$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/952584b1-c9ad-4aa4-92ea-ce115f76079e.roa File: 952584b1-c9ad-4aa4-92ea-ce115f76079e.roa (raw, json) Hash identifier: I8EAg2m0GGN1PFq611AkIbndMqgknEo8vlYR8XImDcI= Subject key identifier: BF:84:BC:83:81:06:E3:40:91:C9:CE:01:E1:DE:72:F7:8C:F5:31:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0FC67ED23AB89DF54D64850838A7DDC938745383 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/952584b1-c9ad-4aa4-92ea-ce115f76079e.roa Signing time: Mon 09 Jun 2025 18:10:17 +0000 ROA not before: Mon 09 Jun 2025 18:10:17 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.245.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c6:7e:d2:3a:b8:9d:f5:4d:64:85:08:38:a7:dd:c9:38:74:53:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 18:10:17 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=07b2ba9f4590f1aea3585636eaec6ff8f93ac0c76d5d33349bb0587e087010f4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:27:13:ba:3b:4f:52:58:7f:ab:43:80:65:0c: 90:c0:64:78:46:99:f8:f9:cf:da:0e:63:8f:b4:79: f1:48:94:55:13:ac:4b:c8:f8:d3:83:50:c5:94:ea: 42:23:47:46:77:96:12:c4:c6:88:bf:6f:7e:2d:8c: 69:72:f0:59:6b:0b:cf:4d:96:7b:e3:e3:95:1e:93: 58:a9:a6:e0:5b:96:a4:71:12:ad:66:aa:e3:1a:97: b2:69:71:a8:01:e2:63:c2:49:a9:3b:98:f3:a5:5e: ed:e3:45:94:61:01:57:2c:63:82:91:1c:47:3d:74: e6:8f:2c:4a:0c:89:63:3c:ac:0a:74:ed:21:c8:b0: 4c:cb:fe:df:b2:d3:ef:88:1c:dc:bd:bb:85:0c:4d: dd:31:ef:38:33:76:10:4c:2a:0f:13:c0:5b:6e:61: 3a:c6:f0:7e:85:d2:fc:c7:3f:44:c1:5c:07:11:45: 85:68:7a:0a:b5:84:bb:83:98:8d:05:ce:0a:98:82: 4f:16:d4:0c:67:50:76:99:28:b3:b2:ef:56:aa:8c: c9:ff:52:d4:64:83:47:6c:5b:2b:d3:a9:7d:2f:87: 94:04:18:d4:fb:77:d2:82:d8:a0:7c:0e:05:0c:2a: f9:cb:bb:fc:5c:36:4d:1b:10:45:55:82:cf:05:3f: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:84:BC:83:81:06:E3:40:91:C9:CE:01:E1:DE:72:F7:8C:F5:31:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/952584b1-c9ad-4aa4-92ea-ce115f76079e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.245.169.0/24 Signature Algorithm: sha256WithRSAEncryption 03:b7:38:a1:07:7d:b0:23:bb:11:be:0c:06:c8:60:88:82:d6: 70:1d:b8:ec:df:d5:f6:ca:21:28:16:42:01:f9:80:fd:57:cb: cf:3d:6f:f7:57:03:f5:76:c5:9f:74:b7:3d:68:2f:27:c3:43: f6:4f:fc:e6:31:fb:e4:bf:0b:54:f1:f7:ac:bd:84:0e:82:25: 2a:dd:81:53:01:b0:b9:15:1f:37:f4:b9:56:b0:bf:88:78:2d: 6e:07:48:98:1b:b9:2c:a2:f2:3e:a4:11:33:94:47:43:52:fa: fd:bb:14:f8:d8:a4:f4:b6:70:8d:cf:2f:33:f1:04:5c:ea:cb: b9:27:89:35:dc:1e:e7:6b:f0:84:3c:ec:7c:7b:44:b9:71:5f: d7:50:24:1c:fc:1f:88:65:d7:55:b8:a4:fb:ec:1e:4c:80:1a: c5:22:99:ae:b0:bf:3b:a1:5f:d8:80:13:32:52:c9:16:8e:d5: cb:f2:c2:b0:80:ea:d9:f1:64:89:83:1e:65:cd:20:91:4e:a8: 45:02:9e:31:49:b2:55:3e:52:d3:b3:c3:1e:30:c3:58:db:e9: 71:43:2e:17:bb:90:39:a1:a4:e0:76:ea:ae:24:50:90:49:7f: 50:c6:ad:47:a8:98:54:5d:0c:bc:9e:6d:58:8b:bf:0e:e3:e3: 13:c2:cc:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD8Z+0jq4nfVNZIUIOKfdyTh0U4MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTgxMDE3WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwN2IyYmE5ZjQ1OTBmMWFlYTM1ODU2MzZlYWVjNmZmOGY5 M2FjMGM3NmQ1ZDMzMzQ5YmIwNTg3ZTA4NzAxMGY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuJxO6O09SWH+rQ4BlDJDAZHhGmfj5z9oOY4+0efFIlFUT rEvI+NODUMWU6kIjR0Z3lhLExoi/b34tjGly8FlrC89Nlnvj45Uek1ippuBblqRx Eq1mquMal7JpcagB4mPCSak7mPOlXu3jRZRhAVcsY4KRHEc9dOaPLEoMiWM8rAp0 7SHIsEzL/t+y0++IHNy9u4UMTd0x7zgzdhBMKg8TwFtuYTrG8H6F0vzHP0TBXAcR RYVoegq1hLuDmI0FzgqYgk8W1AxnUHaZKLOy71aqjMn/UtRkg0dsWyvTqX0vh5QE GNT7d9KC2KB8DgUMKvnLu/xcNk0bEEVVgs8FPzafAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv4S8g4EG40CRyc4B4d5y94z1MeYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk1MjU4NGIxLWM5YWQtNGFhNC05MmVhLWNlMTE1Zjc2MDc5ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA29akwDQYJKoZIhvcNAQELBQADggEBAAO3OKEHfbAjuxG+DAbIYIiC1nAd uOzf1fbKISgWQgH5gP1Xy889b/dXA/V2xZ90tz1oLyfDQ/ZP/OYx++S/C1Tx96y9 hA6CJSrdgVMBsLkVHzf0uVawv4h4LW4HSJgbuSyi8j6kETOUR0NS+v27FPjYpPS2 cI3PLzPxBFzqy7kniTXcHudr8IQ87Hx7RLlxX9dQJBz8H4hl11W4pPvsHkyAGsUi ma6wvzuhX9iAEzJSyRaO1cvywrCA6tnxZImDHmXNIJFOqEUCnjFJslU+UtOzwx4w w1jb6XFDLhe7kDmhpOB26q4kUJBJf1DGrUeomFRdDLyebViLvw7j4xPCzOo= -----END CERTIFICATE-----Generated at Sat Jun 14 06:24:15 2025 by rpki-client