$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61adc43d-d260-4f76-864f-ce79afe583d1.roa File: 61adc43d-d260-4f76-864f-ce79afe583d1.roa (raw, json) Hash identifier: 75xCyEHTZWG4JtmOVkZSh4r1KWGZgPm7esoGt3XXeio= Subject key identifier: DD:7A:14:E4:33:B9:5B:FE:8A:01:E0:32:FC:8E:0D:EE:3D:0A:D0:92 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 227BDCA314810A0F626D957F9079C7731F53A851 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61adc43d-d260-4f76-864f-ce79afe583d1.roa Signing time: Fri 09 May 2025 15:10:06 +0000 ROA not before: Fri 09 May 2025 15:10:06 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.64.0.0/10 maxlen: 10 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7b:dc:a3:14:81:0a:0f:62:6d:95:7f:90:79:c7:73:1f:53:a8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 15:10:06 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=748bd8120151c5a4eb17c7759d51dde7e401fff5198ad01f6d1bbd57173a583a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1e:3e:9d:95:4d:45:a0:f0:36:87:8d:64:16: 0f:32:90:b8:cb:45:0d:2a:da:9f:3f:a5:cb:98:67: 13:46:63:c5:43:4e:e5:d3:f4:9d:8a:24:79:38:01: 46:ff:a8:89:ad:d6:0a:70:67:ea:87:7a:2f:86:06: d3:15:0b:0f:c5:e6:5b:b2:6a:41:f5:f1:0d:d3:73: 3f:14:cd:65:3c:7d:c5:33:09:8c:d6:f1:2b:02:df: d4:3c:26:0e:be:fd:cf:73:64:d7:58:c5:1e:91:0a: 86:62:3d:44:e4:04:b4:43:c7:b4:ba:24:25:0a:a5: 0e:e5:38:87:12:fb:bb:5a:4c:74:48:c0:b7:28:4c: 4c:97:45:95:16:fa:9b:d9:f1:b8:ab:7b:b4:db:fe: 82:cb:f0:36:ba:3a:a2:84:e4:61:4a:83:df:46:64: 37:dc:bc:d1:a6:ea:38:27:32:42:0c:de:54:32:d4: b7:62:74:e3:0b:1f:81:4c:58:bc:30:20:51:25:64: a7:50:22:36:2a:08:7d:3e:9d:51:ed:73:cd:e3:95: b2:2c:32:32:6e:38:0d:9e:ca:61:c6:a9:f7:00:b5: 5a:e3:9a:c8:3b:0b:6d:d0:f2:ea:23:b6:d7:24:bb: 0c:bc:63:5e:26:a2:09:ba:f8:08:ac:f2:c6:40:65: 1a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7A:14:E4:33:B9:5B:FE:8A:01:E0:32:FC:8E:0D:EE:3D:0A:D0:92 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61adc43d-d260-4f76-864f-ce79afe583d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.64.0.0/10 Signature Algorithm: sha256WithRSAEncryption 0f:04:1e:00:90:a1:26:20:54:69:ff:6e:6c:98:c9:00:d0:6c: a1:98:0e:72:16:14:de:2b:cf:fb:78:a7:2b:39:0b:a4:d3:e6: 60:8c:09:ac:2c:c9:e2:6f:f1:fc:0e:91:11:8c:b7:37:37:95: 7b:3b:e8:9e:cb:63:e8:6d:cb:88:27:01:6f:0f:85:11:35:e1: e4:d6:cd:d6:37:54:ab:11:70:79:20:5a:28:23:02:9d:3b:61: 5f:68:13:b3:f1:b1:53:89:20:da:ed:f2:4f:55:6d:5f:88:30: a1:2b:45:f5:49:56:d8:11:8e:7c:33:8f:67:2b:3b:23:c7:43: 9e:f9:0f:a8:e4:60:0f:2b:fb:b6:ed:d8:a4:25:e2:99:09:83: fe:36:9d:98:1c:f2:57:41:6d:6a:01:67:73:66:77:4c:16:5a: da:1d:a9:ab:08:8a:b2:70:9d:95:48:47:88:44:b5:df:f9:95: 5b:5b:86:d7:ba:c4:2b:c4:d7:20:f4:1e:5f:07:a0:01:d3:7d: 5f:23:a1:68:65:04:db:9c:09:71:05:93:3d:ee:b3:77:b1:10: dd:75:5e:a8:24:14:da:b9:95:24:88:21:96:4a:b2:eb:23:62: 85:bb:2d:09:b3:27:f4:88:d3:31:79:72:95:bd:38:17:2b:16: 09:f2:db:21 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUInvcoxSBCg9ibZV/kHnHcx9TqFEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MTUxMDA2WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NDhiZDgxMjAxNTFjNWE0ZWIxN2M3NzU5ZDUxZGRlN2U0 MDFmZmY1MTk4YWQwMWY2ZDFiYmQ1NzE3M2E1ODNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+Hj6dlU1FoPA2h41kFg8ykLjLRQ0q2p8/pcuYZxNGY8VD TuXT9J2KJHk4AUb/qImt1gpwZ+qHei+GBtMVCw/F5luyakH18Q3Tcz8UzWU8fcUz CYzW8SsC39Q8Jg6+/c9zZNdYxR6RCoZiPUTkBLRDx7S6JCUKpQ7lOIcS+7taTHRI wLcoTEyXRZUW+pvZ8bire7Tb/oLL8Da6OqKE5GFKg99GZDfcvNGm6jgnMkIM3lQy 1LdidOMLH4FMWLwwIFElZKdQIjYqCH0+nVHtc83jlbIsMjJuOA2eymHGqfcAtVrj msg7C23Q8uojttckuwy8Y14mogm6+Ais8sZAZRpjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3XoU5DO5W/6KAeAy/I4N7j0K0JIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYxYWRjNDNkLWQyNjAtNGY3Ni04NjRmLWNlNzlhZmU1ODNkMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwYDQDANBgkqhkiG9w0BAQsFAAOCAQEADwQeAJChJiBUaf9ubJjJANBsoZgO chYU3ivP+3inKzkLpNPmYIwJrCzJ4m/x/A6REYy3NzeVezvonstj6G3LiCcBbw+F ETXh5NbN1jdUqxFweSBaKCMCnTthX2gTs/GxU4kg2u3yT1VtX4gwoStF9UlW2BGO fDOPZys7I8dDnvkPqORgDyv7tu3YpCXimQmD/jadmBzyV0FtagFnc2Z3TBZa2h2p qwiKsnCdlUhHiES13/mVW1uG17rEK8TXIPQeXwegAdN9XyOhaGUE25wJcQWTPe6z d7EQ3XVeqCQU2rmVJIghlkqy6yNihbstCbMn9IjTMXlylb04FysWCfLbIQ== -----END CERTIFICATE-----Generated at Fri May 9 18:36:58 2025 by rpki-client