$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d83ccb9-235d-4d5f-b16d-2876fd015ece.roa File: 1d83ccb9-235d-4d5f-b16d-2876fd015ece.roa (raw, json) Hash identifier: ka9kDuVDRfjVjFchI60H3QK0YH3bUOsFEyAlcZBFn/s= Subject key identifier: 10:7F:99:8E:01:EB:FE:81:BF:76:6A:1A:F9:2C:8E:26:2F:0A:AC:77 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 612168B1939A974C337443150E54F01B40455277 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d83ccb9-235d-4d5f-b16d-2876fd015ece.roa Signing time: Tue 19 Aug 2025 15:50:22 +0000 ROA not before: Tue 19 Aug 2025 15:50:22 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.86.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:21:68:b1:93:9a:97:4c:33:74:43:15:0e:54:f0:1b:40:45:52:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:50:22 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=6fe74b0b3e86eb622525ab75f42d31d964ac41711201dc7cb6ea65b70be8ff63, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:10:ac:c5:64:17:25:6c:dd:be:c9:8a:28:3b: 19:e6:d5:d7:8e:ce:1f:cb:d6:90:7d:d8:75:3d:83: db:5f:4a:53:18:3e:30:dc:dc:ff:a0:42:3c:9b:96: 90:06:04:ed:d0:c5:e9:c4:77:fd:f6:24:19:9c:c7: d4:42:88:9b:50:01:72:7c:91:a5:e8:aa:ef:c0:80: 02:63:39:be:57:61:58:05:db:da:0b:87:f2:61:e5: 8e:32:9b:12:30:aa:c9:e0:d1:cd:00:0c:6e:38:5d: a6:74:95:1d:f3:dc:8d:34:cb:91:a5:e2:e1:d4:d1: d6:35:7b:55:17:5c:fc:d6:52:0e:6c:8a:14:23:e8: 2e:cc:0f:1b:e4:e5:ee:05:42:c3:1a:a5:32:2e:7f: c4:a0:57:c5:61:d5:bc:ac:2c:da:51:66:a7:c4:14: 18:50:f8:76:c0:0d:45:65:5d:f1:f1:39:e5:e9:19: b2:5f:f4:ea:5c:45:11:6b:c5:34:d6:d6:a4:8c:c4: 46:e5:ab:f9:7a:11:e0:bc:f7:93:fd:1a:54:31:55: 7a:3e:03:1a:d1:b4:bb:e8:f4:85:8e:32:a8:2f:eb: 36:a0:b4:e9:90:24:83:d8:cf:1f:ed:43:63:aa:0c: 4e:70:d8:45:72:d6:ff:17:af:89:3e:4b:bf:46:95: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7F:99:8E:01:EB:FE:81:BF:76:6A:1A:F9:2C:8E:26:2F:0A:AC:77 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d83ccb9-235d-4d5f-b16d-2876fd015ece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.86.0.0/15 Signature Algorithm: sha256WithRSAEncryption 05:e5:40:dc:17:df:16:37:f6:52:c7:c8:78:62:a8:f6:b3:29: e0:51:8b:09:88:77:51:76:75:c5:f2:3a:26:d9:44:18:e6:0f: f7:2d:15:b7:27:29:5a:22:88:d6:3b:41:f3:22:59:5b:be:69: 9f:bb:51:c9:39:d4:3c:1e:5b:e2:9b:b4:44:f4:ff:bd:12:42: 23:96:6b:10:9b:4d:10:cf:b3:06:85:e4:f2:41:26:24:33:26: 1b:46:1b:d1:5c:15:bf:f6:58:2f:37:a9:62:89:0f:b8:89:23: e4:c3:83:93:91:93:27:ee:40:4e:16:e9:b1:44:57:99:95:ca: f4:7c:80:26:1c:ce:47:24:7e:55:94:fa:3a:0e:e5:0a:80:21: 06:40:0d:aa:91:dc:0f:d5:72:42:7b:d4:63:a3:16:cb:4d:43: a2:6b:23:33:49:b3:03:9a:62:95:29:69:ef:b9:2d:92:de:6d: 7d:e2:d1:90:d8:30:52:02:6e:57:22:99:85:f0:23:41:42:23: 16:41:de:ad:06:8f:cf:d3:3f:84:4d:f9:f3:f5:68:ca:5a:df: f8:f3:65:c3:64:b4:ae:ff:97:5c:17:e9:03:a6:b0:87:03:41: e0:5d:ae:d7:60:d3:dc:00:31:79:dd:f1:43:dc:a4:16:fc:07: 75:ab:60:46 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUYSFosZOal0wzdEMVDlTwG0BFUncwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTU1MDIyWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmU3NGIwYjNlODZlYjYyMjUyNWFiNzVmNDJkMzFkOTY0 YWM0MTcxMTIwMWRjN2NiNmVhNjViNzBiZThmZjYzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0EKzFZBclbN2+yYooOxnm1deOzh/L1pB92HU9g9tfSlMY PjDc3P+gQjyblpAGBO3QxenEd/32JBmcx9RCiJtQAXJ8kaXoqu/AgAJjOb5XYVgF 29oLh/Jh5Y4ymxIwqsng0c0ADG44XaZ0lR3z3I00y5Gl4uHU0dY1e1UXXPzWUg5s ihQj6C7MDxvk5e4FQsMapTIuf8SgV8Vh1bysLNpRZqfEFBhQ+HbADUVlXfHxOeXp GbJf9OpcRRFrxTTW1qSMxEblq/l6EeC895P9GlQxVXo+AxrRtLvo9IWOMqgv6zag tOmQJIPYzx/tQ2OqDE5w2EVy1v8Xr4k+S79GlaPZAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEH+ZjgHr/oG/dmoa+SyOJi8KrHcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFkODNjY2I5LTIzNWQtNGQ1Zi1iMTZkLTI4NzZmZDAxNWVjZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0VjANBgkqhkiG9w0BAQsFAAOCAQEABeVA3BffFjf2UsfIeGKo9rMp4FGL CYh3UXZ1xfI6JtlEGOYP9y0VtycpWiKI1jtB8yJZW75pn7tRyTnUPB5b4pu0RPT/ vRJCI5ZrEJtNEM+zBoXk8kEmJDMmG0Yb0VwVv/ZYLzepYokPuIkj5MODk5GTJ+5A ThbpsURXmZXK9HyAJhzORyR+VZT6Og7lCoAhBkANqpHcD9VyQnvUY6MWy01Domsj M0mzA5pilSlp77ktkt5tfeLRkNgwUgJuVyKZhfAjQUIjFkHerQaPz9M/hE358/Vo ylrf+PNlw2S0rv+XXBfpA6awhwNB4F2u12DT3AAxed3xQ9ykFvwHdatgRg== -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:29 2025 by rpki-client