$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20dfdb8e-82f9-432c-9d09-08b35b26e968.roa File: 20dfdb8e-82f9-432c-9d09-08b35b26e968.roa (raw, json) Hash identifier: GQawUjSGLjE02KZsyK541KEXAIfAXKdirvC9Y0zQjVs= Subject key identifier: 28:DE:93:DA:8D:45:9B:85:2D:FB:36:07:16:96:FD:78:28:7F:FC:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C4931661805A4BC82D6DA519E17D8A0329B8771 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20dfdb8e-82f9-432c-9d09-08b35b26e968.roa Signing time: Tue 20 May 2025 17:12:01 +0000 ROA not before: Tue 20 May 2025 17:12:01 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:49:31:66:18:05:a4:bc:82:d6:da:51:9e:17:d8:a0:32:9b:87:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 17:12:01 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=b151c2cad75d4b4ef8316ea85712e342fc2b28fd3ce9a8fa7da7b65e8e9a8da7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:47:e2:7e:48:b6:bc:8d:d7:1b:97:f5:d5: ba:e4:3e:86:00:6c:c7:0f:b1:fa:dd:e0:a6:b9:ed: 4e:18:c1:90:96:75:96:51:9f:0a:05:0e:94:d4:77: 21:98:fb:e5:f8:16:64:4f:9d:ad:36:f9:9f:a2:ce: 2d:c3:ba:d4:c0:83:b5:a1:e0:7a:be:3a:4c:ce:b3: 05:5c:5e:b9:35:46:79:24:7e:b8:cf:3a:da:10:84: f0:14:7a:6b:00:ef:1d:94:21:f7:f4:d1:e1:c4:f4: 79:37:aa:d3:74:b4:3e:c1:29:53:30:a6:58:54:0c: 0c:a2:40:a6:a9:5e:34:8f:4f:76:22:d0:8e:6f:8d: 82:59:4c:df:ae:ad:b3:be:e4:7b:c0:91:5d:4f:d8: 42:9e:17:b4:2b:be:a9:39:a3:1f:61:1f:c4:2d:0b: 8d:f6:8a:04:61:0c:9a:12:ac:99:fc:24:eb:e2:e1: 79:dc:08:30:91:ac:3d:59:2b:13:41:ea:3d:27:87: 65:40:cc:d3:2a:7f:cd:03:5d:3c:86:cf:dd:49:be: be:b5:f4:04:65:05:7b:72:83:0f:cb:d6:cb:8c:a9: db:b5:9e:1e:6a:7d:af:ef:c0:dd:b7:3b:14:70:96: 24:14:44:5b:a8:52:31:f9:ad:40:d2:55:c4:9d:e2: a0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DE:93:DA:8D:45:9B:85:2D:FB:36:07:16:96:FD:78:28:7F:FC:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/20dfdb8e-82f9-432c-9d09-08b35b26e968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.46.0/24 Signature Algorithm: sha256WithRSAEncryption 31:6f:a6:33:54:0c:4e:e3:2d:be:13:90:62:17:c4:ec:69:0e: 7e:21:a4:37:45:5a:d8:7b:4f:d2:ef:0e:bd:ac:5a:da:e0:11: ec:d2:18:da:b8:ba:17:a6:df:90:1f:d2:33:51:19:e7:d0:24: 68:53:dc:18:6c:09:50:8f:e0:ec:a0:8a:f9:50:b2:da:ce:3b: aa:09:ed:37:78:b0:85:11:a7:fb:28:34:b1:d1:d0:62:f0:66: 0e:6d:c3:64:34:3e:65:5a:98:fd:69:c8:9d:36:cc:d8:00:80: 0f:5a:59:70:12:55:a2:68:e1:66:a6:84:2f:d1:0d:72:20:ea: 7b:65:f2:b7:37:b7:18:04:5d:4c:ee:af:f5:29:dc:68:27:3d: b7:9e:6d:f8:71:23:24:86:e8:ec:63:84:76:d8:00:f0:d8:59: 13:dd:b5:f4:e3:b0:5d:a0:2d:4a:e1:8f:02:51:9f:f5:69:88: da:96:9e:44:bc:6d:78:fd:6f:70:6c:40:25:6b:94:38:78:91: fb:45:d6:5b:08:fd:b9:95:5a:50:c5:ea:43:b7:63:ee:e3:66: e9:e2:df:21:d9:ea:a5:3a:18:f8:bb:26:6d:ec:fa:3d:24:9f: b9:05:cd:69:1c:1b:36:93:1c:63:d7:19:26:23:40:e8:f6:e8: 50:c2:ec:01 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbEkxZhgFpLyC1tpRnhfYoDKbh3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTcxMjAxWhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMTUxYzJjYWQ3NWQ0YjRlZjgzMTZlYTg1NzEyZTM0MmZj MmIyOGZkM2NlOWE4ZmE3ZGE3YjY1ZThlOWE4ZGE3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCeGUfifki2vI3XG5f11brkPoYAbMcPsfrd4Ka57U4YwZCW dZZRnwoFDpTUdyGY++X4FmRPna02+Z+izi3DutTAg7Wh4Hq+OkzOswVcXrk1Rnkk frjPOtoQhPAUemsA7x2UIff00eHE9Hk3qtN0tD7BKVMwplhUDAyiQKapXjSPT3Yi 0I5vjYJZTN+urbO+5HvAkV1P2EKeF7Qrvqk5ox9hH8QtC432igRhDJoSrJn8JOvi 4XncCDCRrD1ZKxNB6j0nh2VAzNMqf80DXTyGz91Jvr619ARlBXtygw/L1suMqdu1 nh5qfa/vwN23OxRwliQURFuoUjH5rUDSVcSd4qBPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKN6T2o1Fm4Ut+zYHFpb9eCh//BwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIwZGZkYjhlLTgyZjktNDMyYy05ZDA5LTA4YjM1YjI2ZTk2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0Xy4wDQYJKoZIhvcNAQELBQADggEBADFvpjNUDE7jLb4TkGIXxOxpDn4h pDdFWth7T9LvDr2sWtrgEezSGNq4uhem35Af0jNRGefQJGhT3BhsCVCP4OygivlQ strOO6oJ7Td4sIURp/soNLHR0GLwZg5tw2Q0PmVamP1pyJ02zNgAgA9aWXASVaJo 4WamhC/RDXIg6ntl8rc3txgEXUzur/Up3GgnPbeebfhxIySG6OxjhHbYAPDYWRPd tfTjsF2gLUrhjwJRn/VpiNqWnkS8bXj9b3BsQCVrlDh4kftF1lsI/bmVWlDF6kO3 Y+7jZuni3yHZ6qU6GPi7Jm3s+j0kn7kFzWkcGzaTHGPXGSYjQOj26FDC7AE= -----END CERTIFICATE-----Generated at Sat Jun 14 05:41:09 2025 by rpki-client