$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3cd95ad-7199-4f97-9900-e6164015321d.roa File: b3cd95ad-7199-4f97-9900-e6164015321d.roa (raw, json) Hash identifier: Iam4R+v5XuFzWotlXO99suVe7frfdIzmPflsW/VIDNQ= Subject key identifier: 26:85:10:41:CF:73:42:CA:99:4D:3A:35:61:F4:8D:10:19:44:37:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7B3A51739101A80FED4061BE15AEFB8C1DA3470E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3cd95ad-7199-4f97-9900-e6164015321d.roa Signing time: Mon 02 Jun 2025 16:10:43 +0000 ROA not before: Mon 02 Jun 2025 16:10:43 +0000 ROA not after: Mon 07 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.52.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3a:51:73:91:01:a8:0f:ed:40:61:be:15:ae:fb:8c:1d:a3:47:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 2 16:10:43 2025 GMT Not After : Jul 7 23:59:59 2025 GMT Subject: serialNumber=e1494d6d0a9e49ca77c6d84965cec98645bcf843098d8c7c91c77cd3ed7160bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:14:e0:5f:86:77:9b:3e:9a:0e:96:bb:63: ba:ea:8a:83:d5:01:44:e8:32:fd:1f:53:d4:99:c4: c7:f8:e6:49:33:fb:f1:f7:76:b5:a3:55:a7:87:29: 31:99:5b:53:a9:00:de:c0:87:67:b3:fd:06:87:bc: 00:fe:e2:67:44:45:9c:ef:60:00:b6:b7:16:81:ae: 2f:0c:e2:14:4c:7f:b1:b1:05:6c:1d:d9:33:78:b1: 86:ba:06:40:6f:b7:8f:bd:ff:b2:7e:67:3b:8a:da: af:86:3a:b1:5a:00:0b:a2:6c:65:38:7f:97:18:16: 87:0e:a5:17:94:fe:92:31:2c:9a:1b:0e:9f:7c:96: 98:65:a0:4c:58:3d:20:dd:e5:f7:46:1a:13:a1:da: 8e:ea:5d:40:e4:a5:9a:a5:d8:86:9b:54:50:5a:61: 87:10:dd:66:cc:cf:03:ba:72:83:29:52:f2:ee:48: f7:80:e4:d6:be:9a:44:04:e3:a5:cb:4f:4b:5f:b0: 38:57:61:19:33:d2:46:12:3d:33:2d:62:68:e7:41: 89:fa:54:c4:94:a8:1c:a6:f0:4d:ba:98:63:9b:2d: 49:7c:73:ff:46:b0:e6:1c:fb:78:23:ac:77:2c:10: 5b:db:5a:75:d4:27:c9:29:be:90:1a:1b:71:ed:7d: ab:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:85:10:41:CF:73:42:CA:99:4D:3A:35:61:F4:8D:10:19:44:37:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3cd95ad-7199-4f97-9900-e6164015321d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.52.118.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:6f:68:2c:86:13:86:ca:aa:7e:e0:c3:d5:b9:40:ad:87:f4: f9:ba:2a:66:e0:36:c9:39:91:14:68:4a:e3:30:5f:3e:56:68: c6:6b:de:16:00:be:74:c9:18:2a:69:42:c1:64:96:69:8e:f6: 13:b6:53:47:fc:23:cc:ed:6e:fd:de:aa:22:2a:78:a9:a8:65: d2:a9:9b:22:14:ae:75:2a:f5:83:6b:2a:4c:5c:a6:aa:df:f2: 72:cf:92:e2:f4:13:d9:43:c0:94:87:43:bc:42:b8:73:15:c7: c2:78:82:c6:b6:c3:17:27:1a:72:e1:0e:1b:88:f7:70:73:a3: cb:0e:46:fb:aa:20:ad:e4:d6:36:c0:a0:e8:ae:90:f7:40:af: 3c:f1:f1:96:3a:20:25:bc:5e:55:5c:8b:8f:40:e2:e4:3b:da: ea:5d:ec:6a:bc:a7:97:e2:3d:c4:ad:27:a1:05:10:b5:67:63: 10:b0:47:03:c0:0a:84:17:4e:50:3c:1f:ad:63:64:5d:3b:2a: 1d:bb:9a:77:96:51:fb:1f:ef:51:dd:41:ac:f5:6a:72:05:1f: 99:36:be:16:b2:a8:1e:f3:ad:13:d5:88:30:bf:01:2e:7b:d7: 5c:39:3b:38:50:09:5a:13:74:0d:2e:9d:ec:58:68:5f:37:31: bf:e5:fa:fb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUezpRc5EBqA/tQGG+Fa77jB2jRw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAyMTYxMDQzWhcNMjUwNzA3MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTQ5NGQ2ZDBhOWU0OWNhNzdjNmQ4NDk2NWNlYzk4NjQ1 YmNmODQzMDk4ZDhjN2M5MWM3N2NkM2VkNzE2MGJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDjRRTgX4Z3mz6aDpa7Y7rqioPVAUToMv0fU9SZxMf45kkz +/H3drWjVaeHKTGZW1OpAN7Ah2ez/QaHvAD+4mdERZzvYAC2txaBri8M4hRMf7Gx BWwd2TN4sYa6BkBvt4+9/7J+ZzuK2q+GOrFaAAuibGU4f5cYFocOpReU/pIxLJob Dp98lphloExYPSDd5fdGGhOh2o7qXUDkpZql2IabVFBaYYcQ3WbMzwO6coMpUvLu SPeA5Na+mkQE46XLT0tfsDhXYRkz0kYSPTMtYmjnQYn6VMSUqBym8E26mGObLUl8 c/9GsOYc+3gjrHcsEFvbWnXUJ8kpvpAaG3HtfavbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJoUQQc9zQsqZTTo1YfSNEBlEN6wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IzY2Q5NWFkLTcxOTktNGY5Ny05OTAwLWU2MTY0MDE1MzIxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAENNHYwDQYJKoZIhvcNAQELBQADggEBAG5vaCyGE4bKqn7gw9W5QK2H9Pm6 KmbgNsk5kRRoSuMwXz5WaMZr3hYAvnTJGCppQsFklmmO9hO2U0f8I8ztbv3eqiIq eKmoZdKpmyIUrnUq9YNrKkxcpqrf8nLPkuL0E9lDwJSHQ7xCuHMVx8J4gsa2wxcn GnLhDhuI93Bzo8sORvuqIK3k1jbAoOiukPdArzzx8ZY6ICW8XlVci49A4uQ72upd 7Gq8p5fiPcStJ6EFELVnYxCwRwPACoQXTlA8H61jZF07Kh27mneWUfsf71HdQaz1 anIFH5k2vhayqB7zrRPViDC/AS5711w5OzhQCVoTdA0unexYaF83Mb/l+vs= -----END CERTIFICATE-----Generated at Sat Jun 14 06:35:12 2025 by rpki-client