$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471fcb95-bc40-49aa-8ba6-6cfa7a0407a1.roa File: 471fcb95-bc40-49aa-8ba6-6cfa7a0407a1.roa (raw, json) Hash identifier: dhduCi4ROT62lH7mdHyh6LFy/X/0g3Y1S+/1185eGx0= Subject key identifier: 6D:4F:FF:8A:C4:0B:13:7C:00:6E:F6:23:5E:96:C9:F5:40:D6:83:5B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1DA210A8172094E4267975A7692FFCC947426EB4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471fcb95-bc40-49aa-8ba6-6cfa7a0407a1.roa Signing time: Tue 29 Jul 2025 15:10:14 +0000 ROA not before: Tue 29 Jul 2025 15:10:14 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.56.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a2:10:a8:17:20:94:e4:26:79:75:a7:69:2f:fc:c9:47:42:6e:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:10:14 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=4edca3a4eb0570722430439169efe2045b8c48557a9523f3951b93032defeff1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:f3:c1:60:c1:91:ca:c9:9d:97:18:7a:97: d7:56:3c:a4:c2:65:c5:27:b9:f1:d0:91:f9:b9:af: 6b:97:00:49:3f:b7:76:3c:34:e5:ce:6c:28:39:e6: 7f:82:cc:33:06:60:ea:46:73:a8:58:15:cf:48:67: 5d:92:29:d5:de:e6:3b:5a:a2:1b:e4:41:0e:38:05: f8:b0:0d:b4:f2:aa:f6:55:89:6a:64:4f:67:63:ab: b0:15:3e:ee:a7:9b:df:5e:1b:60:1d:38:c3:e7:1d: cd:21:eb:94:2c:3f:73:ad:37:bc:44:d5:62:61:46: 74:ea:6b:74:67:5b:80:d0:a8:39:94:c3:b1:8d:3a: 41:69:9e:f3:66:6c:13:ae:4d:df:0b:b7:02:83:a4: a0:60:7e:a6:f8:91:f7:43:6b:3f:06:b1:01:f8:01: 86:e9:e5:e0:dc:0e:35:4d:b9:8d:5b:dd:3e:7d:f2: 2b:28:37:b8:82:10:a5:0a:b9:84:75:a8:30:64:20: 32:89:49:6a:d9:76:ce:e8:0f:62:0f:6e:11:f6:b8: 03:aa:e1:2b:85:05:01:8c:e7:19:1c:d5:2a:92:b6: f3:f6:87:6c:11:1e:38:01:1c:06:47:71:05:8a:96: 2e:78:d1:f6:d2:96:48:f8:d9:4d:62:6b:b5:2c:10: cd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:4F:FF:8A:C4:0B:13:7C:00:6E:F6:23:5E:96:C9:F5:40:D6:83:5B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/471fcb95-bc40-49aa-8ba6-6cfa7a0407a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.56.0.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:c5:de:2a:87:55:c4:97:b7:54:fe:30:1e:9d:ee:1b:bb:28: 52:9b:2a:33:66:00:b2:0d:f9:02:a2:79:fa:57:2f:98:9c:07: 7d:b5:84:31:70:0f:f6:38:f3:2b:38:8d:4e:64:dc:bc:0a:cf: 84:92:6b:20:18:36:59:f5:49:9c:0c:d7:cb:ee:31:90:fa:1d: df:e0:88:97:b6:eb:56:73:85:23:80:6a:f5:bf:e8:c4:c4:a9: 5b:9f:a5:dc:e1:b7:0e:91:a0:95:67:c9:88:49:41:67:c1:e9: e2:35:9a:be:a6:fe:83:2d:33:b8:8f:db:5c:a9:3f:bc:74:2b: db:e0:02:43:53:46:6f:e7:15:4d:53:da:3d:af:fb:c6:29:c5: 03:00:0d:7a:ff:c5:38:9f:06:04:ec:b8:56:53:c2:72:a9:54: 7e:1a:8f:81:10:41:64:81:a2:80:05:76:e6:eb:93:ae:23:a8: 83:0e:0f:15:ff:00:7f:ba:42:5c:f3:46:ab:2d:93:9c:80:d5: 99:27:00:34:9a:e7:c8:7d:be:5e:25:5f:98:aa:4c:90:af:48: 82:9d:e0:32:92:24:4c:8a:5d:8a:4d:f6:3a:09:7c:db:d7:50: 15:46:8f:df:39:0e:e5:56:74:82:a5:cd:ad:97:5f:47:86:f6: b5:a2:14:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHaIQqBcglOQmeXWnaS/8yUdCbrQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTUxMDE0WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWRjYTNhNGViMDU3MDcyMjQzMDQzOTE2OWVmZTIwNDVi OGM0ODU1N2E5NTIzZjM5NTFiOTMwMzJkZWZlZmYxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjqPPBYMGRysmdlxh6l9dWPKTCZcUnufHQkfm5r2uXAEk/ t3Y8NOXObCg55n+CzDMGYOpGc6hYFc9IZ12SKdXe5jtaohvkQQ44BfiwDbTyqvZV iWpkT2djq7AVPu6nm99eG2AdOMPnHc0h65QsP3OtN7xE1WJhRnTqa3RnW4DQqDmU w7GNOkFpnvNmbBOuTd8LtwKDpKBgfqb4kfdDaz8GsQH4AYbp5eDcDjVNuY1b3T59 8isoN7iCEKUKuYR1qDBkIDKJSWrZds7oD2IPbhH2uAOq4SuFBQGM5xkc1SqStvP2 h2wRHjgBHAZHcQWKli540fbSlkj42U1ia7UsEM25AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUbU//isQLE3wAbvYjXpbJ9UDWg1swHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3MWZjYjk1LWJjNDAtNDlhYS04YmE2LTZjZmE3YTA0MDdhMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0OAAwDQYJKoZIhvcNAQELBQADggEBAH7F3iqHVcSXt1T+MB6d7hu7KFKb KjNmALIN+QKiefpXL5icB321hDFwD/Y48ys4jU5k3LwKz4SSayAYNln1SZwM18vu MZD6Hd/giJe261ZzhSOAavW/6MTEqVufpdzhtw6RoJVnyYhJQWfB6eI1mr6m/oMt M7iP21ypP7x0K9vgAkNTRm/nFU1T2j2v+8YpxQMADXr/xTifBgTsuFZTwnKpVH4a j4EQQWSBooAFdubrk64jqIMODxX/AH+6QlzzRqstk5yA1ZknADSa58h9vl4lX5iq TJCvSIKd4DKSJEyKXYpN9joJfNvXUBVGj985DuVWdIKlza2XX0eG9rWiFF8= -----END CERTIFICATE-----Generated at Tue Aug 5 08:19:04 2025 by rpki-client