$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46ee39c2-3496-4f5a-977c-ba4f9d218271.roa File: 46ee39c2-3496-4f5a-977c-ba4f9d218271.roa (raw, json) Hash identifier: aYIa6O3EP6hoEWam1GKQgWfy/RBq/68nRKKU5GmHKWU= Subject key identifier: 61:CB:93:F2:4E:A8:B0:52:BE:E9:30:D6:4B:DB:F8:1B:8A:D8:33:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 636FD4A87CBBFBD42003ED7517D4A37DADD7BAF3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46ee39c2-3496-4f5a-977c-ba4f9d218271.roa Signing time: Tue 20 May 2025 17:01:07 +0000 ROA not before: Tue 20 May 2025 17:01:07 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6f:d4:a8:7c:bb:fb:d4:20:03:ed:75:17:d4:a3:7d:ad:d7:ba:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 17:01:07 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=96b744679577a6225998f1723a9cbaf2d399824eff213d4e914ad1b2789e5a38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:b4:4b:56:33:03:66:f9:fd:d1:9f:04:78: 8b:12:f1:5e:16:77:c1:36:7d:d9:97:78:c3:d5:19: db:28:05:54:b8:18:a9:d9:be:7e:39:0a:4a:90:23: f8:2b:c6:72:ed:9a:db:ed:16:d2:2e:46:ef:2c:fc: 72:65:57:a2:b7:32:51:6a:9c:e3:d0:f1:71:89:dd: d7:b4:94:db:48:41:f9:4b:31:87:ff:77:68:e6:75: 4c:e8:b8:69:40:e6:a3:41:7b:b9:45:9f:a5:fe:16: a8:18:51:68:60:d0:45:e9:cb:65:a8:14:e2:c5:33: 8c:e3:89:5a:7c:12:7d:70:55:9a:3a:a9:96:86:17: 22:2a:3d:74:9f:c1:8f:2b:80:68:bb:25:ad:d6:58: ac:16:31:c5:50:84:86:b5:d3:c8:66:6a:0b:f9:4d: a4:43:f9:fc:9c:fb:36:6b:f6:b4:d2:7f:b1:c2:6d: 83:ff:2e:17:5c:aa:03:0d:eb:db:9a:e9:80:ec:52: 89:31:b8:bb:1c:f7:12:28:12:b1:4d:6a:45:36:5f: a5:41:82:d4:be:20:5d:97:b0:a5:a4:67:7d:df:a5: be:20:73:a6:74:0b:b6:b8:71:6d:8f:7b:1d:9b:76: ea:25:63:f0:e1:d4:63:e0:1b:a9:d7:c6:28:44:ee: 5d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:CB:93:F2:4E:A8:B0:52:BE:E9:30:D6:4B:DB:F8:1B:8A:D8:33:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/46ee39c2-3496-4f5a-977c-ba4f9d218271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.42.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:78:00:7c:02:62:22:68:01:97:4d:74:19:4a:e4:42:80:55: 40:94:a7:01:ef:da:7a:05:40:e5:84:77:a2:43:c2:21:d2:a2: 89:1a:e6:8f:5f:3e:d2:c8:6d:3a:e0:c4:ba:16:8a:80:37:01: 3b:31:92:a5:64:75:b0:9b:f2:d1:6c:bb:63:7c:b0:30:6a:17: be:cc:f2:df:45:b1:e3:27:f8:c3:34:ac:7c:6e:25:1f:4e:3f: b2:c2:7a:4e:02:42:dd:1f:e6:69:fe:ff:3f:88:b7:5f:ce:8c: 77:a1:8f:f8:4a:5f:09:7f:f2:44:cf:d9:8f:44:b2:d3:30:99: d0:82:40:e7:f6:89:5f:17:97:23:00:a5:ac:88:75:56:1a:52: 47:89:a5:5c:a2:55:7c:c7:4e:70:2e:33:ed:8a:75:92:88:11: aa:d8:4b:63:cf:ea:9b:5b:79:a6:d3:c9:44:9f:f3:33:b2:b7: 3b:8d:6d:7e:e8:17:98:69:30:1d:b5:27:8d:17:42:46:76:83: e3:85:02:14:f0:8d:5f:2d:5b:0e:10:97:39:fa:14:6b:68:af: d9:ef:66:ac:19:31:b1:a6:8c:b5:4b:1d:98:89:a3:0e:51:2e: c0:90:7e:d4:bd:67:13:14:38:64:53:fc:39:b2:bc:42:9c:d5: 3d:7d:cd:51 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUY2/UqHy7+9QgA+11F9Sjfa3XuvMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTcwMTA3WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5NmI3NDQ2Nzk1NzdhNjIyNTk5OGYxNzIzYTljYmFmMmQz OTk4MjRlZmYyMTNkNGU5MTRhZDFiMjc4OWU1YTM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYmbRLVjMDZvn90Z8EeIsS8V4Wd8E2fdmXeMPVGdsoBVS4 GKnZvn45CkqQI/grxnLtmtvtFtIuRu8s/HJlV6K3MlFqnOPQ8XGJ3de0lNtIQflL MYf/d2jmdUzouGlA5qNBe7lFn6X+FqgYUWhg0EXpy2WoFOLFM4zjiVp8En1wVZo6 qZaGFyIqPXSfwY8rgGi7Ja3WWKwWMcVQhIa108hmagv5TaRD+fyc+zZr9rTSf7HC bYP/LhdcqgMN69ua6YDsUokxuLsc9xIoErFNakU2X6VBgtS+IF2XsKWkZ33fpb4g c6Z0C7a4cW2Pex2bduolY/Dh1GPgG6nXxihE7l1JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYcuT8k6osFK+6TDWS9v4G4rYMwowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2ZWUzOWMyLTM0OTYtNGY1YS05NzdjLWJhNGY5ZDIxODI3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XyowDQYJKoZIhvcNAQELBQADggEBACx4AHwCYiJoAZdNdBlK5EKAVUCU pwHv2noFQOWEd6JDwiHSooka5o9fPtLIbTrgxLoWioA3ATsxkqVkdbCb8tFsu2N8 sDBqF77M8t9FseMn+MM0rHxuJR9OP7LCek4CQt0f5mn+/z+It1/OjHehj/hKXwl/ 8kTP2Y9EstMwmdCCQOf2iV8XlyMApayIdVYaUkeJpVyiVXzHTnAuM+2KdZKIEarY S2PP6ptbeabTyUSf8zOytzuNbX7oF5hpMB21J40XQkZ2g+OFAhTwjV8tWw4Qlzn6 FGtor9nvZqwZMbGmjLVLHZiJow5RLsCQftS9ZxMUOGRT/DmyvEKc1T19zVE= -----END CERTIFICATE-----Generated at Sat Jun 14 05:57:58 2025 by rpki-client