$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1267e82a-7f12-45b7-a2e5-131a59a06c58.roa File: 1267e82a-7f12-45b7-a2e5-131a59a06c58.roa (raw, json) Hash identifier: kG8bTs5C0lLf91uW1orFmWImEJ45SkkahsYCMCvxYt4= Subject key identifier: 57:48:D1:E7:FE:69:4E:43:98:C5:96:9D:1A:4E:86:AD:A1:67:35:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1604A0ED2B1665B62636748260C785BC133796C7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1267e82a-7f12-45b7-a2e5-131a59a06c58.roa Signing time: Mon 16 Jun 2025 18:01:05 +0000 ROA not before: Mon 16 Jun 2025 18:01:05 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:04:a0:ed:2b:16:65:b6:26:36:74:82:60:c7:85:bc:13:37:96:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:01:05 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=f85d836b91d70d05dada27265b3ad5297f1416f4c1d496715c7331df800feb93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e4:24:83:9f:a7:43:1f:33:6b:d0:f8:af:48: f2:e6:29:76:ff:2b:cf:0c:0a:13:79:e1:56:8d:c4: 03:26:7f:77:a6:8a:df:28:49:da:c4:a8:28:92:91: 4b:bb:64:94:a5:ce:36:f9:6d:f3:b3:be:71:e9:a7: 11:8c:e2:ba:76:c0:78:2f:54:00:b3:da:42:4f:ec: 90:cd:ce:74:7d:36:80:31:d0:26:ce:47:f5:28:7d: 22:bf:68:41:0c:8c:dd:40:84:d7:42:3b:65:cd:83: 97:62:d4:ac:f3:0e:66:c7:14:b8:97:dd:b1:b7:06: 2b:47:c9:fb:b4:16:30:bc:e6:73:c0:20:18:a1:54: c8:59:1c:55:f9:cd:48:a7:45:64:a7:08:32:2b:08: 81:ed:1a:f0:4f:fc:08:9f:b6:e1:4b:69:0a:c6:d3: 94:5c:e6:49:63:43:50:e8:6c:43:49:b3:06:c3:70: c9:68:37:9e:2f:9c:93:ec:c6:98:61:e5:db:c2:21: a5:b2:4e:d9:76:ac:8b:36:c4:ee:6b:7b:30:ae:54: 6b:a3:ee:65:3f:3d:98:ab:fc:ea:26:5e:4c:14:9a: d9:27:f6:fc:5e:31:6c:ba:ca:aa:d5:54:c0:7c:df: da:88:34:18:33:38:08:02:f2:83:7b:82:bc:9f:7b: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:48:D1:E7:FE:69:4E:43:98:C5:96:9D:1A:4E:86:AD:A1:67:35:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1267e82a-7f12-45b7-a2e5-131a59a06c58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.41.0/24 Signature Algorithm: sha256WithRSAEncryption a9:26:ad:d9:93:9e:71:08:48:ec:d4:f0:2b:c4:6a:1b:1c:b2: 9b:05:18:b8:fe:75:4e:cc:03:8d:2d:7d:8e:cd:fd:15:22:04: 40:b8:90:dc:f2:34:05:96:8e:94:86:2b:5b:c6:8c:41:41:90: 5a:db:14:87:43:4b:43:a5:b3:a0:be:c4:a3:3e:77:46:43:3f: a9:c3:5a:34:11:c9:be:8e:5a:19:a1:9a:2d:86:07:90:01:c0: a1:54:49:d5:9a:e8:0f:23:79:21:91:6b:23:5e:6f:86:7d:db: 39:85:45:81:79:17:4d:fe:33:43:36:b7:3f:21:03:6f:45:fe: 1b:03:ed:a0:42:67:7d:59:a3:70:31:15:ef:9d:fa:99:d0:96: 53:3c:ee:c7:a0:8d:9d:7f:ec:af:3a:da:1f:33:ea:97:b1:7f: 8f:16:3b:81:d8:82:84:2b:68:1d:ce:47:97:99:fe:17:e0:14: 71:ad:3f:f1:59:7c:6d:30:4c:54:d8:be:d2:9a:98:aa:db:9b: b9:f3:bf:c6:8c:97:6b:40:15:77:7b:cb:ff:f1:8c:ea:85:40: a6:77:d5:7b:06:d8:c0:d3:e0:9c:50:04:26:40:0d:23:37:92: 53:fc:76:60:1d:d9:15:df:bb:ad:65:de:c7:10:c2:62:0a:60: 1b:9e:51:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFgSg7SsWZbYmNnSCYMeFvBM3lscwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgwMTA1WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmODVkODM2YjkxZDcwZDA1ZGFkYTI3MjY1YjNhZDUyOTdm MTQxNmY0YzFkNDk2NzE1YzczMzFkZjgwMGZlYjkzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC55CSDn6dDHzNr0PivSPLmKXb/K88MChN54VaNxAMmf3em it8oSdrEqCiSkUu7ZJSlzjb5bfOzvnHppxGM4rp2wHgvVACz2kJP7JDNznR9NoAx 0CbOR/UofSK/aEEMjN1AhNdCO2XNg5di1KzzDmbHFLiX3bG3BitHyfu0FjC85nPA IBihVMhZHFX5zUinRWSnCDIrCIHtGvBP/AiftuFLaQrG05Rc5kljQ1DobENJswbD cMloN54vnJPsxphh5dvCIaWyTtl2rIs2xO5rezCuVGuj7mU/PZir/OomXkwUmtkn 9vxeMWy6yqrVVMB839qINBgzOAgC8oN7gryfe8A1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV0jR5/5pTkOYxZadGk6GraFnNf0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEyNjdlODJhLTdmMTItNDViNy1hMmU1LTEzMWE1OWEwNmM1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XykwDQYJKoZIhvcNAQELBQADggEBAKkmrdmTnnEISOzU8CvEahscspsF GLj+dU7MA40tfY7N/RUiBEC4kNzyNAWWjpSGK1vGjEFBkFrbFIdDS0Ols6C+xKM+ d0ZDP6nDWjQRyb6OWhmhmi2GB5ABwKFUSdWa6A8jeSGRayNeb4Z92zmFRYF5F03+ M0M2tz8hA29F/hsD7aBCZ31Zo3AxFe+d+pnQllM87segjZ1/7K862h8z6pexf48W O4HYgoQraB3OR5eZ/hfgFHGtP/FZfG0wTFTYvtKamKrbm7nzv8aMl2tAFXd7y//x jOqFQKZ31XsG2MDT4JxQBCZADSM3klP8dmAd2RXfu61l3scQwmIKYBueUaQ= -----END CERTIFICATE-----Generated at Sun Jun 29 05:10:47 2025 by rpki-client