$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8953b1a-9748-4075-bb51-dfeb6f48ca4f.roa File: c8953b1a-9748-4075-bb51-dfeb6f48ca4f.roa (raw, json) Hash identifier: 9dmh5x+EdiuWLEn80awxaNRpUpIHk0qgKuNBJq5DsvE= Subject key identifier: 1B:94:80:B2:04:B4:0D:98:01:7F:98:A2:0F:16:59:38:8C:42:EB:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6EB8A80C9098102A64DA937490F0F3EE64129F14 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8953b1a-9748-4075-bb51-dfeb6f48ca4f.roa Signing time: Tue 05 Aug 2025 17:01:44 +0000 ROA not before: Tue 05 Aug 2025 17:01:44 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.46.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b8:a8:0c:90:98:10:2a:64:da:93:74:90:f0:f3:ee:64:12:9f:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:01:44 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=441b8d6d5034c634c99c777ebb3cb5acc4a0f60ed3f5ec7616c6e059728bd531, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:98:0f:ca:0b:18:f4:d4:19:27:53:e8:8a:9d: a4:0e:d5:2c:91:c6:34:b6:d2:01:06:f6:bb:a0:fa: 1d:80:45:28:1e:ad:39:40:df:9e:59:11:98:40:ee: 7d:92:79:0e:aa:8b:a1:f8:fd:6d:40:0d:7c:6b:c9: 70:3e:30:a9:dc:21:72:9f:eb:6a:36:29:f8:af:07: 99:32:b2:63:93:eb:c6:69:e3:c0:ab:cd:c0:b9:ce: 52:26:cd:a8:2e:e5:37:5d:cf:44:e5:46:e1:08:8c: 35:5a:f5:55:9d:f0:ea:d3:b6:c6:f7:e7:46:97:05: 4d:7c:af:f1:c9:0f:0e:d5:b3:b5:06:05:09:8c:d3: 4e:14:bf:a6:d3:f0:d3:a6:13:63:b8:7d:43:d7:3c: eb:a9:b2:d5:b1:0e:ee:c0:44:57:bb:6e:40:07:7c: 5b:34:dd:6c:53:b0:55:5f:b5:09:b2:bb:f9:76:cb: 38:6d:7b:8a:02:47:c3:89:45:d9:04:69:77:dc:2e: 0c:c4:74:80:31:89:28:0d:17:bb:b7:50:81:5c:bb: 99:47:75:b1:7c:7f:24:0d:99:ad:96:a9:0b:0b:78: 74:ae:2d:a1:64:73:26:79:3b:7a:ec:59:0f:eb:dd: 22:04:ef:90:79:d5:72:ba:43:ca:98:d2:9d:7f:b9: 4f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:94:80:B2:04:B4:0D:98:01:7F:98:A2:0F:16:59:38:8C:42:EB:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8953b1a-9748-4075-bb51-dfeb6f48ca4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.240.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:56:58:8f:24:1b:09:4a:f1:dd:a0:72:2b:a6:7c:d0:8d:d6: 1c:1f:bc:68:52:c4:fe:a4:f7:24:f9:93:04:2e:d2:ca:9c:08: dc:66:da:fc:e4:6b:ca:df:0e:b3:a4:8b:f8:44:82:19:14:47: b2:bd:06:3c:a0:e6:94:ef:c7:cb:43:0b:82:5d:e7:8c:49:e5: 13:75:98:a7:46:6e:82:07:8b:cf:4c:16:32:1f:28:8f:12:7f: 17:8b:66:97:b3:74:00:a0:8d:11:d3:97:f6:dd:28:8f:dc:76: c5:e2:75:30:e3:de:3a:ec:b8:86:74:fb:98:ff:dc:21:03:16: f7:17:74:c1:e5:39:13:0e:7c:b3:ae:66:d2:83:aa:f9:e6:77: 21:cb:40:f7:80:81:ac:69:7f:5a:3a:77:69:41:d9:eb:c9:8a: 52:8f:d8:cd:64:52:97:4a:41:77:45:1e:7f:63:06:f1:c2:b9: 03:76:b3:30:c6:18:68:03:9b:ae:78:5f:2b:f3:1f:20:e0:08: d0:e9:77:38:d4:13:53:b0:ff:b6:64:3d:19:23:19:da:ac:1d: f8:6d:a9:58:dd:da:e9:bb:6b:93:c9:a4:06:0e:c0:5e:07:00: 68:60:69:9c:36:f5:4a:5f:82:ad:d2:cd:71:00:4a:c2:57:70: 69:20:6a:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbrioDJCYECpk2pN0kPDz7mQSnxQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTcwMTQ0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NDFiOGQ2ZDUwMzRjNjM0Yzk5Yzc3N2ViYjNjYjVhY2M0 YTBmNjBlZDNmNWVjNzYxNmM2ZTA1OTcyOGJkNTMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDmmA/KCxj01BknU+iKnaQO1SyRxjS20gEG9rug+h2ARSge rTlA355ZEZhA7n2SeQ6qi6H4/W1ADXxryXA+MKncIXKf62o2KfivB5kysmOT68Zp 48CrzcC5zlImzagu5Tddz0TlRuEIjDVa9VWd8OrTtsb350aXBU18r/HJDw7Vs7UG BQmM004Uv6bT8NOmE2O4fUPXPOupstWxDu7ARFe7bkAHfFs03WxTsFVftQmyu/l2 yzhte4oCR8OJRdkEaXfcLgzEdIAxiSgNF7u3UIFcu5lHdbF8fyQNma2WqQsLeHSu LaFkcyZ5O3rsWQ/r3SIE75B51XK6Q8qY0p1/uU+NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUG5SAsgS0DZgBf5iiDxZZOIxC63MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M4OTUzYjFhLTk3NDgtNDA3NS1iYjUxLWRmZWI2ZjQ4Y2E0Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0LvAwDQYJKoZIhvcNAQELBQADggEBAFtWWI8kGwlK8d2gciumfNCN1hwf vGhSxP6k9yT5kwQu0sqcCNxm2vzka8rfDrOki/hEghkUR7K9Bjyg5pTvx8tDC4Jd 54xJ5RN1mKdGboIHi89MFjIfKI8SfxeLZpezdACgjRHTl/bdKI/cdsXidTDj3jrs uIZ0+5j/3CEDFvcXdMHlORMOfLOuZtKDqvnmdyHLQPeAgaxpf1o6d2lB2evJilKP 2M1kUpdKQXdFHn9jBvHCuQN2szDGGGgDm654XyvzHyDgCNDpdzjUE1Ow/7ZkPRkj GdqsHfhtqVjd2um7a5PJpAYOwF4HAGhgaZw29Upfgq3SzXEASsJXcGkgah0= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:34 2025 by rpki-client