$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c174ce4-b964-401a-9f2e-b23ca0296193.roa File: 3c174ce4-b964-401a-9f2e-b23ca0296193.roa (raw, json) Hash identifier: TcaHBzW8tIca+NYczxBKPYmuhsuvC23Be9GqnZM/BXU= Subject key identifier: 62:16:42:38:CF:EB:B5:60:05:B9:F1:A4:84:C7:BB:36:CB:28:50:8A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 747DAB51795B5E897F43AA79AC9A999DED9B7984 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c174ce4-b964-401a-9f2e-b23ca0296193.roa Signing time: Tue 20 May 2025 16:11:15 +0000 ROA not before: Tue 20 May 2025 16:11:15 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:7d:ab:51:79:5b:5e:89:7f:43:aa:79:ac:9a:99:9d:ed:9b:79:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 16:11:15 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=18a6f61c32f1ece322efc4299bcb51b1eb94cee0ba4e0543f6f5b0689a197832, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:db:55:75:18:0b:ab:13:32:d2:1e:d5:e6:e4: 5b:4c:c5:cf:8f:7e:b0:88:68:14:03:46:6d:6f:40: 1e:8b:20:ab:e9:7e:ad:7e:43:b0:00:16:07:f6:99: cd:fd:c2:78:87:e2:38:6b:06:e2:31:b9:42:17:e1: 59:be:57:89:3b:e1:bc:6b:5c:b7:71:59:46:de:19: 66:19:a2:b7:cb:60:84:78:ba:27:36:34:88:f3:ac: bd:11:6e:35:1e:4e:62:51:19:31:47:b4:c8:fd:4a: 15:d7:4d:51:ee:5c:44:71:b3:1f:20:98:67:da:ad: 0d:d5:0e:f4:3c:df:1f:7c:57:38:98:33:c2:51:1b: a1:1f:81:af:b9:4d:e0:c2:bb:ba:62:cb:16:47:55: 8a:fb:46:f1:22:29:bd:1a:f1:88:a9:50:ed:e5:e0: c9:b0:cc:ed:bd:16:05:98:ff:13:9f:1e:05:c0:79: ce:36:fa:40:84:34:31:21:db:8f:06:74:2f:16:c8: b4:a0:34:ac:b7:29:85:a1:c0:19:d3:61:ac:24:0e: 28:35:f7:13:33:64:eb:ab:f9:e7:c3:a5:02:ad:22: c9:34:8a:9d:27:9c:00:8d:51:79:56:07:5f:3f:8b: ce:ef:7c:c7:94:d5:63:c9:6b:7b:75:5a:96:6e:39: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:16:42:38:CF:EB:B5:60:05:B9:F1:A4:84:C7:BB:36:CB:28:50:8A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c174ce4-b964-401a-9f2e-b23ca0296193.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:17:91:f7:e5:d4:83:21:25:29:a7:ca:79:54:06:b0:e9:bb: f9:58:c7:44:7e:18:29:80:3a:50:5c:4d:97:b7:a1:1b:7f:28: 48:03:05:fe:d2:5a:bc:59:b8:56:21:e1:67:a6:7f:6a:98:98: 48:52:75:4c:a2:57:a9:52:89:f3:d7:aa:04:97:b3:8f:96:08: 3f:8d:62:41:e8:00:ee:70:f2:3b:ec:53:10:6a:51:eb:30:7d: 24:e0:33:c3:6f:77:3d:88:1e:a5:dc:61:df:d3:31:2f:ad:67: 06:d0:33:86:0d:7e:dc:85:05:72:7b:b4:79:82:15:44:e7:a8: 7e:e0:b5:67:77:f1:bf:e6:c0:ca:97:89:0c:a0:bc:0f:60:5a: 79:22:07:38:cc:79:a0:95:0a:15:d8:fb:13:ea:30:59:cb:d9: b1:57:4d:f1:4a:c5:d5:4d:79:d6:49:bf:5d:4a:47:3f:de:a8: ab:95:52:47:9e:7a:db:a5:35:33:f7:cf:53:54:ba:6c:00:c6: 1a:65:ef:ef:6c:c4:94:c7:23:a8:e1:22:23:82:0a:b1:0e:ed: c2:b8:9a:58:2d:36:ad:6c:e0:97:74:a2:9d:e0:dd:46:91:d6: 62:db:80:8d:97:d5:a7:f7:0d:b3:af:79:d8:3c:77:9a:60:c2: aa:e0:76:f3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdH2rUXlbXol/Q6p5rJqZne2beYQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTYxMTE1WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGE2ZjYxYzMyZjFlY2UzMjJlZmM0Mjk5YmNiNTFiMWVi OTRjZWUwYmE0ZTA1NDNmNmY1YjA2ODlhMTk3ODMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDP21V1GAurEzLSHtXm5FtMxc+PfrCIaBQDRm1vQB6LIKvp fq1+Q7AAFgf2mc39wniH4jhrBuIxuUIX4Vm+V4k74bxrXLdxWUbeGWYZorfLYIR4 uic2NIjzrL0RbjUeTmJRGTFHtMj9ShXXTVHuXERxsx8gmGfarQ3VDvQ83x98VziY M8JRG6Efga+5TeDCu7piyxZHVYr7RvEiKb0a8YipUO3l4MmwzO29FgWY/xOfHgXA ec42+kCENDEh248GdC8WyLSgNKy3KYWhwBnTYawkDig19xMzZOur+efDpQKtIsk0 ip0nnACNUXlWB18/i87vfMeU1WPJa3t1WpZuOYPPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYhZCOM/rtWAFufGkhMe7NssoUIowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjMTc0Y2U0LWI5NjQtNDAxYS05ZjJlLWIyM2NhMDI5NjE5My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5iYwDQYJKoZIhvcNAQELBQADggEBACoXkffl1IMhJSmnynlUBrDpu/lY x0R+GCmAOlBcTZe3oRt/KEgDBf7SWrxZuFYh4Wemf2qYmEhSdUyiV6lSifPXqgSX s4+WCD+NYkHoAO5w8jvsUxBqUeswfSTgM8Nvdz2IHqXcYd/TMS+tZwbQM4YNftyF BXJ7tHmCFUTnqH7gtWd38b/mwMqXiQygvA9gWnkiBzjMeaCVChXY+xPqMFnL2bFX TfFKxdVNedZJv11KRz/eqKuVUkeeetulNTP3z1NUumwAxhpl7+9sxJTHI6jhIiOC CrEO7cK4mlgtNq1s4Jd0op3g3UaR1mLbgI2X1af3DbOvedg8d5pgwqrgdvM= -----END CERTIFICATE-----Generated at Fri Jun 6 04:01:50 2025 by rpki-client