$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4570ade3-d611-4c43-9ea7-3e46646867ec.roa File: 4570ade3-d611-4c43-9ea7-3e46646867ec.roa (raw, json) Hash identifier: Msje1aMHt+LkFbQ25s9ce/7yticzFHp7wmcpputRPi0= Subject key identifier: 42:93:9F:A1:48:0F:B2:AF:CF:57:CE:5A:89:91:EC:1A:34:58:A0:D0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A7313C276FEF9EA520879DBBFA3670F053FC6DA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4570ade3-d611-4c43-9ea7-3e46646867ec.roa Signing time: Mon 09 Jun 2025 16:40:44 +0000 ROA not before: Mon 09 Jun 2025 16:40:44 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.4.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:73:13:c2:76:fe:f9:ea:52:08:79:db:bf:a3:67:0f:05:3f:c6:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:40:44 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=0b35882acd678e0e395b6c57ccf734fd77d3677db47f0c132d78db1eecd69494, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:44:ca:1c:51:66:b3:bb:82:3e:9c:b7:f0: 32:d6:27:68:06:aa:08:50:af:54:ee:4f:fd:9a:21: 40:63:c2:80:98:49:a0:cb:d9:4a:c4:f5:96:c2:c1: a9:90:36:53:3d:05:fa:91:80:cd:05:55:91:4a:d9: d7:72:25:4c:56:02:c3:32:f0:92:0a:e3:54:ab:7e: 56:9f:75:f5:b2:d9:d1:6b:87:ec:3e:6a:39:4f:3d: b9:cd:82:e3:58:d7:cc:5e:f7:fc:a6:8d:54:3c:71: 28:06:8f:d6:4d:45:11:f7:5b:62:d7:9e:31:06:d9: c0:ea:27:6b:6e:ed:42:74:53:31:15:5d:99:f4:84: cd:29:92:7d:93:16:45:b1:22:e7:ab:5c:4a:4c:ec: 0a:b0:ad:4e:23:11:7a:a1:e3:a8:ea:22:c7:b2:36: 20:92:b7:e6:cd:ce:fb:e4:50:eb:03:8c:7e:5d:ef: af:09:5f:03:19:f4:ad:43:d1:2c:d6:bf:33:d5:49: 37:b1:ea:70:61:4a:57:45:c4:37:d7:c3:35:18:cc: b8:04:dd:9c:63:d6:4f:61:4f:83:c7:1f:1e:17:d8: 9b:93:d2:45:88:65:0b:2f:7f:f4:26:77:59:45:53: 33:62:19:77:ef:6c:e0:65:8e:fc:7c:f1:00:fc:cf: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:9F:A1:48:0F:B2:AF:CF:57:CE:5A:89:91:EC:1A:34:58:A0:D0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4570ade3-d611-4c43-9ea7-3e46646867ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.4.24.0/21 Signature Algorithm: sha256WithRSAEncryption 4e:3f:13:f0:39:7a:54:69:83:58:43:0b:93:6c:30:3c:e1:f5: df:3a:a6:92:f1:49:0b:5a:35:bc:41:9d:dc:e4:9f:6b:c0:46: d6:12:d9:92:6c:61:95:8e:4a:71:06:a5:04:50:b6:22:76:43: fa:74:f4:54:0a:17:73:50:07:8d:f3:12:9e:57:69:0e:18:be: 5c:33:ee:32:c0:6c:b8:cc:38:12:b4:56:e6:69:62:de:e2:62: b1:41:d5:ed:30:1a:35:e8:04:d3:96:6b:56:e6:32:00:16:55: c3:c7:5c:57:44:d7:db:18:45:79:d4:c2:61:09:71:71:02:77: 10:8a:a1:11:80:15:41:f1:08:95:5d:eb:ea:46:ee:f8:a0:2e: aa:78:8a:66:5e:99:fc:f9:71:23:92:aa:75:76:e6:57:b8:75: d5:46:c7:1c:15:74:a6:e2:11:0d:c0:45:38:f8:8e:09:c2:4b: c4:18:38:b8:8a:a6:27:18:e5:0b:da:46:60:b4:14:bc:f3:5f: 59:78:80:a1:12:6a:33:c6:b5:9f:63:f0:1e:95:68:78:55:8b: c0:b0:cc:35:28:85:ac:db:3a:cf:e5:6e:75:13:3a:88:90:b6: 6e:36:5d:c2:ea:f5:25:7f:1b:a4:a7:43:6f:cf:70:09:7c:70: ea:a5:93:12 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOnMTwnb++epSCHnbv6NnDwU/xtowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTY0MDQ0WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjM1ODgyYWNkNjc4ZTBlMzk1YjZjNTdjY2Y3MzRmZDc3 ZDM2NzdkYjQ3ZjBjMTMyZDc4ZGIxZWVjZDY5NDk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6KUTKHFFms7uCPpy38DLWJ2gGqghQr1TuT/2aIUBjwoCY SaDL2UrE9ZbCwamQNlM9BfqRgM0FVZFK2ddyJUxWAsMy8JIK41SrflafdfWy2dFr h+w+ajlPPbnNguNY18xe9/ymjVQ8cSgGj9ZNRRH3W2LXnjEG2cDqJ2tu7UJ0UzEV XZn0hM0pkn2TFkWxIuerXEpM7AqwrU4jEXqh46jqIseyNiCSt+bNzvvkUOsDjH5d 768JXwMZ9K1D0SzWvzPVSTex6nBhSldFxDfXwzUYzLgE3Zxj1k9hT4PHHx4X2JuT 0kWIZQsvf/Qmd1lFUzNiGXfvbOBljvx88QD8z7fRAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQpOfoUgPsq/PV85aiZHsGjRYoNAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ1NzBhZGUzLWQ2MTEtNGM0My05ZWE3LTNlNDY2NDY4NjdlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMDBBgwDQYJKoZIhvcNAQELBQADggEBAE4/E/A5elRpg1hDC5NsMDzh9d86 ppLxSQtaNbxBndzkn2vARtYS2ZJsYZWOSnEGpQRQtiJ2Q/p09FQKF3NQB43zEp5X aQ4Yvlwz7jLAbLjMOBK0VuZpYt7iYrFB1e0wGjXoBNOWa1bmMgAWVcPHXFdE19sY RXnUwmEJcXECdxCKoRGAFUHxCJVd6+pG7vigLqp4imZemfz5cSOSqnV25le4ddVG xxwVdKbiEQ3ARTj4jgnCS8QYOLiKpicY5QvaRmC0FLzzX1l4gKESajPGtZ9j8B6V aHhVi8CwzDUohazbOs/lbnUTOoiQtm42XcLq9SV/G6SnQ2/PcAl8cOqlkxI= -----END CERTIFICATE-----Generated at Mon Jun 30 23:39:26 2025 by rpki-client