$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1278d39-9723-48ff-ac98-cc28f9f69de0.roa File: d1278d39-9723-48ff-ac98-cc28f9f69de0.roa (raw, json) Hash identifier: LUXEEzWuMeCGTYAn7+cJ/vy4y09bZaz3Sh6dJrI1vfo= Subject key identifier: D5:CB:ED:88:13:50:1C:71:B6:20:DE:F2:48:09:70:5F:63:24:0D:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 30E90A2B636A8B1ABE1446303A8E1FC7456C04A9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1278d39-9723-48ff-ac98-cc28f9f69de0.roa Signing time: Mon 14 Apr 2025 15:40:23 +0000 ROA not before: Mon 14 Apr 2025 15:40:23 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.146.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e9:0a:2b:63:6a:8b:1a:be:14:46:30:3a:8e:1f:c7:45:6c:04:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 15:40:23 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=51d66a35c31ce5eb89fbc75a73959914c7f7b75009e970177801de6a82b99ab3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f5:b1:66:92:bc:2a:77:fe:fa:17:ee:53:c1: 27:c6:54:74:90:ac:16:ff:55:32:7a:19:80:5f:d2: d6:00:62:3b:70:09:fa:cc:cf:85:85:c0:0a:a1:cf: e0:4f:88:0c:be:b9:da:71:1a:b8:c7:40:6e:d0:d5: 10:43:25:c2:9a:83:13:03:22:d8:f7:a6:81:93:97: 97:97:5b:49:ef:03:32:cf:16:f3:43:d1:e1:31:e7: b2:7c:61:b2:b9:fc:ca:47:4d:f3:31:1b:3c:57:06: 5e:d7:d0:a9:17:2c:0d:71:fe:3c:b7:27:80:63:2c: e9:f0:aa:8d:a8:53:16:7a:22:9f:8b:76:23:d0:43: 97:af:d0:3b:c1:d9:7b:56:cf:03:b5:d8:0b:1f:d8: 0c:19:35:d4:73:40:48:ac:83:45:b7:69:89:fc:e9: 9a:5b:ea:eb:d4:44:67:1f:fd:ea:4b:a2:ed:6b:8b: cf:c3:0c:3c:55:18:4f:7f:62:1c:19:63:5f:c1:0b: 45:2d:61:45:8e:11:61:97:84:26:6d:f4:08:b6:17: 06:c6:67:98:14:8d:cc:1f:4a:ea:ec:b5:61:ab:f8: 37:36:6f:8f:c8:03:4a:06:92:71:32:fa:3e:09:58: 34:93:9a:00:ef:7f:d0:4d:00:ff:0f:5d:4d:b3:95: 24:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CB:ED:88:13:50:1C:71:B6:20:DE:F2:48:09:70:5F:63:24:0D:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d1278d39-9723-48ff-ac98-cc28f9f69de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.146.40.0/24 Signature Algorithm: sha256WithRSAEncryption 99:fe:e2:67:96:af:4b:a7:51:f5:00:da:72:c2:da:d2:12:75: a3:ed:94:0d:f1:2f:62:4d:b1:88:dc:4a:24:26:4c:87:12:ae: 09:3e:b2:d0:63:de:47:76:6e:a1:ec:fa:f0:5e:aa:a6:0a:ed: a4:3a:df:e8:b3:4d:5f:40:7b:86:72:cc:e7:9f:14:36:bb:be: 47:0a:d4:c2:b4:06:c8:e8:db:8c:8b:88:f4:07:20:92:c9:4a: 13:35:a4:af:97:21:b1:1a:76:be:d6:b0:89:8e:df:aa:f1:d8: ab:ce:2c:67:f9:e4:0d:50:80:97:a1:44:da:9d:cb:df:11:c0: f2:0b:40:d7:be:f4:a7:8f:f0:d6:17:da:d1:25:9b:19:35:9f: 47:4e:f5:61:5f:cf:1b:47:fc:c9:48:f9:1f:b4:c6:eb:ae:01: fa:56:d4:c4:34:a6:5e:4e:81:66:8d:98:96:21:a3:e2:2e:ab: 85:72:16:ea:ac:b5:f9:ec:a5:36:1a:d2:ce:c2:66:f4:32:45: c4:29:d1:92:63:68:5a:6d:56:36:e9:db:71:70:bc:72:c5:a4: 23:1c:57:28:36:d1:ee:dc:c6:f8:e8:10:a1:f4:f7:74:7d:5d: d1:fc:34:b2:e9:07:15:02:64:eb:87:bc:4d:66:41:52:19:b7: 89:39:ce:ed -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMOkKK2Nqixq+FEYwOo4fx0VsBKkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTU0MDIzWhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MWQ2NmEzNWMzMWNlNWViODlmYmM3NWE3Mzk1OTkxNGM3 ZjdiNzUwMDllOTcwMTc3ODAxZGU2YTgyYjk5YWIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCi9bFmkrwqd/76F+5TwSfGVHSQrBb/VTJ6GYBf0tYAYjtw CfrMz4WFwAqhz+BPiAy+udpxGrjHQG7Q1RBDJcKagxMDItj3poGTl5eXW0nvAzLP FvND0eEx57J8YbK5/MpHTfMxGzxXBl7X0KkXLA1x/jy3J4BjLOnwqo2oUxZ6Ip+L diPQQ5ev0DvB2XtWzwO12Asf2AwZNdRzQEisg0W3aYn86Zpb6uvURGcf/epLou1r i8/DDDxVGE9/YhwZY1/BC0UtYUWOEWGXhCZt9Ai2FwbGZ5gUjcwfSurstWGr+Dc2 b4/IA0oGknEy+j4JWDSTmgDvf9BNAP8PXU2zlSSrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1cvtiBNQHHG2IN7ySAlwX2MkDVAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QxMjc4ZDM5LTk3MjMtNDhmZi1hYzk4LWNjMjhmOWY2OWRlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADkigwDQYJKoZIhvcNAQELBQADggEBAJn+4meWr0unUfUA2nLC2tISdaPt lA3xL2JNsYjcSiQmTIcSrgk+stBj3kd2bqHs+vBeqqYK7aQ63+izTV9Ae4ZyzOef FDa7vkcK1MK0Bsjo24yLiPQHIJLJShM1pK+XIbEadr7WsImO36rx2KvOLGf55A1Q gJehRNqdy98RwPILQNe+9KeP8NYX2tElmxk1n0dO9WFfzxtH/MlI+R+0xuuuAfpW 1MQ0pl5OgWaNmJYho+Iuq4VyFuqstfnspTYa0s7CZvQyRcQp0ZJjaFptVjbp23Fw vHLFpCMcVyg20e7cxvjoEKH093R9XdH8NLLpBxUCZOuHvE1mQVIZt4k5zu0= -----END CERTIFICATE-----Generated at Sat Apr 26 15:50:14 2025 by rpki-client