$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aca73f63-750e-49b1-9ad8-b6a8ffe0b067.roa File: aca73f63-750e-49b1-9ad8-b6a8ffe0b067.roa (raw, json) Hash identifier: fH5su/st6gCt30X/FWO9Bi1pj/WQph4l+f0sRlOEzQo= Subject key identifier: AC:5A:B3:72:C1:BA:70:38:50:7C:B7:11:1C:90:08:CC:90:25:9B:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0CE9BE83F5CEC89C8C4B9425E11B814355299524 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aca73f63-750e-49b1-9ad8-b6a8ffe0b067.roa Signing time: Mon 30 Jun 2025 16:11:07 +0000 ROA not before: Mon 30 Jun 2025 16:11:07 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.122.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e9:be:83:f5:ce:c8:9c:8c:4b:94:25:e1:1b:81:43:55:29:95:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:11:07 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=2df4e4be2fc3722a2bab66183a295c5e0c7d5251cd31bc73c212face4af6584f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4b:c5:61:dd:06:91:b0:92:89:fa:12:03:0f: ae:a0:60:28:a0:1e:fe:89:d3:7b:09:89:fc:10:4d: d8:7e:d2:54:2e:60:63:c0:47:e1:d9:34:db:0c:88: e7:fd:a2:68:2f:d2:40:3e:e9:40:18:6d:0f:c1:0d: 26:5e:ff:0c:9b:ef:60:5d:eb:98:05:c2:ba:cd:52: f3:8f:4b:a6:49:81:22:6a:cb:1e:88:f3:54:64:c7: 1d:70:d4:7e:31:f2:61:08:58:74:e0:33:34:e3:10: a9:5c:23:7c:b4:34:ab:fc:f2:74:ea:df:ee:88:33: ca:03:e7:7f:60:cd:8e:8e:b6:fa:b9:44:1b:a8:83: 4d:da:67:df:41:6a:b9:b1:33:83:61:e7:e9:dd:2b: 46:e0:64:e3:55:22:9d:39:b0:7b:ae:60:75:e2:99: 85:65:21:36:f5:4f:81:ce:1e:a0:ee:12:e7:93:41: bb:5b:45:06:83:e5:c9:b5:29:fc:df:a5:58:32:80: 65:13:69:82:53:cb:3c:74:89:5d:9b:cd:c5:2e:ff: f7:c2:41:de:de:86:e8:30:6e:a8:2e:31:66:47:92: eb:d1:0e:61:2a:1c:62:1a:98:59:ab:72:04:9a:57: 8d:09:a3:95:ee:3a:40:4d:17:12:97:64:6f:d0:8f: 68:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5A:B3:72:C1:BA:70:38:50:7C:B7:11:1C:90:08:CC:90:25:9B:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aca73f63-750e-49b1-9ad8-b6a8ffe0b067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.122.128.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:b1:44:63:8d:17:d0:f0:3b:d8:c7:e6:28:60:c1:3f:73:28: 5e:3d:a8:09:6a:24:62:08:76:3f:50:ce:fc:21:1f:ad:53:da: 1c:5b:30:11:7e:86:b6:4b:8d:4c:ae:94:9b:d9:aa:95:32:23: 08:c1:10:56:89:24:06:8e:44:3d:50:23:8e:c9:a8:ef:86:7a: d5:31:b4:e1:fd:6f:4e:ad:63:07:66:23:b4:d9:cc:f5:a4:bc: 9a:74:46:6d:ed:4d:29:8c:c2:66:93:f9:97:aa:68:2c:67:7c: f6:79:11:49:00:2e:65:5f:75:46:6e:7c:5c:bf:f7:b9:ee:44: 55:79:fc:17:e3:59:77:1d:d6:fc:11:f2:e5:2b:ac:2c:6d:99: 4d:da:85:66:16:f1:33:bb:0a:c9:f1:9c:1c:0b:7b:d4:dc:54: 06:bf:9b:b0:e5:ea:8e:d1:44:2d:c5:a0:f7:b4:bc:a4:fe:23: c0:27:68:36:ff:cc:37:3c:84:0d:a5:f6:17:db:f2:6f:bb:28: 52:4b:eb:fe:78:88:4d:d7:93:02:f0:67:3b:1c:98:85:c7:56: a9:00:77:10:17:65:f1:85:c8:5f:4f:73:ff:86:6d:e8:3b:5d: a0:43:3a:76:5d:2b:6e:2c:55:dd:b3:75:aa:1c:9a:9a:85:60: 8e:2a:5d:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDOm+g/XOyJyMS5Ql4RuBQ1UplSQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYxMTA3WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZGY0ZTRiZTJmYzM3MjJhMmJhYjY2MTgzYTI5NWM1ZTBj N2Q1MjUxY2QzMWJjNzNjMjEyZmFjZTRhZjY1ODRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDkS8Vh3QaRsJKJ+hIDD66gYCigHv6J03sJifwQTdh+0lQu YGPAR+HZNNsMiOf9omgv0kA+6UAYbQ/BDSZe/wyb72Bd65gFwrrNUvOPS6ZJgSJq yx6I81Rkxx1w1H4x8mEIWHTgMzTjEKlcI3y0NKv88nTq3+6IM8oD539gzY6Otvq5 RBuog03aZ99BarmxM4Nh5+ndK0bgZONVIp05sHuuYHXimYVlITb1T4HOHqDuEueT QbtbRQaD5cm1KfzfpVgygGUTaYJTyzx0iV2bzcUu//fCQd7ehugwbqguMWZHkuvR DmEqHGIamFmrcgSaV40Jo5XuOkBNFxKXZG/Qj2i5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUrFqzcsG6cDhQfLcRHJAIzJAlmxgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjYTczZjYzLTc1MGUtNDliMS05YWQ4LWI2YThmZmUwYjA2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDeoAwDQYJKoZIhvcNAQELBQADggEBAD+xRGONF9DwO9jH5ihgwT9zKF49 qAlqJGIIdj9QzvwhH61T2hxbMBF+hrZLjUyulJvZqpUyIwjBEFaJJAaORD1QI47J qO+GetUxtOH9b06tYwdmI7TZzPWkvJp0Rm3tTSmMwmaT+ZeqaCxnfPZ5EUkALmVf dUZufFy/97nuRFV5/BfjWXcd1vwR8uUrrCxtmU3ahWYW8TO7CsnxnBwLe9TcVAa/ m7Dl6o7RRC3FoPe0vKT+I8AnaDb/zDc8hA2l9hfb8m+7KFJL6/54iE3XkwLwZzsc mIXHVqkAdxAXZfGFyF9Pc/+Gbeg7XaBDOnZdK24sVd2zdaocmpqFYI4qXbE= -----END CERTIFICATE-----Generated at Mon Jun 30 22:55:38 2025 by rpki-client