$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44cc193c-f496-451b-abe3-1e07047c6e9c.roa File: 44cc193c-f496-451b-abe3-1e07047c6e9c.roa (raw, json) Hash identifier: HEHvblKZWDsTPIjItAX401u6B1GEXReZUVb1qvqSP/8= Subject key identifier: 1E:33:CC:55:9A:4D:8A:22:86:87:C4:69:5D:78:DA:BB:DC:32:AB:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4AA6B25262A5F875B0F401699883C8DC5EF010BC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44cc193c-f496-451b-abe3-1e07047c6e9c.roa Signing time: Mon 16 Jun 2025 17:41:38 +0000 ROA not before: Mon 16 Jun 2025 17:41:38 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a6:b2:52:62:a5:f8:75:b0:f4:01:69:98:83:c8:dc:5e:f0:10:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:41:38 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=ba89109e1cb104c6f0ee7b6a3daf011eec48fbf09caa1156ef175b5dcb52b249, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:59:2e:be:da:51:8b:0f:6e:0c:37:17:8b:ed: 12:8c:e7:02:cd:4b:eb:06:f1:aa:cf:0e:8a:5f:9c: e1:39:ac:ed:68:8e:1a:d9:b5:47:bf:66:03:62:ae: 42:1c:6c:4c:55:c0:d8:e4:81:04:f5:4a:0d:c6:c3: 8b:e7:48:84:66:9c:f7:11:f6:b4:6b:71:32:44:88: 0b:0c:a9:84:6c:50:a2:51:2d:d9:77:55:84:fc:df: 91:bb:b0:6d:da:ac:31:05:75:61:e1:90:c8:6d:b6: 07:a5:dd:9a:ed:45:48:c7:9b:1d:7f:e5:74:ac:72: af:0e:6d:53:0f:cd:3f:51:c2:d8:77:6f:8f:56:6d: 90:5c:aa:2a:97:8f:ef:df:ef:4b:07:de:6b:aa:dc: eb:1c:bd:5b:ef:c4:a1:47:38:fb:9e:90:1d:56:b3: 35:91:ba:2d:95:0c:74:bd:56:23:42:0b:8b:ec:50: 5c:e7:41:be:32:f6:3a:aa:51:f1:33:c4:5b:32:bc: 3c:10:ed:2d:43:31:eb:39:eb:e2:16:16:98:2e:2d: a4:fd:2f:71:15:96:74:c7:b1:3a:ff:7a:6a:3b:06: d1:54:be:72:d4:e5:2a:54:74:93:2a:d6:39:33:87: 6e:bf:8e:d7:d7:68:ba:3a:b5:4d:ba:36:f9:66:55: f8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:33:CC:55:9A:4D:8A:22:86:87:C4:69:5D:78:DA:BB:DC:32:AB:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44cc193c-f496-451b-abe3-1e07047c6e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.58.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:09:e2:4e:2d:85:41:1d:f6:2e:4a:3a:09:e7:0d:4b:9c:a7: 3e:01:43:0f:8f:3a:61:ef:b2:c8:ed:f0:e7:ad:61:d9:07:a7: 3b:09:4d:d7:e1:35:77:fc:7f:50:4d:8b:c5:10:b2:7f:d3:06: 13:20:08:e0:7d:8b:0c:34:f8:ac:cd:07:55:4d:2f:af:bf:10: 44:49:64:4b:81:b8:87:6a:68:df:ca:50:6f:50:a4:fd:d0:e8: 57:6c:ae:31:9d:27:47:77:7a:f5:f6:19:19:a7:0c:72:ac:5f: 46:c5:0b:17:30:0d:3a:b0:aa:a2:47:9c:81:b2:52:44:75:7c: 19:24:e3:ce:40:a0:c4:1c:6f:99:f7:07:ac:a2:35:e4:e1:7a: 7d:00:8e:36:17:5a:a8:2e:ca:e5:ba:d2:6c:1b:de:6c:5d:03: 7d:fe:89:1b:33:2b:c5:0a:b5:3a:9a:74:73:4e:b0:ba:3e:14: 1a:96:cb:96:ff:0d:3f:44:f5:48:0b:fb:62:a7:75:bf:d2:22: f0:e5:b0:39:af:a8:85:fb:dd:9e:72:b1:6b:22:32:cf:5d:49: ba:3c:b1:38:4b:9a:57:8d:e3:bf:eb:a4:10:0b:6f:0b:8c:58: fb:0c:54:3b:2d:15:3e:17:08:7f:a4:19:58:9b:22:b0:92:76: 24:73:24:af -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSqayUmKl+HWw9AFpmIPI3F7wELwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc0MTM4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BiYTg5MTA5ZTFjYjEwNGM2ZjBlZTdiNmEzZGFmMDExZWVj NDhmYmYwOWNhYTExNTZlZjE3NWI1ZGNiNTJiMjQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCsWS6+2lGLD24MNxeL7RKM5wLNS+sG8arPDopfnOE5rO1o jhrZtUe/ZgNirkIcbExVwNjkgQT1Sg3Gw4vnSIRmnPcR9rRrcTJEiAsMqYRsUKJR Ldl3VYT835G7sG3arDEFdWHhkMhttgel3ZrtRUjHmx1/5XSscq8ObVMPzT9Rwth3 b49WbZBcqiqXj+/f70sH3muq3OscvVvvxKFHOPuekB1WszWRui2VDHS9ViNCC4vs UFznQb4y9jqqUfEzxFsyvDwQ7S1DMes56+IWFpguLaT9L3EVlnTHsTr/emo7BtFU vnLU5SpUdJMq1jkzh26/jtfXaLo6tU26NvlmVfhnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHjPMVZpNiiKGh8RpXXjau9wyq8AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ0Y2MxOTNjLWY0OTYtNDUxYi1hYmUzLTFlMDcwNDdjNmU5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAjowDQYJKoZIhvcNAQELBQADggEBABoJ4k4thUEd9i5KOgnnDUucpz4B Qw+POmHvssjt8OetYdkHpzsJTdfhNXf8f1BNi8UQsn/TBhMgCOB9iww0+KzNB1VN L6+/EERJZEuBuIdqaN/KUG9QpP3Q6FdsrjGdJ0d3evX2GRmnDHKsX0bFCxcwDTqw qqJHnIGyUkR1fBkk485AoMQcb5n3B6yiNeThen0AjjYXWqguyuW60mwb3mxdA33+ iRszK8UKtTqadHNOsLo+FBqWy5b/DT9E9UgL+2Kndb/SIvDlsDmvqIX73Z5ysWsi Ms9dSbo8sThLmleN47/rpBALbwuMWPsMVDstFT4XCH+kGVibIrCSdiRzJK8= -----END CERTIFICATE-----Generated at Sun Jun 29 02:38:44 2025 by rpki-client