$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da2f477f-89ed-4340-acad-e965e9211d56.roa File: da2f477f-89ed-4340-acad-e965e9211d56.roa (raw, json) Hash identifier: VTlNKQEtA7W6OTtxRG1bOVsAKgLqCXeC+3WjKD/G59s= Subject key identifier: 47:8D:18:EB:42:A2:79:0E:B1:94:80:76:19:59:EE:54:4D:EA:A3:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2DFF94AD91CF2C5C07F1D61908700B9585A401C1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da2f477f-89ed-4340-acad-e965e9211d56.roa Signing time: Tue 03 Jun 2025 15:11:33 +0000 ROA not before: Tue 03 Jun 2025 15:11:33 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.98.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ff:94:ad:91:cf:2c:5c:07:f1:d6:19:08:70:0b:95:85:a4:01:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:11:33 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=ac302c77a4b35554cec38501c3c888426e9555216e68736468c2fdb1501e47b3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:e7:16:7f:d3:39:f1:b1:a3:dc:b4:db:69: bc:52:d1:8d:c0:98:b1:ae:e0:88:71:9e:ad:b7:70: 4c:bf:ab:bb:b9:d3:77:dd:8d:76:fa:b2:37:c6:83: bb:c3:48:7a:21:1a:09:e3:e1:45:3a:2e:bf:c1:41: 40:35:95:2e:e6:36:91:b1:44:a8:ff:71:68:2b:df: 98:77:ec:90:cf:d4:3e:1c:42:ea:e4:92:e3:af:ac: 59:bd:3e:22:4f:90:fb:52:95:c0:aa:1b:0c:d7:ba: c3:60:92:04:12:30:ff:3b:1c:8b:93:64:d2:53:e1: 24:a0:d0:2b:f1:84:12:5a:0e:73:2b:ed:95:08:88: e0:a1:cb:6a:f6:04:9c:10:22:cf:c7:c9:10:51:76: 09:4b:e8:02:08:a4:f8:ac:9e:32:07:53:42:06:df: be:05:f7:49:37:3e:14:39:77:3f:da:bc:c8:8e:58: d2:32:f6:0f:91:32:d7:de:5a:12:e1:13:f6:ee:96: c3:3a:8c:0c:c4:a0:2d:ff:bd:19:22:62:ad:ba:e3: b1:ca:85:84:4e:21:4e:d8:f6:15:63:da:df:6b:55: f3:e4:96:db:f2:1a:29:fe:71:99:50:c3:f3:e4:8c: 56:07:1b:14:35:ad:20:0c:2e:c7:51:09:86:7c:32: 93:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8D:18:EB:42:A2:79:0E:B1:94:80:76:19:59:EE:54:4D:EA:A3:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/da2f477f-89ed-4340-acad-e965e9211d56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.98.0.0/15 Signature Algorithm: sha256WithRSAEncryption 01:38:27:03:f8:98:5f:e2:c5:7e:f7:76:a1:06:46:ba:6d:37: 17:25:15:1f:62:ee:74:3e:89:bd:b1:c3:ff:56:7e:03:bf:50: e2:49:2e:61:d0:ea:88:87:06:4b:c2:90:21:b5:1c:43:6e:41: e5:d3:29:3b:ba:ea:1a:da:9e:92:73:64:2a:7e:1a:ae:b7:77: 22:82:75:1d:aa:53:d6:c2:52:ea:5f:1a:23:b7:38:26:ef:c6: b2:09:2b:a5:41:1f:ab:18:e1:c2:a1:5a:f6:40:60:ea:74:5d: a8:54:b5:a3:34:87:34:6b:44:6f:1b:e6:cd:dd:72:4f:dc:43: 9b:72:2b:93:43:52:be:6d:ed:e5:9f:76:4c:53:d4:5e:52:13: 7b:66:7a:14:b2:1c:1d:f6:28:74:5f:99:c8:ad:ae:97:b2:b6: 3f:06:cb:f9:cf:b9:e8:97:a6:e8:f7:95:0f:d4:15:46:51:97: 0d:97:39:09:e1:e1:81:c4:44:3b:67:a9:4a:aa:43:30:b2:9e: f7:39:60:e9:f8:50:ef:82:08:ed:5b:53:f2:e5:7b:ed:11:9e: 35:d3:75:75:c5:0d:84:97:c9:90:06:9a:a7:27:a2:22:09:20: a5:04:87:c2:40:d6:5a:87:7c:8d:a8:cb:47:16:20:3f:68:41: f2:0c:c7:ac -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULf+UrZHPLFwH8dYZCHALlYWkAcEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUxMTMzWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYzMwMmM3N2E0YjM1NTU0Y2VjMzg1MDFjM2M4ODg0MjZl OTU1NTIxNmU2ODczNjQ2OGMyZmRiMTUwMWU0N2IzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQChzucWf9M58bGj3LTbabxS0Y3AmLGu4Ihxnq23cEy/q7u5 03fdjXb6sjfGg7vDSHohGgnj4UU6Lr/BQUA1lS7mNpGxRKj/cWgr35h37JDP1D4c QurkkuOvrFm9PiJPkPtSlcCqGwzXusNgkgQSMP87HIuTZNJT4SSg0CvxhBJaDnMr 7ZUIiOChy2r2BJwQIs/HyRBRdglL6AIIpPisnjIHU0IG374F90k3PhQ5dz/avMiO WNIy9g+RMtfeWhLhE/bulsM6jAzEoC3/vRkiYq2647HKhYROIU7Y9hVj2t9rVfPk ltvyGin+cZlQw/PkjFYHGxQ1rSAMLsdRCYZ8MpNPAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUR40Y60KieQ6xlIB2GVnuVE3qo1YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RhMmY0NzdmLTg5ZWQtNDM0MC1hY2FkLWU5NjVlOTIxMWQ1Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEDYjANBgkqhkiG9w0BAQsFAAOCAQEAATgnA/iYX+LFfvd2oQZGum03FyUV H2LudD6JvbHD/1Z+A79Q4kkuYdDqiIcGS8KQIbUcQ25B5dMpO7rqGtqeknNkKn4a rrd3IoJ1HapT1sJS6l8aI7c4Ju/GsgkrpUEfqxjhwqFa9kBg6nRdqFS1ozSHNGtE bxvmzd1yT9xDm3Irk0NSvm3t5Z92TFPUXlITe2Z6FLIcHfYodF+ZyK2ul7K2PwbL +c+56Jem6PeVD9QVRlGXDZc5CeHhgcREO2epSqpDMLKe9zlg6fhQ74II7VtT8uV7 7RGeNdN1dcUNhJfJkAaapyeiIgkgpQSHwkDWWod8jajLRxYgP2hB8gzHrA== -----END CERTIFICATE-----Generated at Sat Jun 14 05:53:56 2025 by rpki-client