$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa File: 07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa (raw, json) Hash identifier: 7j+K+uyG96uq171Zk84/8I4DmH6QGQ/YWAT1nzunb+M= Subject key identifier: 31:BA:55:CA:A9:71:2B:BC:D7:BB:BF:9D:BD:CB:97:69:39:82:D9:8A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 52EB5971DE6552AB74749242E0BF16282DE89A33 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa Signing time: Mon 16 Jun 2025 18:11:33 +0000 ROA not before: Mon 16 Jun 2025 18:11:33 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:eb:59:71:de:65:52:ab:74:74:92:42:e0:bf:16:28:2d:e8:9a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:11:33 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=e2a2fb63d58b4eeba721551c26b2f7756a435a3bffc7f97f146098998cd728d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0b:de:67:dd:5a:95:ae:1c:58:d5:10:7b:1c: 1e:5e:e9:7f:ec:53:de:90:9b:85:db:4f:e5:70:7c: e7:1d:ea:1d:c8:e1:1c:fb:28:fb:83:1c:28:35:09: f3:83:06:e3:56:7e:83:66:d0:ef:b8:5d:61:6f:3e: be:e6:99:38:64:43:1f:a9:4f:04:3b:59:8a:fa:9a: 4b:51:bd:18:e0:4d:24:d1:15:1c:35:6c:5d:ee:52: 07:4a:e5:71:d2:c5:e6:5b:cd:e4:b5:75:65:71:aa: 5e:ae:9c:03:c1:6b:39:fb:5a:1f:8c:35:db:a8:fc: 1d:a0:3d:2d:c0:1c:9a:95:2b:a6:6a:53:14:09:57: 55:ad:17:d7:30:db:95:a6:cb:eb:c5:0e:ab:86:4e: 87:73:3b:4d:fd:3d:83:f4:f5:ff:a5:5c:2d:f8:cb: d2:79:26:59:c2:71:19:f9:d7:0f:55:d0:cf:e1:06: 9b:5a:d6:63:8f:56:e4:73:db:c3:d9:81:e4:1b:46: be:47:13:28:86:22:3d:a3:11:db:12:bc:94:20:32: 4a:90:a0:3a:56:9b:e8:1f:41:35:8e:96:89:15:42: 52:df:76:f8:0b:e7:83:00:82:7b:4c:05:89:34:ad: 26:9c:1a:90:20:67:a6:63:6b:0e:f9:b2:91:0c:d0: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BA:55:CA:A9:71:2B:BC:D7:BB:BF:9D:BD:CB:97:69:39:82:D9:8A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.0.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:65:3c:14:48:cd:83:c0:54:01:b2:56:c2:18:f0:7a:28:46: 91:28:a5:eb:45:87:14:39:3a:5f:fb:99:ff:d9:96:84:0a:06: c2:bf:58:ff:ef:8c:3e:21:e4:87:0d:a0:8b:50:32:cc:55:1f: 2a:3c:54:c0:b9:35:6d:32:f5:33:ea:2f:4b:49:c9:15:3e:e2: 8e:e8:c0:5a:fc:19:dd:6f:59:ea:63:5c:dd:fd:ae:1f:23:ec: 56:ba:78:6d:49:61:f9:b1:68:17:13:42:8e:08:52:a3:f6:6b: 47:03:02:af:55:2d:3c:e0:0a:d8:a5:69:7c:d7:6e:f9:ec:cf: 3e:d1:39:e0:dc:6f:53:8a:ad:7f:15:b0:08:f2:98:40:09:bc: 91:ca:33:d4:14:84:dc:5b:62:fb:87:c2:89:65:45:37:56:7c: 42:ea:e3:91:1e:da:f1:ed:7a:13:bb:20:4f:47:14:6b:50:71: f4:82:ea:d1:3a:ea:10:9d:11:5c:13:9b:8d:4f:00:fb:53:a5: 73:b7:35:b9:6a:29:9e:5a:85:b4:9b:44:aa:25:70:b6:7f:7d: c5:76:c8:31:14:ce:6b:3b:57:03:6d:8d:d1:17:4e:c6:c3:68: 17:68:56:e5:99:d9:51:1d:1d:66:8b:b9:a8:0e:89:66:90:46: 2c:8b:b0:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUutZcd5lUqt0dJJC4L8WKC3omjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgxMTMzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMmEyZmI2M2Q1OGI0ZWViYTcyMTU1MWMyNmIyZjc3NTZh NDM1YTNiZmZjN2Y5N2YxNDYwOTg5OThjZDcyOGQ0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCHC95n3VqVrhxY1RB7HB5e6X/sU96Qm4XbT+VwfOcd6h3I 4Rz7KPuDHCg1CfODBuNWfoNm0O+4XWFvPr7mmThkQx+pTwQ7WYr6mktRvRjgTSTR FRw1bF3uUgdK5XHSxeZbzeS1dWVxql6unAPBazn7Wh+MNduo/B2gPS3AHJqVK6Zq UxQJV1WtF9cw25Wmy+vFDquGTodzO039PYP09f+lXC34y9J5JlnCcRn51w9V0M/h Bpta1mOPVuRz28PZgeQbRr5HEyiGIj2jEdsSvJQgMkqQoDpWm+gfQTWOlokVQlLf dvgL54MAgntMBYk0rSacGpAgZ6Zjaw75spEM0NJDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMbpVyqlxK7zXu7+dvcuXaTmC2YowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA3ZjNmOWY5LTZhYjAtNDZiZC1iYzVmLTlkZmIyZjhiOGJkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XgAwDQYJKoZIhvcNAQELBQADggEBAGplPBRIzYPAVAGyVsIY8HooRpEo petFhxQ5Ol/7mf/ZloQKBsK/WP/vjD4h5IcNoItQMsxVHyo8VMC5NW0y9TPqL0tJ yRU+4o7owFr8Gd1vWepjXN39rh8j7Fa6eG1JYfmxaBcTQo4IUqP2a0cDAq9VLTzg CtilaXzXbvnszz7ROeDcb1OKrX8VsAjymEAJvJHKM9QUhNxbYvuHwollRTdWfELq 45Ee2vHtehO7IE9HFGtQcfSC6tE66hCdEVwTm41PAPtTpXO3NblqKZ5ahbSbRKol cLZ/fcV2yDEUzms7VwNtjdEXTsbDaBdoVuWZ2VEdHWaLuagOiWaQRiyLsB0= -----END CERTIFICATE-----Generated at Sun Jun 29 05:00:07 2025 by rpki-client