$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ddac45-6ff3-44c5-b626-9a354eb9d483.roa File: 00ddac45-6ff3-44c5-b626-9a354eb9d483.roa (raw, json) Hash identifier: fKFqRWrfd996UkVLYqUHVpMHNBVgAL3oVu+6+Mjxujg= Subject key identifier: 2D:DD:36:DF:C7:F4:46:83:0A:61:F7:84:20:BB:91:BD:E4:E1:54:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08B34D680A002682270C6D70231470A8066101A5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ddac45-6ff3-44c5-b626-9a354eb9d483.roa Signing time: Tue 03 Jun 2025 15:01:21 +0000 ROA not before: Tue 03 Jun 2025 15:01:21 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.248.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b3:4d:68:0a:00:26:82:27:0c:6d:70:23:14:70:a8:06:61:01:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:01:21 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=2d49c882f92a251b782e5c3acb6a3f31d185a41ca4186b8fe38d4199119eeef2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:d0:c8:c9:17:42:85:17:5a:6e:4e:6c:95: 1b:3a:38:ec:fe:b0:1e:05:42:29:54:67:6e:58:21: 6b:05:72:c9:f3:f3:e8:72:50:85:a9:f4:42:f8:6c: f6:5e:15:63:9b:45:66:b5:61:0a:2e:63:1d:6b:dd: 04:52:c9:8e:51:51:39:12:7b:10:da:73:c8:7f:6d: 8f:2a:02:2d:82:5c:e2:99:6e:cc:ad:f9:6b:b2:2a: ba:1f:f2:a5:13:52:d3:4f:d7:ab:69:7e:99:18:10: 56:02:79:11:92:26:5d:7f:d1:a3:47:7f:df:d3:0d: 9d:c7:61:26:98:13:42:ad:3f:01:60:ce:62:f9:27: b4:b0:6d:c4:22:9b:92:99:c1:4a:1f:df:12:63:d5: 29:78:db:cd:71:b0:59:ae:ed:04:ed:ba:ea:ff:2e: c8:95:b2:26:87:ec:c9:fd:f3:5f:57:62:89:75:fb: 9b:94:65:ac:a9:50:78:a6:43:26:45:99:f0:f0:3a: 99:dd:02:aa:d0:96:93:69:54:ae:ec:dc:be:18:96: 2d:a2:bb:d5:5f:d4:4f:14:15:a7:43:43:09:6b:43: 60:49:32:ac:e0:1e:52:fc:a5:9e:e0:d4:3a:e7:a4: 25:cd:73:6d:d4:36:17:f1:b2:85:82:3f:c1:c8:f3: bd:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:DD:36:DF:C7:F4:46:83:0A:61:F7:84:20:BB:91:BD:E4:E1:54:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ddac45-6ff3-44c5-b626-9a354eb9d483.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.248.128.0/18 Signature Algorithm: sha256WithRSAEncryption 95:57:21:43:28:51:17:3c:73:3f:23:d4:ba:2a:5e:71:e7:5e: 6f:54:69:a9:71:bb:9c:46:7e:24:bc:ed:0e:3d:57:d9:14:28: 9c:68:84:35:11:b0:2e:e3:09:cd:96:99:87:89:ff:49:01:90: 23:4c:14:11:23:86:e7:ea:28:81:2e:ef:8d:e3:45:f0:84:d2: a5:e5:03:01:c0:58:42:98:88:af:72:41:90:a5:f1:8b:32:7a: de:45:74:05:98:74:71:d9:e6:f9:e4:d2:4e:0b:cb:0d:47:94: 68:9f:d0:09:71:69:10:86:4f:1b:cf:f7:a7:48:61:4d:05:4f: 80:95:aa:d7:f2:99:20:69:3b:a9:b0:d0:b5:d8:ad:39:3d:39: 78:e1:5f:a1:9a:49:16:62:ad:c3:95:24:ec:47:ac:20:22:c0: ed:5d:93:8d:09:9a:ab:4c:d1:7a:43:f0:ea:fc:59:9d:39:5f: 23:be:0f:cf:e3:7f:ea:b9:5e:3b:5b:35:ba:4e:40:e3:f9:ff: 2d:d9:96:be:a8:cf:c2:42:06:ba:93:c7:30:f1:95:c4:6d:fd: 58:87:92:bf:b7:37:62:ae:00:a5:ac:7d:13:09:bf:60:fb:1a: 5f:f8:14:45:d7:a1:f4:a2:b4:f2:43:4d:6d:9b:00:0c:6a:a4: 2e:f2:35:97 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCLNNaAoAJoInDG1wIxRwqAZhAaUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUwMTIxWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDQ5Yzg4MmY5MmEyNTFiNzgyZTVjM2FjYjZhM2YzMWQx ODVhNDFjYTQxODZiOGZlMzhkNDE5OTExOWVlZWYyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVI9DIyRdChRdabk5slRs6OOz+sB4FQilUZ25YIWsFcsnz 8+hyUIWp9EL4bPZeFWObRWa1YQouYx1r3QRSyY5RUTkSexDac8h/bY8qAi2CXOKZ bsyt+WuyKrof8qUTUtNP16tpfpkYEFYCeRGSJl1/0aNHf9/TDZ3HYSaYE0KtPwFg zmL5J7SwbcQim5KZwUof3xJj1Sl4281xsFmu7QTtuur/LsiVsiaH7Mn9819XYol1 +5uUZaypUHimQyZFmfDwOpndAqrQlpNpVK7s3L4Yli2iu9Vf1E8UFadDQwlrQ2BJ MqzgHlL8pZ7g1DrnpCXNc23UNhfxsoWCP8HI870LAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULd0238f0RoMKYfeEILuRveThVB8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAwZGRhYzQ1LTZmZjMtNDRjNS1iNjI2LTlhMzU0ZWI5ZDQ4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYD+IAwDQYJKoZIhvcNAQELBQADggEBAJVXIUMoURc8cz8j1LoqXnHnXm9U aalxu5xGfiS87Q49V9kUKJxohDURsC7jCc2WmYeJ/0kBkCNMFBEjhufqKIEu743j RfCE0qXlAwHAWEKYiK9yQZCl8Ysyet5FdAWYdHHZ5vnk0k4Lyw1HlGif0AlxaRCG TxvP96dIYU0FT4CVqtfymSBpO6mw0LXYrTk9OXjhX6GaSRZircOVJOxHrCAiwO1d k40JmqtM0XpD8Or8WZ05XyO+D8/jf+q5XjtbNbpOQOP5/y3Zlr6oz8JCBrqTxzDx lcRt/ViHkr+3N2KuAKWsfRMJv2D7Gl/4FEXXofSitPJDTW2bAAxqpC7yNZc= -----END CERTIFICATE-----Generated at Sun Jun 29 02:58:47 2025 by rpki-client