$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f33d5f42-af93-4a05-96ad-b917983b769d.roa File: f33d5f42-af93-4a05-96ad-b917983b769d.roa (raw, json) Hash identifier: fg3gBPj1ahUSGyLSF++A+9LOjYu/R4lJYdSjguHXz4A= Subject key identifier: F4:94:6A:85:97:77:39:2D:FB:FC:7E:06:0E:41:8E:87:78:2D:F0:9C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 73EA0C10427CC5BC3E31B89DFEFB0296C6E9D784 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f33d5f42-af93-4a05-96ad-b917983b769d.roa Signing time: Tue 09 Sep 2025 15:10:50 +0000 ROA not before: Tue 09 Sep 2025 15:10:50 +0000 ROA not after: Tue 14 Oct 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.93.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ea:0c:10:42:7c:c5:bc:3e:31:b8:9d:fe:fb:02:96:c6:e9:d7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 9 15:10:50 2025 GMT Not After : Oct 14 23:59:59 2025 GMT Subject: serialNumber=72672507b09927f29c7e2c1ea4b248fe7fcfa1ab42b6beb2418e55ae92c0f235, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:60:c3:ce:d2:e7:ca:48:47:c3:12:43:f6:40: 68:c1:00:8d:11:ad:d9:5b:f5:b9:07:c1:cc:74:dd: 3b:1d:6d:be:16:bc:08:1a:03:48:12:8d:0b:fe:bc: 1f:ca:ae:f3:3b:db:83:80:5f:eb:9f:c6:5f:53:a4: c7:8d:28:37:c1:e3:69:9a:1b:11:5e:41:bb:a3:6d: 7f:34:84:3e:64:ff:b3:da:67:bc:05:b1:49:64:8e: 38:70:47:43:39:a7:09:70:2f:59:4d:76:39:b7:c3: c1:98:c9:64:cf:a3:59:a4:78:3a:0c:c7:cf:d5:dc: 52:14:d4:98:3b:d2:6f:6d:6e:b9:51:a2:ae:06:2f: 62:2e:f9:62:3d:01:fd:8b:39:3e:79:83:50:ef:6d: af:21:63:91:ee:2b:66:3e:3b:ce:fb:9d:76:99:15: 9b:a6:ba:06:3e:e6:b1:a8:2b:de:5c:1f:65:13:15: 8d:ba:3f:90:7c:d1:c3:52:96:2a:f6:29:fa:d0:3e: f6:30:81:62:f7:67:17:28:e4:74:5e:89:68:cc:f4: 7a:08:3c:a9:9f:10:bf:51:58:f4:b2:59:87:36:dd: 25:f3:e6:49:4e:e2:5d:1e:c2:87:82:c4:fa:ae:1a: f4:e7:f4:20:a7:57:1c:86:f7:66:4b:23:6d:3c:4e: 3b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:94:6A:85:97:77:39:2D:FB:FC:7E:06:0E:41:8E:87:78:2D:F0:9C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f33d5f42-af93-4a05-96ad-b917983b769d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.147.0/24 Signature Algorithm: sha256WithRSAEncryption 13:a9:59:42:e7:c8:4d:4b:72:a0:a0:88:18:fd:0f:35:4e:ed: 15:ab:a9:57:33:51:cb:f4:fd:74:6f:cb:97:8a:2d:71:a6:85: 87:b9:0d:19:96:74:7d:34:14:d7:a9:ac:1a:47:ae:90:b2:ad: 06:97:2c:6a:bf:c3:6b:ef:97:fe:27:c8:c7:e2:c8:0a:70:53: 0d:df:9a:bf:bc:7a:33:22:77:ca:56:04:c2:7a:34:92:6e:6b: 97:28:72:42:e3:0e:91:23:fb:10:be:c1:5e:d1:fd:40:e1:54: 55:92:19:7f:d0:de:db:12:42:09:51:c5:66:5c:73:74:f1:95: d1:20:b6:f5:d7:ce:06:39:35:6f:00:48:d2:ac:50:14:ac:04: 37:3c:f8:c2:47:94:1e:ae:b7:e6:c6:0b:75:b2:05:c4:1e:1d: d7:ca:87:8f:41:8c:fc:b6:bb:a8:3c:6c:c0:4c:cd:d1:76:60: 03:ff:42:8e:0e:0d:72:6c:3e:66:e1:a1:6a:86:cb:5e:33:25: 06:2e:6d:52:00:cc:14:f9:ab:f9:2f:c5:96:f5:9d:f7:ac:cc: 85:d8:40:bb:c1:a6:dc:d4:37:6f:97:01:3c:00:6f:08:83:50: 60:33:eb:7d:73:b4:eb:24:49:ca:38:9c:ae:46:df:f8:54:00: 08:7a:23:24 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc+oMEEJ8xbw+Mbid/vsClsbp14QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTA5MTUxMDUwWhcNMjUxMDE0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3MjY3MjUwN2IwOTkyN2YyOWM3ZTJjMWVhNGIyNDhmZTdm Y2ZhMWFiNDJiNmJlYjI0MThlNTVhZTkyYzBmMjM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpYMPO0ufKSEfDEkP2QGjBAI0Rrdlb9bkHwcx03Tsdbb4W vAgaA0gSjQv+vB/KrvM724OAX+ufxl9TpMeNKDfB42maGxFeQbujbX80hD5k/7Pa Z7wFsUlkjjhwR0M5pwlwL1lNdjm3w8GYyWTPo1mkeDoMx8/V3FIU1Jg70m9tbrlR oq4GL2Iu+WI9Af2LOT55g1Dvba8hY5HuK2Y+O877nXaZFZumugY+5rGoK95cH2UT FY26P5B80cNSlir2KfrQPvYwgWL3Zxco5HReiWjM9HoIPKmfEL9RWPSyWYc23SXz 5klO4l0ewoeCxPquGvTn9CCnVxyG92ZLI208TjunAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9JRqhZd3OS37/H4GDkGOh3gt8JwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YzM2Q1ZjQyLWFmOTMtNGEwNS05NmFkLWI5MTc5ODNiNzY5ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XZMwDQYJKoZIhvcNAQELBQADggEBABOpWULnyE1LcqCgiBj9DzVO7RWr qVczUcv0/XRvy5eKLXGmhYe5DRmWdH00FNeprBpHrpCyrQaXLGq/w2vvl/4nyMfi yApwUw3fmr+8ejMid8pWBMJ6NJJua5cockLjDpEj+xC+wV7R/UDhVFWSGX/Q3tsS QglRxWZcc3TxldEgtvXXzgY5NW8ASNKsUBSsBDc8+MJHlB6ut+bGC3WyBcQeHdfK h49BjPy2u6g8bMBMzdF2YAP/Qo4ODXJsPmbhoWqGy14zJQYubVIAzBT5q/kvxZb1 nfeszIXYQLvBptzUN2+XATwAbwiDUGAz631ztOskSco4nK5G3/hUAAh6IyQ= -----END CERTIFICATE-----Generated at Tue Sep 16 02:52:59 2025 by rpki-client