$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/131dba06-40fb-4f15-9521-648dfcbd0eab.roa File: 131dba06-40fb-4f15-9521-648dfcbd0eab.roa (raw, json) Hash identifier: FdKtiiS/idux+/ZSXSGmhJqztSMKvkDCY0qOFxArJrE= Subject key identifier: 83:9C:FC:18:88:D7:02:BA:58:34:04:79:2A:E3:B6:BE:06:E9:17:06 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08DE3235E41BADDB1251E115EB8566E24D597AD5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/131dba06-40fb-4f15-9521-648dfcbd0eab.roa Signing time: Mon 16 Jun 2025 17:51:08 +0000 ROA not before: Mon 16 Jun 2025 17:51:08 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.46.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:de:32:35:e4:1b:ad:db:12:51:e1:15:eb:85:66:e2:4d:59:7a:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 17:51:08 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=50bdc4f4a4cf3495f2c2ad41b256e7c7a6668089293b81ed11bd8937f0c85c28, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:7f:36:57:d3:17:6e:64:39:34:60:f5:24: f8:6a:3d:6a:6e:84:ef:cb:0a:7e:2c:b2:2a:24:c8: c3:9e:ba:42:23:2c:fe:c3:0e:d3:e8:c3:f0:8a:f2: c1:bb:38:44:23:53:97:19:ea:3a:10:d7:84:f8:b0: 12:a2:3c:55:4f:ca:d8:d9:88:ea:db:2c:27:b3:06: f2:63:9a:04:6c:2e:6c:62:06:98:8d:d2:6a:f1:c9: 3a:a7:87:2e:5d:a8:45:14:5c:ab:84:a4:ac:06:16: d4:d7:e5:c6:ab:2e:a6:d5:44:1c:af:75:bc:75:cc: 4e:4b:45:04:50:f3:c2:c9:c8:df:6f:1b:51:22:44: d3:a0:ce:23:ec:d0:f2:c3:c3:1f:df:94:75:28:9c: 5e:47:0c:66:30:e4:71:27:44:0e:fd:5b:35:53:37: 1f:96:a3:90:1f:cb:a7:86:df:74:1f:55:c9:0a:b4: 77:0e:0c:a8:d7:cc:1d:3b:bb:08:38:85:b3:6e:4f: 66:22:b6:6b:48:38:ef:bf:64:70:76:8d:19:88:c4: 2a:05:74:ea:6c:2e:4a:b1:f5:96:95:91:63:74:fd: 6d:92:48:6a:75:59:bc:78:fc:6a:a2:f3:41:62:1d: c5:44:fb:aa:0d:6c:f2:3d:e6:7e:53:3f:2f:81:12: 63:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9C:FC:18:88:D7:02:BA:58:34:04:79:2A:E3:B6:BE:06:E9:17:06 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/131dba06-40fb-4f15-9521-648dfcbd0eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.252.0/22 Signature Algorithm: sha256WithRSAEncryption 27:c2:f3:31:7a:1b:17:16:5e:f9:a1:a4:a0:14:d4:b9:8d:8d: ba:06:df:b8:9a:1f:0c:ff:93:b4:8e:04:47:6f:a5:47:33:b1: b3:0e:83:34:7b:fc:e2:0b:df:98:f5:c9:86:02:ee:ac:ce:53: 1d:50:e0:08:eb:c6:d6:54:01:95:fe:7c:0e:3d:90:91:74:d5: 08:4c:e2:93:e7:fc:31:f1:07:24:11:59:b1:70:b0:8e:25:06: 11:26:3f:44:f2:4d:76:20:39:d7:4b:3a:02:08:f4:be:3e:87: 7e:b5:58:49:66:eb:40:ad:7e:d5:91:11:68:08:51:43:17:21: 12:03:48:2b:fe:6f:ed:9c:4a:08:ce:7a:16:cb:da:8a:16:28: 64:97:8c:77:2a:7f:28:9d:a5:38:94:da:ac:cc:e1:2d:e1:69: 88:d8:80:76:24:3c:2f:8c:52:9b:b3:23:72:8c:9f:54:e7:41: db:a9:6c:42:41:26:84:64:84:16:99:d9:ff:dc:96:20:81:6e: 7d:ee:46:ab:e9:84:11:d8:d2:17:c8:1f:66:f1:5b:02:49:3c: 06:72:f3:de:45:31:d1:bf:21:6d:3b:07:d3:93:e5:c5:30:40: f0:cd:f0:ab:b9:88:cd:5d:20:3e:96:f1:c2:4e:29:e2:be:d5: 5e:f9:c1:bd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCN4yNeQbrdsSUeEV64Vm4k1ZetUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTc1MTA4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MGJkYzRmNGE0Y2YzNDk1ZjJjMmFkNDFiMjU2ZTdjN2E2 NjY4MDg5MjkzYjgxZWQxMWJkODkzN2YwYzg1YzI4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3/X82V9MXbmQ5NGD1JPhqPWpuhO/LCn4ssiokyMOeukIj LP7DDtPow/CK8sG7OEQjU5cZ6joQ14T4sBKiPFVPytjZiOrbLCezBvJjmgRsLmxi BpiN0mrxyTqnhy5dqEUUXKuEpKwGFtTX5carLqbVRByvdbx1zE5LRQRQ88LJyN9v G1EiRNOgziPs0PLDwx/flHUonF5HDGYw5HEnRA79WzVTNx+Wo5Afy6eG33QfVckK tHcODKjXzB07uwg4hbNuT2YitmtIOO+/ZHB2jRmIxCoFdOpsLkqx9ZaVkWN0/W2S SGp1Wbx4/Gqi80FiHcVE+6oNbPI95n5TPy+BEmNJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUg5z8GIjXArpYNAR5KuO2vgbpFwYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzMWRiYTA2LTQwZmItNGYxNS05NTIxLTY0OGRmY2JkMGVhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0LvwwDQYJKoZIhvcNAQELBQADggEBACfC8zF6GxcWXvmhpKAU1LmNjboG 37iaHwz/k7SOBEdvpUczsbMOgzR7/OIL35j1yYYC7qzOUx1Q4AjrxtZUAZX+fA49 kJF01QhM4pPn/DHxByQRWbFwsI4lBhEmP0TyTXYgOddLOgII9L4+h361WElm60Ct ftWREWgIUUMXIRIDSCv+b+2cSgjOehbL2ooWKGSXjHcqfyidpTiU2qzM4S3haYjY gHYkPC+MUpuzI3KMn1TnQdupbEJBJoRkhBaZ2f/cliCBbn3uRqvphBHY0hfIH2bx WwJJPAZy895FMdG/IW07B9OT5cUwQPDN8Ku5iM1dID6W8cJOKeK+1V75wb0= -----END CERTIFICATE-----Generated at Sat Jun 28 23:55:35 2025 by rpki-client