$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5162ed8f-67ac-43cc-8054-f865919f7342.roa File: 5162ed8f-67ac-43cc-8054-f865919f7342.roa (raw, json) Hash identifier: jHVF0q1P5SHOFsXc2NqRE3rNrDlekdfLz2XjciVSmWM= Subject key identifier: 08:47:DC:97:2E:44:BF:2E:9A:E4:C2:42:6B:F3:97:72:29:B7:56:3A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34912B2902D5B268597DEA0619B599F89F49D20B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5162ed8f-67ac-43cc-8054-f865919f7342.roa Signing time: Mon 09 Jun 2025 16:40:49 +0000 ROA not before: Mon 09 Jun 2025 16:40:49 +0000 ROA not after: Mon 14 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:91:2b:29:02:d5:b2:68:59:7d:ea:06:19:b5:99:f8:9f:49:d2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 9 16:40:49 2025 GMT Not After : Jul 14 23:59:59 2025 GMT Subject: serialNumber=82225863c795a7854abae2012ca84da3048cfd15fd58125118f362fe33cb851e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:f9:c7:a7:ed:e6:b3:3f:b2:aa:0a:f2:18: f2:0e:6b:c7:b7:6c:52:e7:d7:a1:1a:9f:c9:2b:28: 76:9f:e3:c1:a9:19:48:78:4f:3a:74:79:42:66:8e: ab:57:6b:d4:14:0a:7a:99:e7:51:08:c2:70:70:53: 96:cb:b0:79:7c:80:b6:3a:8a:49:a6:50:7b:fa:95: 34:ec:94:2a:84:30:cb:c2:11:45:89:20:a4:4a:91: 15:a1:bd:05:29:d8:38:87:74:47:82:74:45:7f:a6: f9:52:6d:82:b8:e6:8a:49:e4:e9:f2:04:e3:cb:56: f9:9a:f3:da:c2:9e:7f:6c:5b:f8:54:91:02:8e:d1: 3d:77:28:87:3d:8b:f5:41:af:0b:d6:b5:0c:96:61: 4c:bf:fb:54:61:18:82:9d:32:23:52:a1:d3:39:8c: 15:15:81:13:1a:0d:f3:95:02:66:43:93:d8:36:30: 31:ce:d5:e7:7f:73:82:88:09:c4:09:f0:8d:c4:66: df:0c:75:61:d4:bb:fa:a6:a6:5c:c8:f8:e1:fe:ee: f3:73:6a:03:ca:cb:93:88:24:04:d3:da:5a:b2:83: ab:00:66:d7:74:2c:b1:3c:5f:17:cb:bc:6f:61:d5: 99:4e:53:ba:1e:84:e0:47:29:f2:3f:9e:95:4d:0a: 22:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:47:DC:97:2E:44:BF:2E:9A:E4:C2:42:6B:F3:97:72:29:B7:56:3A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5162ed8f-67ac-43cc-8054-f865919f7342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.43.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:64:c2:c3:b9:68:17:c6:69:1b:20:5b:5e:4d:a2:76:f6:77: 7e:24:40:c0:46:a0:10:c1:81:cd:ce:b3:ba:e7:6d:46:52:d1: 14:e9:b4:45:85:d7:0b:85:90:ca:2f:40:72:55:c9:c4:fb:62: 5d:f4:6f:62:2e:29:d2:2e:00:7b:2e:2d:c8:8d:51:4d:2d:81: 55:02:b1:25:9a:2e:c5:b8:8c:d5:94:65:ff:d5:cf:f5:87:1b: e2:a5:9c:66:e7:1b:21:80:72:45:60:ce:b2:6c:e3:25:67:34: 24:3a:5c:ed:40:e7:3b:ee:f8:01:c4:d4:cf:1c:66:25:e0:4d: 65:a1:8c:f6:e0:fa:9a:5d:e8:65:83:90:f5:6a:e9:7f:19:87: ec:e4:81:cf:4a:84:b3:3d:57:ee:3c:d5:3b:24:cc:ef:96:ee: 14:fe:cb:b1:69:09:50:d7:24:46:01:83:55:23:a6:a5:44:56: cf:5a:ff:d1:33:94:4a:59:3b:77:ac:c7:9a:1f:a5:06:9d:29: 7d:0b:de:58:f5:5d:4b:de:c9:aa:98:91:66:de:7c:5f:81:2c: 19:3b:56:cf:86:1b:37:ea:9e:bf:e5:99:7d:87:23:ac:21:89: 32:0c:15:b9:bd:76:75:65:25:36:56:87:df:ce:11:23:2f:cd: 82:20:dc:d7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNJErKQLVsmhZfeoGGbWZ+J9J0gswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA5MTY0MDQ5WhcNMjUwNzE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MjIyNTg2M2M3OTVhNzg1NGFiYWUyMDEyY2E4NGRhMzA0 OGNmZDE1ZmQ1ODEyNTExOGYzNjJmZTMzY2I4NTFlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKqfnHp+3msz+yqgryGPIOa8e3bFLn16Ean8krKHaf48Gp GUh4Tzp0eUJmjqtXa9QUCnqZ51EIwnBwU5bLsHl8gLY6ikmmUHv6lTTslCqEMMvC EUWJIKRKkRWhvQUp2DiHdEeCdEV/pvlSbYK45opJ5OnyBOPLVvma89rCnn9sW/hU kQKO0T13KIc9i/VBrwvWtQyWYUy/+1RhGIKdMiNSodM5jBUVgRMaDfOVAmZDk9g2 MDHO1ed/c4KICcQJ8I3EZt8MdWHUu/qmplzI+OH+7vNzagPKy5OIJATT2lqyg6sA Ztd0LLE8XxfLvG9h1ZlOU7oehOBHKfI/npVNCiLrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCEfcly5Evy6a5MJCa/OXcim3VjowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxNjJlZDhmLTY3YWMtNDNjYy04MDU0LWY4NjU5MTlmNzM0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XyswDQYJKoZIhvcNAQELBQADggEBAC5kwsO5aBfGaRsgW15Nonb2d34k QMBGoBDBgc3Os7rnbUZS0RTptEWF1wuFkMovQHJVycT7Yl30b2IuKdIuAHsuLciN UU0tgVUCsSWaLsW4jNWUZf/Vz/WHG+KlnGbnGyGAckVgzrJs4yVnNCQ6XO1A5zvu +AHE1M8cZiXgTWWhjPbg+ppd6GWDkPVq6X8Zh+zkgc9KhLM9V+481TskzO+W7hT+ y7FpCVDXJEYBg1UjpqVEVs9a/9EzlEpZO3esx5ofpQadKX0L3lj1XUveyaqYkWbe fF+BLBk7Vs+GGzfqnr/lmX2HI6whiTIMFbm9dnVlJTZWh9/OESMvzYIg3Nc= -----END CERTIFICATE-----Generated at Tue Jul 1 00:46:46 2025 by rpki-client