$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66c027bd-0003-4873-87e1-6b07de5e487a.roa File: 66c027bd-0003-4873-87e1-6b07de5e487a.roa (raw, json) Hash identifier: RdUi36CiJN6VtO56KuueoEDvYjLGSnmBjzk5dW0+qVk= Subject key identifier: 01:F6:E2:65:74:AA:04:0E:98:8E:82:AB:33:AC:B5:4B:E3:56:35:D9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54A41CE69839C1A1D226CEB533DCCF4551D6015C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66c027bd-0003-4873-87e1-6b07de5e487a.roa Signing time: Fri 25 Jul 2025 15:50:08 +0000 ROA not before: Fri 25 Jul 2025 15:50:08 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.66.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a4:1c:e6:98:39:c1:a1:d2:26:ce:b5:33:dc:cf:45:51:d6:01:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 15:50:08 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=26f355eb1b2bc3b244fb5b279e2c10062de2e40e4a595111ff741a68317574c9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:78:27:c0:a1:6c:e6:63:be:d4:79:f0:4f:af: 1a:78:4e:c8:f6:2e:18:e7:57:e1:94:88:66:15:ce: a6:15:f9:8f:cd:02:55:59:21:8a:f9:52:a9:83:c4: 62:ed:a6:7a:fe:f8:53:5d:f4:7c:97:e3:8c:01:69: e0:18:d7:6e:8f:d5:5c:46:0f:7f:1b:48:bc:56:1b: 3b:06:8f:3f:9a:d7:8c:fa:09:ad:16:43:6a:4b:34: 2e:99:8a:96:62:7d:c8:99:9b:40:be:99:a6:c1:49: 95:0d:82:96:46:c2:84:c6:de:6b:3b:a1:44:f4:41: 09:d6:6f:4b:4e:3c:cc:65:64:b9:9d:02:cc:90:e2: 65:e8:ce:a6:f5:fa:b7:ca:8e:6c:69:51:fd:14:81: a1:c8:90:e4:01:13:9a:19:7b:15:e9:e0:70:5b:4b: 21:61:e3:59:71:de:ef:de:85:92:09:42:1d:2d:ed: 98:a4:9e:95:e8:20:0b:6f:0a:d4:1e:6e:96:22:ca: 76:62:1e:63:28:e4:aa:9c:5a:60:c8:0d:f3:a4:db: d3:bf:d7:46:9b:ce:5f:e6:6d:3c:d7:06:5e:ef:25: 40:7c:a0:6e:6a:a1:5b:15:98:bf:19:80:1e:2a:99: 42:70:61:33:d7:7f:01:2f:8c:ad:9f:f9:51:60:77: e7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:E2:65:74:AA:04:0E:98:8E:82:AB:33:AC:B5:4B:E3:56:35:D9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/66c027bd-0003-4873-87e1-6b07de5e487a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.66.1.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:cf:37:39:60:30:87:b0:13:aa:26:ef:2a:8d:c7:b2:68:2d: 6f:a0:a2:8d:71:f5:ea:25:f2:71:fd:c9:56:8b:5a:b4:1e:11: e3:e8:04:34:69:33:b4:6f:ee:2b:cf:5e:25:c4:67:73:0d:e8: ed:61:77:c3:c6:62:15:23:0d:be:71:f1:ae:21:fb:2e:fa:65: cd:48:96:cc:cc:4a:53:bd:c6:54:6c:f1:db:68:6e:5c:42:95: 58:f4:97:d4:38:78:7b:d6:c3:25:e6:70:5b:f8:4a:92:5f:9b: c7:6b:7d:bb:64:8f:63:f3:b5:90:fd:17:1a:2a:31:43:3f:83: a1:44:bd:eb:c3:36:fc:2c:d9:18:ab:07:ec:6c:c3:75:71:39: f3:ae:69:92:2b:cf:7a:7d:b4:a3:1a:ab:81:36:76:3a:86:c0: e9:da:d7:72:28:6f:33:46:f3:f0:6e:68:c7:0a:4e:e4:aa:b9: 06:c5:8b:a9:63:f5:69:56:63:34:ee:b4:8a:ae:c2:4b:16:1b: 5b:48:88:4c:d5:06:3c:68:0f:d3:5b:b5:e0:f0:cc:36:e5:02: c7:d6:21:fd:03:c4:f7:4e:67:19:c9:5f:0e:e1:11:61:25:69: ae:57:1f:89:b1:7d:97:c2:cc:c2:45:d3:0a:b1:39:0d:e2:51: d4:a3:87:86 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVKQc5pg5waHSJs61M9zPRVHWAVwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTU1MDA4WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNmYzNTVlYjFiMmJjM2IyNDRmYjViMjc5ZTJjMTAwNjJk ZTJlNDBlNGE1OTUxMTFmZjc0MWE2ODMxNzU3NGM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3eCfAoWzmY77UefBPrxp4Tsj2LhjnV+GUiGYVzqYV+Y/N AlVZIYr5UqmDxGLtpnr++FNd9HyX44wBaeAY126P1VxGD38bSLxWGzsGjz+a14z6 Ca0WQ2pLNC6ZipZifciZm0C+mabBSZUNgpZGwoTG3ms7oUT0QQnWb0tOPMxlZLmd AsyQ4mXozqb1+rfKjmxpUf0UgaHIkOQBE5oZexXp4HBbSyFh41lx3u/ehZIJQh0t 7ZiknpXoIAtvCtQebpYiynZiHmMo5KqcWmDIDfOk29O/10abzl/mbTzXBl7vJUB8 oG5qoVsVmL8ZgB4qmUJwYTPXfwEvjK2f+VFgd+cNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAfbiZXSqBA6YjoKrM6y1S+NWNdkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY2YzAyN2JkLTAwMDMtNDg3My04N2UxLTZiMDdkZTVlNDg3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0QgEwDQYJKoZIhvcNAQELBQADggEBAEzPNzlgMIewE6om7yqNx7JoLW+g oo1x9eol8nH9yVaLWrQeEePoBDRpM7Rv7ivPXiXEZ3MN6O1hd8PGYhUjDb5x8a4h +y76Zc1IlszMSlO9xlRs8dtoblxClVj0l9Q4eHvWwyXmcFv4SpJfm8drfbtkj2Pz tZD9FxoqMUM/g6FEvevDNvws2RirB+xsw3VxOfOuaZIrz3p9tKMaq4E2djqGwOna 13IobzNG8/BuaMcKTuSquQbFi6lj9WlWYzTutIquwksWG1tIiEzVBjxoD9NbteDw zDblAsfWIf0DxPdOZxnJXw7hEWElaa5XH4mxfZfCzMJF0wqxOQ3iUdSjh4Y= -----END CERTIFICATE-----Generated at Tue Aug 5 16:41:23 2025 by rpki-client