vqB6wPQQMGx/68N6qlD7NB2EPtJ2p7tXQb hoxirETXvEKaNbA5Sjdj+gl6dfjPWecFUkArVquA2s47z3iDL3Jp9KfLFs8fvWgX 6jbt0L6yPFXiG8Vyrqs3lg7RxuF2RDF7Fd9ioCJBE8R/s2AwZLYIOPj+W1+A5g9T QY52PrfU5wpEGpilfUBFEBs1bZU9IthU95SpX2GW5bRlVRzrbeNYiwObzhZ3fKSP 6AL4ZbARVFQBABdJ+wXZ7BZIx6PAi+GUHG5OJAxR01JNGGaXIFRoO2PGEq8= -----END CERTIFICATE-----Generated at Sat Jun 14 05:48:30 2025 by rpki-client