$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a4f1f1-2e58-4e1e-b6a9-5e0be3a4abb7.roa File: b2a4f1f1-2e58-4e1e-b6a9-5e0be3a4abb7.roa (raw, json) Hash identifier: 9c9HkdiL+ebJMWDZ+9BgpClx5iz5NzrfetI3SqBmQtw= Subject key identifier: C9:20:0E:11:4B:2B:95:18:BB:89:7F:33:DA:30:17:08:80:EE:0D:B1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47F6B5E932C1AF19502FEDDA305395ADA0777705 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a4f1f1-2e58-4e1e-b6a9-5e0be3a4abb7.roa Signing time: Tue 29 Jul 2025 15:20:56 +0000 ROA not before: Tue 29 Jul 2025 15:20:56 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f6:b5:e9:32:c1:af:19:50:2f:ed:da:30:53:95:ad:a0:77:77:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:20:56 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=36617ad99fe7912157cbe684ace54b653af9ef0bef184244b23230f2168efab3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:55:52:08:32:57:06:ba:0e:40:12:8b:82: 33:d8:bf:97:af:5b:24:b4:36:3d:41:cd:72:f4:67: 56:73:9b:ed:a8:8b:a0:f6:3c:f0:df:97:d4:83:06: 99:df:eb:23:e1:57:ed:b5:ca:b0:b8:96:0d:6e:e8: e7:d5:d5:c0:9f:68:85:02:ab:ce:30:0e:1b:11:3b: 97:bb:f2:bf:63:f9:aa:72:7f:07:b3:b2:0c:92:8d: 8e:7e:18:f2:d2:78:0b:d3:1f:41:4a:01:e0:bf:3d: f2:65:a6:7b:5c:a6:64:19:f8:7b:09:f5:03:b8:f1: a9:39:46:01:80:79:f5:f4:9d:f3:01:bb:d0:dd:90: f2:25:84:00:5c:55:58:29:0e:96:d0:57:aa:aa:23: eb:b8:93:77:f9:d4:13:04:8d:b9:1a:a5:18:2e:04: 0f:a9:87:ff:22:d8:4f:28:a1:0e:50:f7:af:88:ce: 6f:76:6e:cf:d9:87:f2:75:bc:0b:3a:54:c5:61:f8: 31:3c:66:53:a6:34:00:d9:85:71:1f:5f:39:25:5b: de:8e:d9:4d:48:bf:7a:cb:0e:f5:70:b3:78:97:c4: ea:2b:5d:f6:e3:06:8b:a6:cb:07:07:e8:99:34:03: 45:a1:97:e1:f5:df:3d:dc:b6:8d:2d:0c:c2:af:b0: 76:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:20:0E:11:4B:2B:95:18:BB:89:7F:33:DA:30:17:08:80:EE:0D:B1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a4f1f1-2e58-4e1e-b6a9-5e0be3a4abb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.184.0/22 Signature Algorithm: sha256WithRSAEncryption 47:96:98:4d:2d:28:50:74:ee:bb:0e:38:ca:e0:5d:f1:3c:24: 70:70:1b:b9:3e:95:a3:d5:81:14:15:a6:0c:9d:09:57:80:b9: 70:ee:75:08:99:30:62:41:7e:b8:fa:ff:2c:68:fc:f0:2e:58: 71:aa:14:3c:29:91:f2:70:93:b5:8e:27:d8:34:4c:02:9b:bd: ba:fd:71:85:17:6d:b3:7d:bc:94:3e:2f:67:51:07:a7:79:3a: 74:d1:b5:d0:9c:6c:43:99:a7:8b:32:3b:c7:51:90:16:b0:d4: 72:df:67:39:81:4e:e3:a9:20:f6:42:52:70:29:52:55:c2:aa: 66:c3:22:2e:1a:b5:bf:65:6f:ec:6f:45:bb:c2:4f:7f:a3:6d: fa:b9:3e:bd:4c:12:d5:71:90:69:4b:75:77:9f:01:12:7d:de: 88:32:6b:f7:83:25:53:1b:79:79:5a:a3:d0:02:0a:fd:0a:24: 7b:e4:2e:01:31:dc:bb:02:b3:91:f6:07:d1:03:4e:db:b1:85: 0e:bd:66:1f:cb:b3:95:72:78:f8:f3:54:b0:3d:97:49:bc:f6: 2e:e9:79:ae:5d:69:9a:40:f5:b1:c1:7c:a1:7d:4f:95:21:64: a0:b0:b0:58:69:76:c6:63:ba:ce:b4:cd:6c:6a:1f:a5:87:85: e0:b4:ad:63 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR/a16TLBrxlQL+3aMFOVraB3dwUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTUyMDU2WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNjYxN2FkOTlmZTc5MTIxNTdjYmU2ODRhY2U1NGI2NTNh ZjllZjBiZWYxODQyNDRiMjMyMzBmMjE2OGVmYWIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGWVVSCDJXBroOQBKLgjPYv5evWyS0Nj1BzXL0Z1Zzm+2o i6D2PPDfl9SDBpnf6yPhV+21yrC4lg1u6OfV1cCfaIUCq84wDhsRO5e78r9j+apy fwezsgySjY5+GPLSeAvTH0FKAeC/PfJlpntcpmQZ+HsJ9QO48ak5RgGAefX0nfMB u9DdkPIlhABcVVgpDpbQV6qqI+u4k3f51BMEjbkapRguBA+ph/8i2E8ooQ5Q96+I zm92bs/Zh/J1vAs6VMVh+DE8ZlOmNADZhXEfXzklW96O2U1Iv3rLDvVws3iXxOor XfbjBoumywcH6Jk0A0Whl+H13z3cto0tDMKvsHaLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUySAOEUsrlRi7iX8z2jAXCIDuDbEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyYTRmMWYxLTJlNTgtNGUxZS1iNmE5LTVlMGJlM2E0YWJiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0LrgwDQYJKoZIhvcNAQELBQADggEBAEeWmE0tKFB07rsOOMrgXfE8JHBw G7k+laPVgRQVpgydCVeAuXDudQiZMGJBfrj6/yxo/PAuWHGqFDwpkfJwk7WOJ9g0 TAKbvbr9cYUXbbN9vJQ+L2dRB6d5OnTRtdCcbEOZp4syO8dRkBaw1HLfZzmBTuOp IPZCUnApUlXCqmbDIi4atb9lb+xvRbvCT3+jbfq5Pr1MEtVxkGlLdXefARJ93ogy a/eDJVMbeXlao9ACCv0KJHvkLgEx3LsCs5H2B9EDTtuxhQ69Zh/Ls5VyePjzVLA9 l0m89i7pea5daZpA9bHBfKF9T5UhZKCwsFhpdsZjus60zWxqH6WHheC0rWM= -----END CERTIFICATE-----Generated at Mon Aug 4 21:50:54 2025 by rpki-client