$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bb0f98d-0455-4635-b590-caaaa8613b07.roa File: 4bb0f98d-0455-4635-b590-caaaa8613b07.roa (raw, json) Hash identifier: Yb9O9zX0KHb5NCKuw8iE8nnyJjeCPSxXPuipPEwxmlQ= Subject key identifier: 65:6F:C1:C0:1B:7B:39:8E:B1:30:88:30:19:B2:F7:AD:71:FC:DF:D3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 38D5861E868BC3526EA4250AAD1883C059CD8AE8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bb0f98d-0455-4635-b590-caaaa8613b07.roa Signing time: Tue 20 May 2025 17:11:16 +0000 ROA not before: Tue 20 May 2025 17:11:16 +0000 ROA not after: Tue 24 Jun 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.94.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d5:86:1e:86:8b:c3:52:6e:a4:25:0a:ad:18:83:c0:59:cd:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 20 17:11:16 2025 GMT Not After : Jun 24 23:59:59 2025 GMT Subject: serialNumber=5f25199f1cbda16dad4668d0791d32a7dd34992b3c210e45af1f4ca0f2f816f9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:51:09:1d:83:55:ff:c1:40:28:25:98:01: 5f:43:e9:d0:d1:38:e8:d0:c2:d4:00:0c:4e:ae:4f: ee:50:1c:b3:46:67:0f:1d:9c:7d:ba:31:ac:d3:f1: 8e:4e:dc:93:22:87:8b:30:5a:21:d3:49:29:90:d6: f5:f3:03:79:44:16:d9:26:c4:1a:6a:4c:6e:78:0a: a2:a2:e3:ee:44:f8:42:57:42:1f:1f:95:eb:24:99: 82:b8:a2:d6:aa:7d:de:e2:92:19:8c:34:7a:d0:cc: 5d:bc:2d:8a:98:87:b7:99:45:ba:1a:5d:e5:55:b5: 0e:80:11:d6:fe:18:14:59:c6:31:e0:a5:79:8a:1d: 6d:fe:3f:a1:91:c4:61:99:11:b6:12:d1:ca:67:05: 17:d3:e8:11:ba:80:aa:9d:d6:d4:f0:fb:42:27:75: 33:d3:a5:1c:70:77:93:b9:af:d0:dd:2e:57:4a:c7: 14:b9:18:86:cf:d7:a8:fd:16:da:97:66:61:eb:c8: c9:90:00:f0:fc:f2:f3:de:01:63:9a:da:54:ac:51: 21:63:a7:a8:68:ee:14:63:d3:0d:41:79:74:66:64: 6f:ce:27:89:5a:b6:dc:7b:a7:bf:3b:f4:83:d6:a5: 58:a6:26:41:ef:78:c8:eb:51:1b:0a:13:b8:f2:a2: 01:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:6F:C1:C0:1B:7B:39:8E:B1:30:88:30:19:B2:F7:AD:71:FC:DF:D3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bb0f98d-0455-4635-b590-caaaa8613b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.240.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:ed:c2:d6:3b:f4:eb:9e:f6:a9:60:b2:58:1e:9a:88:f3:99: 66:64:f4:4b:75:91:2c:c6:98:11:28:dd:78:e1:ff:c4:bc:bb: 92:44:e8:21:50:7a:53:77:fb:97:fc:10:ae:2e:42:98:bc:35: 6f:b2:dd:d2:4c:14:2c:c0:18:e6:ec:81:9a:87:a1:97:a6:2f: ce:40:4a:92:05:b0:28:07:85:01:f7:d3:e6:32:30:e4:60:0b: 22:94:45:3c:73:94:c5:d5:5f:e8:12:06:8f:f4:40:da:68:6f: f9:05:5b:40:10:0b:19:f6:b5:10:58:15:27:b4:e1:4d:ef:b1: c7:13:5a:07:04:d0:dd:a2:09:11:6e:2f:18:0a:3e:b8:c7:0b: f7:ef:52:78:0d:b4:7d:cd:af:32:e3:99:94:5e:4f:91:6c:ee: 8d:33:f1:47:17:17:b2:fb:02:64:16:cd:6c:86:f2:b3:03:2f: 7f:7a:b1:b4:63:61:88:b2:a8:da:ef:3c:44:e0:0f:19:df:6d: 96:34:80:7b:04:66:6a:f0:05:ab:02:26:3c:ed:fe:19:45:26: 6c:c2:bd:45:51:c5:78:a1:56:a3:5a:2c:f0:b4:bf:ac:ba:88: 5d:bb:17:ab:a7:f3:c3:21:29:75:19:76:bf:17:dd:ee:dc:60: 85:5e:3d:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUONWGHoaLw1JupCUKrRiDwFnNiugwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIwMTcxMTE2WhcNMjUwNjI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjI1MTk5ZjFjYmRhMTZkYWQ0NjY4ZDA3OTFkMzJhN2Rk MzQ5OTJiM2MyMTBlNDVhZjFmNGNhMGYyZjgxNmY5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgtFEJHYNV/8FAKCWYAV9D6dDROOjQwtQADE6uT+5QHLNG Zw8dnH26MazT8Y5O3JMih4swWiHTSSmQ1vXzA3lEFtkmxBpqTG54CqKi4+5E+EJX Qh8fleskmYK4otaqfd7ikhmMNHrQzF28LYqYh7eZRboaXeVVtQ6AEdb+GBRZxjHg pXmKHW3+P6GRxGGZEbYS0cpnBRfT6BG6gKqd1tTw+0IndTPTpRxwd5O5r9DdLldK xxS5GIbP16j9FtqXZmHryMmQAPD88vPeAWOa2lSsUSFjp6ho7hRj0w1BeXRmZG/O J4lattx7p7879IPWpVimJkHveMjrURsKE7jyogFvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZW/BwBt7OY6xMIgwGbL3rXH839MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRiYjBmOThkLTA0NTUtNDYzNS1iNTkwLWNhYWFhODYxM2IwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XvAwDQYJKoZIhvcNAQELBQADggEBABrtwtY79Oue9qlgslgemojzmWZk 9Et1kSzGmBEo3Xjh/8S8u5JE6CFQelN3+5f8EK4uQpi8NW+y3dJMFCzAGObsgZqH oZemL85ASpIFsCgHhQH30+YyMORgCyKURTxzlMXVX+gSBo/0QNpob/kFW0AQCxn2 tRBYFSe04U3vsccTWgcE0N2iCRFuLxgKPrjHC/fvUngNtH3NrzLjmZReT5Fs7o0z 8UcXF7L7AmQWzWyG8rMDL396sbRjYYiyqNrvPETgDxnfbZY0gHsEZmrwBasCJjzt /hlFJmzCvUVRxXihVqNaLPC0v6y6iF27F6un88MhKXUZdr8X3e7cYIVePR4= -----END CERTIFICATE-----Generated at Sun Jun 15 09:07:05 2025 by rpki-client