$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2416be88-082e-4fed-9f09-2be3e04dccfa.roa File: 2416be88-082e-4fed-9f09-2be3e04dccfa.roa (raw, json) Hash identifier: 7hfgj6MvOJLtFUjzdtpf3mDw9Mpl2g+U07XkzIgQSXM= Subject key identifier: C1:B6:1B:59:26:05:B6:B2:E2:77:5E:BD:F2:CB:4B:68:B4:81:A2:CC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0D401C735172FB94938CDC0BF51AA177532BF04D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2416be88-082e-4fed-9f09-2be3e04dccfa.roa Signing time: Fri 18 Apr 2025 15:30:18 +0000 ROA not before: Fri 18 Apr 2025 15:30:18 +0000 ROA not after: Fri 23 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.16.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:40:1c:73:51:72:fb:94:93:8c:dc:0b:f5:1a:a1:77:53:2b:f0:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 18 15:30:18 2025 GMT Not After : May 23 23:59:59 2025 GMT Subject: serialNumber=839a8648e0f0800bb8014e238ee7b71ffa2c022b1f08f0a8bbcb272e81913cc8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1b:8e:00:2e:17:8b:60:bd:21:9a:16:89:33: 99:fb:9d:5b:ad:08:87:99:30:7f:ef:70:fa:cd:45: ef:fc:74:4f:d8:67:ba:73:90:6e:cf:fe:01:24:fa: b3:e8:e6:89:4e:c5:b8:e1:64:df:06:04:ec:52:06: 28:96:22:6f:7a:33:0d:33:67:91:7d:46:d2:6f:7e: fe:3f:b5:e7:bd:58:f9:b0:0b:52:9a:b5:cf:5e:62: 81:89:76:1a:40:59:b1:b6:1a:78:6c:7c:64:86:21: 0b:bd:74:2c:31:04:04:96:d1:02:0f:37:11:10:7a: 3c:42:56:83:f7:8c:f7:19:4e:6b:54:2c:64:8e:05: 26:80:59:98:ed:97:db:4f:15:45:4a:35:ce:5e:7c: 1e:72:fd:9a:90:b2:9f:a6:cb:9f:21:54:25:dd:01: 63:ef:7e:62:56:ff:1d:f7:de:8c:35:58:7a:93:6f: f0:b5:5e:10:d4:ad:ed:6c:73:69:51:75:ee:30:01: 76:eb:7b:36:82:29:10:4c:12:24:e8:99:e9:c7:ff: ee:08:93:5b:55:9b:a4:bf:32:9f:ba:6c:30:e0:dd: 40:c4:37:17:80:78:9f:29:10:f6:71:c5:e5:e9:d1: 2b:ca:6e:17:31:77:ef:bc:84:d0:d2:d4:f9:5b:09: bc:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B6:1B:59:26:05:B6:B2:E2:77:5E:BD:F2:CB:4B:68:B4:81:A2:CC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2416be88-082e-4fed-9f09-2be3e04dccfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.16.0.0/14 Signature Algorithm: sha256WithRSAEncryption 40:f2:3f:9d:33:15:58:f5:c3:82:8e:8e:d1:c3:c2:58:94:85: a2:87:fa:6d:77:d4:d1:6f:97:71:ef:f9:c8:51:86:f7:5d:36: f0:9e:90:b2:6c:3c:f8:eb:3b:3f:12:21:a7:0d:e3:bb:ed:43: 01:95:96:91:f6:33:17:99:30:d5:a3:f9:94:30:e6:e0:76:e7: 9f:4c:07:8e:3d:e1:96:a7:90:6c:f2:72:9e:66:3b:52:a7:ef: e4:ce:ce:54:90:8f:2a:69:5d:8a:3d:95:c6:a6:05:cc:01:2a: 89:fb:9a:9c:34:34:5f:91:7f:02:8a:60:1c:8e:18:9e:bb:27: bd:90:a7:7f:a5:a6:95:ac:41:fa:67:c8:7e:e3:5c:4e:51:59: 30:a4:58:ee:1b:b6:f6:32:d7:2b:ac:ff:af:68:2b:31:16:e7: cf:6c:34:43:64:56:6b:ed:d5:1e:c3:36:59:a6:d6:87:5f:f9: ec:4e:10:85:fc:02:11:ff:eb:8e:a3:63:4b:85:a3:b7:dd:b9: 4e:82:6b:00:53:e4:b3:7b:10:df:b9:74:47:0e:76:0b:6e:d3: a6:84:3c:24:a2:95:15:01:c8:4c:67:17:5d:4f:eb:92:3b:62: b6:6e:a7:5f:9b:83:d9:65:fa:5a:95:33:48:ed:dc:68:42:54: 7a:3f:bf:c0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDUAcc1Fy+5STjNwL9Rqhd1Mr8E0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE4MTUzMDE4WhcNMjUwNTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzlhODY0OGUwZjA4MDBiYjgwMTRlMjM4ZWU3YjcxZmZh MmMwMjJiMWYwOGYwYThiYmNiMjcyZTgxOTEzY2M4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDzG44ALheLYL0hmhaJM5n7nVutCIeZMH/vcPrNRe/8dE/Y Z7pzkG7P/gEk+rPo5olOxbjhZN8GBOxSBiiWIm96Mw0zZ5F9RtJvfv4/tee9WPmw C1Katc9eYoGJdhpAWbG2GnhsfGSGIQu9dCwxBASW0QIPNxEQejxCVoP3jPcZTmtU LGSOBSaAWZjtl9tPFUVKNc5efB5y/ZqQsp+my58hVCXdAWPvfmJW/x333ow1WHqT b/C1XhDUre1sc2lRde4wAXbrezaCKRBMEiTomenH/+4Ik1tVm6S/Mp+6bDDg3UDE NxeAeJ8pEPZxxeXp0SvKbhcxd++8hNDS1PlbCbw1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwbYbWSYFtrLid1698stLaLSBoswwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0MTZiZTg4LTA4MmUtNGZlZC05ZjA5LTJiZTNlMDRkY2NmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwIDEDANBgkqhkiG9w0BAQsFAAOCAQEAQPI/nTMVWPXDgo6O0cPCWJSFoof6 bXfU0W+Xce/5yFGG91028J6Qsmw8+Os7PxIhpw3ju+1DAZWWkfYzF5kw1aP5lDDm 4Hbnn0wHjj3hlqeQbPJynmY7Uqfv5M7OVJCPKmldij2VxqYFzAEqifuanDQ0X5F/ AopgHI4YnrsnvZCnf6WmlaxB+mfIfuNcTlFZMKRY7hu29jLXK6z/r2grMRbnz2w0 Q2RWa+3VHsM2WabWh1/57E4QhfwCEf/rjqNjS4Wjt925ToJrAFPks3sQ37l0Rw52 C27TpoQ8JKKVFQHITGcXXU/rkjtitm6nX5uD2WX6WpUzSO3caEJUej+/wA== -----END CERTIFICATE-----Generated at Mon May 5 15:32:54 2025 by rpki-client