$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a20a0de3-8942-4eda-ae18-35cce037ad0e.roa File: a20a0de3-8942-4eda-ae18-35cce037ad0e.roa (raw, json) Hash identifier: MLb3cAW3jKVI/hcKfSq7pXvF1S16rTFek5NFK+vS16M= Subject key identifier: 3C:FA:9B:49:4D:45:72:26:BF:8E:C2:FC:BD:53:A9:44:2B:E3:5C:84 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4027F0C79E1CCB29A40BA5B952A636C87D954442 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a20a0de3-8942-4eda-ae18-35cce037ad0e.roa Signing time: Mon 04 Aug 2025 18:11:45 +0000 ROA not before: Mon 04 Aug 2025 18:11:45 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 52.46.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:27:f0:c7:9e:1c:cb:29:a4:0b:a5:b9:52:a6:36:c8:7d:95:44:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 4 18:11:45 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=e99912d5d62558c0157731b5760931f4b5798b73f0352d5b499d86c043cf9c04, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e3:53:35:a4:1d:09:d5:31:b6:27:6f:fa:77: f3:36:b2:1c:31:ad:2d:be:e0:fd:13:15:e3:1b:cf: de:95:8a:01:a9:5a:94:6b:4d:2e:b9:cc:87:34:b3: f7:62:df:9a:c9:2f:58:f8:70:60:ad:1d:0a:d3:fb: 72:fa:dd:7e:a0:34:c6:73:bc:ec:44:57:ea:cd:94: fa:7f:65:6a:f2:e9:b5:18:a2:2b:e1:47:ec:88:92: 8a:12:f4:19:12:5f:50:9d:e2:d4:7b:e7:23:d3:2d: c9:d6:06:93:9e:95:f4:c7:3d:34:b9:54:16:1e:ce: ea:ad:97:86:41:c1:62:d0:fb:c6:8a:43:c6:39:0d: 61:c1:81:0b:cf:2c:9f:b3:63:e0:1d:b9:00:ec:ea: 31:19:e2:b7:20:0a:c9:6b:5e:38:9c:1a:28:d9:e0: 4e:17:4a:aa:c2:6a:de:de:f6:a6:66:6b:45:5d:a4: 77:6f:30:64:e8:04:1c:a3:6a:01:b9:c0:c6:85:a7: 6e:29:78:cb:87:f2:4a:93:03:26:98:ed:3f:9f:98: 91:3a:e6:4b:cf:a7:94:72:f7:7b:00:dc:c9:d5:26: eb:f4:53:b8:2f:8a:c5:18:f7:25:34:a9:43:c2:18: 1a:0d:3f:1d:52:0e:b8:6a:3d:e2:41:6a:5a:40:57: 5c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FA:9B:49:4D:45:72:26:BF:8E:C2:FC:BD:53:A9:44:2B:E3:5C:84 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a20a0de3-8942-4eda-ae18-35cce037ad0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.46.224.0/20 Signature Algorithm: sha256WithRSAEncryption a0:3e:09:53:9c:58:9c:11:e1:94:df:bc:53:c8:4a:46:2e:a6: c0:21:cb:8c:1a:d7:30:99:20:d9:94:3e:7f:89:5f:aa:94:8d: 15:39:47:c5:1c:a0:7c:0b:bc:37:99:e0:f8:12:35:c2:75:d4: bb:6a:77:55:6d:dd:40:e1:f7:40:49:e0:33:b2:ac:72:05:aa: 33:f9:fa:ad:e8:32:a4:27:f4:fc:8e:69:36:76:3d:fb:64:33: eb:6a:e0:ac:a9:62:2a:d3:47:78:1f:8c:39:62:e3:ce:6a:54: bd:90:fd:3d:5a:ca:53:15:a1:13:b6:be:26:5f:2a:be:9d:6e: ca:02:c9:0e:25:b5:be:4b:29:b2:69:6d:28:17:0c:8b:e4:0a: ac:92:16:aa:82:77:22:7f:43:28:d5:83:d4:b1:fd:23:44:2e: c8:dd:6f:bf:73:ad:00:76:d4:c3:f0:01:66:71:27:fe:11:9c: 2f:c1:17:62:fd:1d:b5:af:44:ec:8a:02:96:e5:5d:6b:7f:ce: 99:a1:42:1e:19:54:bf:af:58:c7:29:89:b0:39:0d:ba:da:2c: 73:d4:1e:ac:10:bb:d1:9d:96:28:47:12:aa:08:12:af:c8:0b: fb:d0:1a:fd:00:e0:e2:bd:c6:f5:b4:f4:31:02:32:28:0a:eb: 55:6d:fe:0c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQCfwx54cyymkC6W5UqY2yH2VREIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA0MTgxMTQ1WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlOTk5MTJkNWQ2MjU1OGMwMTU3NzMxYjU3NjA5MzFmNGI1 Nzk4YjczZjAzNTJkNWI0OTlkODZjMDQzY2Y5YzA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDD41M1pB0J1TG2J2/6d/M2shwxrS2+4P0TFeMbz96VigGp WpRrTS65zIc0s/di35rJL1j4cGCtHQrT+3L63X6gNMZzvOxEV+rNlPp/ZWry6bUY oivhR+yIkooS9BkSX1Cd4tR75yPTLcnWBpOelfTHPTS5VBYezuqtl4ZBwWLQ+8aK Q8Y5DWHBgQvPLJ+zY+AduQDs6jEZ4rcgCslrXjicGijZ4E4XSqrCat7e9qZma0Vd pHdvMGToBByjagG5wMaFp24peMuH8kqTAyaY7T+fmJE65kvPp5Ry93sA3MnVJuv0 U7gvisUY9yU0qUPCGBoNPx1SDrhqPeJBalpAV1wTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPPqbSU1Fcia/jsL8vVOpRCvjXIQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EyMGEwZGUzLTg5NDItNGVkYS1hZTE4LTM1Y2NlMDM3YWQwZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0LuAwDQYJKoZIhvcNAQELBQADggEBAKA+CVOcWJwR4ZTfvFPISkYupsAh y4wa1zCZINmUPn+JX6qUjRU5R8UcoHwLvDeZ4PgSNcJ11Ltqd1Vt3UDh90BJ4DOy rHIFqjP5+q3oMqQn9PyOaTZ2PftkM+tq4KypYirTR3gfjDli485qVL2Q/T1aylMV oRO2viZfKr6dbsoCyQ4ltb5LKbJpbSgXDIvkCqySFqqCdyJ/QyjVg9Sx/SNELsjd b79zrQB21MPwAWZxJ/4RnC/BF2L9HbWvROyKApblXWt/zpmhQh4ZVL+vWMcpibA5 DbraLHPUHqwQu9GdlihHEqoIEq/IC/vQGv0A4OK9xvW09DECMigK61Vt/gw= -----END CERTIFICATE-----Generated at Sat Aug 23 16:47:44 2025 by rpki-client