$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ede882b-9fe8-4fc0-8e4f-c80d9f8e6cd2.roa File: 7ede882b-9fe8-4fc0-8e4f-c80d9f8e6cd2.roa (raw, json) Hash identifier: h0bbe46M7GSB9CPj+zBnf/jlMOvd92uUNqxs1k+V5XI= Subject key identifier: 64:2B:4D:84:66:94:25:E6:E3:83:95:B1:9A:24:28:36:EC:FD:45:3E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C10702525E33DF102B0DA5B63906988A295F1BC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ede882b-9fe8-4fc0-8e4f-c80d9f8e6cd2.roa Signing time: Mon 16 Jun 2025 17:51:36 +0000 ROA not before: Mon 16 Jun 2025 17:51:36 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.119.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:10:70:25:25:e3:3d:f1:02:b0:da:5b:63:90:69:88:a2:95:f1:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:51:36 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=7e2e5ebd63ba604b0ec22e4eb4b0ef8fa00f26ed9656dfc8d753929aca567be8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b5:b2:03:e3:ab:e6:da:b5:35:08:fc:1d:8c: d2:ae:9b:ee:93:b2:0b:d9:55:01:f4:38:a7:11:7f: a0:84:90:0b:7c:59:dd:e4:52:6a:54:df:58:6a:31: 37:3f:79:91:f5:21:8c:3c:a5:8e:f1:80:46:e2:30: a4:a3:78:0d:ca:32:9a:c0:cc:3b:1d:9a:28:ce:e7: 19:0f:40:29:dc:4f:5b:ee:c0:25:81:c4:b6:ce:96: 8a:08:bb:e0:c2:50:0b:b2:a5:e4:64:34:65:af:8f: 31:6f:84:79:af:64:00:94:3f:03:94:68:46:ef:31: 22:9f:00:b8:c1:20:c8:d4:8d:58:0b:eb:d3:00:7b: e1:b9:28:14:1c:c8:ef:2e:b9:7b:fb:84:75:03:65: cb:13:63:64:8d:b5:bd:8e:49:ae:ee:02:29:75:36: c6:08:c0:97:6e:7d:26:dc:66:42:b8:ae:ae:21:40: d9:54:b7:2c:8f:59:86:47:81:f9:3d:f5:8b:10:f4: e3:23:a7:f7:4a:7f:85:b4:ee:17:5c:5c:88:8f:bf: ee:7d:49:0a:a5:fe:bf:87:87:a4:c2:fa:83:de:24: c0:26:c2:a3:58:ef:17:35:f9:1b:83:50:fe:a8:63: a9:f4:25:18:c6:9d:85:d3:a7:f4:98:18:70:46:33: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2B:4D:84:66:94:25:E6:E3:83:95:B1:9A:24:28:36:EC:FD:45:3E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7ede882b-9fe8-4fc0-8e4f-c80d9f8e6cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.119.210.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:ec:1e:a6:84:73:c4:16:aa:0b:8b:61:c7:44:9a:f8:94:24: 75:77:8d:f7:a3:9b:a8:73:16:df:cc:3a:42:35:fd:6f:c9:71: c2:5c:25:70:d0:42:15:64:69:f6:12:d2:c8:59:34:e7:5f:91: d4:9d:bf:e0:a8:d4:72:10:5f:68:f1:87:28:b2:ab:61:75:e4: b4:e5:20:2d:06:8f:9a:23:6e:07:26:58:0d:97:c5:7c:e9:75: 74:15:42:ce:7d:44:ad:0c:86:04:ed:b7:d0:9f:71:3d:54:56: 97:5a:78:36:bf:bc:83:2f:b1:f1:c5:36:8a:19:db:45:ff:e3: c5:98:d7:ac:94:f2:ac:b9:10:b6:54:ef:51:90:bf:a1:a3:c2: ca:b9:6a:ad:8e:e5:39:2b:56:ee:15:91:f5:66:ca:5d:4e:5d: 6d:65:cb:d3:bb:cc:e5:87:6d:b2:e0:00:ae:af:9d:b5:2c:f2: 91:0a:90:34:6a:42:ca:8d:52:6d:94:8c:73:db:7b:d1:9e:55: 3a:8e:68:5b:14:be:d2:1a:5f:41:6f:6e:88:24:bc:86:cd:1d: 79:1c:d0:da:83:3c:c1:51:37:e0:ef:2c:fe:d7:0c:5d:2d:30: fb:05:be:2b:f1:8c:ca:6f:22:e7:da:d6:23:05:df:9e:ef:74: cd:8c:bf:27 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTBBwJSXjPfECsNpbY5BpiKKV8bwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc1MTM2WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZTJlNWViZDYzYmE2MDRiMGVjMjJlNGViNGIwZWY4ZmEw MGYyNmVkOTY1NmRmYzhkNzUzOTI5YWNhNTY3YmU4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDqtbID46vm2rU1CPwdjNKum+6TsgvZVQH0OKcRf6CEkAt8 Wd3kUmpU31hqMTc/eZH1IYw8pY7xgEbiMKSjeA3KMprAzDsdmijO5xkPQCncT1vu wCWBxLbOlooIu+DCUAuypeRkNGWvjzFvhHmvZACUPwOUaEbvMSKfALjBIMjUjVgL 69MAe+G5KBQcyO8uuXv7hHUDZcsTY2SNtb2OSa7uAil1NsYIwJdufSbcZkK4rq4h QNlUtyyPWYZHgfk99YsQ9OMjp/dKf4W07hdcXIiPv+59SQql/r+Hh6TC+oPeJMAm wqNY7xc1+RuDUP6oY6n0JRjGnYXTp/SYGHBGMxk/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZCtNhGaUJebjg5WxmiQoNuz9RT4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdlZGU4ODJiLTlmZTgtNGZjMC04ZTRmLWM4MGQ5ZjhlNmNkMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0d9IwDQYJKoZIhvcNAQELBQADggEBAE7sHqaEc8QWqguLYcdEmviUJHV3 jfejm6hzFt/MOkI1/W/JccJcJXDQQhVkafYS0shZNOdfkdSdv+Co1HIQX2jxhyiy q2F15LTlIC0Gj5ojbgcmWA2XxXzpdXQVQs59RK0MhgTtt9CfcT1UVpdaeDa/vIMv sfHFNooZ20X/48WY16yU8qy5ELZU71GQv6Gjwsq5aq2O5TkrVu4VkfVmyl1OXW1l y9O7zOWHbbLgAK6vnbUs8pEKkDRqQsqNUm2UjHPbe9GeVTqOaFsUvtIaX0Fvbogk vIbNHXkc0NqDPMFRN+DvLP7XDF0tMPsFvivxjMpvIufa1iMF357vdM2Mvyc= -----END CERTIFICATE-----Generated at Sun Jun 29 05:18:33 2025 by rpki-client