$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b697a24-8d02-4dd0-a6ff-b0f9cbfc0dc6.roa File: 1b697a24-8d02-4dd0-a6ff-b0f9cbfc0dc6.roa (raw, json) Hash identifier: hSWoZYf/NTyKDvbOf2wqDyKErOs5uuo1tqlF8nmaU9o= Subject key identifier: 71:C6:DA:10:62:E2:FA:EC:FA:63:8A:B1:55:49:71:5C:29:C4:0B:E3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B0CB27E067370F631F20481DA7155343B193D65 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b697a24-8d02-4dd0-a6ff-b0f9cbfc0dc6.roa Signing time: Mon 12 May 2025 16:01:33 +0000 ROA not before: Mon 12 May 2025 16:01:33 +0000 ROA not after: Mon 16 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0c:b2:7e:06:73:70:f6:31:f2:04:81:da:71:55:34:3b:19:3d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 12 16:01:33 2025 GMT Not After : Jun 16 23:59:59 2025 GMT Subject: serialNumber=0f90e16bb1a86d0ad64815d66379dda2c4cc42884b90c77c057616a7c8c39255, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:85:f1:7f:3b:6f:bd:e2:84:71:98:a0:04:ac: 84:e9:29:23:b2:68:9d:e0:2f:25:e3:a7:fe:ee:12: 0c:6f:58:1a:3b:4d:bb:7d:60:49:91:d2:7d:ca:fe: 69:a1:11:ca:e7:c8:b8:90:da:13:20:41:17:0d:82: 0a:43:ef:ee:02:73:4b:30:6e:cd:d2:e7:b3:33:e0: 66:eb:64:07:e3:b9:5d:13:88:58:9e:39:93:ff:f6: 85:ce:66:de:1a:f6:4a:c7:b9:df:3d:4d:bf:72:ee: ef:41:33:7b:ed:88:05:e0:ee:67:89:47:bd:ce:78: bc:5d:fa:fb:df:93:cd:47:a1:e7:af:95:6b:5b:cf: 1f:b2:40:50:f9:ff:0a:bf:7e:86:11:47:66:b0:51: 3c:e5:75:ee:ba:a2:d4:5a:b4:a6:5d:0e:94:f0:7a: 42:00:5f:b1:7a:bf:81:dd:37:73:e6:e7:9f:8c:89: b6:41:8e:dd:92:fe:44:31:99:85:3e:97:ac:ce:ee: e5:8f:40:e4:f2:18:b6:bf:dd:76:3a:aa:9c:55:63: 0b:a4:5f:92:2b:55:c6:ad:f2:b3:72:f8:2f:f8:7f: d8:1b:cc:47:dc:e4:7e:90:0c:0d:04:2e:30:4d:81: 08:67:56:5a:51:ea:45:51:fa:a6:7b:29:68:63:c4: be:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C6:DA:10:62:E2:FA:EC:FA:63:8A:B1:55:49:71:5C:29:C4:0B:E3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b697a24-8d02-4dd0-a6ff-b0f9cbfc0dc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.249.0/24 Signature Algorithm: sha256WithRSAEncryption 91:b9:33:d7:57:90:51:74:fb:82:c6:0b:c9:ce:ce:74:10:a0: 6b:72:37:b1:99:fb:26:a2:17:35:a1:2f:c0:b0:64:01:c1:8c: ff:9e:3d:40:5f:82:fe:19:f9:a7:59:f6:da:fc:2d:f1:57:87: f1:bd:ea:20:32:52:b3:11:b3:71:0c:45:87:f2:93:1f:34:e0: b8:5f:2b:57:27:e9:4d:f9:79:5c:7f:8b:d4:86:29:3a:8d:5c: 86:12:ea:4d:05:5d:dd:61:de:13:b4:33:ae:ae:53:a6:5a:d2: d9:2d:1f:33:00:b8:15:3d:a5:10:85:56:d8:40:44:19:a7:9b: c6:9b:15:a4:b8:ad:ed:fd:23:30:51:24:19:8c:06:85:4d:44: 9b:81:ed:b6:99:7d:17:c1:5d:3b:12:b2:56:f7:4d:3f:c9:be: cc:e3:1b:6c:5e:84:c5:3e:38:16:b7:ed:a2:22:e7:cc:23:e5: 52:df:0f:70:75:ba:ab:84:1a:1f:19:5d:79:b8:52:e1:11:54: 5d:1c:d6:95:66:c9:5c:74:cc:2f:02:71:95:a3:75:4f:45:16: d4:13:6c:f2:e6:a1:85:31:20:31:33:5c:e3:58:e1:1e:db:37: d8:10:49:18:54:64:7a:9e:b5:22:62:25:04:02:c1:a6:6a:f5: 7b:23:ca:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUewyyfgZzcPYx8gSB2nFVNDsZPWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTEyMTYwMTMzWhcNMjUwNjE2MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZjkwZTE2YmIxYTg2ZDBhZDY0ODE1ZDY2Mzc5ZGRhMmM0 Y2M0Mjg4NGI5MGM3N2MwNTc2MTZhN2M4YzM5MjU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCLhfF/O2+94oRxmKAErITpKSOyaJ3gLyXjp/7uEgxvWBo7 Tbt9YEmR0n3K/mmhEcrnyLiQ2hMgQRcNggpD7+4Cc0swbs3S57Mz4GbrZAfjuV0T iFieOZP/9oXOZt4a9krHud89Tb9y7u9BM3vtiAXg7meJR73OeLxd+vvfk81Hoeev lWtbzx+yQFD5/wq/foYRR2awUTzlde66otRatKZdDpTwekIAX7F6v4HdN3Pm55+M ibZBjt2S/kQxmYU+l6zO7uWPQOTyGLa/3XY6qpxVYwukX5IrVcat8rNy+C/4f9gb zEfc5H6QDA0ELjBNgQhnVlpR6kVR+qZ7KWhjxL5pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUccbaEGLi+uz6Y4qxVUlxXCnEC+MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFiNjk3YTI0LThkMDItNGRkMC1hNmZmLWIwZjljYmZjMGRjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0LvkwDQYJKoZIhvcNAQELBQADggEBAJG5M9dXkFF0+4LGC8nOznQQoGty N7GZ+yaiFzWhL8CwZAHBjP+ePUBfgv4Z+adZ9tr8LfFXh/G96iAyUrMRs3EMRYfy kx804LhfK1cn6U35eVx/i9SGKTqNXIYS6k0FXd1h3hO0M66uU6Za0tktHzMAuBU9 pRCFVthARBmnm8abFaS4re39IzBRJBmMBoVNRJuB7baZfRfBXTsSslb3TT/Jvszj G2xehMU+OBa37aIi58wj5VLfD3B1uquEGh8ZXXm4UuERVF0c1pVmyVx0zC8CcZWj dU9FFtQTbPLmoYUxIDEzXONY4R7bN9gQSRhUZHqetSJiJQQCwaZq9Xsjyjs= -----END CERTIFICATE-----Generated at Mon Jun 2 16:27:34 2025 by rpki-client