$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa File: 84c300e0-b200-441e-8084-8448b3947e9a.roa (raw, json) Hash identifier: +wgDA5dQw19qci1++EKPhp5mU//i+W1arfuXk4lZI/8= Subject key identifier: 35:26:E4:2A:97:93:24:36:05:33:76:FE:46:BC:4E:6B:F2:90:A0:D1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3FFDC4FCC1665391CBD5EFFB94AD49B0DF230DFE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa Signing time: Wed 20 Aug 2025 00:50:17 +0000 ROA not before: Wed 20 Aug 2025 00:50:17 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.56.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fd:c4:fc:c1:66:53:91:cb:d5:ef:fb:94:ad:49:b0:df:23:0d:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:50:17 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=00765196c0f2e64d723f06d86be62dd3b718a59219523aeecbdbb8c420c0f901, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:e7:38:c6:cd:91:ba:a3:b5:81:0d:5d:03: b1:e9:fb:48:92:c5:f6:a3:d3:c9:da:f0:f8:fd:82: 7f:a9:08:b3:3e:ae:7d:20:b7:ae:d7:96:09:cf:1e: 43:52:46:42:64:c7:71:50:aa:fe:ae:6f:19:a1:a7: 5e:40:bb:0e:f3:3b:55:5d:26:8c:bd:4d:45:0c:1c: d4:19:bb:b1:f2:13:bc:fd:3d:da:10:82:65:02:dc: 5f:9c:fd:0b:43:58:25:c1:f6:f5:8a:29:d7:20:18: 3b:4b:8c:00:be:af:16:87:44:f6:f6:2c:1e:96:ad: 00:88:02:0d:f3:80:ff:12:20:49:5f:ee:d1:ec:36: 03:66:80:da:1d:1a:51:53:fe:42:ad:70:a9:cf:52: de:87:81:af:7d:02:11:3c:d3:72:b8:96:c3:45:f6: 61:f4:ed:17:b1:bf:e5:df:77:36:eb:dd:0c:62:30: 07:6e:f4:04:e9:c7:8a:50:cf:59:2f:b0:0f:9c:1d: e7:d1:26:a6:07:67:34:2a:0d:6e:47:c8:05:6d:71: 44:0c:72:b4:9f:32:53:4f:34:e7:09:09:f7:02:29: 64:60:03:e9:34:64:97:c7:09:96:23:a0:0b:07:43: 26:c2:5b:bf:f8:15:f2:45:be:d6:54:57:fe:b7:c8: d5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:26:E4:2A:97:93:24:36:05:33:76:FE:46:BC:4E:6B:F2:90:A0:D1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/84c300e0-b200-441e-8084-8448b3947e9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.56.0.0/16 Signature Algorithm: sha256WithRSAEncryption 11:b9:fc:b8:4d:94:2c:67:08:72:8d:7a:ca:c3:13:7d:c4:90: b0:64:44:ff:69:ae:d9:df:0d:6f:07:43:6e:2e:fb:5e:83:55: f3:11:f1:16:87:09:46:36:f7:aa:75:d2:95:4e:3a:12:f6:7a: d1:0e:54:d5:90:8c:6f:47:48:18:80:45:b6:63:7d:01:ff:9b: 1d:3d:65:a3:aa:c7:6b:4e:3c:5a:bb:e7:44:7d:19:4d:af:26: 35:cb:22:fa:83:f5:c1:4b:27:56:12:5b:61:d0:54:74:ba:af: d2:62:e7:87:93:88:42:ef:31:00:22:eb:c8:0a:2e:86:2e:48: 75:06:0d:96:cb:62:1c:4a:1e:14:2d:d3:ec:e3:c7:fa:2b:20: 80:48:a9:a3:17:54:6e:af:4b:2c:5c:f6:25:8b:37:88:1f:ac: 9e:73:af:3b:b2:fc:9e:36:dd:29:6e:3e:19:54:c1:0e:b2:49: ac:c0:b2:b2:1b:ed:af:21:ea:00:73:fb:58:5d:8e:f2:b1:46: 3f:17:ad:e2:04:07:a9:48:0c:02:d6:9f:d8:31:3c:ad:bf:48: c1:7b:4a:7e:71:e5:f5:8b:4d:2e:08:fa:64:2b:b5:07:45:b0: 10:fe:41:a2:cf:e0:25:27:59:6b:d0:cb:c9:96:04:7e:26:be: 12:9e:24:7f -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUP/3E/MFmU5HL1e/7lK1JsN8jDf4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIwMDA1MDE3WhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDc2NTE5NmMwZjJlNjRkNzIzZjA2ZDg2YmU2MmRkM2I3 MThhNTkyMTk1MjNhZWVjYmRiYjhjNDIwYzBmOTAxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVsuc4xs2RuqO1gQ1dA7Hp+0iSxfaj08na8Pj9gn+pCLM+ rn0gt67XlgnPHkNSRkJkx3FQqv6ubxmhp15Auw7zO1VdJoy9TUUMHNQZu7HyE7z9 PdoQgmUC3F+c/QtDWCXB9vWKKdcgGDtLjAC+rxaHRPb2LB6WrQCIAg3zgP8SIElf 7tHsNgNmgNodGlFT/kKtcKnPUt6Hga99AhE803K4lsNF9mH07Rexv+Xfdzbr3Qxi MAdu9ATpx4pQz1kvsA+cHefRJqYHZzQqDW5HyAVtcUQMcrSfMlNPNOcJCfcCKWRg A+k0ZJfHCZYjoAsHQybCW7/4FfJFvtZUV/63yNUjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUNSbkKpeTJDYFM3b+RrxOa/KQoNEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg0YzMwMGUwLWIyMDAtNDQxZS04MDg0LTg0NDhiMzk0N2U5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA0ODANBgkqhkiG9w0BAQsFAAOCAQEAEbn8uE2ULGcIco16ysMTfcSQsGRE /2mu2d8NbwdDbi77XoNV8xHxFocJRjb3qnXSlU46EvZ60Q5U1ZCMb0dIGIBFtmN9 Af+bHT1lo6rHa048WrvnRH0ZTa8mNcsi+oP1wUsnVhJbYdBUdLqv0mLnh5OIQu8x ACLryAouhi5IdQYNlstiHEoeFC3T7OPH+isggEipoxdUbq9LLFz2JYs3iB+snnOv O7L8njbdKW4+GVTBDrJJrMCyshvtryHqAHP7WF2O8rFGPxet4gQHqUgMAtaf2DE8 rb9IwXtKfnHl9YtNLgj6ZCu1B0WwEP5Bos/gJSdZa9DLyZYEfia+Ep4kfw== -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:10 2025 by rpki-client