$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1416e096-7fa3-4e77-b407-49c4aeeabf06.roa File: 1416e096-7fa3-4e77-b407-49c4aeeabf06.roa (raw, json) Hash identifier: B7eR1DwpzwxAW+P1cED/wKt+n76rz32FYy92p7IeZhw= Subject key identifier: 76:94:4D:0C:8D:B4:26:2B:0C:C9:63:08:11:41:ED:D1:CE:29:B6:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 55B8862D1306F7935A32FB5F69AE458522EF577C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1416e096-7fa3-4e77-b407-49c4aeeabf06.roa Signing time: Mon 30 Jun 2025 16:21:46 +0000 ROA not before: Mon 30 Jun 2025 16:21:46 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:b8:86:2d:13:06:f7:93:5a:32:fb:5f:69:ae:45:85:22:ef:57:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:21:46 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=de71a05d9d431a9a08b049611bf5839a6daddd77e70e751ab719c08b55531afe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a0:c5:a8:0b:be:da:25:58:1a:0d:09:5e:09: a4:b6:af:95:db:1b:a9:47:d1:2a:2c:af:d6:c0:69: dc:bc:5c:75:fc:4b:0b:bf:72:4a:68:d6:c8:fe:ce: ea:ad:90:14:2a:c2:8c:b4:82:5a:d0:db:4e:5f:ee: 41:ba:db:23:06:0c:f6:6e:19:38:30:73:6b:e0:05: 87:5e:6f:f5:2f:82:6e:d6:62:ae:42:6e:ff:23:c2: af:df:45:29:54:4a:46:88:ec:cf:e8:43:16:30:7b: da:d5:cc:c1:25:b7:69:71:ce:0f:01:14:ae:ff:a6: 92:31:4b:65:ba:42:51:28:5c:6a:1a:9e:88:ad:23: e8:f3:3b:5b:7b:18:5f:9f:0b:b6:7c:f3:45:aa:bd: 77:83:3d:b9:54:c0:0f:f2:c6:5d:65:2b:00:36:cf: 78:8a:89:07:4c:68:c8:d8:59:ef:74:53:aa:06:96: a0:0a:53:08:49:2d:57:5b:c1:0b:b0:d1:fe:6e:dc: ab:e7:a5:c4:e9:b9:44:38:58:7b:88:a5:b5:d3:ba: 88:09:f4:04:3c:a2:54:af:94:1c:20:d2:cf:f8:1d: 95:be:3e:aa:70:1a:f9:01:16:69:b7:2f:2a:3b:a3: 65:9a:f2:87:9d:36:83:79:a2:45:bf:ae:19:66:27: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:94:4D:0C:8D:B4:26:2B:0C:C9:63:08:11:41:ED:D1:CE:29:B6:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1416e096-7fa3-4e77-b407-49c4aeeabf06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.156.0/23 Signature Algorithm: sha256WithRSAEncryption 82:9c:c8:15:09:7d:24:94:32:66:a5:88:9f:f9:ec:a8:e5:5e: 9b:cc:70:e6:f0:25:b9:7e:a8:47:93:db:61:69:15:11:89:9b: 79:15:99:d9:91:1d:f2:da:00:f9:d3:1e:80:63:5f:70:57:49: 3d:ad:f3:d9:8a:f0:0b:77:9f:3c:ce:92:79:71:33:69:f5:d6: 6d:aa:a0:82:3d:26:33:e5:25:25:cf:3d:25:ea:6c:f3:9b:97: 47:c8:8d:21:4c:a2:8b:65:6c:6b:32:b3:76:0e:f4:8c:f0:4c: c0:af:33:15:19:ed:0c:fd:18:38:24:f0:7a:6c:2a:6f:97:96: 53:15:80:5a:1a:53:8d:2a:9a:c3:35:bf:d8:5a:5e:3f:a0:0a: 24:ff:fa:39:38:55:40:86:69:73:40:81:12:bd:1f:19:c6:22: c4:43:30:4e:04:97:52:64:46:e3:e1:fd:36:71:3f:db:ba:de: 2c:86:50:7b:d0:75:af:8a:3f:78:57:cd:c1:f6:1c:5f:7b:34: 6f:d6:c2:ee:60:62:9d:b3:33:c5:7b:c7:18:6e:a0:2a:ad:6c: b6:05:68:d9:f8:0e:92:d0:f3:38:12:b3:71:da:1f:2b:8c:f7: f7:15:ed:76:4f:32:8c:99:d4:cb:10:bf:94:0f:f9:54:a7:ce: a5:d7:47:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVbiGLRMG95NaMvtfaa5FhSLvV3wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYyMTQ2WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTcxYTA1ZDlkNDMxYTlhMDhiMDQ5NjExYmY1ODM5YTZk YWRkZDc3ZTcwZTc1MWFiNzE5YzA4YjU1NTMxYWZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDboMWoC77aJVgaDQleCaS2r5XbG6lH0Sosr9bAady8XHX8 Swu/ckpo1sj+zuqtkBQqwoy0glrQ205f7kG62yMGDPZuGTgwc2vgBYdeb/Uvgm7W Yq5Cbv8jwq/fRSlUSkaI7M/oQxYwe9rVzMElt2lxzg8BFK7/ppIxS2W6QlEoXGoa noitI+jzO1t7GF+fC7Z880WqvXeDPblUwA/yxl1lKwA2z3iKiQdMaMjYWe90U6oG lqAKUwhJLVdbwQuw0f5u3KvnpcTpuUQ4WHuIpbXTuogJ9AQ8olSvlBwg0s/4HZW+ PqpwGvkBFmm3Lyo7o2Wa8oedNoN5okW/rhlmJy8TAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUdpRNDI20JisMyWMIEUHt0c4ptqwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE0MTZlMDk2LTdmYTMtNGU3Ny1iNDA3LTQ5YzRhZWVhYmYwNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvJwwDQYJKoZIhvcNAQELBQADggEBAIKcyBUJfSSUMmaliJ/57KjlXpvM cObwJbl+qEeT22FpFRGJm3kVmdmRHfLaAPnTHoBjX3BXST2t89mK8At3nzzOknlx M2n11m2qoII9JjPlJSXPPSXqbPObl0fIjSFMootlbGsys3YO9IzwTMCvMxUZ7Qz9 GDgk8HpsKm+XllMVgFoaU40qmsM1v9haXj+gCiT/+jk4VUCGaXNAgRK9HxnGIsRD ME4El1JkRuPh/TZxP9u63iyGUHvQda+KP3hXzcH2HF97NG/Wwu5gYp2zM8V7xxhu oCqtbLYFaNn4DpLQ8zgSs3HaHyuM9/cV7XZPMoyZ1MsQv5QP+VSnzqXXR+U= -----END CERTIFICATE-----Generated at Tue Jul 1 01:41:45 2025 by rpki-client