$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d32b8f6-1faf-4b32-9d75-76b5ea5dc31a.roa File: 9d32b8f6-1faf-4b32-9d75-76b5ea5dc31a.roa (raw, json) Hash identifier: 1lGcfgaD4ZP79U97JtAhO0sLUwhYpYRbehH3vPrlPls= Subject key identifier: 44:FD:42:C9:87:65:42:64:55:53:05:8C:B0:2B:56:C3:31:E0:49:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 45144C990F43FA6D419F0E3D0AEE792AEB0DF609 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d32b8f6-1faf-4b32-9d75-76b5ea5dc31a.roa Signing time: Tue 05 Aug 2025 17:11:12 +0000 ROA not before: Tue 05 Aug 2025 17:11:12 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.95.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:14:4c:99:0f:43:fa:6d:41:9f:0e:3d:0a:ee:79:2a:eb:0d:f6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:11:12 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=9b35d0942c38e69465252a46f8628d688998a29254dbd8b85c3f06ca04ab0210, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:35:a2:ad:c8:df:50:34:28:bd:dd:e9:df: 84:74:99:35:5d:1f:35:53:95:94:91:c6:69:47:b5: 7a:49:a8:e7:a9:83:b8:11:a4:87:22:dd:5a:0c:b4: 60:8c:e5:fd:a1:0b:8d:a3:45:b1:7a:cf:7c:9e:2e: b1:60:93:1a:76:1c:a5:bd:1f:61:a0:cd:4b:bb:ba: 62:f0:81:83:46:74:df:b9:91:eb:d7:3f:0f:5b:86: df:b5:07:0f:6d:3b:48:05:9c:63:91:c1:c0:83:2b: 18:a5:43:ee:bf:d5:ee:f5:12:3e:10:85:53:99:78: 6c:26:19:bc:07:dd:1a:0a:36:18:f1:35:7e:7f:45: 70:0c:de:87:aa:c0:2b:94:b9:ee:c5:23:39:bf:8c: 7d:7b:b0:64:f0:f1:62:7b:ec:76:82:11:4d:79:9a: 9e:6e:24:a3:cf:c6:44:c4:73:a0:c0:7a:2a:d6:75: 80:c2:0b:f4:03:b8:2e:c2:eb:6b:b6:00:6f:76:a6: 85:24:67:37:c1:0e:64:c5:e8:fe:81:90:87:e7:68: 8e:ae:8a:5a:29:9b:13:fe:3f:f9:57:4f:5c:7e:a2: a7:f7:43:91:3d:4d:53:d3:47:86:80:31:a8:ec:5b: d9:34:09:6e:7e:e0:d3:ed:3a:e5:5b:b6:b7:0d:70: 55:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:42:C9:87:65:42:64:55:53:05:8C:B0:2B:56:C3:31:E0:49:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9d32b8f6-1faf-4b32-9d75-76b5ea5dc31a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.208.0/22 Signature Algorithm: sha256WithRSAEncryption 20:4b:a0:b7:e9:93:92:c4:53:37:3b:c7:27:b8:d4:3a:9d:10: 5a:11:e2:34:0d:20:39:99:62:ea:f1:9e:4d:21:53:f4:c9:f6: e7:76:3c:65:84:7b:05:95:37:5e:95:24:03:6b:2a:01:76:c2: ba:4a:09:bf:49:d1:c3:a5:32:f4:a5:bf:97:bb:b9:8d:94:9e: 23:fb:f1:ee:2e:a6:33:1f:3f:94:43:9d:88:2e:5d:be:a4:f0: 0b:95:89:da:20:e3:d9:21:0d:6d:3d:27:e4:2e:02:28:b8:4b: b7:e3:fd:d5:1e:14:ce:8a:12:00:0c:0a:ce:c9:e5:98:a9:e4: 94:92:2d:19:ec:dd:98:7a:c8:35:07:73:73:6d:ba:d3:9c:c0: 7b:b7:f3:7b:07:94:b4:96:03:84:67:c8:74:a8:34:45:1a:76: 0b:cd:d0:4a:83:ef:64:b8:2c:2f:9d:2c:02:e8:9e:7b:dc:af: 38:90:81:c2:d1:ca:0c:e2:b6:9c:8f:96:1d:b4:95:f1:ee:f7: 76:0a:c1:4b:0d:bc:d1:1f:30:67:4e:16:2a:a4:ba:94:1f:fd: 71:c5:57:4f:5d:85:df:32:ea:92:98:44:01:58:91:57:02:05: 8d:17:d7:e7:b3:0e:7b:e9:e2:0b:9a:0f:e7:c7:a6:d2:ef:4c: c1:69:12:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURRRMmQ9D+m1Bnw49Cu55KusN9gkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTcxMTEyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YjM1ZDA5NDJjMzhlNjk0NjUyNTJhNDZmODYyOGQ2ODg5 OThhMjkyNTRkYmQ4Yjg1YzNmMDZjYTA0YWIwMjEwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCj6TWircjfUDQovd3p34R0mTVdHzVTlZSRxmlHtXpJqOep g7gRpIci3VoMtGCM5f2hC42jRbF6z3yeLrFgkxp2HKW9H2GgzUu7umLwgYNGdN+5 kevXPw9bht+1Bw9tO0gFnGORwcCDKxilQ+6/1e71Ej4QhVOZeGwmGbwH3RoKNhjx NX5/RXAM3oeqwCuUue7FIzm/jH17sGTw8WJ77HaCEU15mp5uJKPPxkTEc6DAeirW dYDCC/QDuC7C62u2AG92poUkZzfBDmTF6P6BkIfnaI6uilopmxP+P/lXT1x+oqf3 Q5E9TVPTR4aAMajsW9k0CW5+4NPtOuVbtrcNcFWxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQURP1CyYdlQmRVUwWMsCtWwzHgScUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlkMzJiOGY2LTFmYWYtNGIzMi05ZDc1LTc2YjVlYTVkYzMxYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0X9AwDQYJKoZIhvcNAQELBQADggEBACBLoLfpk5LEUzc7xye41DqdEFoR 4jQNIDmZYurxnk0hU/TJ9ud2PGWEewWVN16VJANrKgF2wrpKCb9J0cOlMvSlv5e7 uY2UniP78e4upjMfP5RDnYguXb6k8AuVidog49khDW09J+QuAii4S7fj/dUeFM6K EgAMCs7J5Zip5JSSLRns3Zh6yDUHc3NtutOcwHu383sHlLSWA4RnyHSoNEUadgvN 0EqD72S4LC+dLALonnvcrziQgcLRygzitpyPlh20lfHu93YKwUsNvNEfMGdOFiqk upQf/XHFV09dhd8y6pKYRAFYkVcCBY0X1+ezDnvp4guaD+fHptLvTMFpEno= -----END CERTIFICATE-----Generated at Sat Aug 23 15:24:47 2025 by rpki-client