$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df607230-41e6-480a-813d-bbc6101bd307.roa File: df607230-41e6-480a-813d-bbc6101bd307.roa (raw, json) Hash identifier: G8TlIN9L7p/Cg3jhRsQ0gFrqsUSsme7sg6bzYiGP8sU= Subject key identifier: 69:C6:2B:BC:69:FA:3A:50:C1:4B:F3:1F:D4:A5:7E:27:23:A1:68:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4302E24DB2F4040FC3A188D41382D6F6D184D3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df607230-41e6-480a-813d-bbc6101bd307.roa Signing time: Tue 19 Aug 2025 15:40:16 +0000 ROA not before: Tue 19 Aug 2025 15:40:16 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.19.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:02:e2:4d:b2:f4:04:0f:c3:a1:88:d4:13:82:d6:f6:d1:84:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:40:16 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=c8a4c6499bcb01bff240020acad65af072bdb2b0250b7998bf9c1613669ffa6b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:63:8d:d0:20:6e:17:64:14:c2:7d:46:dd:9c: e2:e9:80:75:9f:f1:87:56:4c:dd:6f:31:8c:8d:85: db:b3:5e:d8:f3:35:36:3f:62:d0:fe:4c:91:30:13: 67:1c:0b:a1:b5:2d:ff:37:47:ac:7d:fd:87:6a:9e: 06:9c:b5:5e:ce:20:ed:38:32:71:6e:cc:a1:04:cd: 06:da:da:2a:d9:92:ba:7f:38:d1:ca:a5:1a:59:51: 3f:97:f0:90:a9:ad:46:26:60:61:52:24:2c:9d:4d: ac:6d:df:6b:cb:84:4b:48:ae:65:60:e9:d5:59:27: b6:fd:f6:f2:ce:d6:9f:1e:96:27:36:72:26:08:67: 88:7b:e3:d1:b5:b6:48:f7:36:86:11:9f:73:fd:24: 8b:b4:a7:7f:ad:e5:ba:85:d0:dc:a0:f7:c2:89:ef: 2c:37:25:7c:6b:82:76:8b:d8:a8:49:63:99:71:7a: 0c:95:c1:85:b7:87:a1:1e:8d:21:79:af:92:66:35: 89:69:1a:89:3e:fb:a9:8a:1c:30:5c:c6:b5:fe:1a: 7a:a4:54:6f:f2:0a:bd:84:1c:61:3f:df:d3:98:c4: 3c:00:2f:6a:23:40:9a:14:e5:93:44:40:62:30:b6: 8f:51:a8:5e:5a:f4:4e:42:45:53:58:3c:7c:be:51: c6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:2B:BC:69:FA:3A:50:C1:4B:F3:1F:D4:A5:7E:27:23:A1:68:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df607230-41e6-480a-813d-bbc6101bd307.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.19.192.0/19 Signature Algorithm: sha256WithRSAEncryption 51:f2:ec:48:96:38:05:d2:8f:e8:5b:19:e7:77:48:52:7a:8c: 8d:42:f9:2b:b8:e9:9e:5c:30:48:f0:40:dd:23:fd:78:45:1e: 7f:14:3f:be:22:c9:18:79:31:f1:96:b2:dc:a7:2c:c7:4e:78: f6:7c:9f:31:dc:51:3e:a4:f0:e9:4e:10:6e:49:14:1c:9b:c3: db:e7:65:e5:1c:30:28:2d:0b:4e:0e:74:30:0a:3c:ca:09:0f: b9:57:39:2b:ae:34:ef:6f:28:0c:52:10:ef:eb:6e:a2:96:24: 7f:87:c4:9b:3e:06:cb:69:a0:28:8c:bb:d0:16:77:0a:4a:d1: a3:29:53:13:fc:24:4c:34:9c:ac:d2:f9:50:a5:e7:0f:f6:b7: 1f:22:a6:43:16:b9:36:5a:ec:cf:59:65:be:22:48:e4:fc:4c: b3:0b:97:ab:2c:b0:96:7f:bc:8a:e7:14:3c:82:e1:da:a3:23: 4e:06:44:94:ee:01:fa:5f:df:50:51:16:24:03:01:1a:84:b4: d7:71:d8:66:4d:6a:03:da:91:c7:02:bc:6b:c8:b3:30:05:3d: a4:8f:8f:69:22:af:3a:56:c1:5b:be:a6:fc:7f:5c:65:d7:3c: 02:72:41:df:2d:51:1a:6a:de:0b:88:f7:23:89:2c:13:ac:b6: 90:6f:bc:0d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITQwLiTbL0BA/DoYjUE4LW9tGE0zANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA4MTkxNTQwMTZaFw0yNTA5MjMyMzU5NTla MHoxSTBHBgNVBAUTQGM4YTRjNjQ5OWJjYjAxYmZmMjQwMDIwYWNhZDY1YWYwNzJi ZGIyYjAyNTBiNzk5OGJmOWMxNjEzNjY5ZmZhNmIxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJ5jjdAgbhdkFMJ9Rt2c4umAdZ/xh1ZM3W8xjI2F27Ne2PM1 Nj9i0P5MkTATZxwLobUt/zdHrH39h2qeBpy1Xs4g7TgycW7MoQTNBtraKtmSun84 0cqlGllRP5fwkKmtRiZgYVIkLJ1NrG3fa8uES0iuZWDp1Vkntv328s7Wnx6WJzZy JghniHvj0bW2SPc2hhGfc/0ki7Snf63luoXQ3KD3wonvLDclfGuCdovYqEljmXF6 DJXBhbeHoR6NIXmvkmY1iWkaiT77qYocMFzGtf4aeqRUb/IKvYQcYT/f05jEPAAv aiNAmhTlk0RAYjC2j1GoXlr0TkJFU1g8fL5RxnkCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRpxiu8afo6UMFL8x/UpX4nI6FovjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZGY2MDcyMzAtNDFlNi00ODBhLTgxM2QtYmJjNjEwMWJkMzA3LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTQTwDANBgkqhkiG9w0BAQsFAAOCAQEAUfLsSJY4BdKP6FsZ53dIUnqMjUL5 K7jpnlwwSPBA3SP9eEUefxQ/viLJGHkx8Zay3Kcsx0549nyfMdxRPqTw6U4QbkkU HJvD2+dl5RwwKC0LTg50MAo8ygkPuVc5K640728oDFIQ7+tuopYkf4fEmz4Gy2mg KIy70BZ3CkrRoylTE/wkTDScrNL5UKXnD/a3HyKmQxa5Nlrsz1llviJI5PxMswuX qyywln+8iucUPILh2qMjTgZElO4B+l/fUFEWJAMBGoS013HYZk1qA9qRxwK8a8iz MAU9pI+PaSKvOlbBW76m/H9cZdc8AnJB3y1RGmreC4j3I4ksE6y2kG+8DQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:49:49 2025 by rpki-client