$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa File: 7c0db66f-b1b7-41ba-b26b-712811ca2047.roa (raw, json) Hash identifier: dDEPpn+MDDvAfNSDUfj+orItIy4hXaYIiABj9648iQ8= Subject key identifier: 0D:A7:A5:78:7D:3E:74:B7:03:22:FA:F3:4F:DA:2C:53:C4:B3:D6:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6936B47959505ABD6E43DE7A2E74EF53F583AD8A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa Signing time: Tue 05 Aug 2025 17:11:41 +0000 ROA not before: Tue 05 Aug 2025 17:11:41 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:36:b4:79:59:50:5a:bd:6e:43:de:7a:2e:74:ef:53:f5:83:ad:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:11:41 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=3b2595cbae5d1fefc50e0cf75f657662a5cb7134d5e45007e47299cb005dcb7a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:ce:a4:5c:f6:08:9f:53:ab:f8:b4:dc:af: f2:4d:ec:2e:50:44:8b:01:52:de:50:83:b3:eb:3a: c6:22:59:48:f0:13:9d:7f:7c:fc:b7:ac:22:09:3c: bf:1d:87:fe:c7:01:f0:95:7c:da:47:8a:34:8e:4b: 29:dc:a3:89:c8:c6:bb:a9:7b:56:57:7e:34:a4:b5: 05:51:d5:7c:c7:38:c8:a2:90:ff:cb:41:88:ad:34: de:b5:8f:a2:1e:54:8c:30:09:c2:2d:05:a0:29:ef: 2f:8c:19:8d:58:18:96:5b:4d:42:7c:b8:5c:4e:87: b7:8b:98:80:30:f0:89:cd:f0:12:04:5d:77:e4:de: b4:0a:39:54:e8:09:b9:4d:e1:45:a4:f1:76:d9:e0: 22:0a:cd:2d:fb:0a:bd:44:dd:b1:75:bb:8c:92:f6: 89:a8:bb:30:e0:81:c9:4b:a0:f9:b9:e1:43:a4:11: a0:0a:30:f3:9e:3f:22:56:fc:90:29:d4:c2:18:19: 7f:1e:8e:cd:e2:f2:41:fa:f3:90:2f:5e:e4:25:d1: 2a:cc:56:61:37:d4:b3:7a:ce:02:ee:20:e9:51:1e: 41:f5:f2:52:20:91:2b:fd:c6:23:d0:de:c8:7c:79: dc:fc:27:a6:b5:d3:47:a9:b6:47:5c:a9:11:61:87: fa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A7:A5:78:7D:3E:74:B7:03:22:FA:F3:4F:DA:2C:53:C4:B3:D6:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.68.0/24 Signature Algorithm: sha256WithRSAEncryption 74:77:d5:d3:54:7d:1f:d6:70:0e:1c:46:b2:a4:f6:8c:04:fa: 45:50:fc:6a:9f:c3:e7:a5:d4:40:17:9f:26:c4:34:ad:80:d9: f2:b7:66:4c:fe:7a:e0:d0:80:e0:a4:31:ac:b5:79:2f:1b:f5: 57:5b:62:11:9e:58:cf:54:41:35:8e:d3:4d:7f:6e:ec:78:fe: 4c:fe:92:ea:ba:ea:da:d5:60:a1:de:70:df:44:f3:8f:9a:6d: 1f:08:7e:fc:71:b5:04:0e:9f:29:6f:45:75:55:b4:97:ae:1a: d6:14:10:55:5e:06:1e:c0:52:bf:82:d5:c5:52:8f:31:31:4d: 7d:30:b0:b4:9d:b3:74:68:bf:fc:c7:50:c7:30:70:41:4f:4d: 83:37:9c:7b:19:38:03:a6:49:cf:79:33:f2:32:8c:66:70:f2: 46:6b:b5:4e:d8:8d:ab:06:b6:e7:53:bd:d0:08:1d:4f:15:d6: 6c:cb:54:d3:ee:1b:1c:32:92:3c:ce:94:26:70:c2:07:51:fc: 6a:c4:57:43:7b:c7:db:b5:b3:36:f5:8d:65:ee:e9:16:46:59: f3:db:30:c0:34:80:a6:3e:7b:26:72:71:ac:55:cd:a4:52:02: f8:9c:2a:49:aa:a8:c4:ce:29:c8:39:d7:af:f2:59:31:b4:14: 02:18:ca:9f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaTa0eVlQWr1uQ956LnTvU/WDrYowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTcxMTQxWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYjI1OTVjYmFlNWQxZmVmYzUwZTBjZjc1ZjY1NzY2MmE1 Y2I3MTM0ZDVlNDUwMDdlNDcyOTljYjAwNWRjYjdhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Bs6kXPYIn1Or+LTcr/JN7C5QRIsBUt5Qg7PrOsYiWUjw E51/fPy3rCIJPL8dh/7HAfCVfNpHijSOSynco4nIxrupe1ZXfjSktQVR1XzHOMii kP/LQYitNN61j6IeVIwwCcItBaAp7y+MGY1YGJZbTUJ8uFxOh7eLmIAw8InN8BIE XXfk3rQKOVToCblN4UWk8XbZ4CIKzS37Cr1E3bF1u4yS9omouzDggclLoPm54UOk EaAKMPOePyJW/JAp1MIYGX8ejs3i8kH685AvXuQl0SrMVmE31LN6zgLuIOlRHkH1 8lIgkSv9xiPQ3sh8edz8J6a100eptkdcqRFhh/oLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDaeleH0+dLcDIvrzT9osU8Sz1u8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdjMGRiNjZmLWIxYjctNDFiYS1iMjZiLTcxMjgxMWNhMjA0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XkQwDQYJKoZIhvcNAQELBQADggEBAHR31dNUfR/WcA4cRrKk9owE+kVQ /Gqfw+el1EAXnybENK2A2fK3Zkz+euDQgOCkMay1eS8b9VdbYhGeWM9UQTWO001/ bux4/kz+kuq66trVYKHecN9E84+abR8IfvxxtQQOnylvRXVVtJeuGtYUEFVeBh7A Ur+C1cVSjzExTX0wsLSds3Rov/zHUMcwcEFPTYM3nHsZOAOmSc95M/IyjGZw8kZr tU7YjasGtudTvdAIHU8V1mzLVNPuGxwykjzOlCZwwgdR/GrEV0N7x9u1szb1jWXu 6RZGWfPbMMA0gKY+eyZycaxVzaRSAvicKkmqqMTOKcg516/yWTG0FAIYyp8= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:40 2025 by rpki-client