$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80226862-313c-44d3-ba20-e1bc6091c063.roa File: 80226862-313c-44d3-ba20-e1bc6091c063.roa (raw, json) Hash identifier: 72dvkYYCeGjFHq9tTvhiWYTCnbNhJalG7hMmRKF08zA= Subject key identifier: 43:96:0E:C9:70:52:52:3C:F5:41:F1:69:D1:6A:60:F1:90:5F:7E:21 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E9FE43E19BF77AC3A8AAA239047F3E6D61B93D9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80226862-313c-44d3-ba20-e1bc6091c063.roa Signing time: Mon 16 Jun 2025 17:51:44 +0000 ROA not before: Mon 16 Jun 2025 17:51:44 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.119.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:9f:e4:3e:19:bf:77:ac:3a:8a:aa:23:90:47:f3:e6:d6:1b:93:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:51:44 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=2bb96a97de838f02ab862cf12e877b702881acc4ed72ab9243056d1cbb7680dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:0a:ba:d1:6b:5d:4e:0a:f7:93:d2:4e:8e: 33:bf:1f:d8:ea:d2:72:2e:07:cc:16:11:6a:a6:d7: 6c:56:a1:8c:6a:47:9a:c4:8d:67:3f:dc:1d:f2:8f: 20:27:41:27:7a:cb:f2:b0:ad:0b:4c:b3:02:63:22: 55:64:c4:e9:22:83:99:aa:70:1c:e2:8d:a6:e1:ec: d4:17:41:47:f0:32:6b:d6:08:32:b7:c7:46:bb:cc: da:d6:07:b6:8b:0a:4c:bc:60:9f:29:ab:c4:e3:35: dc:c5:f9:44:f2:64:87:de:35:48:13:15:87:46:c7: d7:98:69:0a:b4:01:b3:3d:df:b1:95:a1:80:11:a2: 32:16:6c:74:bf:b8:c3:5c:78:46:8c:37:04:b6:15: e4:2e:65:08:c9:4a:17:07:8c:e7:b2:95:d4:06:bf: 7e:db:1c:04:30:18:9a:3d:aa:1d:6e:c4:f1:b9:c8: fe:13:8f:5e:eb:0c:da:af:e1:8f:1a:7b:17:42:45: 60:55:c8:9a:4d:87:c3:ae:38:7f:d2:01:d1:8a:c6: d4:14:4c:b2:d2:2c:77:ca:22:0c:c9:81:94:f2:cc: e1:4b:bd:20:a3:8d:c2:8f:73:32:6a:52:9b:0b:4f: 76:ac:f8:41:af:02:d3:e0:d2:43:5e:69:24:13:a7: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:96:0E:C9:70:52:52:3C:F5:41:F1:69:D1:6A:60:F1:90:5F:7E:21 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80226862-313c-44d3-ba20-e1bc6091c063.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.119.224.0/19 Signature Algorithm: sha256WithRSAEncryption 74:d3:9d:9a:ba:cf:cd:0d:e7:75:11:b2:a4:4e:ec:e3:e1:13: 82:9b:b0:9c:8d:aa:f0:bb:fc:1f:70:19:04:40:43:17:c7:da: 3e:75:70:3a:b7:97:d2:2f:5e:a7:bb:58:0f:2e:51:73:ef:36: 28:b2:77:1e:b8:8c:dc:85:4d:16:a9:b5:f6:d2:85:0f:7b:b8: 2c:c6:8d:bb:db:63:41:30:cd:ef:88:a3:67:1e:b6:ce:70:bf: 79:19:00:1b:8e:b8:6d:47:27:15:10:c0:13:0e:de:99:29:ea: 2d:ce:b9:d8:52:38:69:35:56:08:14:e5:fa:7a:dd:df:97:4f: ca:c5:bb:b8:b7:ba:62:15:7d:28:0a:a6:38:1c:69:e2:ed:13: 82:85:bc:9c:35:79:68:5d:c6:fe:0c:13:ad:46:ad:5a:d0:08: 9c:08:fc:60:c4:78:5a:44:33:af:95:5b:a7:b4:07:26:da:ad: d0:02:2f:7a:56:44:bc:ff:1f:47:29:c8:d4:7b:49:18:5e:b5: 6f:87:8b:57:2f:db:65:1e:e5:6e:4a:24:ef:1c:b3:77:d8:55: 33:7b:4b:fe:7d:bf:84:e4:77:a8:9f:1b:b5:d6:d0:30:d1:8c: 3c:05:2c:f3:db:48:fb:02:53:c9:05:a9:cb:69:83:31:af:e0: 32:3d:d2:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTp/kPhm/d6w6iqojkEfz5tYbk9kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc1MTQ0WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYmI5NmE5N2RlODM4ZjAyYWI4NjJjZjEyZTg3N2I3MDI4 ODFhY2M0ZWQ3MmFiOTI0MzA1NmQxY2JiNzY4MGRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCO3gq60WtdTgr3k9JOjjO/H9jq0nIuB8wWEWqm12xWoYxq R5rEjWc/3B3yjyAnQSd6y/KwrQtMswJjIlVkxOkig5mqcBzijabh7NQXQUfwMmvW CDK3x0a7zNrWB7aLCky8YJ8pq8TjNdzF+UTyZIfeNUgTFYdGx9eYaQq0AbM937GV oYARojIWbHS/uMNceEaMNwS2FeQuZQjJShcHjOeyldQGv37bHAQwGJo9qh1uxPG5 yP4Tj17rDNqv4Y8aexdCRWBVyJpNh8OuOH/SAdGKxtQUTLLSLHfKIgzJgZTyzOFL vSCjjcKPczJqUpsLT3as+EGvAtPg0kNeaSQTp9MTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQ5YOyXBSUjz1QfFp0Wpg8ZBffiEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwMjI2ODYyLTMxM2MtNDRkMy1iYTIwLWUxYmM2MDkxYzA2My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU0d+AwDQYJKoZIhvcNAQELBQADggEBAHTTnZq6z80N53URsqRO7OPhE4Kb sJyNqvC7/B9wGQRAQxfH2j51cDq3l9IvXqe7WA8uUXPvNiiydx64jNyFTRaptfbS hQ97uCzGjbvbY0Ewze+Io2cets5wv3kZABuOuG1HJxUQwBMO3pkp6i3OudhSOGk1 VggU5fp63d+XT8rFu7i3umIVfSgKpjgcaeLtE4KFvJw1eWhdxv4ME61GrVrQCJwI /GDEeFpEM6+VW6e0BybardACL3pWRLz/H0cpyNR7SRhetW+Hi1cv22Ue5W5KJO8c s3fYVTN7S/59v4Tkd6ifG7XW0DDRjDwFLPPbSPsCU8kFqctpgzGv4DI90nw= -----END CERTIFICATE-----Generated at Sun Jun 29 14:24:10 2025 by rpki-client