$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68a01fd8-0772-45ba-b286-2938920c2e44.roa File: 68a01fd8-0772-45ba-b286-2938920c2e44.roa (raw, json) Hash identifier: oOfcc5OeK4Tnlj1MHKTitO9PiZV1ICYd6ch6+oUjtSo= Subject key identifier: 25:66:6D:63:7C:19:AF:3B:2F:B3:5A:62:5C:E7:CC:FC:BC:8F:CD:FF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 18531CD97A693FCFD74938A1C30983351B0797BA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68a01fd8-0772-45ba-b286-2938920c2e44.roa Signing time: Mon 16 Jun 2025 18:01:48 +0000 ROA not before: Mon 16 Jun 2025 18:01:48 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:53:1c:d9:7a:69:3f:cf:d7:49:38:a1:c3:09:83:35:1b:07:97:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 18:01:48 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=11fe5c2b3b1e3e8ba5a1c846619f5f421483dc88585b043c7efdd7de89f94b48, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:60:80:e8:f0:76:ad:c2:ab:1b:be:e9:6b: 6b:94:84:f1:d0:58:8e:2d:db:10:c4:f6:55:0a:79: 4f:13:f0:f9:e8:fa:29:2d:a5:56:25:d0:75:4c:11: bd:20:9e:37:b9:d4:fb:b5:e8:61:ef:af:61:a4:d2: 1a:14:fc:9d:50:42:5f:76:36:95:c2:0f:91:ec:f0: 5c:44:7f:2d:3d:ac:43:92:da:ab:36:0d:d1:62:39: 36:ef:dc:be:ad:71:36:e3:6f:b9:e6:bd:27:6b:da: 87:57:fb:a1:56:e9:84:5a:08:82:67:7f:97:dc:72: 47:a0:14:57:83:30:01:57:32:11:f4:08:97:23:94: 44:b4:32:9d:5a:a7:51:d5:dd:f6:1e:9b:d9:1d:61: 00:52:c0:38:3e:3e:f3:90:b4:6e:36:4b:cc:ea:be: 96:77:db:f3:95:54:53:9f:a7:64:d1:bf:c9:52:77: 43:97:16:7d:49:57:55:07:04:84:a1:1f:21:31:76: 3a:b1:49:21:39:ee:47:37:f7:32:76:83:40:a9:66: f8:67:be:f3:bc:73:d8:a4:49:40:f2:67:da:1e:12: c1:7c:dc:8a:91:94:d0:4c:04:49:de:88:46:6f:f4: 38:1a:e1:4d:2d:12:5c:48:c3:3b:05:f2:04:12:5f: 35:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:66:6D:63:7C:19:AF:3B:2F:B3:5A:62:5C:E7:CC:FC:BC:8F:CD:FF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/68a01fd8-0772-45ba-b286-2938920c2e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.241.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:2c:dc:58:07:37:30:f8:dd:97:4c:68:ab:69:1e:6e:9f:cd: 14:2e:ef:18:57:dd:50:6c:d3:38:00:1b:aa:36:92:22:8b:6b: 73:7a:86:58:5f:9d:47:39:69:35:7a:cf:d0:a5:5c:1d:02:ea: c9:a2:08:4a:09:72:8a:61:63:55:c9:49:45:62:61:30:be:aa: 25:e8:8b:f1:6b:b1:8a:16:a8:36:55:c0:2b:4f:20:86:b0:1a: bc:76:8a:a5:3c:ce:f5:27:48:f4:ad:09:c1:7e:09:2c:36:19: 13:5e:96:a8:aa:70:04:da:3f:84:e4:9f:ad:74:67:82:9a:8f: 21:c0:7d:09:7c:79:64:7d:4a:62:9b:c6:06:1f:00:9c:d7:c6: 08:a0:91:9a:db:88:68:1f:b3:69:ca:94:f1:ce:a6:b3:83:03: 90:ea:5c:8c:cb:d2:93:93:57:4b:13:69:63:c0:84:6c:ac:33: c0:25:b7:3c:f9:6f:8f:7f:cd:e2:34:be:4f:55:b1:a3:b6:c1: 09:f3:be:cb:ad:ac:bf:fd:50:08:fa:02:b1:b4:b5:21:d1:64: 04:d6:eb:8e:d4:5c:0d:2a:98:f9:cd:7e:90:89:5b:02:fb:c3: c3:5d:0f:6c:1c:3b:5d:57:b6:19:c4:7d:1c:e0:cb:45:78:7f: 04:67:dc:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGFMc2XppP8/XSTihwwmDNRsHl7owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTgwMTQ4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxMWZlNWMyYjNiMWUzZThiYTVhMWM4NDY2MTlmNWY0MjE0 ODNkYzg4NTg1YjA0M2M3ZWZkZDdkZTg5Zjk0YjQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4e2CA6PB2rcKrG77pa2uUhPHQWI4t2xDE9lUKeU8T8Pno +iktpVYl0HVMEb0gnje51Pu16GHvr2Gk0hoU/J1QQl92NpXCD5Hs8FxEfy09rEOS 2qs2DdFiOTbv3L6tcTbjb7nmvSdr2odX+6FW6YRaCIJnf5fcckegFFeDMAFXMhH0 CJcjlES0Mp1ap1HV3fYem9kdYQBSwDg+PvOQtG42S8zqvpZ32/OVVFOfp2TRv8lS d0OXFn1JV1UHBIShHyExdjqxSSE57kc39zJ2g0CpZvhnvvO8c9ikSUDyZ9oeEsF8 3IqRlNBMBEneiEZv9Dga4U0tElxIwzsF8gQSXzUjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJWZtY3wZrzsvs1piXOfM/LyPzf8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY4YTAxZmQ4LTA3NzItNDViYS1iMjg2LTI5Mzg5MjBjMmU0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/EwDQYJKoZIhvcNAQELBQADggEBACss3FgHNzD43ZdMaKtpHm6fzRQu 7xhX3VBs0zgAG6o2kiKLa3N6hlhfnUc5aTV6z9ClXB0C6smiCEoJcophY1XJSUVi YTC+qiXoi/FrsYoWqDZVwCtPIIawGrx2iqU8zvUnSPStCcF+CSw2GRNelqiqcATa P4Tkn610Z4KajyHAfQl8eWR9SmKbxgYfAJzXxgigkZrbiGgfs2nKlPHOprODA5Dq XIzL0pOTV0sTaWPAhGysM8Altzz5b49/zeI0vk9VsaO2wQnzvsutrL/9UAj6ArG0 tSHRZATW647UXA0qmPnNfpCJWwL7w8NdD2wcO11XthnEfRzgy0V4fwRn3B4= -----END CERTIFICATE-----Generated at Sun Jun 29 04:03:40 2025 by rpki-client