$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08c42922-6d4e-4f79-9946-6d0f40db0803.roa File: 08c42922-6d4e-4f79-9946-6d0f40db0803.roa (raw, json) Hash identifier: 2V33neLQm4tMo1JxmaO5iSpl44xwXqHqrpPaWq83u18= Subject key identifier: 34:5B:25:63:66:B6:F2:80:75:54:6A:56:E1:76:96:B3:C9:08:5A:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7099896B9C92BEEE9CDE678429A9F7B0289AA767 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08c42922-6d4e-4f79-9946-6d0f40db0803.roa Signing time: Mon 16 Jun 2025 18:01:39 +0000 ROA not before: Mon 16 Jun 2025 18:01:39 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:99:89:6b:9c:92:be:ee:9c:de:67:84:29:a9:f7:b0:28:9a:a7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:01:39 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=0b2c42d42e450d467332fb0fed18a1acff11359b755a621684be040b5c8a1793, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5c:e9:f4:79:bc:29:06:6a:df:51:3e:a9:25: 9a:83:1e:8a:50:cb:d8:17:84:69:44:2a:69:fb:3f: ec:06:68:a4:79:38:39:00:d2:ba:b7:64:25:45:6a: 31:d7:ee:dc:9b:66:a5:3b:b9:27:06:2c:39:21:41: 88:89:97:1d:84:a2:79:3a:e1:f2:f9:75:b7:dd:0a: f5:26:1e:1d:0d:8e:7d:04:69:66:3b:a2:21:4b:bb: 21:cd:ff:71:82:5e:2a:c7:a4:d1:e2:68:8f:45:0a: 08:76:b4:74:2c:b1:e7:85:10:98:90:5e:28:c4:40: 0a:d3:17:07:07:b3:c4:03:71:75:aa:4a:8c:4a:cc: 6e:5c:0e:aa:3e:fd:9f:cc:a2:bd:8f:dd:a1:25:bc: fc:93:93:42:2c:14:83:cb:b5:f1:8c:b7:36:34:37: 0e:22:6e:6f:9a:23:3c:81:82:8c:e3:a0:84:07:85: 78:b6:f2:75:ca:a6:a9:e2:8a:b1:27:22:83:60:68: cf:7c:f9:8e:a5:25:0a:57:c4:a0:66:5a:83:79:d3: ee:bb:81:42:4b:53:da:e2:fc:fe:7e:d0:be:28:61: 9e:29:8e:64:96:5e:b6:f7:ea:1c:1e:ff:9b:56:20: 3a:6a:72:28:3f:78:a6:a1:f9:11:4b:fa:8b:91:bd: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5B:25:63:66:B6:F2:80:75:54:6A:56:E1:76:96:B3:C9:08:5A:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08c42922-6d4e-4f79-9946-6d0f40db0803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.250.0/24 Signature Algorithm: sha256WithRSAEncryption 73:9b:f7:f2:e3:1a:0f:0a:4c:54:91:d0:ba:d3:5d:ae:9d:24: 93:c8:0c:f3:73:10:d1:60:cb:32:79:d8:f4:c6:7d:39:2a:0d: 48:94:3a:96:35:f0:93:e7:54:57:b5:f7:97:1f:f4:c1:2c:48: a4:fb:43:13:d0:12:7c:61:dd:3e:26:9c:8e:17:25:2a:8c:9f: 2e:11:e2:55:cb:1d:c7:68:27:c6:e4:ec:ce:85:78:ea:92:18: 6a:8b:bc:95:d2:66:23:76:d1:28:cc:1b:92:23:b3:6c:2f:d5: 65:d0:bc:7c:e6:bf:f3:50:32:10:65:3a:06:93:15:21:97:22: e6:d5:0b:9b:67:2b:4c:32:96:1a:c1:55:7c:00:f0:f3:09:f2: 09:51:0c:ff:a0:56:15:30:43:4d:e2:0a:04:bc:80:db:42:70: dd:a1:c5:fb:c7:58:2e:23:91:09:38:89:21:5b:75:7e:a3:aa: ec:85:58:fb:57:29:a3:38:e5:44:c9:72:45:96:2d:bc:9b:65: 58:92:6e:66:51:c6:06:a0:43:bc:fc:b2:f8:ec:ad:29:5f:22: 9b:54:c9:9c:88:5d:3e:0a:a0:df:38:ab:45:f7:93:05:96:5a: 66:ad:ad:65:b6:08:12:e2:56:d8:b3:fa:19:a3:f9:8e:50:de: 91:30:28:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcJmJa5ySvu6c3meEKan3sCiap2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgwMTM5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYjJjNDJkNDJlNDUwZDQ2NzMzMmZiMGZlZDE4YTFhY2Zm MTEzNTliNzU1YTYyMTY4NGJlMDQwYjVjOGExNzkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+XOn0ebwpBmrfUT6pJZqDHopQy9gXhGlEKmn7P+wGaKR5 ODkA0rq3ZCVFajHX7tybZqU7uScGLDkhQYiJlx2Eonk64fL5dbfdCvUmHh0Njn0E aWY7oiFLuyHN/3GCXirHpNHiaI9FCgh2tHQsseeFEJiQXijEQArTFwcHs8QDcXWq SoxKzG5cDqo+/Z/Mor2P3aElvPyTk0IsFIPLtfGMtzY0Nw4ibm+aIzyBgozjoIQH hXi28nXKpqniirEnIoNgaM98+Y6lJQpXxKBmWoN50+67gUJLU9ri/P5+0L4oYZ4p jmSWXrb36hwe/5tWIDpqcig/eKah+RFL+ouRvRrVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNFslY2a28oB1VGpW4XaWs8kIWs8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4YzQyOTIyLTZkNGUtNGY3OS05OTQ2LTZkMGY0MGRiMDgwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/owDQYJKoZIhvcNAQELBQADggEBAHOb9/LjGg8KTFSR0LrTXa6dJJPI DPNzENFgyzJ52PTGfTkqDUiUOpY18JPnVFe195cf9MEsSKT7QxPQEnxh3T4mnI4X JSqMny4R4lXLHcdoJ8bk7M6FeOqSGGqLvJXSZiN20SjMG5Ijs2wv1WXQvHzmv/NQ MhBlOgaTFSGXIubVC5tnK0wylhrBVXwA8PMJ8glRDP+gVhUwQ03iCgS8gNtCcN2h xfvHWC4jkQk4iSFbdX6jquyFWPtXKaM45UTJckWWLbybZViSbmZRxgagQ7z8svjs rSlfIptUyZyIXT4KoN84q0X3kwWWWmatrWW2CBLiVtiz+hmj+Y5Q3pEwKLQ= -----END CERTIFICATE-----Generated at Sun Jun 29 07:17:54 2025 by rpki-client