$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e882c43-09db-4157-90bf-9655bea65ce5.roa File: 2e882c43-09db-4157-90bf-9655bea65ce5.roa (raw, json) Hash identifier: o1SViLQ05BZARz6CiFiD0WEc+07qk0CUisEA+xz895I= Subject key identifier: 73:DF:2E:42:DD:2C:33:01:5A:DA:F4:F0:B3:E9:B3:07:0C:30:11:72 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6FA3087B07108CE42AC0116331CA918C6EA5C32A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e882c43-09db-4157-90bf-9655bea65ce5.roa Signing time: Tue 29 Jul 2025 15:20:57 +0000 ROA not before: Tue 29 Jul 2025 15:20:57 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.41.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a3:08:7b:07:10:8c:e4:2a:c0:11:63:31:ca:91:8c:6e:a5:c3:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:20:57 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=77ab473397d2c8f4d57d4411b6e60d4852a05d2b1a162f80b6b2c5547ae08a9c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:3f:ed:1f:1e:6f:88:d4:e7:f6:31:86:f0: 50:83:86:3a:c9:e9:bc:f1:2a:5f:56:3f:54:ad:95: 57:a6:4b:ae:3e:b1:b9:e3:1b:0a:6b:19:c0:81:1c: 83:94:c6:a2:2c:19:a9:d3:52:35:97:60:14:c9:fc: 5b:12:08:8c:b2:85:0b:a4:68:f1:65:28:0e:79:91: 6c:64:dc:de:28:9f:45:99:48:e2:9b:4d:fa:22:0c: 27:8e:89:a0:e5:4c:52:cf:65:50:68:35:6a:f4:26: a7:e3:b7:43:eb:df:80:94:2e:49:9c:7a:64:76:a6: d2:6f:4b:df:70:e9:98:4a:75:a7:52:0f:fd:1d:89: f2:17:22:91:3d:8a:63:b1:d8:da:32:c5:93:55:dc: dd:ea:60:0d:5d:9f:50:f5:92:8f:5d:82:e5:84:ce: cf:d1:4f:2a:08:1a:29:73:8b:b1:00:59:a0:4f:26: 7b:6b:10:e3:0c:cc:a4:a4:f5:0f:7f:2d:93:9b:25: ec:de:2c:a1:6e:0f:dc:e9:76:e6:fb:7d:79:43:d6: 2b:a5:7d:e9:9e:0f:a8:31:56:86:2b:35:de:8e:d5: a8:40:e9:5c:54:39:74:7d:4e:e0:d5:73:17:8d:47: 7f:80:66:ea:5f:09:46:73:eb:3e:fd:54:09:ee:e7: 5d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:DF:2E:42:DD:2C:33:01:5A:DA:F4:F0:B3:E9:B3:07:0C:30:11:72 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2e882c43-09db-4157-90bf-9655bea65ce5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.41.64.0/18 Signature Algorithm: sha256WithRSAEncryption b0:03:63:4a:83:9d:2f:47:57:2b:7e:9b:31:f2:bb:35:04:b4: 11:7c:25:bc:49:e9:02:4f:3b:12:e3:6c:04:16:84:7b:8d:38: 30:e4:e1:f6:b3:4f:2c:63:9e:73:05:97:61:2b:9e:17:48:4d: c7:64:35:7e:5a:21:12:00:7f:cb:0d:32:d4:77:b0:09:b3:7b: e2:ba:d1:55:e7:99:a7:c2:61:87:c5:c2:33:89:5c:c8:94:60: 52:31:0d:c7:1c:12:59:20:88:5b:e9:49:68:aa:e8:55:b2:f2: 78:06:b6:ec:89:12:d9:36:c1:67:63:03:28:1f:f6:1a:96:b4: 54:a3:e4:29:c2:9d:a9:53:c9:03:d5:37:4f:8d:67:10:7e:be: bd:9b:5c:8a:e0:ee:8b:0e:8b:c3:b2:bf:62:aa:0d:27:0e:70: 30:7d:af:cd:ea:62:8f:ac:40:b8:9f:6a:18:ee:ac:bd:5e:58: 2b:bd:e6:1a:45:50:d8:ef:c5:ef:43:71:8b:00:e5:40:75:84: ae:f8:69:44:60:26:b9:46:29:a8:52:60:f0:d1:8c:62:86:59: 1b:0d:42:72:df:c7:94:75:22:7c:89:75:05:87:89:cd:c0:53: 8c:e2:37:59:8d:de:77:15:9d:19:36:e8:cc:a9:e6:34:c7:86: b3:aa:ad:20 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb6MIewcQjOQqwBFjMcqRjG6lwyowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTUyMDU3WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2FiNDczMzk3ZDJjOGY0ZDU3ZDQ0MTFiNmU2MGQ0ODUy YTA1ZDJiMWExNjJmODBiNmIyYzU1NDdhZTA4YTljMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDnrT/tHx5viNTn9jGG8FCDhjrJ6bzxKl9WP1StlVemS64+ sbnjGwprGcCBHIOUxqIsGanTUjWXYBTJ/FsSCIyyhQukaPFlKA55kWxk3N4on0WZ SOKbTfoiDCeOiaDlTFLPZVBoNWr0Jqfjt0Pr34CULkmcemR2ptJvS99w6ZhKdadS D/0difIXIpE9imOx2NoyxZNV3N3qYA1dn1D1ko9dguWEzs/RTyoIGilzi7EAWaBP JntrEOMMzKSk9Q9/LZObJezeLKFuD9zpdub7fXlD1iulfemeD6gxVoYrNd6O1ahA 6VxUOXR9TuDVcxeNR3+AZupfCUZz6z79VAnu5103AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUc98uQt0sMwFa2vTws+mzBwwwEXIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJlODgyYzQzLTA5ZGItNDE1Ny05MGJmLTk2NTViZWE2NWNlNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY0KUAwDQYJKoZIhvcNAQELBQADggEBALADY0qDnS9HVyt+mzHyuzUEtBF8 JbxJ6QJPOxLjbAQWhHuNODDk4fazTyxjnnMFl2ErnhdITcdkNX5aIRIAf8sNMtR3 sAmze+K60VXnmafCYYfFwjOJXMiUYFIxDcccElkgiFvpSWiq6FWy8ngGtuyJEtk2 wWdjAygf9hqWtFSj5CnCnalTyQPVN0+NZxB+vr2bXIrg7osOi8Oyv2KqDScOcDB9 r83qYo+sQLifahjurL1eWCu95hpFUNjvxe9DcYsA5UB1hK74aURgJrlGKahSYPDR jGKGWRsNQnLfx5R1InyJdQWHic3AU4ziN1mN3ncVnRk26Myp5jTHhrOqrSA= -----END CERTIFICATE-----Generated at Mon Aug 4 21:39:44 2025 by rpki-client