$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4c924ae-3593-4667-9292-d37685860ee0.roa File: a4c924ae-3593-4667-9292-d37685860ee0.roa (raw, json) Hash identifier: JmalQFs2VmPpT09MMB9zE5W3fOBZFYGpQQH0HfmeyBo= Subject key identifier: A6:90:06:6F:F2:83:47:47:9E:B0:12:CD:DD:78:82:52:28:70:00:F6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3DB1BFC640DF4D6132440AFA28A318C95396947C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4c924ae-3593-4667-9292-d37685860ee0.roa Signing time: Fri 06 Jun 2025 15:00:23 +0000 ROA not before: Fri 06 Jun 2025 15:00:23 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.61.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b1:bf:c6:40:df:4d:61:32:44:0a:fa:28:a3:18:c9:53:96:94:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 15:00:23 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=de44f014af16e3f45838bb88231b3c10f77e0c75b7594cb25d3718fe481bb149, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:db:00:22:df:e1:34:b0:c6:6c:ff:97:dc:ea: 4f:f4:9b:69:b0:b9:13:1d:a1:dc:c8:c9:f3:bd:75: 0b:0a:f6:a8:ed:85:af:da:6d:88:39:a3:11:ce:89: 27:4d:a8:a9:4b:98:a4:03:11:4a:4b:be:50:98:7c: 5c:39:1b:95:bd:8f:ef:6a:8b:36:1b:83:b1:99:5c: 37:f6:0a:78:8e:75:1e:f2:8e:e3:1e:bc:15:83:0b: e6:0d:ce:2d:45:2f:ce:06:be:63:42:0a:4a:55:66: 51:81:72:53:4c:4e:b6:f1:98:31:9e:5c:2e:ff:cf: 95:59:fe:8d:f7:5b:6a:79:30:1f:8f:65:e8:5e:b1: 3c:d4:60:06:f4:e9:d4:24:6b:9f:42:fa:cb:5d:d2: 89:c9:a0:ca:72:0a:16:21:65:ed:76:58:7d:cc:a9: 58:e4:43:9f:d2:c2:e3:8a:65:37:8f:5f:f9:86:f4: e8:15:8c:c6:b3:68:1b:26:6e:c8:1a:02:d8:88:04: 61:36:53:21:92:03:60:19:1d:de:6c:05:fc:b3:e8: 72:11:4a:35:76:e2:87:77:de:ab:42:45:61:4b:06: 53:60:cd:bf:32:1e:1a:ea:c0:aa:5f:dc:14:f9:da: 10:25:fd:73:c8:cb:1e:2d:86:c4:b9:f8:2d:b0:17: 06:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:90:06:6F:F2:83:47:47:9E:B0:12:CD:DD:78:82:52:28:70:00:F6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a4c924ae-3593-4667-9292-d37685860ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.61.0.0/16 Signature Algorithm: sha256WithRSAEncryption a5:69:93:5c:ec:cc:9d:a5:9b:40:7f:63:04:b6:e9:6d:af:e4: de:f1:85:1c:35:6b:1b:b6:e9:ca:4e:6d:31:ba:a1:4f:93:18: 96:1f:bc:1c:59:14:0a:d8:4b:f1:76:1d:65:3c:13:a0:cf:7b: fe:2d:86:e7:5d:a0:37:39:31:9e:ef:52:54:68:e3:b4:e4:76: ee:41:d6:b9:cd:1d:02:61:9e:94:4b:4d:89:f7:04:24:f4:16: 94:0f:9c:c6:3b:78:ab:cb:f4:fa:74:2c:46:ee:70:b0:1b:b7: 4c:cf:21:7c:56:f6:5f:98:03:02:e4:1b:fb:03:e0:6b:0b:85: 5d:54:d1:65:6f:b7:fb:e0:e2:b6:81:54:71:36:3c:54:15:fe: 9e:a9:8a:70:49:07:6a:c4:58:a4:37:d5:42:7e:31:5d:ad:b0: 57:d7:8f:20:77:68:eb:b0:d8:23:05:45:a3:1b:9a:53:ae:be: ed:18:04:7a:25:2e:21:d5:ba:4a:41:b2:58:e0:87:7f:cf:22: f4:62:6e:b8:78:9f:9f:00:2f:3b:49:b6:fa:16:07:60:03:19: 45:39:a2:cf:89:da:a3:47:a6:b3:1f:ff:25:5f:9f:2d:d9:1b: c8:3e:f0:06:8e:ea:c8:4b:c4:46:ad:b3:68:27:62:c8:7b:5e: d7:eb:28:16 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPbG/xkDfTWEyRAr6KKMYyVOWlHwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MTUwMDIzWhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTQ0ZjAxNGFmMTZlM2Y0NTgzOGJiODgyMzFiM2MxMGY3 N2UwYzc1Yjc1OTRjYjI1ZDM3MThmZTQ4MWJiMTQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDz2wAi3+E0sMZs/5fc6k/0m2mwuRMdodzIyfO9dQsK9qjt ha/abYg5oxHOiSdNqKlLmKQDEUpLvlCYfFw5G5W9j+9qizYbg7GZXDf2CniOdR7y juMevBWDC+YNzi1FL84GvmNCCkpVZlGBclNMTrbxmDGeXC7/z5VZ/o33W2p5MB+P ZehesTzUYAb06dQka59C+std0onJoMpyChYhZe12WH3MqVjkQ5/SwuOKZTePX/mG 9OgVjMazaBsmbsgaAtiIBGE2UyGSA2AZHd5sBfyz6HIRSjV24od33qtCRWFLBlNg zb8yHhrqwKpf3BT52hAl/XPIyx4thsS5+C2wFwblAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUppAGb/KDR0eesBLN3XiCUihwAPYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E0YzkyNGFlLTM1OTMtNDY2Ny05MjkyLWQzNzY4NTg2MGVlMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA0PTANBgkqhkiG9w0BAQsFAAOCAQEApWmTXOzMnaWbQH9jBLbpba/k3vGF HDVrG7bpyk5tMbqhT5MYlh+8HFkUCthL8XYdZTwToM97/i2G512gNzkxnu9SVGjj tOR27kHWuc0dAmGelEtNifcEJPQWlA+cxjt4q8v0+nQsRu5wsBu3TM8hfFb2X5gD AuQb+wPgawuFXVTRZW+3++DitoFUcTY8VBX+nqmKcEkHasRYpDfVQn4xXa2wV9eP IHdo67DYIwVFoxuaU66+7RgEeiUuIdW6SkGyWOCHf88i9GJuuHifnwAvO0m2+hYH YAMZRTmiz4nao0emsx//JV+fLdkbyD7wBo7qyEvERq2zaCdiyHte1+soFg== -----END CERTIFICATE-----Generated at Sat Jun 14 06:26:15 2025 by rpki-client