$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2740bde-9cd3-407c-ad77-87e8d87903b0.roa File: d2740bde-9cd3-407c-ad77-87e8d87903b0.roa (raw, json) Hash identifier: Dj8nmsOtObpZfB4lkLCLtGGKTuDk9PKiFZovWoPk99k= Subject key identifier: 0B:24:F7:7F:C0:96:98:08:CD:5E:29:94:EB:7E:2E:8F:33:2C:9E:20 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7FC3A4C92BA4776C152B2E0B60A54E85918B776D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2740bde-9cd3-407c-ad77-87e8d87903b0.roa Signing time: Tue 19 Aug 2025 15:51:47 +0000 ROA not before: Tue 19 Aug 2025 15:51:47 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.79.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c3:a4:c9:2b:a4:77:6c:15:2b:2e:0b:60:a5:4e:85:91:8b:77:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:51:47 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=fbcd8c9251c30b39bbed6a0da5cb881644c72f82edeb8cefac3f1035a112f1dc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:6b:89:a3:32:0a:bb:72:a7:78:ad:64:14: f1:f3:1f:af:a6:62:d2:39:1c:20:ed:8b:5c:7c:3d: 53:72:b6:5c:be:41:7f:a8:47:57:15:d5:b5:d1:e1: 61:12:e7:27:27:48:f9:bd:88:ea:f0:6a:84:bb:c5: 5c:74:1b:16:7c:7f:27:20:6a:5b:68:4a:4f:bc:8d: 52:ef:ce:cc:9c:3d:63:fc:cf:b8:20:80:aa:c3:01: f2:0f:43:f0:91:7c:73:02:65:9d:83:d4:33:06:1c: aa:7e:0e:b2:6c:7a:79:a3:54:18:ed:ff:02:4c:b1: 1f:4b:e8:95:b7:46:51:7b:68:e5:5f:35:0c:f1:0d: f6:8d:9b:e1:02:b4:1f:34:f2:6a:61:53:56:8a:63: 8b:3e:f3:63:27:cf:09:f6:44:01:c6:8c:bd:d7:da: 40:58:30:e2:6d:9d:5a:84:40:94:70:42:dd:cd:9e: b9:3c:9f:dc:37:9a:24:ac:e2:2c:3b:1f:6a:30:3e: f7:21:87:e1:9e:f7:92:36:ed:68:8d:6a:c7:ef:2a: ec:20:d4:b7:81:03:f4:2c:aa:49:c6:c5:cd:ed:ad: 5a:3e:dc:27:86:82:ba:ba:a1:d1:14:ef:3f:8a:42: 38:d1:bb:07:cf:c7:99:75:b5:3f:cb:70:12:ce:47: 87:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:F7:7F:C0:96:98:08:CD:5E:29:94:EB:7E:2E:8F:33:2C:9E:20 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d2740bde-9cd3-407c-ad77-87e8d87903b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.79.32.0/19 Signature Algorithm: sha256WithRSAEncryption 2a:d0:4e:53:1c:8c:4d:85:a4:7f:02:b9:bb:c5:14:0b:3d:a6: b7:b0:b4:ba:fa:cf:7b:c6:76:48:ca:ad:cc:3c:83:27:4c:a1: 05:2a:4b:cf:8c:20:26:d2:1a:a1:fc:c5:d7:72:97:7c:bc:df: 8b:93:7a:ba:78:09:53:91:ab:47:db:0b:eb:e6:21:eb:11:2a: 0a:b5:ba:a3:09:f2:26:a3:8a:d4:1e:40:60:fc:3a:c1:0f:b4: ec:25:3e:27:91:4b:22:dd:f5:e8:30:f6:d2:fc:18:bc:7a:74: 12:a7:29:d8:59:13:e4:9a:97:f5:be:51:65:ae:a7:66:d4:18: 5c:5a:49:7f:d2:ac:f4:76:29:6c:2d:a6:2d:cf:85:bf:03:80: 49:7e:3b:f1:cc:3a:9c:61:99:6c:d8:0e:78:b3:8a:65:8a:65: df:ed:6f:87:08:8f:60:cb:ba:e0:0e:18:41:f4:ca:bd:8e:04: 70:e7:7b:ef:27:63:eb:41:9b:a6:8a:a2:6e:cc:ec:7b:1c:31: fb:5d:ae:bb:5c:e5:b5:49:33:fd:d6:d5:d9:69:6e:d6:74:02: c3:91:b4:87:1e:a8:8a:c9:83:49:13:ee:f2:61:b6:98:44:61: a7:5f:29:2d:93:c9:17:94:a5:0d:3f:b3:06:d7:0f:06:5e:58: 1f:dc:c5:79 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf8OkySukd2wVKy4LYKVOhZGLd20wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTU1MTQ3WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYmNkOGM5MjUxYzMwYjM5YmJlZDZhMGRhNWNiODgxNjQ0 YzcyZjgyZWRlYjhjZWZhYzNmMTAzNWExMTJmMWRjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD4GuJozIKu3KneK1kFPHzH6+mYtI5HCDti1x8PVNytly+ QX+oR1cV1bXR4WES5ycnSPm9iOrwaoS7xVx0GxZ8fycgaltoSk+8jVLvzsycPWP8 z7gggKrDAfIPQ/CRfHMCZZ2D1DMGHKp+DrJsenmjVBjt/wJMsR9L6JW3RlF7aOVf NQzxDfaNm+ECtB808mphU1aKY4s+82Mnzwn2RAHGjL3X2kBYMOJtnVqEQJRwQt3N nrk8n9w3miSs4iw7H2owPvchh+Ge95I27WiNasfvKuwg1LeBA/QsqknGxc3trVo+ 3CeGgrq6odEU7z+KQjjRuwfPx5l1tT/LcBLOR4enAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCyT3f8CWmAjNXimU634ujzMsniAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyNzQwYmRlLTljZDMtNDA3Yy1hZDc3LTg3ZThkODc5MDNiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU0TyAwDQYJKoZIhvcNAQELBQADggEBACrQTlMcjE2FpH8CubvFFAs9prew tLr6z3vGdkjKrcw8gydMoQUqS8+MICbSGqH8xddyl3y834uTerp4CVORq0fbC+vm IesRKgq1uqMJ8iajitQeQGD8OsEPtOwlPieRSyLd9egw9tL8GLx6dBKnKdhZE+Sa l/W+UWWup2bUGFxaSX/SrPR2KWwtpi3Phb8DgEl+O/HMOpxhmWzYDnizimWKZd/t b4cIj2DLuuAOGEH0yr2OBHDne+8nY+tBm6aKom7M7HscMftdrrtc5bVJM/3W1dlp btZ0AsORtIceqIrJg0kT7vJhtphEYadfKS2TyReUpQ0/swbXDwZeWB/cxXk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:38:57 2025 by rpki-client