$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f17d5b87-7c85-49ca-a165-3a9f24efd642.roa File: f17d5b87-7c85-49ca-a165-3a9f24efd642.roa (raw, json) Hash identifier: 0T+Ffp5PH42Ee9/ZeM+ICgXuv+UnlA0fofmrsAmVaF8= Subject key identifier: C6:E8:2E:37:B0:2D:91:B1:07:DB:78:E9:E4:08:D7:57:F2:5A:55:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0A943C4F8D8EB238BED6D225407CDA74F415DE61 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f17d5b87-7c85-49ca-a165-3a9f24efd642.roa Signing time: Mon 30 Jun 2025 16:41:35 +0000 ROA not before: Mon 30 Jun 2025 16:41:35 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.13.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:94:3c:4f:8d:8e:b2:38:be:d6:d2:25:40:7c:da:74:f4:15:de:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:41:35 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=e5445e77e09945893e2bef926ba103a350bf9953442c5e23d61411491d6383ea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:c2:ad:eb:20:1c:12:b4:ca:7e:9a:4a:5c: c8:2e:25:e1:7e:74:c5:17:48:c5:c7:28:d2:5d:87: 86:15:10:ac:e6:52:33:0b:c6:2f:b5:eb:57:b2:a3: fa:64:7a:3e:bf:3a:db:79:19:a1:9d:e7:a3:e4:46: dc:bf:2f:26:0d:f0:67:42:d3:99:21:84:b6:cb:aa: 15:7f:f6:1f:d4:ac:69:06:86:d8:85:06:3f:f1:20: d1:a6:f2:da:51:72:d8:41:fa:d5:0e:da:fe:1a:df: 56:cd:7a:18:e3:98:f1:a2:2c:d8:82:c1:39:06:c4: 83:1b:f0:2f:3a:26:a6:1b:dc:e8:74:da:d9:6e:a9: da:16:15:6c:8e:c9:be:a3:57:10:d3:fa:a1:b8:92: 77:26:d0:ff:b4:94:51:c2:16:eb:5b:aa:45:2a:62: ef:19:c3:aa:65:5c:39:5d:b9:67:dc:c6:b7:60:d2: 31:96:63:59:b1:27:0c:22:28:e5:88:e8:bd:18:ff: 80:33:bd:da:b0:47:ef:d7:be:b5:cb:05:3c:76:3f: a2:16:fa:7f:3e:42:b6:d3:07:e9:14:3a:fc:3c:9b: b8:40:cd:73:d2:3e:3d:e7:0f:f9:bf:67:30:27:6c: c8:d6:77:58:d3:13:6d:89:f4:80:9a:25:32:28:ae: 86:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E8:2E:37:B0:2D:91:B1:07:DB:78:E9:E4:08:D7:57:F2:5A:55:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f17d5b87-7c85-49ca-a165-3a9f24efd642.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.13.128.0/18 Signature Algorithm: sha256WithRSAEncryption 72:2d:7c:49:81:9e:17:c5:64:41:34:d7:e7:18:f3:93:c6:91: 94:a5:e5:93:3a:4a:a1:99:a9:a1:1b:1d:ee:17:29:8d:0a:9f: 75:1c:a1:11:3b:c0:a8:09:4b:f6:74:56:70:b7:b0:30:84:04: 45:06:11:ce:33:e2:a1:a4:95:cb:b4:96:60:f9:41:8e:11:57: 04:0f:38:d4:0f:a5:94:04:81:9d:fc:64:93:74:c4:8f:11:93: 9a:25:f1:1a:d7:c5:48:c8:b6:42:1d:3f:03:26:0a:49:9a:68: 5f:c1:c7:41:e1:92:f7:ec:a8:24:b4:96:b3:d1:1a:b4:fd:b5: f7:78:c5:d7:28:2b:d8:2e:8b:4b:70:36:b6:b4:fd:40:58:a9: 89:af:e6:9f:fb:d6:d5:d3:25:74:64:22:67:08:84:57:76:63: a4:1e:6c:cc:75:46:b4:82:b6:23:a6:57:a5:66:db:75:c7:da: 21:94:35:e7:8c:f8:f4:cb:0d:d5:56:45:b9:fd:42:83:64:8d: 5e:28:d0:2e:52:d0:32:45:e9:1c:9f:c9:90:fa:b5:68:61:1d: d3:a6:20:24:fd:b5:99:b4:03:79:f4:33:5e:31:69:99:7f:45: d5:c1:c1:23:a2:68:cf:77:1e:fa:96:a3:94:58:7c:06:a4:ee: 21:bf:c7:dc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCpQ8T42Osji+1tIlQHzadPQV3mEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTY0MTM1WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlNTQ0NWU3N2UwOTk0NTg5M2UyYmVmOTI2YmExMDNhMzUw YmY5OTUzNDQyYzVlMjNkNjE0MTE0OTFkNjM4M2VhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx+MKt6yAcErTKfppKXMguJeF+dMUXSMXHKNJdh4YVEKzm UjMLxi+161eyo/pkej6/Ott5GaGd56PkRty/LyYN8GdC05khhLbLqhV/9h/UrGkG htiFBj/xINGm8tpRcthB+tUO2v4a31bNehjjmPGiLNiCwTkGxIMb8C86JqYb3Oh0 2tluqdoWFWyOyb6jVxDT+qG4kncm0P+0lFHCFutbqkUqYu8Zw6plXDlduWfcxrdg 0jGWY1mxJwwiKOWI6L0Y/4AzvdqwR+/XvrXLBTx2P6IW+n8+QrbTB+kUOvw8m7hA zXPSPj3nD/m/ZzAnbMjWd1jTE22J9ICaJTIorobHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxuguN7AtkbEH23jp5AjXV/JaVcUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YxN2Q1Yjg3LTdjODUtNDljYS1hMTY1LTNhOWYyNGVmZDY0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY0DYAwDQYJKoZIhvcNAQELBQADggEBAHItfEmBnhfFZEE01+cY85PGkZSl 5ZM6SqGZqaEbHe4XKY0Kn3UcoRE7wKgJS/Z0VnC3sDCEBEUGEc4z4qGklcu0lmD5 QY4RVwQPONQPpZQEgZ38ZJN0xI8Rk5ol8RrXxUjItkIdPwMmCkmaaF/Bx0Hhkvfs qCS0lrPRGrT9tfd4xdcoK9gui0twNra0/UBYqYmv5p/71tXTJXRkImcIhFd2Y6Qe bMx1RrSCtiOmV6Vm23XH2iGUNeeM+PTLDdVWRbn9QoNkjV4o0C5S0DJF6RyfyZD6 tWhhHdOmICT9tZm0A3n0M14xaZl/RdXBwSOiaM93HvqWo5RYfAak7iG/x9w= -----END CERTIFICATE-----Generated at Mon Jun 30 23:50:25 2025 by rpki-client