$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35538b9d-35d3-4472-86f2-87fecfa357db.roa File: 35538b9d-35d3-4472-86f2-87fecfa357db.roa (raw, json) Hash identifier: u8p+TRcbCyLsQs17xcgkf3c9k2rWgHcv+ibGXfS/kdU= Subject key identifier: A1:E5:5B:BD:88:1F:F6:B6:05:4E:F2:BA:D7:06:26:1F:D2:B7:E0:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6012307CE68DC37584035723724B05A74405808D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35538b9d-35d3-4472-86f2-87fecfa357db.roa Signing time: Mon 16 Jun 2025 16:31:04 +0000 ROA not before: Mon 16 Jun 2025 16:31:04 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:12:30:7c:e6:8d:c3:75:84:03:57:23:72:4b:05:a7:44:05:80:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:31:04 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=cecd219a1e3acd65ef24e2bc0dd0dc5ce258885365b8d57afcd1df5dd234d247, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:4a:2f:0b:5f:16:c4:ad:34:2c:45:f4:a7: 79:79:f5:d4:1f:c4:6e:27:45:7d:07:ab:31:ca:29: e6:e5:a9:cd:ed:14:8d:df:4b:b8:11:58:8c:55:1c: 93:f9:cf:88:37:dc:28:a7:56:0a:f5:c3:9d:8f:c7: 2e:d8:f6:88:c7:72:71:f6:df:bb:7b:4b:0b:ef:f7: 76:41:15:24:4c:71:cd:2d:73:cd:76:b1:52:8e:90: 96:95:37:bf:d7:0c:ef:e4:2a:bc:da:6d:83:e7:6a: 4a:fa:e6:88:8c:b9:82:30:c3:d5:7c:2d:a4:36:f9: 4f:a2:39:c8:e4:bc:79:43:51:0f:31:49:4e:dd:5e: 5b:33:d6:ca:07:fb:9e:7b:5d:0d:53:45:f5:65:38: e1:0c:f6:f4:16:eb:ca:27:e2:88:9c:52:1a:20:4b: f1:b1:5c:3b:bc:aa:c2:0b:39:6d:c6:05:d2:e6:87: a2:8e:4e:9d:d2:57:11:f2:73:07:72:5d:d7:79:f1: c3:26:24:61:2d:2e:f5:1b:4e:29:6e:ae:36:dd:f4: 4c:7f:8d:f1:dd:0e:c1:38:49:74:03:5b:01:bd:20: 1a:47:f6:b1:5c:f0:4f:e5:9c:0e:8c:41:f3:03:dd: ad:db:00:11:50:61:7c:14:b6:2c:16:89:22:ab:3b: 12:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E5:5B:BD:88:1F:F6:B6:05:4E:F2:BA:D7:06:26:1F:D2:B7:E0:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35538b9d-35d3-4472-86f2-87fecfa357db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.205.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:5a:ae:a4:0c:d1:55:6f:4e:78:2d:ca:9e:7b:c4:aa:06:73: a3:cb:db:1d:3b:21:02:ee:76:e0:f2:4f:06:2b:2d:3f:44:55: be:e1:59:94:2f:24:80:c3:fb:c2:e5:67:8a:65:4d:b9:9c:0d: b5:1d:1c:33:a1:81:2b:bd:9b:85:71:45:64:21:15:7d:5f:d2: 55:11:93:96:4a:b2:02:4b:63:da:a5:ed:b8:cd:29:e5:d8:fb: 56:12:4c:7d:7f:7b:09:f3:ee:66:87:45:74:79:9d:59:f9:15: f8:0b:c1:c5:56:13:83:c7:47:e3:4e:3e:9a:53:c8:1e:6e:74: c3:76:60:48:f6:5e:d2:9e:8a:e9:91:f0:ef:cc:f2:42:c6:2e: bd:6b:2b:88:86:59:46:54:ec:9c:21:75:f5:e0:8a:b4:63:c4: c5:4c:92:97:1e:5e:ad:2d:b3:9f:41:42:78:dd:43:b7:3d:2d: cf:43:f0:cb:4c:f0:31:ac:cc:a6:c7:f8:5b:42:63:49:84:7e: e8:b2:9d:40:68:50:bc:b9:ae:03:c9:a3:ba:a1:d7:e8:54:8a: ab:fd:61:37:1e:27:9c:98:96:cc:6a:9d:c7:7a:58:4f:10:fd: 68:ab:d0:95:e3:f7:a1:1b:be:ba:ae:ac:54:96:49:77:47:1b: 00:f1:dc:21 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYBIwfOaNw3WEA1cjcksFp0QFgI0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYzMTA0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZWNkMjE5YTFlM2FjZDY1ZWYyNGUyYmMwZGQwZGM1Y2Uy NTg4ODUzNjViOGQ1N2FmY2QxZGY1ZGQyMzRkMjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDC6UovC18WxK00LEX0p3l59dQfxG4nRX0HqzHKKeblqc3t FI3fS7gRWIxVHJP5z4g33CinVgr1w52Pxy7Y9ojHcnH237t7Swvv93ZBFSRMcc0t c812sVKOkJaVN7/XDO/kKrzabYPnakr65oiMuYIww9V8LaQ2+U+iOcjkvHlDUQ8x SU7dXlsz1soH+557XQ1TRfVlOOEM9vQW68on4oicUhogS/GxXDu8qsILOW3GBdLm h6KOTp3SVxHycwdyXdd58cMmJGEtLvUbTilurjbd9Ex/jfHdDsE4SXQDWwG9IBpH 9rFc8E/lnA6MQfMD3a3bABFQYXwUtiwWiSKrOxJhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoeVbvYgf9rYFTvK61wYmH9K34KAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1NTM4YjlkLTM1ZDMtNDQ3Mi04NmYyLTg3ZmVjZmEzNTdkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5s0wDQYJKoZIhvcNAQELBQADggEBAF5arqQM0VVvTngtyp57xKoGc6PL 2x07IQLuduDyTwYrLT9EVb7hWZQvJIDD+8LlZ4plTbmcDbUdHDOhgSu9m4VxRWQh FX1f0lURk5ZKsgJLY9ql7bjNKeXY+1YSTH1/ewnz7maHRXR5nVn5FfgLwcVWE4PH R+NOPppTyB5udMN2YEj2XtKeiumR8O/M8kLGLr1rK4iGWUZU7JwhdfXgirRjxMVM kpceXq0ts59BQnjdQ7c9Lc9D8MtM8DGszKbH+FtCY0mEfuiynUBoULy5rgPJo7qh 1+hUiqv9YTceJ5yYlsxqncd6WE8Q/Wir0JXj96EbvrqurFSWSXdHGwDx3CE= -----END CERTIFICATE-----Generated at Mon Jun 30 23:39:06 2025 by rpki-client