$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa File: 07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa (raw, json) Hash identifier: SV37JPvndoTOQQeXkUky66YTffMjyt7OuxtwpCRoJAQ= Subject key identifier: D9:B0:B4:11:5C:D2:8C:9E:58:2B:D1:63:E4:9A:03:9A:8B:EE:58:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: A3A4720D6BEA8F4FD5F72EF394ECC57A362CC3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa Signing time: Wed 21 May 2025 00:41:06 +0000 ROA not before: Wed 21 May 2025 00:41:06 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a3:a4:72:0d:6b:ea:8f:4f:d5:f7:2e:f3:94:ec:c5:7a:36:2c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:41:06 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=76f506705a97d53f0afd84076042ae860a8875055ec17655aa1b629eec22ea2c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ae:de:6f:3b:55:c8:c1:b9:9b:ad:4e:fc:41: fd:02:33:85:60:79:e9:a9:7a:9f:d4:f1:f4:56:f5: 32:ec:48:21:3b:67:11:ad:9e:ed:96:b3:99:96:f3: 36:bc:af:a0:66:1e:25:d5:b1:f7:05:23:57:0c:41: ed:b9:b3:b7:80:9c:c8:bf:53:e5:9f:0b:2c:45:b1: a1:ba:9c:d0:ef:0c:80:86:70:f6:78:f9:c3:a4:dd: a6:dc:9f:2a:fb:2c:f2:37:01:d7:65:64:8c:b4:be: 70:14:b6:9e:13:a1:ea:ba:29:0b:29:13:bf:9d:f8: 23:d0:95:62:52:18:5e:cb:32:2d:40:5f:08:a8:93: 00:64:3c:32:a7:67:aa:a1:89:52:2d:df:fd:2d:29: c0:ff:02:b6:73:05:12:b5:20:f9:b4:e7:18:b6:60: 82:a0:9b:a3:f3:d0:d6:62:2e:68:b8:35:81:26:cf: 55:ce:8c:17:e9:33:13:c0:64:a5:7d:09:95:75:1f: 8a:da:14:11:0e:97:d2:b7:0d:ca:77:c2:b1:47:54: 73:cd:a7:63:fe:df:52:e1:d6:27:fc:10:17:d9:02: 9d:4c:81:af:cb:88:72:d7:37:3b:35:7d:21:9b:ec: 7b:f2:6f:0e:ee:17:a1:85:e3:3d:cc:d8:b5:b0:1c: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:B4:11:5C:D2:8C:9E:58:2B:D1:63:E4:9A:03:9A:8B:EE:58:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07f3f9f9-6ab0-46bd-bc5f-9dfb2f8b8bd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.0.0/22 Signature Algorithm: sha256WithRSAEncryption 07:4c:25:55:86:89:a3:8b:fd:f2:6b:f9:8b:23:81:ff:e5:2e: 88:69:cb:e7:1d:b7:6d:cd:11:3f:43:70:83:7c:1e:a3:61:80: eb:9b:92:98:57:35:74:da:47:8a:fd:43:c6:5e:2a:c7:22:c6: 0e:50:40:5e:f1:d1:9a:6b:2e:6e:6f:72:17:0b:28:33:cb:a0: 04:02:3c:1d:d5:f6:49:0e:93:43:80:12:68:5f:fc:52:60:c9: 6b:9d:99:04:6b:5e:7f:64:cb:21:71:e0:11:a9:94:da:4a:f9: 07:a9:77:e4:74:1e:23:0a:c8:cd:65:67:4c:b5:bf:53:38:56: 60:8a:44:de:bf:dc:57:e5:94:18:2e:4f:66:3a:3b:7e:fc:1f: e6:18:87:26:c9:3f:42:a2:c4:53:37:3a:7f:9f:5b:d4:e5:4f: 34:51:5b:b1:7d:48:10:c6:07:a0:c5:8c:1d:c0:2b:b6:cf:f6: 2b:6f:1b:8c:df:a4:2d:4f:45:04:24:12:20:1a:41:de:e8:ca: 83:44:1c:72:23:d6:d4:3d:b5:9e:64:80:24:da:d6:45:83:10: ff:47:16:b6:09:cb:5e:81:f2:d4:74:73:b9:8c:e4:84:90:c3: bd:84:9c:ab:81:db:c5:85:19:87:1f:1c:0a:fb:1d:0b:b1:f0: 52:e6:13:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAKOkcg1r6o9P1fcu85TsxXo2LMMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDA0MTA2WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmY1MDY3MDVhOTdkNTNmMGFmZDg0MDc2MDQyYWU4NjBh ODg3NTA1NWVjMTc2NTVhYTFiNjI5ZWVjMjJlYTJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+rt5vO1XIwbmbrU78Qf0CM4Vgeempep/U8fRW9TLsSCE7 ZxGtnu2Ws5mW8za8r6BmHiXVsfcFI1cMQe25s7eAnMi/U+WfCyxFsaG6nNDvDICG cPZ4+cOk3abcnyr7LPI3AddlZIy0vnAUtp4Toeq6KQspE7+d+CPQlWJSGF7LMi1A XwiokwBkPDKnZ6qhiVIt3/0tKcD/ArZzBRK1IPm05xi2YIKgm6Pz0NZiLmi4NYEm z1XOjBfpMxPAZKV9CZV1H4raFBEOl9K3Dcp3wrFHVHPNp2P+31Lh1if8EBfZAp1M ga/LiHLXNzs1fSGb7Hvybw7uF6GF4z3M2LWwHN3VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU2bC0EVzSjJ5YK9Fj5JoDmovuWH0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA3ZjNmOWY5LTZhYjAtNDZiZC1iYzVmLTlkZmIyZjhiOGJkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XgAwDQYJKoZIhvcNAQELBQADggEBAAdMJVWGiaOL/fJr+Ysjgf/lLohp y+cdt23NET9DcIN8HqNhgOubkphXNXTaR4r9Q8ZeKscixg5QQF7x0ZprLm5vchcL KDPLoAQCPB3V9kkOk0OAEmhf/FJgyWudmQRrXn9kyyFx4BGplNpK+Qepd+R0HiMK yM1lZ0y1v1M4VmCKRN6/3FfllBguT2Y6O378H+YYhybJP0KixFM3On+fW9TlTzRR W7F9SBDGB6DFjB3AK7bP9itvG4zfpC1PRQQkEiAaQd7oyoNEHHIj1tQ9tZ5kgCTa 1kWDEP9HFrYJy16B8tR0c7mM5ISQw72EnKuB28WFGYcfHAr7HQux8FLmE48= -----END CERTIFICATE-----Generated at Sat Jun 14 05:43:23 2025 by rpki-client