$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1cc563b-3ad8-4c2f-9f0e-dae5ff843492.roa File: e1cc563b-3ad8-4c2f-9f0e-dae5ff843492.roa (raw, json) Hash identifier: ByZOVJV85J7AWYjyXh1T80wFXcvtCoWv3JURv8DqOEc= Subject key identifier: FF:5C:CA:10:CE:CC:A9:84:C8:C0:5F:43:D9:18:84:20:13:61:A1:BF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7C02BB7936B94C03AC869A413023B9BFED3C3380 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1cc563b-3ad8-4c2f-9f0e-dae5ff843492.roa Signing time: Fri 11 Jul 2025 17:11:48 +0000 ROA not before: Fri 11 Jul 2025 17:11:48 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.95.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:02:bb:79:36:b9:4c:03:ac:86:9a:41:30:23:b9:bf:ed:3c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:11:48 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=fa9662a7fb8e0429edfc08ba44fca98348d801cbc2cb7b97df63c51d5f6b4d52, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:24:12:c8:2f:4c:19:8f:d2:d2:db:77:94:0b: ba:bd:70:f0:36:01:50:8c:59:cb:eb:37:dd:95:08: 7d:9a:f1:c0:4f:d1:89:4a:6b:e5:31:04:ab:bc:d5: 3f:52:50:26:4b:76:62:fd:e4:ba:59:ab:bb:1c:98: 6d:6a:a5:ab:85:e2:7b:a9:47:21:cc:bd:6e:4e:0a: 56:6b:74:3c:81:0f:14:ae:ac:4c:30:a6:65:10:8e: 84:f6:c6:85:8d:8f:88:23:3e:c8:4b:75:0f:46:cf: de:ae:23:d1:e4:2c:ea:c0:e7:5e:b9:07:ff:b0:e5: 8e:37:47:ed:c3:5a:f9:3d:5b:1d:ea:46:4d:aa:4e: 29:d9:1c:4b:71:6d:5b:fd:c3:01:09:3a:3b:b4:3e: 6c:2d:f1:76:4d:e8:a7:a2:90:96:c9:6d:48:b7:2f: eb:cf:5d:6c:ee:2f:23:59:da:49:8f:07:cd:a8:10: 9f:02:29:b0:37:19:88:98:22:36:27:25:63:1d:39: f6:83:e7:2c:f7:e6:da:df:6d:a1:a6:68:60:2c:47: aa:04:55:74:b9:d6:7b:2a:38:e0:b0:d2:73:fb:16: fa:fc:95:a7:8c:e1:2a:c2:31:57:5d:04:ce:b5:f4: e5:c4:e9:da:9f:05:05:b1:00:6e:6d:4b:a5:96:ce: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5C:CA:10:CE:CC:A9:84:C8:C0:5F:43:D9:18:84:20:13:61:A1:BF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e1cc563b-3ad8-4c2f-9f0e-dae5ff843492.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.48.0/22 Signature Algorithm: sha256WithRSAEncryption 94:8d:e7:4f:7d:af:c1:e2:44:b9:cb:f5:6b:37:20:9d:d6:bc: be:e0:95:bd:82:33:79:57:75:68:e4:44:3b:6b:d6:dc:05:9d: 9a:b2:1c:90:80:d3:8a:03:fc:54:28:f8:27:10:9a:22:a5:4b: b4:7e:09:1c:37:ff:a3:e0:a7:c1:fa:62:b7:ac:96:0f:f4:4d: 46:32:5c:ad:65:89:23:bf:53:44:46:51:77:31:7f:73:8a:44: 47:3d:3d:d0:df:7d:2a:1f:51:d4:09:a0:08:e8:28:6b:b1:96: 2c:bd:8c:ff:38:da:71:df:8d:51:fd:a7:e3:b0:e4:17:ca:af: 95:0b:0b:6c:48:3a:e9:8a:23:ee:7e:cc:a3:79:64:77:f4:c1: 42:9e:bc:f0:fd:b1:16:65:59:6e:6d:2b:e9:64:0b:9e:ec:7f: 66:e5:f5:46:9d:6c:9d:9f:5c:6c:3a:89:2d:f1:73:cf:15:79: ad:de:23:99:ce:a3:18:ca:a5:bc:18:e4:62:6e:e8:9b:08:2d: 04:b4:12:98:c0:db:33:7b:91:ca:a6:6a:32:15:fd:8b:8b:b6: 3f:6e:3e:ce:45:df:d3:47:a0:54:27:e5:02:23:9a:6b:bb:80: 12:bc:c6:5b:41:35:96:96:37:d7:30:60:9a:7b:c2:a0:88:7f: 83:73:3f:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfAK7eTa5TAOshppBMCO5v+08M4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTcxMTQ4WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTk2NjJhN2ZiOGUwNDI5ZWRmYzA4YmE0NGZjYTk4MzQ4 ZDgwMWNiYzJjYjdiOTdkZjYzYzUxZDVmNmI0ZDUyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcJBLIL0wZj9LS23eUC7q9cPA2AVCMWcvrN92VCH2a8cBP 0YlKa+UxBKu81T9SUCZLdmL95LpZq7scmG1qpauF4nupRyHMvW5OClZrdDyBDxSu rEwwpmUQjoT2xoWNj4gjPshLdQ9Gz96uI9HkLOrA5165B/+w5Y43R+3DWvk9Wx3q Rk2qTinZHEtxbVv9wwEJOju0Pmwt8XZN6KeikJbJbUi3L+vPXWzuLyNZ2kmPB82o EJ8CKbA3GYiYIjYnJWMdOfaD5yz35trfbaGmaGAsR6oEVXS51nsqOOCw0nP7Fvr8 laeM4SrCMVddBM619OXE6dqfBQWxAG5tS6WWzo8hAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/1zKEM7MqYTIwF9D2RiEIBNhob8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UxY2M1NjNiLTNhZDgtNGMyZi05ZjBlLWRhZTVmZjg0MzQ5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI0XzAwDQYJKoZIhvcNAQELBQADggEBAJSN5099r8HiRLnL9Ws3IJ3WvL7g lb2CM3lXdWjkRDtr1twFnZqyHJCA04oD/FQo+CcQmiKlS7R+CRw3/6Pgp8H6Yres lg/0TUYyXK1liSO/U0RGUXcxf3OKREc9PdDffSofUdQJoAjoKGuxliy9jP842nHf jVH9p+Ow5BfKr5ULC2xIOumKI+5+zKN5ZHf0wUKevPD9sRZlWW5tK+lkC57sf2bl 9UadbJ2fXGw6iS3xc88Vea3eI5nOoxjKpbwY5GJu6JsILQS0EpjA2zN7kcqmajIV /YuLtj9uPs5F39NHoFQn5QIjmmu7gBK8xltBNZaWN9cwYJp7wqCIf4NzP1M= -----END CERTIFICATE-----Generated at Mon Aug 4 21:32:42 2025 by rpki-client