$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b40ac1e-e997-4852-9eb8-c845296d5869.roa File: 2b40ac1e-e997-4852-9eb8-c845296d5869.roa (raw, json) Hash identifier: fOIWv3QGb9w/w2kt65T7K7222KMGYin8fCeyO7AnYNI= Subject key identifier: 5D:AE:DF:11:83:F9:B4:51:F4:3C:DF:BB:0E:50:0B:FA:BD:60:97:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 32AFB2355396E77D2D3DE9730FAA9736BCE07F31 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b40ac1e-e997-4852-9eb8-c845296d5869.roa Signing time: Mon 16 Jun 2025 17:40:22 +0000 ROA not before: Mon 16 Jun 2025 17:40:22 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 35.153.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:af:b2:35:53:96:e7:7d:2d:3d:e9:73:0f:aa:97:36:bc:e0:7f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:40:22 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=35970091518a99829c19fe5d0e530fcb70a5d8a7bb1ee6323bd2ff6e4f7f81ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:3e:0d:9a:80:3a:7e:bf:83:18:af:1e:12: 86:e9:39:d8:c5:c1:9e:ec:5e:c1:d1:6c:dd:08:6d: 46:c3:10:6b:d6:96:07:4f:ca:db:32:09:48:0b:33: c8:67:d9:d3:5e:05:1d:bc:0c:fc:06:8a:57:fe:70: 6f:57:7e:da:51:e1:fe:aa:35:65:12:37:71:84:ed: 02:20:e0:57:7c:3f:41:d4:f0:cd:94:8b:52:cf:b4: 13:ae:0f:b7:8b:66:67:ec:11:be:4e:6d:67:ca:c0: 16:65:28:a9:37:f7:e4:de:f3:c6:65:e5:ff:eb:20: 03:63:fc:61:dd:be:9c:79:f9:35:e0:0a:86:7a:9d: 4f:bf:bf:b3:2f:b1:aa:fb:e4:dd:3d:11:b2:4e:28: 1f:2b:9e:0f:4f:38:8d:99:43:94:83:5a:3d:6e:15: fc:81:46:0c:f1:11:f0:8b:c3:e3:3d:7a:dc:fb:1b: 46:59:d1:67:31:23:4d:cb:b7:f1:44:2b:22:3d:6d: d6:d7:79:71:b8:d3:01:3b:47:e1:5b:81:f7:32:50: 02:8d:88:41:af:f7:6c:7c:33:08:7d:88:49:79:3e: b0:29:e8:66:bc:94:5a:91:fb:8a:30:66:87:61:7c: 27:88:05:3c:67:22:56:6a:37:ea:aa:57:96:ef:15: a0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AE:DF:11:83:F9:B4:51:F4:3C:DF:BB:0E:50:0B:FA:BD:60:97:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b40ac1e-e997-4852-9eb8-c845296d5869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.153.2.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:81:61:2e:2e:81:6b:b8:72:0a:5c:da:71:10:01:cd:81:9c: 92:2e:dd:70:d4:01:f8:b5:98:e4:99:02:23:5a:d2:e1:3a:61: 19:09:26:6c:94:b7:84:b2:19:6a:25:e8:35:86:25:03:3f:ac: 9c:60:cb:25:16:d4:6f:f2:1c:13:19:10:e3:21:8f:c5:58:f6: f5:2e:47:fb:05:a8:14:d2:ac:b4:f3:d7:07:d6:60:f9:dc:60: fe:00:ab:9c:bc:ff:b6:ea:2a:ba:fa:dd:6e:58:c1:49:ac:74: c1:6a:55:41:88:a6:d0:13:f1:11:00:4c:fa:30:f3:b6:48:d7: 4b:65:2f:21:0e:0c:a1:ee:59:cf:34:6e:49:19:c9:d7:6d:e4: 52:d9:bf:21:77:b1:90:53:7b:7f:64:34:fe:b2:dd:eb:fd:8f: 0e:a7:a3:07:f8:68:9d:8c:ee:05:05:87:16:55:99:d9:53:3f: 6b:15:5c:8f:67:40:25:b6:25:73:ad:9e:65:ac:56:35:40:df: 80:c9:ce:b8:d8:da:fa:98:0f:49:d9:9e:5a:54:7d:6c:c1:f5: 5d:72:6e:56:c2:e0:3f:c3:aa:1a:f3:9d:d3:51:6e:6f:13:a3: d8:0f:70:ec:da:96:84:cc:3f:f9:ae:2c:71:03:aa:e6:51:52: d8:37:cf:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMq+yNVOW530tPelzD6qXNrzgfzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc0MDIyWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNTk3MDA5MTUxOGE5OTgyOWMxOWZlNWQwZTUzMGZjYjcw YTVkOGE3YmIxZWU2MzIzYmQyZmY2ZTRmN2Y4MWVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3kj4NmoA6fr+DGK8eEobpOdjFwZ7sXsHRbN0IbUbDEGvW lgdPytsyCUgLM8hn2dNeBR28DPwGilf+cG9XftpR4f6qNWUSN3GE7QIg4Fd8P0HU 8M2Ui1LPtBOuD7eLZmfsEb5ObWfKwBZlKKk39+Te88Zl5f/rIANj/GHdvpx5+TXg CoZ6nU+/v7Mvsar75N09EbJOKB8rng9POI2ZQ5SDWj1uFfyBRgzxEfCLw+M9etz7 G0ZZ0WcxI03Lt/FEKyI9bdbXeXG40wE7R+FbgfcyUAKNiEGv92x8Mwh9iEl5PrAp 6Ga8lFqR+4owZodhfCeIBTxnIlZqN+qqV5bvFaAdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUXa7fEYP5tFH0PN+7DlAL+r1gl4swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJiNDBhYzFlLWU5OTctNDg1Mi05ZWI4LWM4NDUyOTZkNTg2OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEjmQIwDQYJKoZIhvcNAQELBQADggEBABqBYS4ugWu4cgpc2nEQAc2BnJIu 3XDUAfi1mOSZAiNa0uE6YRkJJmyUt4SyGWol6DWGJQM/rJxgyyUW1G/yHBMZEOMh j8VY9vUuR/sFqBTSrLTz1wfWYPncYP4Aq5y8/7bqKrr63W5YwUmsdMFqVUGIptAT 8REATPow87ZI10tlLyEODKHuWc80bkkZyddt5FLZvyF3sZBTe39kNP6y3ev9jw6n owf4aJ2M7gUFhxZVmdlTP2sVXI9nQCW2JXOtnmWsVjVA34DJzrjY2vqYD0nZnlpU fWzB9V1yblbC4D/DqhrzndNRbm8To9gPcOzaloTMP/muLHEDquZRUtg3zxs= -----END CERTIFICATE-----Generated at Sun Jun 29 00:30:34 2025 by rpki-client