$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ae83912-40eb-477f-af4b-cd72f0a6cb48.roa File: 8ae83912-40eb-477f-af4b-cd72f0a6cb48.roa (raw, json) Hash identifier: NdDjHKlGdHTm0WMnGXayTw6a5eeaC2z3yd8qPUQWgPY= Subject key identifier: 07:7D:75:22:78:24:89:DE:17:36:0E:ED:35:CD:74:3F:6A:43:5D:B3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 68312F84D0F98C4871B6A070137D66C1879522A4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ae83912-40eb-477f-af4b-cd72f0a6cb48.roa Signing time: Tue 03 Jun 2025 15:31:45 +0000 ROA not before: Tue 03 Jun 2025 15:31:45 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.19.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:31:2f:84:d0:f9:8c:48:71:b6:a0:70:13:7d:66:c1:87:95:22:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 15:31:45 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=ef14a13de1262afa227345e0ccbf71d0b1aa29eac353b66581fbcfa33b49084f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:54:22:28:da:5c:27:4a:06:b5:4b:cf:20:6f: 00:b1:61:89:eb:2e:5e:23:02:7b:a6:b6:18:55:73: 45:7c:08:ad:df:98:26:7a:7b:b5:de:89:ff:eb:5d: e7:17:bb:72:ca:c8:4d:fa:ff:79:6f:90:ab:66:a8: 84:8d:4b:f1:7e:39:a0:d4:8e:c2:36:5f:d1:a7:a0: 23:32:c0:60:16:3a:49:5c:9a:a9:8e:b9:dc:6f:c4: 6a:1f:9d:74:e9:e2:82:8b:46:c7:74:ca:a0:a4:7e: b4:99:ab:c4:41:84:a7:ff:03:33:e4:bd:c3:4e:8c: a0:74:a9:fb:56:2f:a4:e9:a0:55:f5:3e:85:6f:25: be:35:75:6b:89:e0:fe:0e:bd:e7:de:e3:cc:aa:09: 1b:50:78:4c:c8:f0:c1:47:12:00:e4:19:08:8b:6f: 2e:c4:51:0a:ab:94:cc:11:8d:fb:a9:39:4f:9d:f1: 99:4a:39:d8:b0:fa:64:9a:c1:08:c2:40:37:e9:24: f9:76:9a:18:48:cd:8b:44:98:1c:53:38:b5:db:a7: e9:26:b3:02:57:6e:a8:e6:45:9b:fd:04:c0:e0:79: c3:08:e0:5b:07:38:22:27:b8:c1:a3:a6:5e:72:d6: 34:e3:77:07:f0:80:d9:50:e6:90:e4:91:cd:a6:0c: ed:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7D:75:22:78:24:89:DE:17:36:0E:ED:35:CD:74:3F:6A:43:5D:B3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ae83912-40eb-477f-af4b-cd72f0a6cb48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.19.0.0/17 Signature Algorithm: sha256WithRSAEncryption 9a:00:49:b9:c4:4f:d5:70:13:44:ab:11:70:25:d1:82:4f:55: 43:df:6f:2d:8a:03:6e:3c:7b:63:35:31:76:20:0a:d5:ab:b3: 19:8b:8e:2b:06:85:6e:2b:30:ff:60:d1:3e:9a:35:c2:f9:c4: c1:22:9b:8b:61:71:40:ec:76:d6:7a:5d:f2:57:8b:c5:ee:97: 74:e2:af:33:10:b6:03:21:9f:de:d1:4a:f6:5d:e8:79:90:da: e0:63:3d:a6:cb:06:a2:45:9c:a2:7e:ec:bf:ea:7b:cc:68:5b: 7a:05:60:d8:e4:59:aa:3f:a3:31:19:8e:de:21:e5:0c:a1:fa: 67:98:ec:dd:4e:47:66:02:18:a6:dd:40:ec:bf:9d:0a:4e:56: 38:97:12:4e:81:f3:08:5d:d7:50:73:86:a6:29:1c:41:ef:63: 5f:de:68:1a:18:cd:86:d2:64:b7:48:ec:bd:a4:34:e4:fc:b1: 03:cf:2a:05:30:95:1e:96:8f:77:b2:d4:ad:8f:d9:99:4a:46: 47:85:92:0f:6c:64:96:da:64:47:51:58:54:ee:02:6a:1c:a2: b9:70:c4:9b:38:36:40:39:32:86:cc:9c:9f:e3:e5:a9:81:5c: 52:63:ce:65:25:41:d9:72:c4:b9:e6:0c:12:63:7d:04:02:26: a0:8f:89:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaDEvhND5jEhxtqBwE31mwYeVIqQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMTUzMTQ1WhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZjE0YTEzZGUxMjYyYWZhMjI3MzQ1ZTBjY2JmNzFkMGIx YWEyOWVhYzM1M2I2NjU4MWZiY2ZhMzNiNDkwODRmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnVCIo2lwnSga1S88gbwCxYYnrLl4jAnumthhVc0V8CK3f mCZ6e7Xeif/rXecXu3LKyE36/3lvkKtmqISNS/F+OaDUjsI2X9GnoCMywGAWOklc mqmOudxvxGofnXTp4oKLRsd0yqCkfrSZq8RBhKf/AzPkvcNOjKB0qftWL6TpoFX1 PoVvJb41dWuJ4P4Ovefe48yqCRtQeEzI8MFHEgDkGQiLby7EUQqrlMwRjfupOU+d 8ZlKOdiw+mSawQjCQDfpJPl2mhhIzYtEmBxTOLXbp+kmswJXbqjmRZv9BMDgecMI 4FsHOCInuMGjpl5y1jTjdwfwgNlQ5pDkkc2mDO0VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUB311Ingkid4XNg7tNc10P2pDXbMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhZTgzOTEyLTQwZWItNDc3Zi1hZjRiLWNkNzJmMGE2Y2I0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc0EwAwDQYJKoZIhvcNAQELBQADggEBAJoASbnET9VwE0SrEXAl0YJPVUPf by2KA248e2M1MXYgCtWrsxmLjisGhW4rMP9g0T6aNcL5xMEim4thcUDsdtZ6XfJX i8Xul3TirzMQtgMhn97RSvZd6HmQ2uBjPabLBqJFnKJ+7L/qe8xoW3oFYNjkWao/ ozEZjt4h5Qyh+meY7N1OR2YCGKbdQOy/nQpOVjiXEk6B8whd11BzhqYpHEHvY1/e aBoYzYbSZLdI7L2kNOT8sQPPKgUwlR6Wj3ey1K2P2ZlKRkeFkg9sZJbaZEdRWFTu AmocorlwxJs4NkA5MobMnJ/j5amBXFJjzmUlQdlyxLnmDBJjfQQCJqCPicw= -----END CERTIFICATE-----Generated at Sat Jun 14 05:54:52 2025 by rpki-client