$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a59fb8b-76dd-478b-8633-7422730479a3.roa File: 6a59fb8b-76dd-478b-8633-7422730479a3.roa (raw, json) Hash identifier: Al/ic+KWMZsaXaEFd0v7XG5z4B1X5maLl8leN+McEpk= Subject key identifier: E1:F2:A0:08:BF:38:64:B5:09:15:C5:51:94:0C:CE:63:C2:B7:3A:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0832D05B23BE4B79106A45030A3C900709F5BD86 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a59fb8b-76dd-478b-8633-7422730479a3.roa Signing time: Fri 13 Jun 2025 18:11:46 +0000 ROA not before: Fri 13 Jun 2025 18:11:46 +0000 ROA not after: Fri 18 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:32:d0:5b:23:be:4b:79:10:6a:45:03:0a:3c:90:07:09:f5:bd:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 13 18:11:46 2025 GMT Not After : Jul 18 23:59:59 2025 GMT Subject: serialNumber=ff2bdfbdb2fc3b44b99f4f6dc667ab8ecab8c03a615725efbd536cb802391174, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4d:f5:0d:d5:86:54:30:ab:d1:e3:f7:d7:ff: b3:9f:b7:07:17:96:23:3d:5c:3d:c3:88:fe:bc:e8: 7c:60:8d:1b:06:c9:12:14:b8:5f:20:3a:66:50:58: ca:b9:03:dd:c4:e7:13:67:ea:fa:03:1e:3d:71:08: 96:eb:3a:e1:5b:22:03:14:22:f3:e6:0b:26:ee:f7: 08:5d:87:96:2c:67:f4:de:54:19:df:f4:52:4b:21: 5d:a8:09:47:bb:a3:4e:56:ad:82:98:ac:67:7e:71: b0:90:d1:55:db:6a:0d:bf:85:f8:b8:61:07:9e:66: 42:93:43:30:7e:ab:e2:b9:48:27:78:44:c2:57:4c: a8:ba:23:41:1c:eb:80:f8:72:d9:88:49:4c:71:2e: c7:f8:91:11:d1:88:d8:2f:6a:3a:b3:14:b9:f1:17: 6c:42:45:dd:ec:1d:ab:a9:ce:6f:bf:e3:dc:f2:ef: 80:0d:f7:cf:6d:7b:90:59:ae:74:2e:8b:d9:ae:ef: f4:4e:bd:08:f5:05:e7:26:e7:b7:df:a4:b8:06:e7: 17:18:07:28:a6:b4:ac:8b:07:f9:a6:60:36:b4:6e: 78:c3:c8:84:f3:8e:9d:3f:d6:76:5e:3a:af:c8:9e: 34:f7:8c:9f:6a:33:cd:c5:84:9e:44:3c:66:7d:81: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F2:A0:08:BF:38:64:B5:09:15:C5:51:94:0C:CE:63:C2:B7:3A:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a59fb8b-76dd-478b-8633-7422730479a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.111.0/24 Signature Algorithm: sha256WithRSAEncryption 39:63:67:86:e3:d5:55:dc:60:ac:39:24:a7:57:b0:05:1b:6c: 84:42:b7:5e:60:40:90:b2:f8:df:32:6c:4a:11:50:1d:6f:90: 0d:a8:0b:19:29:09:40:72:5d:31:15:87:b1:1c:5e:53:e5:ac: 3a:3c:53:09:e4:53:75:4b:cc:93:5d:f4:5b:43:6d:0b:cd:fc: 59:5c:1f:73:03:04:13:0c:1b:5a:b5:6e:94:65:24:dc:a5:89: ce:02:f9:5b:f7:b2:16:6f:e4:69:4a:86:db:d6:80:db:53:70: c3:a2:96:35:9f:bf:8f:79:11:1f:c2:88:e0:ae:b5:5a:c8:1c: 98:0d:e1:2e:bf:58:62:1a:8a:a7:29:dd:ed:e3:02:b8:fa:c3: 7b:93:84:ee:58:ec:fa:fc:00:38:c2:4b:7c:e4:d9:46:f0:38: d7:b2:f6:95:66:d6:fb:24:d3:ee:0b:b2:c9:60:93:af:39:cb: fb:a9:bf:f9:70:ff:98:2b:a0:7d:14:b8:82:86:3d:86:33:6b: eb:79:ad:a0:17:45:8d:62:53:c4:f7:5b:1c:d8:9e:25:e7:09: 77:c7:9c:22:f7:e9:d0:3f:76:6c:41:8d:a0:1d:5f:c3:d1:89: fb:b5:b9:4a:6e:ee:a0:fd:e1:25:dc:79:4f:af:17:36:36:00: 1e:10:73:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCDLQWyO+S3kQakUDCjyQBwn1vYYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjEzMTgxMTQ2WhcNMjUwNzE4MjM1OTU5 WjB6MUkwRwYDVQQFE0BmZjJiZGZiZGIyZmMzYjQ0Yjk5ZjRmNmRjNjY3YWI4ZWNh YjhjMDNhNjE1NzI1ZWZiZDUzNmNiODAyMzkxMTc0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmTfUN1YZUMKvR4/fX/7OftwcXliM9XD3DiP686HxgjRsG yRIUuF8gOmZQWMq5A93E5xNn6voDHj1xCJbrOuFbIgMUIvPmCybu9whdh5YsZ/Te VBnf9FJLIV2oCUe7o05WrYKYrGd+cbCQ0VXbag2/hfi4YQeeZkKTQzB+q+K5SCd4 RMJXTKi6I0Ec64D4ctmISUxxLsf4kRHRiNgvajqzFLnxF2xCRd3sHaupzm+/49zy 74AN989te5BZrnQui9mu7/ROvQj1Becm57ffpLgG5xcYByimtKyLB/mmYDa0bnjD yITzjp0/1nZeOq/InjT3jJ9qM83FhJ5EPGZ9gRFhAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4fKgCL84ZLUJFcVRlAzOY8K3On4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhNTlmYjhiLTc2ZGQtNDc4Yi04NjMzLTc0MjI3MzA0NzlhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X28wDQYJKoZIhvcNAQELBQADggEBADljZ4bj1VXcYKw5JKdXsAUbbIRC t15gQJCy+N8ybEoRUB1vkA2oCxkpCUByXTEVh7EcXlPlrDo8UwnkU3VLzJNd9FtD bQvN/FlcH3MDBBMMG1q1bpRlJNylic4C+Vv3shZv5GlKhtvWgNtTcMOiljWfv495 ER/CiOCutVrIHJgN4S6/WGIaiqcp3e3jArj6w3uThO5Y7Pr8ADjCS3zk2UbwONey 9pVm1vsk0+4Lsslgk685y/upv/lw/5groH0UuIKGPYYza+t5raAXRY1iU8T3WxzY niXnCXfHnCL36dA/dmxBjaAdX8PRifu1uUpu7qD94SXceU+vFzY2AB4Qc4o= -----END CERTIFICATE-----Generated at Sat Jun 14 06:08:48 2025 by rpki-client