$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34cfc5c1-e8db-40d3-a0e7-c4578f18b95b.roa File: 34cfc5c1-e8db-40d3-a0e7-c4578f18b95b.roa (raw, json) Hash identifier: t52eFKA1SHYTB04J1KioX6epEfhZvecNZdDOAGZtRtc= Subject key identifier: 3E:F9:77:00:33:DC:1E:10:EB:60:99:08:4B:34:B8:EA:93:D0:93:90 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70D79E11A02CDF47FD426AC897DE3A944D7A3A70 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34cfc5c1-e8db-40d3-a0e7-c4578f18b95b.roa Signing time: Tue 22 Apr 2025 18:11:25 +0000 ROA not before: Tue 22 Apr 2025 18:11:25 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d7:9e:11:a0:2c:df:47:fd:42:6a:c8:97:de:3a:94:4d:7a:3a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 18:11:25 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=7b03b60907a1899976d8137cad1d78242c8a985804b7ccc5013d53827b903cb5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:a9:66:66:0a:28:9e:f4:8b:29:42:04:1b: 00:2f:fe:64:43:f9:3f:2b:f5:e9:eb:d5:40:8d:cf: 70:b6:71:2d:52:cd:c3:58:c8:74:c3:66:5c:c2:fa: d8:8a:c3:86:60:e2:b2:d5:bb:23:e4:14:7b:11:b5: 35:34:77:5c:f8:12:ff:52:b5:9a:dd:47:61:2c:3e: f8:c5:b4:89:c1:3f:69:b1:c2:06:6b:80:3b:9e:de: 87:c1:68:5e:3a:78:58:67:b2:1e:f3:21:f0:cd:62: 23:1b:04:2b:93:b1:35:4d:93:fc:4c:94:82:33:10: 09:26:de:80:35:1e:0e:e8:46:da:06:79:fe:f2:1c: d3:58:cd:9f:4d:f7:25:dd:2d:5f:45:92:8c:dc:bd: 25:30:cd:25:09:78:f5:0a:99:5b:a8:bd:54:8f:ff: 41:64:ef:b5:96:5f:8c:66:61:38:bb:e2:40:74:c1: b4:0a:28:46:be:4e:3b:af:d5:c3:96:d1:7e:fa:73: 25:55:08:41:56:97:31:f7:0d:80:ca:b6:55:ba:8c: 10:68:90:63:57:4e:67:36:76:a1:4a:7d:b9:3a:c6: 1d:e3:6a:12:b9:49:67:96:aa:f7:e6:d5:61:07:24: 74:b8:54:75:2a:79:97:7a:a9:af:39:fe:e0:61:11: 74:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F9:77:00:33:DC:1E:10:EB:60:99:08:4B:34:B8:EA:93:D0:93:90 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34cfc5c1-e8db-40d3-a0e7-c4578f18b95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.251.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:e9:d5:7c:c5:45:f9:1d:15:d4:46:c9:93:ac:fb:be:8a:23: 02:ea:39:d2:c8:6f:cc:a7:53:d7:ba:42:93:2e:1c:55:b7:4d: 23:83:18:69:08:e5:32:89:0b:c2:eb:a0:a0:9f:30:af:12:d8: 6c:de:a0:72:87:e3:87:70:b2:00:de:ca:a7:77:7a:80:71:3a: 38:2c:35:97:06:fc:76:92:1c:e9:95:6e:e6:01:db:24:85:71: b4:ac:2c:08:8b:05:64:0a:a4:ab:44:63:53:11:62:ce:6e:d4: f5:f5:0d:81:ad:9e:45:aa:e5:d2:ce:c9:a0:16:3d:b0:82:e9: a6:b1:65:a1:b6:ca:f2:18:75:4a:a1:f1:69:7f:aa:3d:57:e4: bb:9b:32:d6:30:21:8a:8a:ab:59:76:72:ee:86:21:c6:f6:b5: 44:90:e3:84:4a:6b:93:79:86:9b:30:24:73:92:a6:cf:13:14: 3b:65:c6:e1:58:55:a0:1e:62:4d:b2:fe:30:f9:45:4d:e5:3e: 84:2b:3f:c3:e9:40:62:45:cd:6f:03:75:25:ec:e4:41:0e:27: 6a:90:80:74:0e:e0:96:e9:ec:40:a3:c8:8e:ad:54:f5:ef:52: 1a:6c:7c:d4:ad:d4:01:21:4a:75:72:bd:41:da:1c:40:d7:2f: 68:11:3c:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcNeeEaAs30f9QmrIl946lE16OnAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTgxMTI1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjAzYjYwOTA3YTE4OTk5NzZkODEzN2NhZDFkNzgyNDJj OGE5ODU4MDRiN2NjYzUwMTNkNTM4MjdiOTAzY2I1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJU6lmZgoonvSLKUIEGwAv/mRD+T8r9enr1UCNz3C2cS1S zcNYyHTDZlzC+tiKw4Zg4rLVuyPkFHsRtTU0d1z4Ev9StZrdR2EsPvjFtInBP2mx wgZrgDue3ofBaF46eFhnsh7zIfDNYiMbBCuTsTVNk/xMlIIzEAkm3oA1Hg7oRtoG ef7yHNNYzZ9N9yXdLV9FkozcvSUwzSUJePUKmVuovVSP/0Fk77WWX4xmYTi74kB0 wbQKKEa+Tjuv1cOW0X76cyVVCEFWlzH3DYDKtlW6jBBokGNXTmc2dqFKfbk6xh3j ahK5SWeWqvfm1WEHJHS4VHUqeZd6qa85/uBhEXThAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPvl3ADPcHhDrYJkISzS46pPQk5AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0Y2ZjNWMxLWU4ZGItNDBkMy1hMGU3LWM0NTc4ZjE4Yjk1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/swDQYJKoZIhvcNAQELBQADggEBAC3p1XzFRfkdFdRGyZOs+76KIwLq OdLIb8ynU9e6QpMuHFW3TSODGGkI5TKJC8LroKCfMK8S2GzeoHKH44dwsgDeyqd3 eoBxOjgsNZcG/HaSHOmVbuYB2ySFcbSsLAiLBWQKpKtEY1MRYs5u1PX1DYGtnkWq 5dLOyaAWPbCC6aaxZaG2yvIYdUqh8Wl/qj1X5LubMtYwIYqKq1l2cu6GIcb2tUSQ 44RKa5N5hpswJHOSps8TFDtlxuFYVaAeYk2y/jD5RU3lPoQrP8PpQGJFzW8DdSXs 5EEOJ2qQgHQO4Jbp7ECjyI6tVPXvUhpsfNSt1AEhSnVyvUHaHEDXL2gRPAM= -----END CERTIFICATE-----Generated at Fri May 9 17:28:03 2025 by rpki-client