$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8a74f16-64cf-41ff-8006-abd1b721116f.roa File: d8a74f16-64cf-41ff-8006-abd1b721116f.roa (raw, json) Hash identifier: Oc/wLQ2MaXrFRFPrcNyNLDDpW6nRc2Lx5shwZL81ZqM= Subject key identifier: B4:F6:34:65:70:0E:4A:DD:14:97:2B:C5:EA:21:34:74:BE:E5:E4:8E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1765682B0D3DC9B422D7A894A08D9226456A7074 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8a74f16-64cf-41ff-8006-abd1b721116f.roa Signing time: Mon 16 Jun 2025 16:41:14 +0000 ROA not before: Mon 16 Jun 2025 16:41:14 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 6167 IP address blocks: 155.146.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:65:68:2b:0d:3d:c9:b4:22:d7:a8:94:a0:8d:92:26:45:6a:70:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:41:14 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=78fc2ab3a9f768aaa9a58c2903c391eaa021785eedf2839992b879c4394f569b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3a:5d:5f:69:2f:27:bc:4b:c1:66:64:d8:05: 92:83:31:29:7b:f0:fb:85:5a:24:fb:96:c2:93:86: 4c:13:09:17:f5:bc:ac:50:54:a3:88:1f:94:c5:d3: 76:7f:87:fd:4c:e2:31:85:88:6e:a6:17:e0:29:d2: 56:8e:7f:e0:47:b4:5e:48:6e:7c:90:c9:ee:aa:31: 4e:5c:ce:4e:f4:9d:dc:33:7f:95:f1:79:6c:ea:31: 97:16:f6:79:ca:1b:55:c7:f4:03:d7:80:c2:c4:ca: ea:88:aa:14:3c:56:82:e6:c6:9b:14:b6:1b:16:73: 1e:c9:6b:f5:2e:1f:c6:be:5f:ea:c5:cc:68:5a:95: 38:fa:1f:90:a1:f1:a3:50:bf:39:40:4c:b8:fc:b5: 40:f7:36:8f:89:33:66:ea:93:6d:b5:44:6e:31:ce: f1:fe:3b:32:81:7d:7b:bb:44:99:a5:84:57:1a:86: b7:ea:15:a1:15:89:8e:e2:46:74:b4:e5:55:56:ed: e0:5c:bf:9f:37:76:4a:7d:cc:29:77:a9:1a:bc:67: ba:30:33:9d:79:47:52:ba:85:44:ea:b9:73:6a:5d: d1:36:c3:77:2e:50:49:29:19:04:af:07:7b:ce:a5: 13:d4:6f:27:6f:96:41:c9:65:3b:d1:11:0d:cb:08: 80:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F6:34:65:70:0E:4A:DD:14:97:2B:C5:EA:21:34:74:BE:E5:E4:8E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8a74f16-64cf-41ff-8006-abd1b721116f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.146.32.0/20 Signature Algorithm: sha256WithRSAEncryption 75:8f:37:f8:00:10:a9:bc:42:19:bd:91:08:f5:b1:22:c6:b8: 62:a1:1e:9a:ca:3a:96:82:05:1d:3c:92:d2:33:25:61:f9:00: 2f:c8:d2:4b:c8:d4:5e:9d:27:7a:d5:4f:5a:65:e6:43:03:eb: 6e:0b:3d:9c:77:2f:7e:21:d4:b1:a8:9d:2a:8c:39:de:ae:bb: e9:f2:a9:80:d0:6c:65:da:6e:27:2f:ce:13:0d:42:c9:53:a8: c9:19:69:2d:91:07:cd:0f:f1:fb:d4:de:a9:94:08:be:b4:65: 35:ac:35:77:ab:df:e8:e8:83:96:75:e2:3a:e6:64:66:ed:65: 97:ba:99:89:be:0e:72:69:d0:77:37:6f:3a:7e:88:3e:ed:a1: 90:ca:d8:55:ce:42:47:f1:98:f1:61:c7:3a:18:fe:95:42:49: ec:d2:3b:37:ee:ef:b4:ef:da:f4:30:9e:f7:47:99:c5:c1:19: 79:d6:22:02:8e:83:13:61:13:2b:17:20:93:30:19:c8:cc:5a: 1c:fa:43:88:72:ca:f8:45:9b:46:5c:66:2d:1e:54:86:a8:30: 31:db:86:07:69:06:e9:38:93:d6:7e:e6:1c:c2:cf:b2:d9:9f: 2c:c8:3f:f7:31:cd:7a:b8:45:fe:54:57:d1:1a:f1:76:d6:b2: c4:6f:17:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF2VoKw09ybQi16iUoI2SJkVqcHQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTY0MTE0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3OGZjMmFiM2E5Zjc2OGFhYTlhNThjMjkwM2MzOTFlYWEw MjE3ODVlZWRmMjgzOTk5MmI4NzljNDM5NGY1NjliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoOl1faS8nvEvBZmTYBZKDMSl78PuFWiT7lsKThkwTCRf1 vKxQVKOIH5TF03Z/h/1M4jGFiG6mF+Ap0laOf+BHtF5IbnyQye6qMU5czk70ndwz f5XxeWzqMZcW9nnKG1XH9APXgMLEyuqIqhQ8VoLmxpsUthsWcx7Ja/UuH8a+X+rF zGhalTj6H5Ch8aNQvzlATLj8tUD3No+JM2bqk221RG4xzvH+OzKBfXu7RJmlhFca hrfqFaEViY7iRnS05VVW7eBcv583dkp9zCl3qRq8Z7owM515R1K6hUTquXNqXdE2 w3cuUEkpGQSvB3vOpRPUbydvlkHJZTvREQ3LCIChAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtPY0ZXAOSt0UlyvF6iE0dL7l5I4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q4YTc0ZjE2LTY0Y2YtNDFmZi04MDA2LWFiZDFiNzIxMTE2Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASbkiAwDQYJKoZIhvcNAQELBQADggEBAHWPN/gAEKm8Qhm9kQj1sSLGuGKh HprKOpaCBR08ktIzJWH5AC/I0kvI1F6dJ3rVT1pl5kMD624LPZx3L34h1LGonSqM Od6uu+nyqYDQbGXabicvzhMNQslTqMkZaS2RB80P8fvU3qmUCL60ZTWsNXer3+jo g5Z14jrmZGbtZZe6mYm+DnJp0Hc3bzp+iD7toZDK2FXOQkfxmPFhxzoY/pVCSezS Ozfu77Tv2vQwnvdHmcXBGXnWIgKOgxNhEysXIJMwGcjMWhz6Q4hyyvhFm0ZcZi0e VIaoMDHbhgdpBuk4k9Z+5hzCz7LZnyzIP/cxzXq4Rf5UV9Ea8XbWssRvF0w= -----END CERTIFICATE-----Generated at Mon Jun 30 13:02:51 2025 by rpki-client