$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6c92e3a-3184-410b-aa7c-5ef14a647127.roa File: d6c92e3a-3184-410b-aa7c-5ef14a647127.roa (raw, json) Hash identifier: LACuH7VgysenC+9EnvEiSeMdddhzfzO7CuZU8gwsPLc= Subject key identifier: 22:3E:81:6C:73:E2:4F:DA:7D:C1:53:8A:8B:84:E6:80:98:D7:D8:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6590851B8C9D0971BFE52FBEAF607D2441578C3C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6c92e3a-3184-410b-aa7c-5ef14a647127.roa Signing time: Mon 12 May 2025 15:50:58 +0000 ROA not before: Mon 12 May 2025 15:50:58 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 7224 IP address blocks: 3.2.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:90:85:1b:8c:9d:09:71:bf:e5:2f:be:af:60:7d:24:41:57:8c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 12 15:50:58 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=f379a7549f44be55725952492e631f8d8ce935776a2e0b86d514d150e2c6e483, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7e:c1:95:f0:ec:c3:e6:6f:d7:2b:d0:60:8c: 83:c9:a6:b4:76:62:d1:f4:a7:0e:29:50:2a:a4:c7: 2b:6d:16:a5:60:46:de:c0:66:20:5b:03:c7:27:ef: 0f:8d:d2:bc:a5:71:26:89:8a:ff:26:8d:29:ad:bd: 18:cf:11:7e:16:df:34:15:1b:2f:ac:ac:fa:3b:8f: 7b:ef:33:c7:4f:73:14:3e:f3:70:af:67:fd:8e:19: 36:cd:ec:dc:1b:0b:4a:2a:d6:9e:4c:69:8b:95:38: 4a:b5:c7:d1:b6:2e:81:f5:15:04:60:af:26:07:66: 13:5d:89:32:c3:9b:68:1a:41:a7:29:7c:06:bb:3f: ea:bc:a8:d8:e0:8d:60:41:3d:94:33:0f:2b:27:87: 6b:4c:e3:f0:12:fe:43:dc:bb:7c:7b:a2:4b:e1:b1: 8b:52:62:88:db:43:bb:99:e3:86:ab:a6:68:5b:38: 1c:39:8b:18:77:8a:cb:31:7a:55:b3:8d:8f:49:1f: 94:0a:6a:6f:1d:1a:42:8f:97:ea:d0:4d:9c:94:0e: 9c:8b:2a:3a:00:ce:40:08:c5:d4:06:a0:2c:cb:b8: b8:77:8d:77:ec:25:eb:d7:47:f6:89:d7:9c:20:bb: 71:27:14:82:40:fb:bb:6a:1a:36:0a:cc:d2:8f:8c: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3E:81:6C:73:E2:4F:DA:7D:C1:53:8A:8B:84:E6:80:98:D7:D8:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6c92e3a-3184-410b-aa7c-5ef14a647127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.25.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:aa:3e:aa:14:8d:2f:42:8e:ba:c2:0b:4b:4a:9b:32:1d:a7: e8:38:f6:c4:95:e6:be:ef:f0:c9:8e:38:8d:25:af:fd:f4:47: c4:ab:00:5a:a3:89:c1:cf:7e:5d:fc:fe:b5:15:c7:45:7e:5d: ac:17:c8:62:32:fc:d9:ad:a9:35:61:5e:a3:cc:ce:8b:ca:7a: bf:ad:13:dd:85:aa:e0:ea:07:93:74:12:08:0b:d0:1d:1d:33: 68:8b:99:ab:62:9c:b9:ab:f1:06:4c:f3:6e:04:0d:ca:7e:a5: 81:23:90:23:ae:f5:19:51:73:ef:cc:3c:a1:ed:54:a0:86:ae: 5f:b3:6b:29:9b:b0:d9:8f:ab:ab:20:f2:3a:49:9e:4c:37:1e: 24:93:4c:84:b9:ba:e0:c6:d7:a9:94:23:95:06:89:9b:9c:d2: 53:65:94:71:fb:73:0a:c9:d2:1f:2d:b5:f4:6b:ba:06:ad:b0: 8d:df:3b:b7:d8:d5:01:ea:3b:5d:9a:a1:bb:c6:6b:63:d1:4e: b2:fd:be:9f:72:0b:b6:0f:03:a3:81:6b:bd:93:69:92:7b:ef: 2d:32:85:83:5c:b9:c5:6f:67:a8:b9:a9:2e:c4:95:84:f0:c6: f4:aa:40:bc:79:c0:6d:10:93:7a:28:e9:5a:65:94:81:be:79: 39:5b:d9:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZZCFG4ydCXG/5S++r2B9JEFXjDwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTEyMTU1MDU4WhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMzc5YTc1NDlmNDRiZTU1NzI1OTUyNDkyZTYzMWY4ZDhj ZTkzNTc3NmEyZTBiODZkNTE0ZDE1MGUyYzZlNDgzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNfsGV8OzD5m/XK9BgjIPJprR2YtH0pw4pUCqkxyttFqVg Rt7AZiBbA8cn7w+N0rylcSaJiv8mjSmtvRjPEX4W3zQVGy+srPo7j3vvM8dPcxQ+ 83CvZ/2OGTbN7NwbC0oq1p5MaYuVOEq1x9G2LoH1FQRgryYHZhNdiTLDm2gaQacp fAa7P+q8qNjgjWBBPZQzDysnh2tM4/AS/kPcu3x7okvhsYtSYojbQ7uZ44arpmhb OBw5ixh3issxelWzjY9JH5QKam8dGkKPl+rQTZyUDpyLKjoAzkAIxdQGoCzLuLh3 jXfsJevXR/aJ15wgu3EnFIJA+7tqGjYKzNKPjMFNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIj6BbHPiT9p9wVOKi4TmgJjX2JEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2YzkyZTNhLTMxODQtNDEwYi1hYTdjLTVlZjE0YTY0NzEyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAhkwDQYJKoZIhvcNAQELBQADggEBACqqPqoUjS9CjrrCC0tKmzIdp+g4 9sSV5r7v8MmOOI0lr/30R8SrAFqjicHPfl38/rUVx0V+XawXyGIy/NmtqTVhXqPM zovKer+tE92FquDqB5N0EggL0B0dM2iLmatinLmr8QZM824EDcp+pYEjkCOu9RlR c+/MPKHtVKCGrl+zaymbsNmPq6sg8jpJnkw3HiSTTIS5uuDG16mUI5UGiZuc0lNl lHH7cwrJ0h8ttfRrugatsI3fO7fY1QHqO12aobvGa2PRTrL9vp9yC7YPA6OBa72T aZJ77y0yhYNcucVvZ6i5qS7ElYTwxvSqQLx5wG0Qk3oo6VpllIG+eTlb2bc= -----END CERTIFICATE-----Generated at Mon Jun 2 16:28:55 2025 by rpki-client