$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a20a0de3-8942-4eda-ae18-35cce037ad0e.roa File: a20a0de3-8942-4eda-ae18-35cce037ad0e.roa (raw, json) Hash identifier: i1sktSCNhulpBvxW2OcrA2Kn6DucjE3v+4zzjs3YjeM= Subject key identifier: DF:73:66:70:C0:C4:F4:C4:E1:D0:91:46:E0:1C:EC:78:85:17:E3:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7EB17BE5224EEC250AAD837DABDDF8B2997EB872 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a20a0de3-8942-4eda-ae18-35cce037ad0e.roa Signing time: Fri 29 Aug 2025 17:11:51 +0000 ROA not before: Fri 29 Aug 2025 17:11:51 +0000 ROA not after: Fri 03 Oct 2025 23:59:59 +0000 asID: 8987 IP address blocks: 52.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b1:7b:e5:22:4e:ec:25:0a:ad:83:7d:ab:dd:f8:b2:99:7e:b8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 29 17:11:51 2025 GMT Not After : Oct 3 23:59:59 2025 GMT Subject: serialNumber=6ff3f2cf40a346f61ba6e9d37b0e3f0e1d27d8f1f953fdf5c91da764b452a02c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7e:2c:08:8f:4a:18:a9:3b:65:89:ca:cb:e7: 75:cf:b3:5e:1a:29:63:8f:07:b6:d6:f9:67:f2:77: f3:39:3d:62:d6:f7:65:15:1d:f6:1a:57:7c:82:cd: e6:1c:fa:d0:aa:79:db:1a:24:16:24:2c:fa:90:0c: 13:16:aa:c2:69:62:3e:95:23:99:7e:83:c5:f5:bf: d2:8a:e3:01:cb:1b:45:84:be:bb:cd:59:65:c4:0f: 72:b9:54:55:75:47:34:35:99:7e:57:aa:37:a5:75: 66:52:49:be:d7:e5:ec:29:be:f4:7b:88:a0:ec:b4: ac:e8:8c:48:cd:d5:22:9b:8f:7b:36:4b:17:f8:35: 01:cb:bb:ce:df:df:b4:80:81:ec:fa:66:09:b9:d4: 03:41:de:76:db:d8:d1:a7:06:f3:0f:08:88:b3:5d: 89:5c:b5:c2:52:e1:30:05:d2:98:57:24:ca:30:5e: 06:ac:8e:e6:1e:32:97:a1:44:35:64:1a:13:73:7f: c1:9e:6e:3e:8a:e5:13:20:81:f3:be:78:87:27:66: 36:5d:1f:bc:23:f8:bd:e4:02:14:8a:0c:4d:93:33: 92:c1:c7:e8:82:a1:88:6a:fb:7c:39:c3:39:87:8c: 5c:a6:c5:bd:76:bd:27:3f:fd:42:d0:db:54:32:1b: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:73:66:70:C0:C4:F4:C4:E1:D0:91:46:E0:1C:EC:78:85:17:E3:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a20a0de3-8942-4eda-ae18-35cce037ad0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption ad:fe:e9:63:4e:76:3e:80:5c:6d:93:2c:a2:57:0e:e4:0f:cf: af:98:bc:4a:76:c7:20:90:e6:bf:aa:d0:d4:85:99:87:84:51: 62:06:68:5a:2d:22:23:75:59:13:1a:36:5f:c3:fa:f9:02:cc: d6:34:ea:f6:c1:ff:53:84:9b:c2:d5:99:63:98:53:4f:8b:8a: d9:b1:ab:ee:c9:3d:53:4f:b1:69:8f:62:db:40:d0:18:b8:c1: f4:f0:99:d6:1a:3a:db:a6:b8:f4:2c:1b:78:05:3a:42:97:4a: ce:57:65:c5:5a:b4:88:40:d4:e2:82:d3:15:b5:32:29:18:51: 2f:c5:a0:ed:7d:43:e4:cc:1d:f1:d5:45:c4:31:11:95:84:29: 4a:f5:23:99:be:c7:75:51:0f:2e:0f:9f:b3:c4:fd:56:7c:99: dc:92:06:15:c3:ce:6a:71:7f:29:f5:e4:31:db:e2:90:c5:74: ee:e1:c9:c6:60:40:d8:d9:73:9a:c0:2d:30:74:8e:ee:3d:33: a2:00:4b:02:cb:6c:dd:cf:e7:4a:da:88:8b:2f:59:a1:02:0a: 8a:6b:76:0a:da:20:5f:ac:13:e8:67:38:b5:d8:3f:41:aa:e0: 18:3c:db:21:51:cd:5d:06:9f:a0:7a:52:4a:9e:d1:e2:a0:3e: b1:e4:2b:4e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfrF75SJO7CUKrYN9q934spl+uHIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODI5MTcxMTUxWhcNMjUxMDAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmYzZjJjZjQwYTM0NmY2MWJhNmU5ZDM3YjBlM2YwZTFk MjdkOGYxZjk1M2ZkZjVjOTFkYTc2NGI0NTJhMDJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDofiwIj0oYqTtlicrL53XPs14aKWOPB7bW+Wfyd/M5PWLW 92UVHfYaV3yCzeYc+tCqedsaJBYkLPqQDBMWqsJpYj6VI5l+g8X1v9KK4wHLG0WE vrvNWWXED3K5VFV1RzQ1mX5XqjeldWZSSb7X5ewpvvR7iKDstKzojEjN1SKbj3s2 Sxf4NQHLu87f37SAgez6Zgm51ANB3nbb2NGnBvMPCIizXYlctcJS4TAF0phXJMow XgasjuYeMpehRDVkGhNzf8Gebj6K5RMggfO+eIcnZjZdH7wj+L3kAhSKDE2TM5LB x+iCoYhq+3w5wzmHjFymxb12vSc//ULQ21QyGw4DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU33NmcMDE9MTh0JFG4BzseIUX4xQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyMGEwZGUzLTg5NDItNGVkYS1hZTE4LTM1Y2NlMDM3YWQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0LuAwDQYJKoZIhvcNAQELBQADggEBAK3+6WNOdj6AXG2TLKJXDuQPz6+Y vEp2xyCQ5r+q0NSFmYeEUWIGaFotIiN1WRMaNl/D+vkCzNY06vbB/1OEm8LVmWOY U0+Litmxq+7JPVNPsWmPYttA0Bi4wfTwmdYaOtumuPQsG3gFOkKXSs5XZcVatIhA 1OKC0xW1MikYUS/FoO19Q+TMHfHVRcQxEZWEKUr1I5m+x3VRDy4Pn7PE/VZ8mdyS BhXDzmpxfyn15DHb4pDFdO7hycZgQNjZc5rALTB0ju49M6IASwLLbN3P50raiIsv WaECCoprdgraIF+sE+hnOLXYP0Gq4Bg82yFRzV0Gn6B6Ukqe0eKgPrHkK04= -----END CERTIFICATE-----Generated at Thu Sep 18 22:52:23 2025 by rpki-client