$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/814145e8-de24-4865-86b4-acd1c9db28f0.roa File: 814145e8-de24-4865-86b4-acd1c9db28f0.roa (raw, json) Hash identifier: gOBKPoVz8HAaU3AxhYPT1WnbKq9A/wgMrCPwwoxUWqo= Subject key identifier: 16:EB:DE:2D:F0:35:13:21:2B:59:94:97:AA:B5:79:A5:5F:B0:A4:53 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 09BBA88752A237A9402C4A883C331FCA051F32E1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/814145e8-de24-4865-86b4-acd1c9db28f0.roa Signing time: Fri 11 Jul 2025 17:01:18 +0000 ROA not before: Fri 11 Jul 2025 17:01:18 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.223.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bb:a8:87:52:a2:37:a9:40:2c:4a:88:3c:33:1f:ca:05:1f:32:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:01:18 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=652c9428d317244ff1fc312e7cb7389dd3055fd6384dbff64041c4de3563de08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:6d:a4:f6:84:46:30:09:b7:7e:41:2e:7f: 51:75:a7:db:08:14:71:07:1e:93:12:68:23:ba:86: 82:93:36:d9:ec:5c:5b:b9:9d:58:53:c1:45:93:8a: e2:93:20:7f:e1:75:28:44:25:16:51:29:66:e3:01: 35:14:9f:1f:f9:bb:07:94:5a:63:e9:78:63:14:dc: 0b:af:72:b1:d3:fb:cf:bf:54:a0:2e:03:b5:d0:a1: e4:53:64:44:14:88:74:c7:3a:d6:53:5e:0e:1b:e5: cb:82:a1:2b:e3:83:c8:f8:87:2e:62:22:42:89:75: b7:58:68:79:df:65:af:cd:8d:a4:a7:a4:e7:83:0f: df:78:0a:7a:50:3d:dd:e5:04:de:cb:59:7c:ed:15: 26:3e:bf:82:0f:ce:ac:57:61:4d:5b:c1:cb:af:01: 7d:b8:8e:28:cd:18:23:87:e9:94:c5:1d:81:eb:24: 1f:18:37:26:09:95:9b:c0:81:cd:30:91:e9:97:8d: fa:43:3d:f5:30:77:33:44:a0:25:34:b5:60:4b:99: 99:11:94:00:47:c8:7f:2e:97:9b:a1:b9:5f:98:ca: 10:72:cf:08:72:6b:c4:fb:4b:fd:06:14:ff:f1:6d: 29:44:a4:5c:6f:1c:99:8f:dd:25:87:6f:0d:72:7e: 96:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:DE:2D:F0:35:13:21:2B:59:94:97:AA:B5:79:A5:5F:B0:A4:53 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/814145e8-de24-4865-86b4-acd1c9db28f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.223.128.0/18 Signature Algorithm: sha256WithRSAEncryption 57:92:75:63:e1:4c:6c:d2:15:5a:38:4c:f3:26:62:58:9b:ef: 2e:d4:09:ba:d0:77:54:0e:7f:7e:2d:49:48:f6:54:a0:67:db: b9:13:2c:2e:8c:39:d1:fd:78:20:eb:57:f6:e8:b8:60:38:45: 2b:5d:1f:86:54:e5:fe:8d:f0:7f:61:cb:a5:e4:b8:82:ad:f4: 80:86:05:e7:2c:c4:8f:70:17:96:e0:51:47:98:f4:4d:97:50: 47:48:64:69:67:6f:83:4b:69:63:89:e9:28:16:09:65:a3:58: df:51:1a:59:ce:aa:75:0a:9d:9d:0f:f1:8b:c0:6a:0f:97:51: 62:c2:69:e1:89:3b:f0:3c:af:69:61:f3:e2:09:e7:4e:56:bb: da:00:73:55:52:a6:a0:4b:7e:8a:22:79:89:44:a7:bb:b0:e2: 20:58:58:eb:59:8b:f3:4b:9d:ae:57:ac:13:35:06:0b:d2:82: b1:90:61:c0:55:27:d0:16:64:6d:62:9a:bd:cd:06:53:8a:b5: 96:c8:00:98:6c:01:d7:80:b2:a1:d1:eb:cd:8f:ff:b2:f1:b5: 74:ac:e1:5f:e5:88:e2:e4:cc:c3:e3:92:23:01:62:90:55:f7: 3d:67:5c:fd:ea:69:39:ec:ae:1c:c9:ba:97:df:b2:da:f0:69: 48:f9:42:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCbuoh1KiN6lALEqIPDMfygUfMuEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTcwMTE4WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTJjOTQyOGQzMTcyNDRmZjFmYzMxMmU3Y2I3Mzg5ZGQz MDU1ZmQ2Mzg0ZGJmZjY0MDQxYzRkZTM1NjNkZTA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCt0m2k9oRGMAm3fkEuf1F1p9sIFHEHHpMSaCO6hoKTNtns XFu5nVhTwUWTiuKTIH/hdShEJRZRKWbjATUUnx/5uweUWmPpeGMU3AuvcrHT+8+/ VKAuA7XQoeRTZEQUiHTHOtZTXg4b5cuCoSvjg8j4hy5iIkKJdbdYaHnfZa/NjaSn pOeDD994CnpQPd3lBN7LWXztFSY+v4IPzqxXYU1bwcuvAX24jijNGCOH6ZTFHYHr JB8YNyYJlZvAgc0wkemXjfpDPfUwdzNEoCU0tWBLmZkRlABHyH8ul5uhuV+YyhBy zwhya8T7S/0GFP/xbSlEpFxvHJmP3SWHbw1yfpaZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFuveLfA1EyErWZSXqrV5pV+wpFMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgxNDE0NWU4LWRlMjQtNDg2NS04NmI0LWFjZDFjOWRiMjhmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY034AwDQYJKoZIhvcNAQELBQADggEBAFeSdWPhTGzSFVo4TPMmYlib7y7U CbrQd1QOf34tSUj2VKBn27kTLC6MOdH9eCDrV/bouGA4RStdH4ZU5f6N8H9hy6Xk uIKt9ICGBecsxI9wF5bgUUeY9E2XUEdIZGlnb4NLaWOJ6SgWCWWjWN9RGlnOqnUK nZ0P8YvAag+XUWLCaeGJO/A8r2lh8+IJ505Wu9oAc1VSpqBLfooieYlEp7uw4iBY WOtZi/NLna5XrBM1BgvSgrGQYcBVJ9AWZG1imr3NBlOKtZbIAJhsAdeAsqHR682P /7LxtXSs4V/liOLkzMPjkiMBYpBV9z1nXP3qaTnsrhzJupffstrwaUj5Quk= -----END CERTIFICATE-----Generated at Tue Aug 5 16:36:22 2025 by rpki-client