$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08c42922-6d4e-4f79-9946-6d0f40db0803.roa File: 08c42922-6d4e-4f79-9946-6d0f40db0803.roa (raw, json) Hash identifier: VrHWqOBcC+PLv+edEVGyiCFXxozolQcyJ0Ri1JsGK40= Subject key identifier: 6A:F9:2E:0C:49:7B:3A:23:57:8E:3B:4A:85:18:B3:DD:25:97:C4:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C3D61A3355FA56E54DCB3BA76354278214E60EB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08c42922-6d4e-4f79-9946-6d0f40db0803.roa Signing time: Tue 01 Apr 2025 00:30:14 +0000 ROA not before: Tue 01 Apr 2025 00:30:14 +0000 ROA not after: Tue 06 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3d:61:a3:35:5f:a5:6e:54:dc:b3:ba:76:35:42:78:21:4e:60:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 1 00:30:14 2025 GMT Not After : May 6 23:59:59 2025 GMT Subject: CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:7f:e0:d6:f3:5f:0a:00:18:7b:a6:1f:54: 28:11:cd:46:f9:64:7d:4f:ae:f6:f1:cd:0a:0f:9e: cb:11:ae:2b:2a:3c:08:fa:f3:c3:8c:fa:6e:a4:bd: 79:4d:04:3d:e8:99:b5:cc:99:bb:4a:9e:3a:42:4f: 98:12:77:d9:05:75:2f:b2:88:f2:9f:84:d9:54:2d: e8:a3:3b:d7:63:29:68:b9:69:93:be:99:f0:cf:74: 1e:23:bd:aa:15:7d:21:90:be:8b:a0:d4:44:7b:7f: 85:18:96:85:1a:47:ed:ce:f3:be:8b:1f:a5:b8:1e: 9e:6e:99:25:cd:93:d7:4d:60:9b:6f:26:50:ec:00: a3:15:fd:72:dc:41:c1:8c:6d:49:ce:e6:dc:58:8e: 44:3d:c6:b5:da:9c:c2:18:4f:dd:14:70:7b:d2:19: 43:ef:02:d1:be:f6:ea:e5:d7:10:98:66:46:49:c2: 84:32:da:b7:ce:69:62:e2:df:1e:70:63:e0:32:ae: fd:e3:2a:39:b5:61:70:c2:69:f4:28:8c:90:d5:04: 00:40:28:d9:64:40:96:35:54:38:cf:db:15:5a:e6: 49:77:73:f3:1c:e2:15:37:84:a6:af:78:46:96:ea: 75:dc:8d:01:9a:de:d7:7c:d4:a6:37:8a:a1:7f:d4: c0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F9:2E:0C:49:7B:3A:23:57:8E:3B:4A:85:18:B3:DD:25:97:C4:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08c42922-6d4e-4f79-9946-6d0f40db0803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.250.0/24 Signature Algorithm: sha256WithRSAEncryption 71:89:cd:07:13:10:c3:63:f0:11:30:1d:2f:91:e0:e1:c6:3c: ae:13:2b:d9:fe:51:e7:ff:b2:68:c7:11:8e:dd:fd:fe:31:39: 6f:ff:fe:47:4c:1a:21:43:6c:d4:3b:5f:60:a6:64:3b:ab:0d: f3:1f:af:1e:46:f5:d3:a2:00:df:2a:65:1f:3f:a3:99:71:25: 6e:15:05:fd:8a:f5:96:37:79:c6:d2:83:1d:ad:05:49:f6:d3: be:35:fe:7a:9a:82:8b:09:f1:b2:9f:a7:ee:c4:eb:7f:49:59: 1f:d1:20:e6:b9:04:6d:41:db:22:fc:9c:b0:1d:10:fb:a5:a0: 2a:70:99:90:b6:52:a4:98:ff:e4:3d:44:56:76:0c:52:9d:69: 8f:e8:a4:9b:a9:fd:e6:05:c1:44:2b:55:74:fd:bf:1b:8c:0f: 76:94:3b:13:a5:5d:56:0d:a6:83:dd:33:a7:5c:6f:8d:cf:fc: f3:eb:4a:b1:4f:3f:76:e1:92:29:7d:fe:79:25:18:fe:41:a4: 1a:51:3c:99:c4:fd:46:ae:cb:2e:b4:8c:39:df:9f:fe:b5:df: 6b:9b:a7:6c:d5:9b:e9:4f:ed:dc:94:60:4c:94:e0:d1:f5:24: 0c:86:0d:1d:91:8c:72:7b:4d:88:02:6a:ac:1f:71:94:a4:c0: 42:2e:ab:8f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfD1hozVfpW5U3LO6djVCeCFOYOswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDAxMDAzMDE0WhcNMjUwNTA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YTM3NzA2ZTYwYmEzMGQwNzM1YjhiOThhODg0NTI2ZDJj MWIzZjg4MzBiMjAyOTkzMTFjZDU0MDM1ZjExYjNmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy7n/g1vNfCgAYe6YfVCgRzUb5ZH1PrvbxzQoPnssRrisq PAj688OM+m6kvXlNBD3ombXMmbtKnjpCT5gSd9kFdS+yiPKfhNlULeijO9djKWi5 aZO+mfDPdB4jvaoVfSGQvoug1ER7f4UYloUaR+3O876LH6W4Hp5umSXNk9dNYJtv JlDsAKMV/XLcQcGMbUnO5txYjkQ9xrXanMIYT90UcHvSGUPvAtG+9url1xCYZkZJ woQy2rfOaWLi3x5wY+Ayrv3jKjm1YXDCafQojJDVBABAKNlkQJY1VDjP2xVa5kl3 c/Mc4hU3hKaveEaW6nXcjQGa3td81KY3iqF/1MC7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUavkuDEl7OiNXjjtKhRiz3SWXxFAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4YzQyOTIyLTZkNGUtNGY3OS05OTQ2LTZkMGY0MGRiMDgwMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/owDQYJKoZIhvcNAQELBQADggEBAHGJzQcTEMNj8BEwHS+R4OHGPK4T K9n+Uef/smjHEY7d/f4xOW///kdMGiFDbNQ7X2CmZDurDfMfrx5G9dOiAN8qZR8/ o5lxJW4VBf2K9ZY3ecbSgx2tBUn20741/nqagosJ8bKfp+7E639JWR/RIOa5BG1B 2yL8nLAdEPuloCpwmZC2UqSY/+Q9RFZ2DFKdaY/opJup/eYFwUQrVXT9vxuMD3aU OxOlXVYNpoPdM6dcb43P/PPrSrFPP3bhkil9/nklGP5BpBpRPJnE/Uauyy60jDnf n/6132ubp2zVm+lP7dyUYEyU4NH1JAyGDR2RjHJ7TYgCaqwfcZSkwEIuq48= -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:19 2025 by rpki-client