$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d91fb2b-63a8-43dd-a53b-db22adb2b902.roa File: 5d91fb2b-63a8-43dd-a53b-db22adb2b902.roa (raw, json) Hash identifier: GvNeU6fqbZq5Qh/KNZdl88/Q/+c3HS2qJMIBeb72tAg= Subject key identifier: 30:6C:0F:09:4B:D7:9A:88:95:FC:2F:96:A8:12:D0:03:1E:70:8B:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FF9DEAF70FC6CDB3DDAE419293506F1A23938AC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d91fb2b-63a8-43dd-a53b-db22adb2b902.roa Signing time: Fri 22 Aug 2025 00:50:23 +0000 ROA not before: Fri 22 Aug 2025 00:50:23 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:f9:de:af:70:fc:6c:db:3d:da:e4:19:29:35:06:f1:a2:39:38:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 22 00:50:23 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=460187bef5a6a26719fd56415a933b4df6eb44963b72469720d1e7532b65fc38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:10:8e:e2:9d:3e:f9:48:59:f0:b3:d7:67: 46:f9:43:d1:de:01:ee:09:69:c5:9f:ea:02:2b:79: c3:b3:7e:03:47:dc:aa:f3:cc:6f:33:7d:39:ff:c5: 2d:89:6f:48:97:3b:f1:c8:d0:5f:86:8a:b0:8d:2f: 84:bf:09:f9:1d:59:04:bf:24:d0:7e:27:e4:97:8f: b8:ed:23:81:03:eb:a3:35:fe:f0:47:6e:d7:22:31: c8:64:7b:1d:9e:e2:35:7f:46:84:69:36:94:e3:a4: f9:95:c0:8b:16:ee:2d:83:71:e7:b2:43:14:d9:d8: 10:5f:9b:0e:47:4c:24:3c:ca:af:72:a6:a8:de:04: 15:3c:75:1d:da:c4:b9:cd:64:9e:aa:00:0f:bd:51: 1c:79:aa:11:6f:c5:3b:0f:1b:60:6f:e2:3a:97:06: ea:f7:74:81:a5:80:bf:26:ae:86:51:ea:34:66:e0: df:b6:76:13:a9:71:90:56:5e:20:53:e5:a0:21:f8: f9:cb:77:78:6e:07:73:48:f4:69:c3:83:7a:44:f7: 39:9f:22:fa:7f:b5:69:cb:77:ee:c2:3e:54:85:f7: 2f:ae:c8:c6:0f:00:73:6a:7e:f1:7c:8f:72:4e:15: b1:d2:75:bd:e5:30:6a:fd:90:6c:ba:db:d0:66:1c: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:6C:0F:09:4B:D7:9A:88:95:FC:2F:96:A8:12:D0:03:1E:70:8B:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d91fb2b-63a8-43dd-a53b-db22adb2b902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.144.0/24 Signature Algorithm: sha256WithRSAEncryption a1:29:05:32:9a:6f:ab:be:0e:da:69:64:51:a2:28:82:80:b6: a3:a6:fe:ad:77:b6:ae:b8:86:fc:c3:5b:b6:c2:cd:a0:c8:b1: e2:f9:8a:c0:75:24:a4:36:48:b1:bc:fa:b3:8f:0b:fc:11:23: 42:74:22:10:28:fc:64:14:ea:33:72:14:b8:d3:cc:27:25:81: b8:86:f0:3d:49:ff:94:e2:f6:67:fd:cb:19:2d:e0:97:e4:9f: 07:8b:d6:41:67:2b:49:4e:15:ba:0a:f7:af:8b:20:1a:46:34: 6b:ca:ba:d8:85:3a:31:de:f5:77:4e:d3:87:02:21:a9:57:2b: 62:a0:0f:9b:9d:0c:31:42:d5:c2:21:95:28:38:b7:67:df:e0: c7:60:28:e6:69:ae:cf:e4:ec:8f:37:06:5b:01:da:d0:48:0c: 90:d2:8f:e4:fc:df:7b:f8:81:c9:a2:cc:0d:78:b3:b5:5e:94: 35:51:12:69:53:9b:ee:58:3f:7e:89:7b:18:a0:04:91:e5:b1: 74:99:94:2c:81:b2:95:98:54:0f:ae:aa:f2:a9:48:d7:af:79: 3b:c2:f3:91:b0:0f:a7:bf:18:0b:c9:41:b6:23:c3:1d:59:44: ad:8b:55:2d:db:24:fd:d7:a5:ab:11:40:38:6f:91:ea:3c:15: 6d:6f:e1:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb/ner3D8bNs92uQZKTUG8aI5OKwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIyMDA1MDIzWhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A0NjAxODdiZWY1YTZhMjY3MTlmZDU2NDE1YTkzM2I0ZGY2 ZWI0NDk2M2I3MjQ2OTcyMGQxZTc1MzJiNjVmYzM4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0nxCO4p0++UhZ8LPXZ0b5Q9HeAe4JacWf6gIrecOzfgNH 3KrzzG8zfTn/xS2Jb0iXO/HI0F+GirCNL4S/CfkdWQS/JNB+J+SXj7jtI4ED66M1 /vBHbtciMchkex2e4jV/RoRpNpTjpPmVwIsW7i2DceeyQxTZ2BBfmw5HTCQ8yq9y pqjeBBU8dR3axLnNZJ6qAA+9URx5qhFvxTsPG2Bv4jqXBur3dIGlgL8mroZR6jRm 4N+2dhOpcZBWXiBT5aAh+PnLd3huB3NI9GnDg3pE9zmfIvp/tWnLd+7CPlSF9y+u yMYPAHNqfvF8j3JOFbHSdb3lMGr9kGy629BmHF73AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMGwPCUvXmoiV/C+WqBLQAx5wizMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVkOTFmYjJiLTYzYTgtNDNkZC1hNTNiLWRiMjJhZGIyYjkwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XpAwDQYJKoZIhvcNAQELBQADggEBAKEpBTKab6u+DtppZFGiKIKAtqOm /q13tq64hvzDW7bCzaDIseL5isB1JKQ2SLG8+rOPC/wRI0J0IhAo/GQU6jNyFLjT zCclgbiG8D1J/5Ti9mf9yxkt4JfknweL1kFnK0lOFboK96+LIBpGNGvKutiFOjHe 9XdO04cCIalXK2KgD5udDDFC1cIhlSg4t2ff4MdgKOZprs/k7I83BlsB2tBIDJDS j+T833v4gcmizA14s7VelDVREmlTm+5YP36JexigBJHlsXSZlCyBspWYVA+uqvKp SNeveTvC85GwD6e/GAvJQbYjwx1ZRK2LVS3bJP3XpasRQDhvkeo8FW1v4Rw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:04:14 2025 by rpki-client