$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/466d2d94-6fbf-449e-8a20-eff45497d7a2.roa File: 466d2d94-6fbf-449e-8a20-eff45497d7a2.roa (raw, json) Hash identifier: 9K6smwpYWh5yyDdultkjYYj9x5G3yK/bJlkBX6mGjVU= Subject key identifier: A7:41:59:C9:C2:3C:2B:32:AE:4E:2C:30:2B:43:E5:AA:E8:27:9D:B6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4781241EB4364E61A1A512D799CF642DCD5E54F6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/466d2d94-6fbf-449e-8a20-eff45497d7a2.roa Signing time: Tue 19 Aug 2025 15:51:48 +0000 ROA not before: Tue 19 Aug 2025 15:51:48 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.79.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:81:24:1e:b4:36:4e:61:a1:a5:12:d7:99:cf:64:2d:cd:5e:54:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:51:48 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=db99d01998c9efec0c2aff760ab8d10e69b5a24b2261bb72fb4240692a5dcc6e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ef:a2:bd:5e:e4:0f:98:e8:fc:01:ce:d3:0a: c5:48:1e:e5:6b:db:5b:93:dc:6a:e5:6f:c0:03:e1: 3f:ec:d1:b7:08:d2:be:f2:a4:23:2e:6c:bc:f7:59: 50:1b:6d:9f:1e:6c:33:72:10:b6:a7:fb:a0:00:26: 2d:6b:f3:74:c0:0c:84:e4:5e:99:14:b0:bc:51:4c: fc:7e:3d:3c:cf:82:49:2f:25:22:15:69:e2:5f:94: 27:e4:7d:63:d5:fa:80:2d:c7:15:0f:10:e2:24:8c: c1:da:a3:19:06:7d:a0:96:ea:dd:df:63:03:93:53: 56:1b:d1:29:73:6a:55:19:50:2b:e9:b8:55:0a:df: cf:8d:08:ad:7a:10:f5:72:e7:88:20:68:6d:37:cd: d3:2c:d1:e0:1f:c8:04:84:41:98:db:37:b1:4d:fe: ef:b3:44:9c:a4:56:33:59:d4:37:70:c1:f2:58:2a: 25:d3:b0:ba:66:20:d3:48:2f:45:70:3d:82:94:52: c1:72:31:2f:21:ad:57:fb:ca:0e:7c:25:7f:6a:48: 0d:8c:f0:42:88:a6:9c:e8:fa:ba:75:7e:b3:6e:d4: d6:27:99:37:59:27:68:e9:42:5e:71:7d:fd:58:5e: 1d:a7:7c:54:ad:bc:01:27:05:05:1e:25:96:d6:44: 63:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:41:59:C9:C2:3C:2B:32:AE:4E:2C:30:2B:43:E5:AA:E8:27:9D:B6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/466d2d94-6fbf-449e-8a20-eff45497d7a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.79.64.0/18 Signature Algorithm: sha256WithRSAEncryption 49:24:0e:3f:6b:b7:59:2c:6a:25:77:74:68:4a:a7:1d:46:81: 98:d3:07:e0:6f:cc:a2:01:3c:51:83:64:c5:75:95:4c:49:db: 64:2e:3c:69:01:fe:af:4c:86:97:54:49:e9:a2:5b:81:6d:7d: a1:70:00:dc:71:09:43:61:d9:99:00:d7:88:7c:19:cd:93:e4: 2f:c1:38:4f:5e:73:10:6f:dc:23:7a:a7:b1:bd:17:fc:c7:25: f1:40:ef:a4:b8:c3:76:2b:12:43:0b:ad:b5:6c:91:e2:cc:1f: 24:6a:77:1a:12:6d:f6:28:25:8b:1e:ef:63:5e:6a:dc:83:ab: 16:34:8d:fb:3c:f1:7d:22:6d:1f:49:3b:62:be:7e:f0:56:a8: a8:d4:6e:9c:7f:20:77:7f:e3:58:5b:e6:ae:36:cf:39:60:ee: 71:25:49:5f:db:d6:0e:a6:a3:49:5f:2e:91:7e:53:62:3b:7d: f3:25:4a:35:cf:01:b3:13:56:83:d4:57:d8:dc:64:0f:5f:b4: d4:27:70:27:e8:e2:91:a7:73:e3:8a:aa:b8:12:76:ef:81:60: 09:df:64:87:bd:f4:96:a7:9a:a8:db:39:32:25:2c:3d:e8:13: 5f:95:35:29:2c:c8:46:5e:f8:ea:29:bb:ef:01:70:87:b9:6d: fd:24:ff:4a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR4EkHrQ2TmGhpRLXmc9kLc1eVPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTU1MTQ4WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYjk5ZDAxOTk4YzllZmVjMGMyYWZmNzYwYWI4ZDEwZTY5 YjVhMjRiMjI2MWJiNzJmYjQyNDA2OTJhNWRjYzZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDS76K9XuQPmOj8Ac7TCsVIHuVr21uT3Grlb8AD4T/s0bcI 0r7ypCMubLz3WVAbbZ8ebDNyELan+6AAJi1r83TADITkXpkUsLxRTPx+PTzPgkkv JSIVaeJflCfkfWPV+oAtxxUPEOIkjMHaoxkGfaCW6t3fYwOTU1Yb0SlzalUZUCvp uFUK38+NCK16EPVy54ggaG03zdMs0eAfyASEQZjbN7FN/u+zRJykVjNZ1DdwwfJY KiXTsLpmINNIL0VwPYKUUsFyMS8hrVf7yg58JX9qSA2M8EKIppzo+rp1frNu1NYn mTdZJ2jpQl5xff1YXh2nfFStvAEnBQUeJZbWRGMHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUp0FZycI8KzKuTiwwK0PlqugnnbYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ2NmQyZDk0LTZmYmYtNDQ5ZS04YTIwLWVmZjQ1NDk3ZDdhMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY0T0AwDQYJKoZIhvcNAQELBQADggEBAEkkDj9rt1ksaiV3dGhKpx1GgZjT B+BvzKIBPFGDZMV1lUxJ22QuPGkB/q9MhpdUSemiW4FtfaFwANxxCUNh2ZkA14h8 Gc2T5C/BOE9ecxBv3CN6p7G9F/zHJfFA76S4w3YrEkMLrbVskeLMHyRqdxoSbfYo JYse72NeatyDqxY0jfs88X0ibR9JO2K+fvBWqKjUbpx/IHd/41hb5q42zzlg7nEl SV/b1g6mo0lfLpF+U2I7ffMlSjXPAbMTVoPUV9jcZA9ftNQncCfo4pGnc+OKqrgS du+BYAnfZIe99JanmqjbOTIlLD3oE1+VNSksyEZe+Oopu+8BcIe5bf0k/0o= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:13 2025 by rpki-client