$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f4411a3-eb1b-445a-bc4d-bdac7cffa612.roa File: 2f4411a3-eb1b-445a-bc4d-bdac7cffa612.roa (raw, json) Hash identifier: 5nqgh+sW0Yx1R7/yXsfwDgeL1MEAYsM0k8IVQOD+Re4= Subject key identifier: CA:E3:21:5F:0F:B5:98:4F:24:C3:3A:C9:01:DD:71:E9:17:08:6D:9D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 60BE182FBA0F104F21322243CD3C83A677EC896A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f4411a3-eb1b-445a-bc4d-bdac7cffa612.roa Signing time: Wed 21 May 2025 00:30:26 +0000 ROA not before: Wed 21 May 2025 00:30:26 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:be:18:2f:ba:0f:10:4f:21:32:22:43:cd:3c:83:a6:77:ec:89:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:30:26 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=e454a5c31ae58f795e2ae206f9e04cf9e9d20e77b40174cc199c31616abf3aff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:ec:79:76:51:13:61:4c:c5:cf:6f:75:89: a2:dd:dc:e9:76:2c:c8:cb:f3:3b:49:4d:bb:13:e2: cf:e3:d4:b7:8d:24:c5:c2:17:5e:50:3d:57:8d:b2: eb:43:ef:e0:d1:b4:44:a3:5a:e0:39:cb:de:3c:27: 3d:3a:9f:b2:a1:d8:57:c5:66:6b:f1:aa:52:67:3f: e8:0e:bf:69:43:e1:5e:5a:cd:b4:8e:a0:8e:46:a1: db:ad:c7:9a:63:e3:6e:2b:cb:2d:c3:a3:f2:18:33: 5a:89:35:e7:89:f6:ab:9f:27:f3:e5:46:89:c7:33: 10:c9:40:51:41:04:be:a7:c1:41:5e:14:68:c2:fe: 84:7c:94:25:91:88:c6:c7:0b:b6:4b:f0:b4:4f:94: 10:99:c2:29:61:61:0a:a9:9f:60:80:09:0c:0b:c6: 31:0a:28:b3:d3:2a:a5:82:0f:9a:47:09:16:cf:93: b1:c9:d5:9c:08:fa:8b:b3:5e:05:7f:f6:78:28:e5: 5a:45:93:68:33:a2:25:c3:d8:ef:97:fb:8d:9c:fa: 83:75:e9:a7:66:e2:fb:84:b8:a5:c8:e6:e7:5d:17: 54:44:59:97:d6:d0:c1:7e:0c:a4:57:f4:df:48:ca: 2e:11:56:9d:63:4f:bc:b4:36:b5:e0:0c:84:be:eb: 3e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:21:5F:0F:B5:98:4F:24:C3:3A:C9:01:DD:71:E9:17:08:6D:9D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f4411a3-eb1b-445a-bc4d-bdac7cffa612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.22.0/24 Signature Algorithm: sha256WithRSAEncryption 99:64:0c:a7:c3:60:96:46:30:27:22:e2:54:90:fe:8a:0a:d7: ef:96:89:9a:84:8b:b4:bf:32:7b:93:14:c9:48:80:cb:27:be: 60:91:02:08:0b:5b:f8:d6:32:93:e5:98:54:76:09:8b:1f:21: 81:e0:0a:22:78:7a:36:17:5a:6a:32:b9:b9:5e:32:c3:a1:0a: 2b:5d:0c:02:91:41:33:7f:f1:6f:09:2e:69:fb:40:a4:61:11: f6:11:41:99:62:ae:2b:04:b9:40:d9:6b:47:3d:6e:5d:c2:9e: f3:92:4a:ff:1a:a8:0a:68:8e:1a:a3:21:89:ef:80:0c:dd:a7: 95:05:64:08:37:a4:0a:30:1f:87:dd:d5:0f:1f:cc:34:b2:ad: 8b:cc:ea:e4:4b:83:91:d3:ec:f6:3d:3a:09:b2:30:e6:e6:e9: 41:cf:79:8a:b4:3b:37:ce:d5:b7:ef:12:42:d0:1e:e2:1b:9b: 45:38:fe:93:19:b5:be:03:05:87:11:94:87:55:ad:4a:6c:78: 6c:fd:4a:7c:58:1a:8d:ad:82:56:83:0c:fc:6a:6b:7a:04:50: 49:3a:ef:9c:6b:00:65:0a:a1:5e:32:55:70:ac:c2:b3:95:2c: b7:33:7c:bb:cb:11:02:43:84:cc:e6:f9:d3:08:ab:b2:e9:2c: 76:fd:b9:85 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYL4YL7oPEE8hMiJDzTyDpnfsiWowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDAzMDI2WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNDU0YTVjMzFhZTU4Zjc5NWUyYWUyMDZmOWUwNGNmOWU5 ZDIwZTc3YjQwMTc0Y2MxOTljMzE2MTZhYmYzYWZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyEOx5dlETYUzFz291iaLd3Ol2LMjL8ztJTbsT4s/j1LeN JMXCF15QPVeNsutD7+DRtESjWuA5y948Jz06n7Kh2FfFZmvxqlJnP+gOv2lD4V5a zbSOoI5Godutx5pj424ryy3Do/IYM1qJNeeJ9qufJ/PlRonHMxDJQFFBBL6nwUFe FGjC/oR8lCWRiMbHC7ZL8LRPlBCZwilhYQqpn2CACQwLxjEKKLPTKqWCD5pHCRbP k7HJ1ZwI+ouzXgV/9ngo5VpFk2gzoiXD2O+X+42c+oN16adm4vuEuKXI5uddF1RE WZfW0MF+DKRX9N9Iyi4RVp1jT7y0NrXgDIS+6z6ZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyuMhXw+1mE8kwzrJAd1x6RcIbZ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJmNDQxMWEzLWViMWItNDQ1YS1iYzRkLWJkYWM3Y2ZmYTYxMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XhYwDQYJKoZIhvcNAQELBQADggEBAJlkDKfDYJZGMCci4lSQ/ooK1++W iZqEi7S/MnuTFMlIgMsnvmCRAggLW/jWMpPlmFR2CYsfIYHgCiJ4ejYXWmoyuble MsOhCitdDAKRQTN/8W8JLmn7QKRhEfYRQZlirisEuUDZa0c9bl3CnvOSSv8aqApo jhqjIYnvgAzdp5UFZAg3pAowH4fd1Q8fzDSyrYvM6uRLg5HT7PY9OgmyMObm6UHP eYq0OzfO1bfvEkLQHuIbm0U4/pMZtb4DBYcRlIdVrUpseGz9SnxYGo2tglaDDPxq a3oEUEk675xrAGUKoV4yVXCswrOVLLczfLvLEQJDhMzm+dMIq7LpLHb9uYU= -----END CERTIFICATE-----Generated at Sat Jun 14 05:44:30 2025 by rpki-client