$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c151a2c7-3538-4f4f-a829-119c02bbf7b0.roa File: c151a2c7-3538-4f4f-a829-119c02bbf7b0.roa (raw, json) Hash identifier: 49Xo/2WZOzFytMpOfK2Yl021oo1I+tdSzAnrgR/t8Ko= Subject key identifier: 2C:7A:7E:DF:A5:EF:31:C1:15:27:26:A4:BD:5D:99:62:93:D7:45:5A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1128C965FFAB957E47A6F89A1C56DE6CBA9008C2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c151a2c7-3538-4f4f-a829-119c02bbf7b0.roa Signing time: Mon 21 Jul 2025 16:10:06 +0000 ROA not before: Mon 21 Jul 2025 16:10:06 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.93.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:28:c9:65:ff:ab:95:7e:47:a6:f8:9a:1c:56:de:6c:ba:90:08:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 21 16:10:06 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=150dd98b93c5399a6b226c04bb59263d547991e6637789f3b0c85ff9d6fbb0b2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:9f:cd:ac:21:25:f7:d2:93:88:02:25:7e: 27:b9:ab:9a:e3:9a:5e:e0:e7:cc:1d:e3:88:54:2e: f9:52:d2:30:da:af:d0:9a:59:a5:d8:1a:43:b9:3e: 01:63:fb:5e:fa:e9:65:51:4b:b0:f3:7b:f7:af:84: 0a:83:66:1e:1a:48:90:59:de:c0:d9:d4:4a:d4:69: 77:00:4e:8a:7a:84:65:36:e5:9a:36:03:ff:f5:54: 15:91:cb:b8:06:be:6f:a7:b3:48:32:89:1e:15:c2: 9d:54:0e:5d:38:94:e0:c0:db:44:d9:0f:74:47:37: a8:3e:8f:82:60:ad:ec:74:f3:67:1a:64:4e:59:96: d8:60:c7:bb:b4:a1:48:21:03:b0:3e:77:81:17:7d: 3d:21:45:d8:11:1d:7f:2c:f5:42:03:67:d4:52:0f: f6:de:ab:ed:86:63:0b:cd:99:e7:65:05:34:3b:07: ca:93:b0:2c:86:79:f8:da:dd:9b:2a:24:2e:8f:e9: 1c:ce:cd:73:e6:7b:dc:04:ae:8c:d5:01:d2:b7:0d: e6:e3:09:41:03:39:47:76:af:31:f2:c4:56:d3:6e: 95:50:08:28:0d:b9:f6:5c:7f:1e:ba:68:67:6f:fc: c6:9a:9e:39:2a:ce:03:58:38:c9:3f:70:6d:ca:eb: ee:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7A:7E:DF:A5:EF:31:C1:15:27:26:A4:BD:5D:99:62:93:D7:45:5A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c151a2c7-3538-4f4f-a829-119c02bbf7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.93.37.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:7a:97:8e:be:ee:f0:19:b9:22:ae:75:db:1a:a9:a0:10:28: d9:e8:1d:5e:1f:41:af:bf:56:99:98:8f:6b:e6:2c:8f:dc:9c: 31:61:64:c2:5d:82:7c:19:41:3d:34:c8:b7:f8:1d:19:62:a7: c0:ed:4d:97:5b:52:42:fe:93:4d:7a:a0:7b:62:11:84:52:ef: d4:fd:22:f3:4c:f4:49:9c:21:72:09:bc:9c:5d:ed:f6:a6:22: 62:d7:77:53:b3:d7:ff:cd:0d:78:b0:fd:c8:8d:8c:a2:aa:8a: 4e:f1:8a:a5:d6:c7:ea:32:05:aa:0c:99:87:6e:5d:c5:d2:8c: be:b2:12:1f:c1:19:85:c0:81:75:90:61:02:61:a1:93:85:72: 71:67:d8:01:a4:e2:69:6f:d1:94:c7:66:26:a4:00:ee:bd:13: e3:c7:b6:88:0d:b6:39:33:4e:eb:db:86:0d:ad:ff:d3:f0:84: eb:3b:f9:95:c9:c6:f1:1a:a7:85:32:14:e8:81:7b:10:94:fb: 54:8a:58:1f:fb:6a:82:c8:32:af:9e:bb:14:56:07:9f:a4:d2: f2:bf:1f:5d:84:86:6a:a1:80:5e:90:82:4b:fe:c5:41:2e:54: d4:27:f9:04:6b:0f:19:f2:95:64:4d:07:8d:a7:a7:db:77:62: b9:9a:f0:1e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUESjJZf+rlX5HpviaHFbebLqQCMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzIxMTYxMDA2WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTBkZDk4YjkzYzUzOTlhNmIyMjZjMDRiYjU5MjYzZDU0 Nzk5MWU2NjM3Nzg5ZjNiMGM4NWZmOWQ2ZmJiMGIyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOaJ/NrCEl99KTiAIlfie5q5rjml7g58wd44hULvlS0jDa r9CaWaXYGkO5PgFj+1766WVRS7Dze/evhAqDZh4aSJBZ3sDZ1ErUaXcATop6hGU2 5Zo2A//1VBWRy7gGvm+ns0gyiR4Vwp1UDl04lODA20TZD3RHN6g+j4Jgrex082ca ZE5Zlthgx7u0oUghA7A+d4EXfT0hRdgRHX8s9UIDZ9RSD/beq+2GYwvNmedlBTQ7 B8qTsCyGefja3ZsqJC6P6RzOzXPme9wErozVAdK3DebjCUEDOUd2rzHyxFbTbpVQ CCgNufZcfx66aGdv/MaanjkqzgNYOMk/cG3K6+6tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULHp+36XvMcEVJyakvV2ZYpPXRVowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MxNTFhMmM3LTM1MzgtNGY0Zi1hODI5LTExOWMwMmJiZjdiMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0XSUwDQYJKoZIhvcNAQELBQADggEBAGp6l46+7vAZuSKuddsaqaAQKNno HV4fQa+/VpmYj2vmLI/cnDFhZMJdgnwZQT00yLf4HRlip8DtTZdbUkL+k016oHti EYRS79T9IvNM9EmcIXIJvJxd7famImLXd1Oz1//NDXiw/ciNjKKqik7xiqXWx+oy BaoMmYduXcXSjL6yEh/BGYXAgXWQYQJhoZOFcnFn2AGk4mlv0ZTHZiakAO69E+PH togNtjkzTuvbhg2t/9PwhOs7+ZXJxvEap4UyFOiBexCU+1SKWB/7aoLIMq+euxRW B5+k0vK/H12EhmqhgF6Qgkv+xUEuVNQn+QRrDxnylWRNB42np9t3Yrma8B4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:57:59 2025 by rpki-client