$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242f6655-451b-4bab-9c74-e01e9280696c.roa File: 242f6655-451b-4bab-9c74-e01e9280696c.roa (raw, json) Hash identifier: 0MQnYMRx1YqBENUY4xbqFnTgLu8DI3b1nnUNj3IE6Po= Subject key identifier: 81:F1:D2:A7:5B:76:37:0D:2D:9B:50:1C:80:B6:C0:EC:6D:6C:6C:8C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 502565ACC206B3398EB65DE0FEB077E0B15C1C94 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242f6655-451b-4bab-9c74-e01e9280696c.roa Signing time: Mon 16 Jun 2025 18:01:42 +0000 ROA not before: Mon 16 Jun 2025 18:01:42 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:25:65:ac:c2:06:b3:39:8e:b6:5d:e0:fe:b0:77:e0:b1:5c:1c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:01:42 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=197404be1146e93188f6153c674df0abf973676b152122819650f0e125b90d61, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:1e:df:aa:d8:df:2a:65:9a:6b:5f:61:48: c4:1f:44:f1:b4:47:1e:fe:06:ff:14:75:2c:e6:45: cc:ef:63:00:34:c4:41:1d:e0:92:b0:35:a9:a6:76: 86:50:93:9d:a3:9f:06:ec:23:73:0d:2a:da:24:7b: c4:39:bf:51:ca:93:af:bb:f1:4d:bd:09:b9:2e:5c: 4b:d1:f3:79:7f:f4:b8:ac:14:90:af:57:e8:f2:38: d0:7f:ee:0c:d5:90:a9:ac:8e:45:2b:31:bc:d0:1d: 92:9a:96:bf:e9:5e:45:ab:f7:88:40:da:de:ce:31: c6:d8:41:1d:07:3e:9b:ef:da:c5:32:ca:11:06:4a: a7:08:79:1f:59:13:38:17:ed:4f:07:e5:93:c0:73: a2:49:3a:ca:a1:ef:c5:e7:39:8f:b0:75:75:56:78: 86:00:ca:50:f0:ae:c3:3c:66:11:3f:52:77:52:8b: 23:0d:14:f1:fb:1d:97:5f:f9:eb:7a:1e:6b:7a:3e: 58:4d:f9:03:1b:b5:b6:67:7f:07:ed:6e:14:f6:68: 66:39:12:01:13:f7:6d:7a:07:0f:2f:c7:1b:ee:47: b5:8b:6a:78:78:36:6e:a0:07:73:4d:ab:4c:e2:ef: 84:a4:e7:eb:75:c3:71:81:37:70:bd:a6:a8:e6:65: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:F1:D2:A7:5B:76:37:0D:2D:9B:50:1C:80:B6:C0:EC:6D:6C:6C:8C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/242f6655-451b-4bab-9c74-e01e9280696c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.253.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:50:09:13:b7:95:22:6e:ad:0a:54:eb:b5:eb:86:72:08:fb: c5:71:4c:39:9d:d7:b2:b1:0e:36:18:68:a1:59:cc:34:33:51: 21:31:32:87:a5:b9:64:3b:1f:ea:b2:a6:45:f0:bf:85:ba:86: a3:89:f1:a5:53:14:04:4e:e8:9f:8a:7b:65:d3:ec:0b:4c:51: 5e:88:b7:91:b8:4d:96:2e:d9:b6:1f:96:a6:c0:35:e7:ec:b5: 03:f7:a9:34:c1:48:60:39:73:eb:d8:a8:e3:9a:42:d4:ad:a3: 56:0d:3d:24:20:86:7b:93:67:81:bc:9f:e1:44:da:78:fc:97: 81:be:55:0e:08:3c:54:33:36:a7:9b:b7:2a:07:22:48:61:c0: 81:e0:a3:80:c4:34:c9:fc:c7:7f:94:c4:8a:93:1e:ec:05:2c: ac:54:79:99:dd:44:82:6f:ca:52:d0:a8:a2:5d:f8:ae:0a:79: 7c:98:ba:9d:c8:08:30:fe:d7:51:15:f8:fd:9d:ad:05:99:fa: 9b:8a:50:3f:d2:d8:6b:15:22:e0:39:75:c1:2f:c7:3b:9e:91: a9:39:b7:20:1e:e6:95:c1:f3:38:35:cb:d8:80:6f:62:1d:15: 0f:b8:63:97:bf:dc:aa:7d:f2:98:cb:ea:bd:d9:ab:57:7d:4c: ca:39:16:7f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUCVlrMIGszmOtl3g/rB34LFcHJQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgwMTQyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTc0MDRiZTExNDZlOTMxODhmNjE1M2M2NzRkZjBhYmY5 NzM2NzZiMTUyMTIyODE5NjUwZjBlMTI1YjkwZDYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMDB7fqtjfKmWaa19hSMQfRPG0Rx7+Bv8UdSzmRczvYwA0 xEEd4JKwNammdoZQk52jnwbsI3MNKtoke8Q5v1HKk6+78U29CbkuXEvR83l/9Lis FJCvV+jyONB/7gzVkKmsjkUrMbzQHZKalr/pXkWr94hA2t7OMcbYQR0HPpvv2sUy yhEGSqcIeR9ZEzgX7U8H5ZPAc6JJOsqh78XnOY+wdXVWeIYAylDwrsM8ZhE/UndS iyMNFPH7HZdf+et6Hmt6PlhN+QMbtbZnfwftbhT2aGY5EgET9216Bw8vxxvuR7WL anh4Nm6gB3NNq0zi74Sk5+t1w3GBN3C9pqjmZb7NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgfHSp1t2Nw0tm1AcgLbA7G1sbIwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0MmY2NjU1LTQ1MWItNGJhYi05Yzc0LWUwMWU5MjgwNjk2Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/0wDQYJKoZIhvcNAQELBQADggEBAE1QCRO3lSJurQpU67XrhnII+8Vx TDmd17KxDjYYaKFZzDQzUSExMoeluWQ7H+qypkXwv4W6hqOJ8aVTFARO6J+Ke2XT 7AtMUV6It5G4TZYu2bYflqbANefstQP3qTTBSGA5c+vYqOOaQtSto1YNPSQghnuT Z4G8n+FE2nj8l4G+VQ4IPFQzNqebtyoHIkhhwIHgo4DENMn8x3+UxIqTHuwFLKxU eZndRIJvylLQqKJd+K4KeXyYup3ICDD+11EV+P2drQWZ+puKUD/S2GsVIuA5dcEv xzuekak5tyAe5pXB8zg1y9iAb2IdFQ+4Y5e/3Kp98pjL6r3Zq1d9TMo5Fn8= -----END CERTIFICATE-----Generated at Sun Jun 29 07:41:53 2025 by rpki-client