$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/383568cc-96f2-43c1-a942-fbed6f9b0f3a.roa File: 383568cc-96f2-43c1-a942-fbed6f9b0f3a.roa (raw, json) Hash identifier: /y1HTL8C7mE+n4HLvLtz5mFniwGnlsoo5lDJCV4jays= Subject key identifier: 0B:31:71:32:3E:50:68:95:E2:0D:2A:90:B1:54:FE:39:26:15:BD:BE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 71E4A74D2E5E7E1E0FA6BC33D150D59D83C23D82 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/383568cc-96f2-43c1-a942-fbed6f9b0f3a.roa Signing time: Fri 11 Jul 2025 17:21:54 +0000 ROA not before: Fri 11 Jul 2025 17:21:54 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.94.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e4:a7:4d:2e:5e:7e:1e:0f:a6:bc:33:d1:50:d5:9d:83:c2:3d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:21:54 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=de2f568951038106586097d5a15f42b63c5e4b00efe39e7915af0453fa08b07b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:7e:b2:2b:91:a7:c0:75:65:20:ef:79:3c: ce:c1:22:94:52:7d:0e:ca:a9:c8:d0:93:44:46:c7: cc:2f:62:dd:d7:d8:37:ed:8b:d9:8c:25:7c:79:7d: 9a:4f:d2:5d:2e:cb:5d:6b:bf:20:c8:49:5f:c7:ea: 05:60:55:db:4b:b1:3c:dd:33:70:68:5d:48:5d:be: 8c:77:bd:4c:4f:67:de:37:18:6e:56:c3:12:16:21: 53:ac:f1:02:fd:2e:59:0f:06:e5:e9:95:f1:1e:69: 10:60:fe:a7:80:6b:ba:95:0b:94:63:70:f5:66:ea: 1a:55:1e:65:c4:d5:7c:18:7c:17:53:1a:92:88:a5: 29:24:1e:34:57:e7:71:05:bb:8b:98:5e:02:5d:e1: 96:01:e3:5d:fc:cf:9c:57:09:89:6b:cb:2f:8c:4a: ad:54:a3:82:2b:93:66:b8:4f:c0:97:5e:74:61:b3: bb:63:4b:3f:18:be:69:8b:e3:c6:74:c6:b0:f9:88: 27:f1:8c:7f:3e:74:d5:c2:08:19:0f:56:97:44:bd: d4:2f:a4:1f:6e:8b:ad:07:a9:b7:10:f9:09:3b:90: 98:da:45:74:45:c4:38:42:44:3b:cd:50:6b:a7:9f: ee:12:36:11:f7:4f:7e:49:c6:28:3f:41:e9:f9:39: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:31:71:32:3E:50:68:95:E2:0D:2A:90:B1:54:FE:39:26:15:BD:BE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/383568cc-96f2-43c1-a942-fbed6f9b0f3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.94.32.0/20 Signature Algorithm: sha256WithRSAEncryption 35:15:49:0c:7b:af:43:60:4c:48:c7:a8:71:83:28:22:31:be: 48:dd:37:c2:c5:33:6d:57:46:35:77:e4:5e:5e:97:d6:8d:a9: b3:e8:57:92:b9:cf:f4:97:13:6d:b6:9a:aa:b0:df:47:96:26: f7:20:a0:05:be:dc:90:e0:f8:36:71:e9:0e:f0:37:bf:2d:14: 14:10:ba:99:ff:d3:01:87:b4:62:d0:44:4a:59:11:7a:9f:c6: 10:f9:b3:29:27:9b:76:b4:f7:7e:47:1f:09:28:98:49:83:1f: 4d:f1:ef:2c:eb:65:1e:e6:68:f9:2c:a2:37:32:9a:58:a2:5b: 2d:88:10:41:37:63:75:6e:0e:ce:c1:f1:ae:8a:27:54:74:3f: 92:7e:6e:3e:d7:0a:ef:0c:ce:14:cd:d7:33:f7:61:4e:42:4a: 73:28:1f:7d:36:4d:7b:d5:3a:1e:3f:44:2a:26:da:85:67:cf: e5:6b:e4:f4:13:4c:76:3c:01:87:f9:61:cf:59:2e:7d:66:de: 59:7a:28:00:5b:2d:3e:a0:9d:c2:4d:df:f6:52:4b:4d:3f:82: d8:c7:df:b8:00:5c:d1:62:b3:d6:4a:20:3e:22:8f:e3:51:31: 03:18:02:7b:5e:eb:2a:82:66:fe:9d:b5:9f:3c:b4:c2:88:f1: 34:27:40:23 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUceSnTS5efh4Pprwz0VDVnYPCPYIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTcyMTU0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkZTJmNTY4OTUxMDM4MTA2NTg2MDk3ZDVhMTVmNDJiNjNj NWU0YjAwZWZlMzllNzkxNWFmMDQ1M2ZhMDhiMDdiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+836yK5GnwHVlIO95PM7BIpRSfQ7KqcjQk0RGx8wvYt3X 2Dfti9mMJXx5fZpP0l0uy11rvyDISV/H6gVgVdtLsTzdM3BoXUhdvox3vUxPZ943 GG5WwxIWIVOs8QL9LlkPBuXplfEeaRBg/qeAa7qVC5RjcPVm6hpVHmXE1XwYfBdT GpKIpSkkHjRX53EFu4uYXgJd4ZYB4138z5xXCYlryy+MSq1Uo4Irk2a4T8CXXnRh s7tjSz8YvmmL48Z0xrD5iCfxjH8+dNXCCBkPVpdEvdQvpB9ui60HqbcQ+Qk7kJja RXRFxDhCRDvNUGunn+4SNhH3T35Jxig/Qen5OY9NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCzFxMj5QaJXiDSqQsVT+OSYVvb4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4MzU2OGNjLTk2ZjItNDNjMS1hOTQyLWZiZWQ2ZjliMGYzYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ0XiAwDQYJKoZIhvcNAQELBQADggEBADUVSQx7r0NgTEjHqHGDKCIxvkjd N8LFM21XRjV35F5el9aNqbPoV5K5z/SXE222mqqw30eWJvcgoAW+3JDg+DZx6Q7w N78tFBQQupn/0wGHtGLQREpZEXqfxhD5syknm3a0935HHwkomEmDH03x7yzrZR7m aPksojcymliiWy2IEEE3Y3VuDs7B8a6KJ1R0P5J+bj7XCu8MzhTN1zP3YU5CSnMo H302TXvVOh4/RCom2oVnz+Vr5PQTTHY8AYf5Yc9ZLn1m3ll6KABbLT6gncJN3/ZS S00/gtjH37gAXNFis9ZKID4ij+NRMQMYAnte6yqCZv6dtZ88tMKI8TQnQCM= -----END CERTIFICATE-----Generated at Tue Aug 5 16:36:04 2025 by rpki-client