$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fc79b27-b011-4257-9fc4-f1610de29aab.roa File: 1fc79b27-b011-4257-9fc4-f1610de29aab.roa (raw, json) Hash identifier: Grynd5d/oNzwnVims47/5TFkuIbHKvBrrBthLY7VjUk= Subject key identifier: 87:85:76:62:81:9F:96:7F:E6:6B:05:3A:93:06:CE:FD:FC:07:15:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A3ED898EE67DBB5F3A101C51277C2D18F9CB13A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fc79b27-b011-4257-9fc4-f1610de29aab.roa Signing time: Fri 25 Jul 2025 15:51:06 +0000 ROA not before: Fri 25 Jul 2025 15:51:06 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.76.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:3e:d8:98:ee:67:db:b5:f3:a1:01:c5:12:77:c2:d1:8f:9c:b1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 15:51:06 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=5263b3bfd0814a4d975cbefccfc3e1f0618b89c97eb9b6d22510d92e86de6fc5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:0d:95:78:33:98:42:a0:d4:fb:c1:3c:7b: bc:83:4f:e3:01:4b:0f:94:77:74:d6:ac:8c:7c:8f: 9c:83:a9:a6:3b:58:da:1a:fb:dd:45:50:5d:84:99: 97:d0:cc:37:cb:f8:51:32:54:fc:65:e9:44:0f:8d: 61:e7:82:2f:63:1e:1a:ba:17:9a:f9:4d:e1:57:9b: f3:3a:40:f9:45:b3:de:23:57:c4:39:f3:69:7b:7c: d9:78:27:a4:9a:97:8b:84:cc:fe:1a:96:e5:95:b5: 48:e7:2b:08:c4:b5:94:ab:34:ec:7d:10:40:dc:6e: c9:a4:e5:b7:c3:bb:84:bd:db:4f:0c:7f:ab:23:22: b8:de:21:fd:92:d4:e1:21:73:db:8a:1f:9d:e7:00: 83:53:0f:57:38:98:7b:e1:7a:65:1e:f0:ac:58:c0: e3:b1:fe:a6:6e:02:03:ea:33:33:5f:6c:6d:f4:db: cb:47:57:16:29:48:df:77:74:19:4a:49:69:ef:d1: c5:b0:d5:c6:78:57:f2:34:2b:67:58:67:bd:27:68: 6d:50:a0:44:6a:a1:51:c5:85:2f:0b:dd:72:9a:c1: 10:48:8e:36:04:d6:91:98:1f:2a:14:e9:f8:2e:1e: 97:ea:f4:09:ef:38:f5:5d:36:a1:07:f0:ae:9a:b3: e6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:85:76:62:81:9F:96:7F:E6:6B:05:3A:93:06:CE:FD:FC:07:15:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1fc79b27-b011-4257-9fc4-f1610de29aab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.76.128.0/17 Signature Algorithm: sha256WithRSAEncryption 81:13:4a:05:57:6c:a1:e2:f6:49:2c:f5:a7:d8:e3:77:29:1c: aa:cc:a5:58:2f:98:6a:1b:29:80:ab:f2:65:91:59:34:03:5e: 9c:bc:98:cc:64:bb:b9:7d:b7:5a:79:86:de:ee:ac:f0:9d:4e: d8:11:76:3a:17:a8:fd:2a:ab:6d:4c:c2:db:e1:c4:2c:fa:09: f8:6f:34:84:c7:49:0f:ed:bd:5c:7a:c3:63:35:4b:bb:a8:5d: 34:98:7f:6f:26:b3:8b:34:20:1a:ac:11:41:d3:02:d0:cf:f3: 44:49:15:cd:c6:18:2e:7a:ee:93:2b:17:68:03:4a:a2:d4:90: 0b:66:b2:23:8e:36:29:0b:56:5f:85:c0:b9:a5:c3:84:20:36: 55:ad:b0:0a:6e:1d:43:e9:7b:5a:3e:44:63:f5:d4:35:1e:72: 8a:7e:4c:37:0e:17:bf:4d:21:88:45:04:b5:8c:80:6a:c1:53: 76:a8:52:ea:47:ba:60:29:9e:66:87:d1:eb:e1:68:50:3c:80: 3c:86:2e:cb:99:4b:ad:2f:55:e9:25:38:5b:5c:15:f6:d0:d3: a7:b5:7a:a6:81:8f:8c:ad:3d:92:ed:f3:5f:40:fd:f2:85:e3: 5b:73:77:58:41:bb:28:66:38:4a:ee:d6:9d:7d:1f:d7:d4:df: e8:64:b0:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWj7YmO5n27XzoQHFEnfC0Y+csTowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTU1MTA2WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjYzYjNiZmQwODE0YTRkOTc1Y2JlZmNjZmMzZTFmMDYx OGI4OWM5N2ViOWI2ZDIyNTEwZDkyZTg2ZGU2ZmM1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3zg2VeDOYQqDU+8E8e7yDT+MBSw+Ud3TWrIx8j5yDqaY7 WNoa+91FUF2EmZfQzDfL+FEyVPxl6UQPjWHngi9jHhq6F5r5TeFXm/M6QPlFs94j V8Q582l7fNl4J6Sal4uEzP4aluWVtUjnKwjEtZSrNOx9EEDcbsmk5bfDu4S9208M f6sjIrjeIf2S1OEhc9uKH53nAINTD1c4mHvhemUe8KxYwOOx/qZuAgPqMzNfbG30 28tHVxYpSN93dBlKSWnv0cWw1cZ4V/I0K2dYZ70naG1QoERqoVHFhS8L3XKawRBI jjYE1pGYHyoU6fguHpfq9AnvOPVdNqEH8K6as+axAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUh4V2YoGfln/mawU6kwbO/fwHFfkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmYzc5YjI3LWIwMTEtNDI1Ny05ZmM0LWYxNjEwZGUyOWFhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc0TIAwDQYJKoZIhvcNAQELBQADggEBAIETSgVXbKHi9kks9afY43cpHKrM pVgvmGobKYCr8mWRWTQDXpy8mMxku7l9t1p5ht7urPCdTtgRdjoXqP0qq21Mwtvh xCz6CfhvNITHSQ/tvVx6w2M1S7uoXTSYf28ms4s0IBqsEUHTAtDP80RJFc3GGC56 7pMrF2gDSqLUkAtmsiOONikLVl+FwLmlw4QgNlWtsApuHUPpe1o+RGP11DUecop+ TDcOF79NIYhFBLWMgGrBU3aoUupHumApnmaH0evhaFA8gDyGLsuZS60vVeklOFtc FfbQ06e1eqaBj4ytPZLt819A/fKF41tzd1hBuyhmOEru1p19H9fU3+hksI4= -----END CERTIFICATE-----Generated at Tue Aug 5 08:26:50 2025 by rpki-client