$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67243aca-9f5a-4822-a70d-880eedd69366.roa File: 67243aca-9f5a-4822-a70d-880eedd69366.roa (raw, json) Hash identifier: n2FGIZRj9f1bwvEXIsbkW87yE/YqBPbD+eHUqpAuhSM= Subject key identifier: 52:D2:37:9B:55:EE:BC:83:0F:58:8D:CF:19:06:9C:58:08:65:E5:24 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D293C56474508217C89D66620A172A1903BC6ED Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67243aca-9f5a-4822-a70d-880eedd69366.roa Signing time: Mon 16 Jun 2025 16:10:22 +0000 ROA not before: Mon 16 Jun 2025 16:10:22 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 3209 IP address blocks: 15.145.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:29:3c:56:47:45:08:21:7c:89:d6:66:20:a1:72:a1:90:3b:c6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:10:22 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=498dec1133336f912fc4db1eb496ccfb2acbbe4175a23ca0e3dbaa22b663d697, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:89:a1:f7:ad:31:04:1f:06:7d:4e:93:b3:c3: f9:9f:b1:43:14:15:57:ee:73:65:00:b6:ea:c2:7a: 99:ab:2e:ee:05:72:3a:9c:a6:03:0a:cf:52:83:11: 55:08:27:4e:07:d0:38:31:bf:f9:67:0a:0d:1a:f3: d8:d9:3e:0a:db:39:d5:71:78:23:8f:cf:76:f6:49: 60:38:2d:b3:90:e4:43:d1:39:6c:ad:ec:7a:7f:3b: 5d:3f:00:3d:b0:1a:18:50:ba:d2:1e:a0:d0:10:ed: d1:b4:ad:b1:8f:c2:fb:23:fe:66:19:11:a4:67:4d: d9:d3:2b:e3:f4:93:e9:44:ba:e2:5f:38:c8:e7:07: 81:cf:30:f6:56:8c:7d:0f:d5:43:a9:e8:44:74:01: 8b:f6:e4:09:bd:f9:13:f5:e8:c6:dd:c3:1b:b4:d2: d1:a4:e7:b0:09:4a:03:22:49:61:da:35:04:f4:d6: 0c:2b:7e:4f:d5:7f:6f:43:2f:6d:70:44:4f:a8:d5: bf:94:fa:1f:06:ed:74:b1:12:5a:d1:79:5e:56:d9: ff:66:5a:82:b8:a0:85:cc:81:fd:70:90:b2:1f:fd: 9f:49:64:74:4a:3c:4c:68:59:99:0a:52:8e:b2:34: b3:7f:b0:fc:cd:89:8c:dc:12:91:62:e9:fb:33:63: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D2:37:9B:55:EE:BC:83:0F:58:8D:CF:19:06:9C:58:08:65:E5:24 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67243aca-9f5a-4822-a70d-880eedd69366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.145.0.0/23 Signature Algorithm: sha256WithRSAEncryption 93:1d:25:03:ab:64:d2:58:1d:43:c7:c5:53:81:93:28:2b:a5: b5:64:55:4d:bd:0c:e0:c5:2b:e8:27:2e:40:2a:bc:2e:d8:e8: ae:48:99:20:42:2f:56:2e:f1:48:0c:18:6c:6a:2f:fa:ee:37: 2c:d4:85:e5:06:85:04:40:c3:22:ec:51:9c:f9:ba:24:ee:42: 68:1d:b7:43:f5:e7:02:03:bd:d8:5d:55:f2:50:6a:e9:8b:31: d8:83:cc:9d:98:fd:b4:83:a6:14:f9:2f:ab:85:0a:fa:d3:31: d5:52:c0:5f:10:38:1f:ec:2d:52:b0:15:2c:4a:ef:9e:42:cf: b5:9b:44:3c:80:85:2a:aa:29:20:53:e6:36:b3:58:c5:82:d7: bd:33:5d:05:3b:53:0e:7d:1d:18:62:4f:d0:8c:8c:95:27:24: db:f6:66:f3:1b:10:58:37:d2:2f:d8:fc:7a:17:d6:1b:53:87: ab:f3:02:f4:75:5e:d8:3a:0d:58:40:1f:dd:18:b6:17:1e:39: 5a:56:72:db:cd:44:68:08:89:2e:de:7a:5a:ad:eb:01:9b:8b: 92:67:03:f6:d7:60:71:d0:86:52:cc:ea:70:37:5c:b8:58:3c: 43:60:29:68:fb:64:5a:2d:7a:a7:22:78:ac:03:f2:f8:e6:1e: d2:49:1d:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbSk8VkdFCCF8idZmIKFyoZA7xu0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYxMDIyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A0OThkZWMxMTMzMzM2ZjkxMmZjNGRiMWViNDk2Y2NmYjJh Y2JiZTQxNzVhMjNjYTBlM2RiYWEyMmI2NjNkNjk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRiaH3rTEEHwZ9TpOzw/mfsUMUFVfuc2UAturCepmrLu4F cjqcpgMKz1KDEVUIJ04H0Dgxv/lnCg0a89jZPgrbOdVxeCOPz3b2SWA4LbOQ5EPR OWyt7Hp/O10/AD2wGhhQutIeoNAQ7dG0rbGPwvsj/mYZEaRnTdnTK+P0k+lEuuJf OMjnB4HPMPZWjH0P1UOp6ER0AYv25Am9+RP16Mbdwxu00tGk57AJSgMiSWHaNQT0 1gwrfk/Vf29DL21wRE+o1b+U+h8G7XSxElrReV5W2f9mWoK4oIXMgf1wkLIf/Z9J ZHRKPExoWZkKUo6yNLN/sPzNiYzcEpFi6fszYz5pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUUtI3m1XuvIMPWI3PGQacWAhl5SQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3MjQzYWNhLTlmNWEtNDgyMi1hNzBkLTg4MGVlZGQ2OTM2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPkQAwDQYJKoZIhvcNAQELBQADggEBAJMdJQOrZNJYHUPHxVOBkygrpbVk VU29DODFK+gnLkAqvC7Y6K5ImSBCL1Yu8UgMGGxqL/ruNyzUheUGhQRAwyLsUZz5 uiTuQmgdt0P15wIDvdhdVfJQaumLMdiDzJ2Y/bSDphT5L6uFCvrTMdVSwF8QOB/s LVKwFSxK755Cz7WbRDyAhSqqKSBT5jazWMWC170zXQU7Uw59HRhiT9CMjJUnJNv2 ZvMbEFg30i/Y/HoX1htTh6vzAvR1Xtg6DVhAH90YthceOVpWctvNRGgIiS7eelqt 6wGbi5JnA/bXYHHQhlLM6nA3XLhYPENgKWj7ZFoteqcieKwD8vjmHtJJHVM= -----END CERTIFICATE-----Generated at Mon Jun 30 02:44:10 2025 by rpki-client