$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cd40f82-ab22-4e08-a16a-cc1e6fbc3e75.roa File: 3cd40f82-ab22-4e08-a16a-cc1e6fbc3e75.roa (raw, json) Hash identifier: MBiXwZlPeCNPVH6NA5ZJKa+DoxujnZaFllgnLKeskg8= Subject key identifier: 31:8A:55:54:CD:ED:60:E7:05:3D:7E:CA:89:B4:CE:69:6E:D6:01:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29A05F783FD897EF06FA008C295304E1A61FCFE4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cd40f82-ab22-4e08-a16a-cc1e6fbc3e75.roa Signing time: Mon 30 Jun 2025 16:51:10 +0000 ROA not before: Mon 30 Jun 2025 16:51:10 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.70.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a0:5f:78:3f:d8:97:ef:06:fa:00:8c:29:53:04:e1:a6:1f:cf:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:51:10 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=64151d94b6a4263e8759e8a28fb771857636361b6190a32f60d260492f2b0276, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:08:84:5b:0d:b4:e3:0c:7e:17:c4:8a:9e:4a: 4d:68:18:04:7b:9e:f1:5a:a1:7a:4d:28:42:c8:6e: 62:f2:82:0f:1a:49:f3:e8:4e:07:1f:25:00:68:c3: 2e:6c:2e:cb:da:8a:79:1f:21:76:2b:0d:5b:63:56: 32:4a:50:ca:07:70:f1:83:0b:28:4b:e2:1a:fc:16: 9d:b5:1c:d9:94:6d:54:c0:aa:85:94:77:f5:8b:a5: 16:1f:c2:72:bf:26:08:71:07:71:7d:77:2a:4f:e5: 68:96:73:03:cb:45:5a:bf:d4:e5:5c:6b:57:4e:fa: ba:c6:48:c1:99:bf:d5:a3:f5:d5:0b:44:5a:7f:ca: 32:5f:9c:c4:e4:3d:f7:c5:e6:97:fc:9a:2c:76:80: 81:46:17:9d:ea:6b:d4:63:c4:fb:62:f5:95:0c:a5: f7:ea:c6:8f:88:f7:1f:ae:4b:9d:28:61:e9:30:19: 72:bc:1a:aa:31:f8:e4:ba:5c:eb:ae:d0:f4:7f:90: 11:26:6d:7f:14:3f:d1:67:90:b5:3c:c7:6c:21:0f: 7b:9c:ae:e8:f4:a8:b5:dd:2e:06:3f:7b:f2:aa:10: 4f:85:fe:f0:46:1a:40:5f:6d:43:3f:56:e2:d9:ef: 2e:35:4a:68:4b:ca:87:ba:62:6a:44:d1:28:d6:c9: 1b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8A:55:54:CD:ED:60:E7:05:3D:7E:CA:89:B4:CE:69:6E:D6:01:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3cd40f82-ab22-4e08-a16a-cc1e6fbc3e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.70.0.0/15 Signature Algorithm: sha256WithRSAEncryption 21:f2:16:ee:1b:d0:31:c2:ed:04:d8:c5:ae:53:dc:38:f8:23: 4a:93:e1:1d:b2:c5:b7:63:86:90:dc:e9:9b:26:51:df:4d:9c: e1:a2:98:b6:c8:83:9d:ca:f2:c8:53:52:f2:37:e8:db:ad:ef: 2c:0f:67:9b:54:57:a0:47:f3:4f:f3:b9:c9:70:e4:55:7e:65: 6b:90:5b:39:ed:82:5b:3d:05:40:20:dc:a6:26:d3:2b:26:51: 44:e0:b6:3b:e6:7e:1d:73:76:03:96:1d:16:77:5f:d5:35:f9: 91:44:a1:c2:fb:27:3b:c3:99:da:03:04:91:b2:df:37:77:f0: e4:d3:36:3d:8a:74:cf:2b:37:15:c9:d8:5e:8a:32:c4:ae:dd: 6c:4f:98:9d:58:b1:e4:f9:a0:f0:ba:f3:dd:04:b5:19:52:e3: c1:13:73:fd:71:27:ab:28:b9:fa:eb:ac:e8:4b:9f:07:bc:7c: 71:c8:27:1e:c5:95:83:ba:ea:7b:c5:57:82:2d:b7:19:02:99: 45:a0:1a:6f:c8:02:16:bc:fa:b1:73:94:a4:a6:d1:da:f4:fe: f2:de:41:5d:a9:5a:43:60:33:27:99:5e:a0:45:ab:11:46:94: db:83:ab:63:c1:ca:6b:f5:ec:5c:ff:fc:18:9e:6d:3b:3f:4b: 67:8e:d9:9b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKaBfeD/Yl+8G+gCMKVME4aYfz+QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTY1MTEwWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDE1MWQ5NGI2YTQyNjNlODc1OWU4YTI4ZmI3NzE4NTc2 MzYzNjFiNjE5MGEzMmY2MGQyNjA0OTJmMmIwMjc2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDICIRbDbTjDH4XxIqeSk1oGAR7nvFaoXpNKELIbmLygg8a SfPoTgcfJQBowy5sLsvainkfIXYrDVtjVjJKUMoHcPGDCyhL4hr8Fp21HNmUbVTA qoWUd/WLpRYfwnK/JghxB3F9dypP5WiWcwPLRVq/1OVca1dO+rrGSMGZv9Wj9dUL RFp/yjJfnMTkPffF5pf8mix2gIFGF53qa9RjxPti9ZUMpffqxo+I9x+uS50oYekw GXK8Gqox+OS6XOuu0PR/kBEmbX8UP9FnkLU8x2whD3ucruj0qLXdLgY/e/KqEE+F /vBGGkBfbUM/VuLZ7y41SmhLyoe6YmpE0SjWyRvhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMYpVVM3tYOcFPX7KibTOaW7WAUYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNjZDQwZjgyLWFiMjItNGUwOC1hMTZhLWNjMWU2ZmJjM2U3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0RjANBgkqhkiG9w0BAQsFAAOCAQEAIfIW7hvQMcLtBNjFrlPcOPgjSpPh HbLFt2OGkNzpmyZR302c4aKYtsiDncryyFNS8jfo263vLA9nm1RXoEfzT/O5yXDk VX5la5BbOe2CWz0FQCDcpibTKyZRROC2O+Z+HXN2A5YdFndf1TX5kUShwvsnO8OZ 2gMEkbLfN3fw5NM2PYp0zys3FcnYXooyxK7dbE+YnVix5Pmg8Lrz3QS1GVLjwRNz /XEnqyi5+uus6EufB7x8ccgnHsWVg7rqe8VXgi23GQKZRaAab8gCFrz6sXOUpKbR 2vT+8t5BXalaQ2AzJ5leoEWrEUaU24OrY8HKa/XsXP/8GJ5tOz9LZ47Zmw== -----END CERTIFICATE-----Generated at Tue Jul 1 06:17:15 2025 by rpki-client