$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad3e6b6b-4645-458a-9ce0-0d3280cc1a7e.roa File: ad3e6b6b-4645-458a-9ce0-0d3280cc1a7e.roa (raw, json) Hash identifier: qY7ihPVcqYsvRHeHdG39fPee/PpurarmwNiQWWBAono= Subject key identifier: 1E:CD:57:42:81:9E:44:7A:46:D4:5D:82:7E:26:3A:86:90:FB:32:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 56632556DE6DAAA04AB7FC4040AA45DD154A5BBB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad3e6b6b-4645-458a-9ce0-0d3280cc1a7e.roa Signing time: Tue 29 Jul 2025 15:30:18 +0000 ROA not before: Tue 29 Jul 2025 15:30:18 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:63:25:56:de:6d:aa:a0:4a:b7:fc:40:40:aa:45:dd:15:4a:5b:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:30:18 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=15c1e3fe4b42ffaaa15d3bc3ebeb9094295bed17bce40fd6074d0d6eada6d923, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:07:b1:a7:28:c8:01:b2:10:77:bd:1f:5e:6f: 17:75:1d:16:fd:e7:da:b7:dd:40:a1:21:a8:82:5d: 54:c2:ac:91:2b:9e:7d:ed:33:99:dc:28:fd:64:5a: fb:e8:af:1c:59:4e:98:5b:52:21:e3:fe:12:bc:9a: 0f:06:6e:7f:ac:64:1c:46:ca:09:01:c3:f0:4a:8c: 93:13:19:a8:a3:4f:b4:51:f4:ad:09:60:bd:32:6e: cc:c7:dc:0c:c5:70:1d:08:0d:c4:a4:3b:16:e8:40: 80:50:9e:d8:64:95:9f:96:92:20:c8:46:28:d9:e0: 54:33:74:28:f8:d1:99:0b:cd:69:34:74:75:bc:b0: 18:5b:fe:9d:88:b6:33:04:5e:03:f3:90:d2:ce:6b: 8d:e4:9f:69:2d:90:b0:49:85:bf:52:bd:c6:44:7b: be:d6:44:96:c0:c8:cd:bf:6e:2b:6c:4b:16:09:01: 3c:fd:13:c7:bb:46:98:95:55:fe:c5:66:92:7e:74: 20:67:b2:5d:f2:17:2f:97:3f:b8:80:3e:fa:06:10: aa:2f:56:51:78:65:5c:b4:04:a5:dc:cf:26:a5:20: 52:65:dd:43:c6:62:6c:32:15:44:8b:cc:17:8e:e0: cb:da:88:66:e7:5e:b9:80:80:1c:56:ce:e7:42:95: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CD:57:42:81:9E:44:7A:46:D4:5D:82:7E:26:3A:86:90:FB:32:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ad3e6b6b-4645-458a-9ce0-0d3280cc1a7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.255.0/24 Signature Algorithm: sha256WithRSAEncryption 05:58:59:ba:71:24:e2:3c:b2:f7:bf:66:c4:93:64:db:28:23: 17:47:b9:cd:2a:78:55:6d:ca:70:60:19:c4:44:24:5a:e9:93: 07:42:eb:9d:93:40:97:9f:b4:ec:0b:f1:b8:f1:a3:84:05:dc: 0b:65:ae:54:63:64:81:af:eb:d4:b9:3f:e7:07:49:13:c3:a9: cf:94:57:6e:24:2a:5c:cd:70:f4:0e:35:d5:c7:88:7a:4a:41: 06:9f:1a:d7:cd:82:1f:0b:e8:fd:3e:c3:97:08:d4:25:09:29: 19:e3:40:76:ae:73:41:dd:67:cf:30:fa:c7:63:4a:06:8d:6a: 84:4e:b3:88:b6:9b:17:87:15:5b:69:f9:c4:22:3e:7a:43:cf: ed:68:70:ce:b3:db:fc:d6:c2:a5:34:0a:4b:77:da:00:95:00: b3:dd:10:1c:9e:52:bf:9e:15:f4:f0:06:74:9b:d6:f1:ac:57: 2d:a4:2c:8b:e4:c5:9f:20:2d:f5:e4:4c:34:ab:e9:5d:50:6e: c2:36:06:47:27:20:8e:f6:19:f6:d1:bf:22:f1:a5:7c:10:71: cc:6d:16:39:26:17:98:5c:df:42:f2:d1:8e:b3:20:9b:ed:75: 64:2c:96:73:9c:fa:9b:91:b6:94:b2:4f:c5:38:0f:52:e8:1e: 6a:af:e6:08 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVmMlVt5tqqBKt/xAQKpF3RVKW7swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTUzMDE4WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWMxZTNmZTRiNDJmZmFhYTE1ZDNiYzNlYmViOTA5NDI5 NWJlZDE3YmNlNDBmZDYwNzRkMGQ2ZWFkYTZkOTIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfB7GnKMgBshB3vR9ebxd1HRb959q33UChIaiCXVTCrJEr nn3tM5ncKP1kWvvorxxZTphbUiHj/hK8mg8Gbn+sZBxGygkBw/BKjJMTGaijT7RR 9K0JYL0ybszH3AzFcB0IDcSkOxboQIBQnthklZ+WkiDIRijZ4FQzdCj40ZkLzWk0 dHW8sBhb/p2ItjMEXgPzkNLOa43kn2ktkLBJhb9SvcZEe77WRJbAyM2/bitsSxYJ ATz9E8e7RpiVVf7FZpJ+dCBnsl3yFy+XP7iAPvoGEKovVlF4ZVy0BKXczyalIFJl 3UPGYmwyFUSLzBeO4MvaiGbnXrmAgBxWzudClUkpAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHs1XQoGeRHpG1F2CfiY6hpD7MgowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FkM2U2YjZiLTQ2NDUtNDU4YS05Y2UwLTBkMzI4MGNjMWE3ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0X/8wDQYJKoZIhvcNAQELBQADggEBAAVYWbpxJOI8sve/ZsSTZNsoIxdH uc0qeFVtynBgGcREJFrpkwdC652TQJeftOwL8bjxo4QF3AtlrlRjZIGv69S5P+cH SRPDqc+UV24kKlzNcPQONdXHiHpKQQafGtfNgh8L6P0+w5cI1CUJKRnjQHauc0Hd Z88w+sdjSgaNaoROs4i2mxeHFVtp+cQiPnpDz+1ocM6z2/zWwqU0Ckt32gCVALPd EByeUr+eFfTwBnSb1vGsVy2kLIvkxZ8gLfXkTDSr6V1QbsI2BkcnII72GfbRvyLx pXwQccxtFjkmF5hc30Ly0Y6zIJvtdWQslnOc+puRtpSyT8U4D1LoHmqv5gg= -----END CERTIFICATE-----Generated at Mon Aug 4 21:49:49 2025 by rpki-client