$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9642dd0b-d863-4d45-96c2-9a760e790244.roa File: 9642dd0b-d863-4d45-96c2-9a760e790244.roa (raw, json) Hash identifier: xQo04/ZwzZDuX8WJe0yMS7FHYsOO2VjUuK+glQL05hw= Subject key identifier: 2F:1F:A9:BC:81:95:6F:09:96:55:DF:3C:3E:CB:ED:6D:62:33:40:88 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4BF4F8581B381E1BB3E4B8D68F3ED99E606B11B3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9642dd0b-d863-4d45-96c2-9a760e790244.roa Signing time: Fri 06 Jun 2025 15:00:19 +0000 ROA not before: Fri 06 Jun 2025 15:00:19 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.43.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f4:f8:58:1b:38:1e:1b:b3:e4:b8:d6:8f:3e:d9:9e:60:6b:11:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 15:00:19 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=7c5d9159970f8de873aa25c0dacd9f153e8f9ae22a38dd90cf8a09ef33178432, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:73:30:30:e8:c8:68:70:d2:a3:fe:82:a3:f7: 6a:30:59:d9:b1:e8:09:f6:73:45:e9:67:7f:07:fb: 54:3f:29:8a:69:a6:4f:a2:29:c0:e3:79:0f:44:0e: 63:cb:27:db:90:9c:fc:39:a7:67:85:98:1a:91:00: 46:dc:e5:5b:a9:49:25:2a:92:17:a5:c4:09:f9:0d: 9f:71:b4:d3:98:d9:32:f8:94:a4:3e:96:ad:f4:5d: b8:d5:44:ba:1d:c2:5c:48:22:4c:bc:ec:9a:cb:a3: b1:85:5c:f0:d3:7b:e3:56:c3:5e:9d:6c:31:ff:9b: 43:b6:41:9f:32:56:e3:f6:41:35:aa:b6:d7:46:a8: 17:25:bf:8d:2b:6e:02:45:92:80:0f:3d:ce:39:38: 59:75:8e:a8:73:36:d0:1e:e7:42:b6:b7:79:3e:61: d0:20:6a:21:db:b8:31:45:01:e4:67:53:ac:a8:02: a1:d2:8c:a9:31:e6:cc:97:ef:a4:7a:ca:e0:d3:e6: 32:83:35:70:37:63:69:14:05:54:9c:ed:df:1a:8e: e8:b3:c7:51:19:32:48:70:a5:30:7a:03:f0:d1:26: 29:40:4e:8e:09:a6:af:b5:f7:c9:53:eb:af:a7:2a: d2:06:76:9f:5b:74:a0:29:c9:57:41:2f:39:b4:11: a4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1F:A9:BC:81:95:6F:09:96:55:DF:3C:3E:CB:ED:6D:62:33:40:88 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9642dd0b-d863-4d45-96c2-9a760e790244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.43.128.0/18 Signature Algorithm: sha256WithRSAEncryption 88:2d:bc:ac:3a:c3:33:a1:1a:73:9b:23:2e:59:33:e6:37:e8: 5f:7a:80:03:1b:be:5a:7c:84:eb:b2:d2:06:06:e3:23:fa:93: 5a:25:ac:9f:e7:20:49:d1:f7:c2:ed:3a:8d:3d:c6:91:b2:6f: 72:bd:7b:f8:e7:58:81:ed:13:63:2c:f7:b9:bf:52:45:f4:c7: cd:16:af:ee:a2:f8:ea:b5:2a:a0:ae:6f:a1:a5:f7:9f:8e:c0: 93:93:2a:ad:80:da:1f:31:88:5d:8b:cd:4e:b2:df:e9:2b:69: c9:e7:08:e1:16:76:1a:50:45:c5:c7:00:aa:c3:63:77:51:e7: b0:49:0b:08:ef:81:39:45:d5:a1:1e:7f:1f:7a:59:25:e5:84: eb:2d:d8:80:96:85:79:8c:9f:73:d3:4a:05:b4:15:8a:af:ad: 4c:68:8a:47:7d:b5:fd:f5:ce:d6:ab:76:1a:b3:35:c2:80:8c: ef:2a:72:73:02:97:79:5a:44:54:e6:09:62:ef:54:e8:c7:71: e9:9b:09:dd:9a:04:b7:44:11:5d:f5:2b:63:e4:b0:2c:72:09: cc:35:31:e5:8a:df:13:55:2b:b1:43:e4:28:08:dd:fb:8c:f1: f7:b6:d3:f7:84:a1:98:3d:2d:d8:31:41:77:14:41:9f:20:3d: a0:ab:72:a7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS/T4WBs4Hhuz5LjWjz7ZnmBrEbMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MTUwMDE5WhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A3YzVkOTE1OTk3MGY4ZGU4NzNhYTI1YzBkYWNkOWYxNTNl OGY5YWUyMmEzOGRkOTBjZjhhMDllZjMzMTc4NDMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmczAw6MhocNKj/oKj92owWdmx6An2c0XpZ38H+1Q/KYpp pk+iKcDjeQ9EDmPLJ9uQnPw5p2eFmBqRAEbc5VupSSUqkhelxAn5DZ9xtNOY2TL4 lKQ+lq30XbjVRLodwlxIIky87JrLo7GFXPDTe+NWw16dbDH/m0O2QZ8yVuP2QTWq ttdGqBclv40rbgJFkoAPPc45OFl1jqhzNtAe50K2t3k+YdAgaiHbuDFFAeRnU6yo AqHSjKkx5syX76R6yuDT5jKDNXA3Y2kUBVSc7d8ajuizx1EZMkhwpTB6A/DRJilA To4Jpq+198lT66+nKtIGdp9bdKApyVdBLzm0EaQrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULx+pvIGVbwmWVd88PsvtbWIzQIgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2NDJkZDBiLWQ4NjMtNGQ0NS05NmMyLTlhNzYwZTc5MDI0NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY0K4AwDQYJKoZIhvcNAQELBQADggEBAIgtvKw6wzOhGnObIy5ZM+Y36F96 gAMbvlp8hOuy0gYG4yP6k1olrJ/nIEnR98LtOo09xpGyb3K9e/jnWIHtE2Ms97m/ UkX0x80Wr+6i+Oq1KqCub6Gl95+OwJOTKq2A2h8xiF2LzU6y3+kracnnCOEWdhpQ RcXHAKrDY3dR57BJCwjvgTlF1aEefx96WSXlhOst2ICWhXmMn3PTSgW0FYqvrUxo ikd9tf31ztardhqzNcKAjO8qcnMCl3laRFTmCWLvVOjHcembCd2aBLdEEV31K2Pk sCxyCcw1MeWK3xNVK7FD5CgI3fuM8fe20/eEoZg9LdgxQXcUQZ8gPaCrcqc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:17:30 2025 by rpki-client