$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/425554a6-e598-4df5-a7fb-eb185dac45b5.roa File: 425554a6-e598-4df5-a7fb-eb185dac45b5.roa (raw, json) Hash identifier: pWi3k+3czRO7rEjl8wPQiblPfdgG0s4eFHgs9ijot+I= Subject key identifier: CC:15:D8:9A:8A:F5:BA:7A:E2:05:93:8A:C2:64:28:7C:65:EB:AC:68 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 01A8DBB19DC5DF24A04F34B38F23A6EB9FE422D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/425554a6-e598-4df5-a7fb-eb185dac45b5.roa Signing time: Mon 30 Jun 2025 16:30:30 +0000 ROA not before: Mon 30 Jun 2025 16:30:30 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.19.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a8:db:b1:9d:c5:df:24:a0:4f:34:b3:8f:23:a6:eb:9f:e4:22:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:30:30 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=c048bf2f848d7371f15a96f1a498e1e514ee721587293b125edcf23175d12131, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:3c:93:22:80:f1:89:b5:c8:8a:c3:b9:4e: 15:51:cd:5e:02:fa:dd:53:31:09:e1:dd:b0:ca:79: 4f:fc:c8:b5:e8:27:33:1f:07:26:bb:cf:35:63:6d: 41:f3:04:02:52:80:34:80:32:66:93:92:2b:54:ed: 2a:3e:7c:5c:b2:13:4f:a7:ea:d4:b5:4a:4a:2f:d4: b6:97:ce:dc:2e:b5:38:32:2d:4c:05:42:71:69:2d: 04:12:ca:2d:5c:7b:78:ce:2e:2a:1c:87:97:16:6b: cf:c1:57:17:63:56:4c:0e:65:3d:39:2c:68:a8:69: 60:53:bc:4f:2e:c8:02:0e:f1:2b:eb:54:ae:bd:8a: ea:8e:8b:c1:58:d8:f6:9e:9b:7f:2a:4e:a8:bc:ba: 1c:d7:9d:c2:05:f1:8f:5d:3a:c1:3b:5a:2e:2c:f6: fc:99:a1:dc:06:f0:8c:f4:1a:70:e9:cf:a2:de:22: aa:94:d2:4c:c1:ea:20:69:02:ed:13:87:f9:02:71: 5a:cc:33:c9:1c:79:fe:d9:9d:1d:2a:1b:c5:85:c2: 88:f1:3d:91:4f:48:74:e8:f9:3c:64:d3:00:40:9b: 2d:27:40:84:72:a7:e3:9d:67:ed:14:eb:9e:61:75: a6:31:ea:4d:5f:53:52:a8:8a:14:c4:90:a7:f1:5d: 90:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:15:D8:9A:8A:F5:BA:7A:E2:05:93:8A:C2:64:28:7C:65:EB:AC:68 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/425554a6-e598-4df5-a7fb-eb185dac45b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.19.254.0/24 Signature Algorithm: sha256WithRSAEncryption b2:f8:4f:69:a8:02:6e:97:8c:bb:7a:e0:0b:fb:8d:ce:8d:2b: 76:4a:5b:73:47:fc:81:e4:d5:45:3c:83:a5:58:ce:06:11:7f: 61:84:31:69:6a:42:f2:87:8e:ee:21:06:20:a8:7d:e4:0d:aa: 9e:75:0c:9b:f6:26:bc:7e:d8:95:29:d4:4c:d6:31:e3:28:69: 1f:1e:45:6d:12:27:61:3d:0c:8c:8a:ce:87:d8:92:24:cf:a8: 99:2d:65:7c:ce:a9:0d:03:49:89:51:03:8f:60:7d:09:0d:4e: 29:19:e2:41:56:4d:cd:5d:39:a7:0a:88:24:7e:5f:45:d8:3c: 03:64:a9:af:df:3f:cf:16:e2:93:78:1f:6d:19:33:2f:ac:7f: 80:5b:db:03:ac:e0:af:aa:03:3b:b2:dc:6f:a8:2c:2a:8e:1e: dc:2d:bb:0d:7b:e7:d2:dd:e2:7c:13:7b:0a:83:d5:b1:32:2c: 44:ff:23:9e:3d:bc:fc:19:c0:be:aa:fd:18:d3:cc:18:68:d4: d5:3f:9a:37:f1:53:ac:fa:04:b8:6f:47:fd:d8:72:30:78:d4: ba:1b:67:77:d1:2b:34:c7:c7:07:f5:0a:46:14:4e:84:b7:5f: 64:db:15:be:3f:7a:0f:91:b5:bb:ad:0e:21:34:5a:d5:91:bd: c7:db:d4:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAajbsZ3F3ySgTzSzjyOm65/kItQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYzMDMwWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDQ4YmYyZjg0OGQ3MzcxZjE1YTk2ZjFhNDk4ZTFlNTE0 ZWU3MjE1ODcyOTNiMTI1ZWRjZjIzMTc1ZDEyMTMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpcjyTIoDxibXIisO5ThVRzV4C+t1TMQnh3bDKeU/8yLXo JzMfBya7zzVjbUHzBAJSgDSAMmaTkitU7So+fFyyE0+n6tS1Skov1LaXztwutTgy LUwFQnFpLQQSyi1ce3jOLioch5cWa8/BVxdjVkwOZT05LGioaWBTvE8uyAIO8Svr VK69iuqOi8FY2Paem38qTqi8uhzXncIF8Y9dOsE7Wi4s9vyZodwG8Iz0GnDpz6Le IqqU0kzB6iBpAu0Th/kCcVrMM8kcef7ZnR0qG8WFwojxPZFPSHTo+Txk0wBAmy0n QIRyp+OdZ+0U655hdaYx6k1fU1KoihTEkKfxXZDLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzBXYmor1unriBZOKwmQofGXrrGgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyNTU1NGE2LWU1OTgtNGRmNS1hN2ZiLWViMTg1ZGFjNDViNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0E/4wDQYJKoZIhvcNAQELBQADggEBALL4T2moAm6XjLt64Av7jc6NK3ZK W3NH/IHk1UU8g6VYzgYRf2GEMWlqQvKHju4hBiCofeQNqp51DJv2Jrx+2JUp1EzW MeMoaR8eRW0SJ2E9DIyKzofYkiTPqJktZXzOqQ0DSYlRA49gfQkNTikZ4kFWTc1d OacKiCR+X0XYPANkqa/fP88W4pN4H20ZMy+sf4Bb2wOs4K+qAzuy3G+oLCqOHtwt uw1759Ld4nwTewqD1bEyLET/I549vPwZwL6q/RjTzBho1NU/mjfxU6z6BLhvR/3Y cjB41LobZ3fRKzTHxwf1CkYUToS3X2TbFb4/eg+RtbutDiE0WtWRvcfb1BU= -----END CERTIFICATE-----Generated at Mon Jun 30 22:44:15 2025 by rpki-client