$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/035ae67f-230c-49a1-8206-94849e19dd21.roa File: 035ae67f-230c-49a1-8206-94849e19dd21.roa (raw, json) Hash identifier: EKC+nOxfCEKyK8/B7a8876el+mzDMwY/vMvVc9UvTxI= Subject key identifier: 39:1F:03:79:EA:D3:DD:FE:A1:91:50:FB:83:F0:D7:0C:CB:76:8D:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3FD584EA062A228696FD293B0A06680FE387620C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/035ae67f-230c-49a1-8206-94849e19dd21.roa Signing time: Mon 09 Jun 2025 18:21:53 +0000 ROA not before: Mon 09 Jun 2025 18:21:53 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:d5:84:ea:06:2a:22:86:96:fd:29:3b:0a:06:68:0f:e3:87:62:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:21:53 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=d3feec6bbd9f73b262317f41bc023d67786ea5b1432d921690d411a0c355b65e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:4b:45:81:3d:c0:29:d7:2b:74:5f:da:2a: dd:7f:91:d5:0a:96:59:c9:4b:b0:62:61:3e:12:ed: bb:3c:49:e8:29:36:ad:25:d4:19:a9:83:8a:4d:2a: 1c:7d:e8:fd:fc:e3:ba:e2:ea:c4:57:a8:69:77:dc: ba:0c:6f:6b:16:c3:64:c1:49:34:6e:60:7c:08:d7: 02:73:4f:1e:54:fb:92:0e:f0:cb:fd:4c:c4:1f:4d: 8d:f5:25:73:73:23:34:8e:e3:23:a8:6e:c3:74:54: c4:dd:d3:b0:1c:e9:c7:66:c4:4f:1f:db:38:53:d9: 4d:fe:c3:db:00:8c:4c:ac:9d:d2:cf:fd:25:60:99: e7:a6:74:46:0c:1a:8c:80:a9:e1:47:16:37:d6:79: 96:48:2e:b3:bf:89:ac:99:4b:ac:75:f2:31:5f:67: 3f:4e:57:17:7e:9e:51:8b:d2:dc:97:38:52:2a:7b: a5:87:24:b7:db:53:f7:b4:04:07:21:1c:75:77:65: 8a:c3:3c:dc:4f:fd:f3:89:c5:79:8b:1c:0c:ae:84: 4f:7e:c0:7d:e2:e2:08:63:66:24:a4:5f:89:03:62: ac:e3:c9:1b:a5:ed:5c:b2:96:35:12:5a:52:c0:6f: b5:5b:4e:c7:9c:2e:c3:c9:14:0d:a0:5d:a9:67:22: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1F:03:79:EA:D3:DD:FE:A1:91:50:FB:83:F0:D7:0C:CB:76:8D:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/035ae67f-230c-49a1-8206-94849e19dd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.52.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:b4:6e:0a:4e:bd:67:a0:5d:19:8d:9a:b5:96:8d:98:3f:74: d7:e6:c1:f0:c6:e2:09:5a:6d:80:64:74:92:82:d5:d7:f6:5b: 27:62:69:37:0e:37:56:ab:bc:84:b0:4f:ad:0c:cc:f1:dd:52: 9b:e4:b9:b1:6d:ba:13:c9:9b:57:0a:0f:c4:6f:24:12:48:84: 30:e7:f3:ff:58:11:df:09:0c:8e:85:f3:ba:2b:84:96:dd:98: a9:ce:51:30:a5:ef:7d:56:1b:7f:a5:07:c2:f5:4f:09:e8:d2: 92:f8:4a:aa:62:22:0b:91:e0:db:c5:46:7e:5e:91:35:fe:4b: b4:73:13:8c:10:67:0a:27:59:d3:1b:e6:cb:f3:8b:29:a6:a0: a5:3b:14:72:0a:07:d2:78:86:5d:87:50:1c:83:8b:2f:b8:26: 49:8c:8d:6f:22:ed:99:9f:b6:82:84:2e:5a:f3:19:9e:1a:a5: 20:a2:b3:44:4b:51:d9:4f:72:8c:9c:52:23:db:73:90:5b:91: ce:b5:80:6b:e7:c4:a8:5f:c7:db:11:eb:eb:b7:83:9b:42:00: 27:3c:ed:7a:87:43:42:94:40:4d:34:7a:b4:1c:c0:e6:6a:ef: 75:cf:ac:a6:13:69:86:19:aa:f9:3c:db:90:e7:19:f3:fa:8f: 62:f6:3a:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUP9WE6gYqIoaW/Sk7CgZoD+OHYgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgyMTUzWhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkM2ZlZWM2YmJkOWY3M2IyNjIzMTdmNDFiYzAyM2Q2Nzc4 NmVhNWIxNDMyZDkyMTY5MGQ0MTFhMGMzNTViNjVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVE0tFgT3AKdcrdF/aKt1/kdUKllnJS7BiYT4S7bs8Segp Nq0l1Bmpg4pNKhx96P3847ri6sRXqGl33LoMb2sWw2TBSTRuYHwI1wJzTx5U+5IO 8Mv9TMQfTY31JXNzIzSO4yOobsN0VMTd07Ac6cdmxE8f2zhT2U3+w9sAjEysndLP /SVgmeemdEYMGoyAqeFHFjfWeZZILrO/iayZS6x18jFfZz9OVxd+nlGL0tyXOFIq e6WHJLfbU/e0BAchHHV3ZYrDPNxP/fOJxXmLHAyuhE9+wH3i4ghjZiSkX4kDYqzj yRul7VyyljUSWlLAb7VbTsecLsPJFA2gXalnIrA7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUOR8DeerT3f6hkVD7g/DXDMt2jTMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzAzNWFlNjdmLTIzMGMtNDlhMS04MjA2LTk0ODQ5ZTE5ZGQyMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI28DQwDQYJKoZIhvcNAQELBQADggEBAIy0bgpOvWegXRmNmrWWjZg/dNfm wfDG4glabYBkdJKC1df2WydiaTcON1arvISwT60MzPHdUpvkubFtuhPJm1cKD8Rv JBJIhDDn8/9YEd8JDI6F87orhJbdmKnOUTCl731WG3+lB8L1Twno0pL4SqpiIguR 4NvFRn5ekTX+S7RzE4wQZwonWdMb5svziymmoKU7FHIKB9J4hl2HUByDiy+4JkmM jW8i7ZmftoKELlrzGZ4apSCis0RLUdlPcoycUiPbc5Bbkc61gGvnxKhfx9sR6+u3 g5tCACc87XqHQ0KUQE00erQcwOZq73XPrKYTaYYZqvk825DnGfP6j2L2OqM= -----END CERTIFICATE-----Generated at Sat Jun 14 06:18:26 2025 by rpki-client