$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4d3e5fe-7ff6-45cc-891b-8bd9df8b9cf2.roa File: e4d3e5fe-7ff6-45cc-891b-8bd9df8b9cf2.roa (raw, json) Hash identifier: tGSEWAHSKdujg/+/dnIgqdOJkbSznnUCEDdNjG9XMGc= Subject key identifier: 26:9A:16:32:18:C1:AA:8B:8D:36:6C:C0:CF:FE:31:06:CF:CA:EB:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A71D7D1BBD8D89F52AAECF7DE854934D5E39F32 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4d3e5fe-7ff6-45cc-891b-8bd9df8b9cf2.roa Signing time: Fri 09 May 2025 00:41:16 +0000 ROA not before: Fri 09 May 2025 00:41:16 +0000 ROA not after: Fri 13 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.146.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:71:d7:d1:bb:d8:d8:9f:52:aa:ec:f7:de:85:49:34:d5:e3:9f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 9 00:41:16 2025 GMT Not After : Jun 13 23:59:59 2025 GMT Subject: serialNumber=9021f789078a85965b72680826cbfb799020422a953a451e2c52ad1cb2fc8298, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3c:dc:44:c3:51:73:ce:c5:2c:bc:be:35:26: f3:96:be:84:1d:ee:01:ba:4e:a8:f2:8d:7c:36:b6: 33:43:b4:49:9e:24:47:8f:8d:ba:0f:5e:92:bb:cc: 78:77:0d:6d:89:0a:57:36:a9:3f:9a:e0:15:1f:35: 95:c4:c3:51:f4:55:42:c9:89:fe:a5:73:84:ed:be: bc:fb:f0:88:67:95:5a:14:48:54:a6:45:d2:13:31: 2a:ab:81:bc:b5:da:24:9b:bb:67:9a:89:91:57:70: 6b:82:c9:d5:87:47:cc:f9:b2:73:f2:c2:aa:82:3b: 21:4e:da:43:a8:60:fd:d9:87:a6:09:41:2f:96:7d: 90:9f:c9:29:f2:2b:45:0d:ff:5b:21:d2:14:36:70: 38:2f:a1:06:63:1b:5e:43:c6:61:54:d4:bc:14:db: d5:db:2e:b7:76:28:2e:36:72:12:02:86:f8:17:93: 05:c8:82:09:f5:13:a6:37:a7:28:6f:4f:50:11:ce: 55:41:49:9c:8c:a7:7e:43:4a:db:10:23:e8:eb:41: b7:18:68:06:3b:6e:12:58:05:60:a6:80:d9:2e:a0: d4:9b:20:cf:2d:44:4e:d6:03:6b:74:14:55:41:a2: 9f:b8:9f:b5:7c:40:f6:c2:6f:69:65:8f:80:4c:c7: 92:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9A:16:32:18:C1:AA:8B:8D:36:6C:C0:CF:FE:31:06:CF:CA:EB:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e4d3e5fe-7ff6-45cc-891b-8bd9df8b9cf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.146.8.0/22 Signature Algorithm: sha256WithRSAEncryption a4:bf:10:c4:0a:f8:4d:bc:d6:60:e1:a5:6f:b0:e0:09:5c:41: 7f:4f:d8:92:f8:ae:89:27:5c:39:3b:b5:f0:44:8d:fa:84:1a: 05:3f:40:d4:36:e2:97:83:c9:75:77:38:6e:41:5c:17:7e:ac: 18:9e:2a:3d:74:16:29:b4:6d:69:31:62:5f:4e:8d:6b:15:28: d5:56:b7:28:82:4a:c9:6b:2c:7b:fc:d5:eb:d3:dc:c5:a4:5d: 1b:e5:36:e0:80:8c:02:e0:aa:c4:bf:61:f4:10:0d:2b:25:9f: 43:e1:5b:8c:05:4b:76:82:85:1a:4a:f7:6f:98:aa:fc:44:bd: 0e:e8:95:8b:ca:db:52:ba:05:d2:67:54:f0:c5:43:58:ad:9c: b0:f3:77:db:b0:d7:14:36:7f:a7:38:dd:c6:66:3b:19:87:e2: 7b:9d:58:1b:ac:e7:79:73:9b:9b:fd:68:96:6f:45:f8:46:68: 13:c5:3b:2f:0b:f0:f4:cd:a6:ad:72:f5:de:23:6f:7c:08:e6: 22:4d:82:4e:d9:9c:d5:a5:b8:87:d0:93:f2:33:84:9d:a6:ff: d3:a4:73:32:34:e0:8e:1f:82:5a:10:63:ce:6b:ed:14:3c:06: 4d:74:75:f6:2e:5f:f5:2f:9b:cd:1f:93:3a:4f:ad:25:fa:86: 8e:64:18:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUanHX0bvY2J9Squz33oVJNNXjnzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTA5MDA0MTE2WhcNMjUwNjEzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDIxZjc4OTA3OGE4NTk2NWI3MjY4MDgyNmNiZmI3OTkw MjA0MjJhOTUzYTQ1MWUyYzUyYWQxY2IyZmM4Mjk4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRPNxEw1FzzsUsvL41JvOWvoQd7gG6TqjyjXw2tjNDtEme JEePjboPXpK7zHh3DW2JClc2qT+a4BUfNZXEw1H0VULJif6lc4Ttvrz78IhnlVoU SFSmRdITMSqrgby12iSbu2eaiZFXcGuCydWHR8z5snPywqqCOyFO2kOoYP3Zh6YJ QS+WfZCfySnyK0UN/1sh0hQ2cDgvoQZjG15DxmFU1LwU29XbLrd2KC42chIChvgX kwXIggn1E6Y3pyhvT1ARzlVBSZyMp35DStsQI+jrQbcYaAY7bhJYBWCmgNkuoNSb IM8tRE7WA2t0FFVBop+4n7V8QPbCb2llj4BMx5LHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJpoWMhjBqouNNmzAz/4xBs/K6zkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U0ZDNlNWZlLTdmZjYtNDVjYy04OTFiLThiZDlkZjhiOWNmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIDkggwDQYJKoZIhvcNAQELBQADggEBAKS/EMQK+E281mDhpW+w4AlcQX9P 2JL4roknXDk7tfBEjfqEGgU/QNQ24peDyXV3OG5BXBd+rBieKj10Fim0bWkxYl9O jWsVKNVWtyiCSslrLHv81evT3MWkXRvlNuCAjALgqsS/YfQQDSsln0PhW4wFS3aC hRpK92+YqvxEvQ7olYvK21K6BdJnVPDFQ1itnLDzd9uw1xQ2f6c43cZmOxmH4nud WBus53lzm5v9aJZvRfhGaBPFOy8L8PTNpq1y9d4jb3wI5iJNgk7ZnNWluIfQk/Iz hJ2m/9OkczI04I4fgloQY85r7RQ8Bk10dfYuX/Uvm80fkzpPrSX6ho5kGCM= -----END CERTIFICATE-----Generated at Fri May 9 17:51:55 2025 by rpki-client