$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/380eee99-99c9-4ca5-95e3-d588e1af6898.roa File: 380eee99-99c9-4ca5-95e3-d588e1af6898.roa (raw, json) Hash identifier: dMDiIvK60bK4pTbTKY/W3LlCkAdp7UygLbTPENGKxnc= Subject key identifier: 09:73:7B:0D:0A:5D:CE:53:C9:F5:FC:73:BB:90:33:53:55:04:C6:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 19B5BF39DAB1B54D9CEC3CA2BE4B9928B3B671B0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/380eee99-99c9-4ca5-95e3-d588e1af6898.roa Signing time: Mon 16 Jun 2025 16:31:23 +0000 ROA not before: Mon 16 Jun 2025 16:31:23 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.114.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b5:bf:39:da:b1:b5:4d:9c:ec:3c:a2:be:4b:99:28:b3:b6:71:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:31:23 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=28871b79c4bb27ecdfa94264b9e18d7f88d048bf248d6f8af424bc573161cf07, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:53:85:96:2f:18:f2:c0:f0:e5:c9:b4:bb: df:0e:31:11:22:6c:4a:5b:89:ae:fe:05:d1:53:68: b1:2e:0e:6e:90:6f:4b:1e:da:74:99:d5:82:b4:ed: 09:1a:60:5d:71:82:fc:ba:a1:38:c5:2a:f5:0c:4a: 18:85:da:b0:ea:b3:16:47:a5:77:c5:0f:0c:21:9b: d4:08:3d:88:51:10:22:22:b0:ca:a3:d7:30:67:d0: 31:10:4c:26:db:26:05:61:bb:74:04:2a:ad:d8:46: a7:df:94:4b:08:91:c6:2f:7c:4a:fb:00:bb:ac:1e: fd:1a:d9:47:5d:f0:c8:1f:75:02:67:9a:a8:72:e8: 7c:31:95:22:53:49:0d:08:8f:d4:f6:84:55:a1:5f: 53:c3:8b:8b:5d:7e:07:ee:ba:44:85:bc:b2:2b:f7: 0b:b6:1c:ac:03:f8:59:0a:f3:5c:33:3c:16:55:f3: 88:c5:7c:95:50:ed:de:97:e9:c4:f6:89:4c:fe:93: ed:91:ef:d1:6f:98:31:36:e0:ac:56:a0:e2:58:54: 0f:45:b9:29:8e:5b:42:a7:4b:53:a8:30:bc:e4:21: 2d:71:ab:41:1b:8d:a4:7d:09:0d:8f:68:66:6e:92: 50:e8:ac:60:4a:82:4d:59:a2:01:e8:04:aa:7f:a0: 95:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:73:7B:0D:0A:5D:CE:53:C9:F5:FC:73:BB:90:33:53:55:04:C6:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/380eee99-99c9-4ca5-95e3-d588e1af6898.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.114.192.0/18 Signature Algorithm: sha256WithRSAEncryption 97:11:1d:30:47:83:b5:c5:9d:36:98:16:de:1e:79:7f:e3:e8: 54:c2:30:82:68:f8:a8:83:6b:da:1a:d4:72:d9:f9:ca:60:43: c3:a9:f7:37:60:ec:7c:19:36:a7:99:32:cb:c2:ff:f4:70:9c: f2:af:56:70:32:48:10:3e:77:1c:24:e5:43:b6:c7:62:59:e1: 24:05:9f:11:19:4c:1f:a8:fe:27:e0:18:5b:f0:27:34:23:55: 98:a1:de:2a:15:f9:24:29:fd:52:9d:8f:1f:76:22:98:57:7e: 37:f2:e6:09:7f:55:e6:c0:10:b8:c0:3a:d6:2f:9f:56:ce:ab: 59:0f:fa:00:a5:66:07:7d:fd:f4:89:3f:ff:7d:71:26:8f:57: fa:b2:e5:06:26:25:c3:1d:28:6e:b6:68:fc:ed:9c:3d:d1:0f: 92:97:c6:4b:1c:53:b3:e6:33:cb:7d:a7:c1:18:fd:06:41:be: 3f:1c:8f:64:49:2d:41:42:e6:f0:16:5f:00:36:d8:78:c1:84: 15:cd:51:7d:15:7f:ca:09:04:90:5d:59:e8:07:d8:e6:ff:2f: 0e:ee:1e:86:4c:79:74:f4:97:fe:ec:c0:9f:82:25:52:7c:f8: 20:39:3d:8a:ef:19:08:48:f7:d8:b1:39:c0:cd:40:f6:ab:ef: 0a:56:7f:ba -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGbW/OdqxtU2c7DyivkuZKLO2cbAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYzMTIzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyODg3MWI3OWM0YmIyN2VjZGZhOTQyNjRiOWUxOGQ3Zjg4 ZDA0OGJmMjQ4ZDZmOGFmNDI0YmM1NzMxNjFjZjA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCvRFOFli8Y8sDw5cm0u98OMREibEpbia7+BdFTaLEuDm6Q b0se2nSZ1YK07QkaYF1xgvy6oTjFKvUMShiF2rDqsxZHpXfFDwwhm9QIPYhRECIi sMqj1zBn0DEQTCbbJgVhu3QEKq3YRqfflEsIkcYvfEr7ALusHv0a2Udd8MgfdQJn mqhy6HwxlSJTSQ0Ij9T2hFWhX1PDi4tdfgfuukSFvLIr9wu2HKwD+FkK81wzPBZV 84jFfJVQ7d6X6cT2iUz+k+2R79FvmDE24KxWoOJYVA9FuSmOW0KnS1OoMLzkIS1x q0EbjaR9CQ2PaGZuklDorGBKgk1ZogHoBKp/oJW/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCXN7DQpdzlPJ9fxzu5AzU1UExn0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4MGVlZTk5LTk5YzktNGNhNS05NWUzLWQ1ODhlMWFmNjg5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNcsAwDQYJKoZIhvcNAQELBQADggEBAJcRHTBHg7XFnTaYFt4eeX/j6FTC MIJo+KiDa9oa1HLZ+cpgQ8Op9zdg7HwZNqeZMsvC//RwnPKvVnAySBA+dxwk5UO2 x2JZ4SQFnxEZTB+o/ifgGFvwJzQjVZih3ioV+SQp/VKdjx92IphXfjfy5gl/VebA ELjAOtYvn1bOq1kP+gClZgd9/fSJP/99cSaPV/qy5QYmJcMdKG62aPztnD3RD5KX xkscU7PmM8t9p8EY/QZBvj8cj2RJLUFC5vAWXwA22HjBhBXNUX0Vf8oJBJBdWegH 2Ob/Lw7uHoZMeXT0l/7swJ+CJVJ8+CA5PYrvGQhI99ixOcDNQPar7wpWf7o= -----END CERTIFICATE-----Generated at Sun Jun 29 03:48:53 2025 by rpki-client