$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e78508b-66cd-4d2d-acce-b9c2220d481d.roa File: 1e78508b-66cd-4d2d-acce-b9c2220d481d.roa (raw, json) Hash identifier: w58uQve8tXEnbncEPdHnI93zQWahFGAocdvRLDO0XC4= Subject key identifier: 20:92:E1:DF:E9:A5:92:86:D6:0D:C7:E4:97:13:03:98:98:D2:57:C0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D54DE0AEF3581C4AE2A45CAEEA19728D4671E7A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e78508b-66cd-4d2d-acce-b9c2220d481d.roa Signing time: Tue 05 Aug 2025 17:11:03 +0000 ROA not before: Tue 05 Aug 2025 17:11:03 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.95.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:54:de:0a:ef:35:81:c4:ae:2a:45:ca:ee:a1:97:28:d4:67:1e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:11:03 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=c07a313aac284dbb8bb4e13066b835f65e971ef63c8d02e46e7e39e8f429d6af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9c:91:84:b2:31:91:a6:59:bd:bb:30:f1:7e: ca:5b:f9:31:b9:10:94:8e:24:ec:1b:30:e5:0a:f6: 3b:7e:f6:78:77:c6:1e:20:9f:29:03:57:d8:c4:41: f9:aa:d4:d4:d2:d6:59:31:b1:88:4d:79:b9:f5:fe: 34:c3:4c:ce:b1:26:59:3d:57:7a:71:0b:a1:a6:83: f0:ae:b2:f9:80:57:a2:ca:fb:13:d9:60:8d:5a:cc: 19:ef:1b:9a:3a:2d:c1:d8:b2:df:15:b5:7d:f9:01: 24:61:17:52:64:0f:97:f3:0b:ec:3a:54:53:50:66: c8:0a:1f:24:1f:11:87:b2:3f:85:16:4f:d8:42:3e: ad:50:2d:1e:e5:7b:f7:83:a9:91:00:ad:96:4a:36: 3c:57:6e:5c:12:af:29:8e:27:6e:c7:04:1f:d7:0e: 7c:2f:91:9b:7d:08:1f:84:fc:b2:cf:38:66:e3:5f: bc:1a:6f:21:76:05:34:21:6e:43:44:94:56:58:fb: 59:f9:13:66:cf:c8:e3:34:aa:c0:75:12:11:12:2e: 78:b1:69:9f:82:cc:b9:48:a2:4c:97:b1:a2:ed:22: a5:25:11:34:d3:bd:8e:42:65:ab:00:91:de:db:b5: 0b:f2:6e:64:b7:4c:64:9d:49:74:ea:93:09:c7:9c: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:92:E1:DF:E9:A5:92:86:D6:0D:C7:E4:97:13:03:98:98:D2:57:C0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e78508b-66cd-4d2d-acce-b9c2220d481d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.95.108.0/23 Signature Algorithm: sha256WithRSAEncryption 74:f5:9e:e0:27:12:da:62:b4:a8:de:6c:89:34:b6:15:cc:83: df:35:c5:93:66:12:4b:df:fb:49:0f:29:c3:f2:bc:43:20:0d: 16:3f:29:63:88:83:38:4a:dc:ca:de:21:d9:a9:53:d6:fc:bb: 0c:b1:74:a5:c7:1b:37:79:62:8d:cc:a0:47:58:7b:b6:bd:3d: b6:24:44:5c:b0:86:80:68:5c:76:50:9b:25:9a:75:7f:86:47: 21:14:6e:d2:e0:0b:3d:45:97:66:40:3b:55:45:f4:d9:40:0d: c4:d0:81:76:03:0c:ba:39:e5:ad:7b:29:24:62:3a:8f:bc:8f: 7c:71:33:5c:75:1a:d4:34:64:a9:ba:a6:d0:16:56:6a:e9:73: b4:96:2a:a7:fd:b0:d0:1b:9b:f5:8c:a7:ac:cb:f2:95:2c:ee: 87:92:9c:0a:55:b0:6e:83:04:1a:34:9e:ed:a6:ce:ca:30:76: d6:7a:00:98:80:d1:1a:3d:a2:cf:1c:fc:d3:c7:e3:0a:c4:7b: dd:48:de:9f:2b:c2:45:cf:e9:b0:fb:bd:9e:1b:69:fe:51:08: ee:31:ce:59:f5:cf:23:e0:1d:67:49:2a:3c:48:8d:85:6b:aa: 38:66:42:7e:ed:3b:59:3f:34:23:26:7a:b1:f1:25:5e:9e:ca: 7d:ab:bc:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHVTeCu81gcSuKkXK7qGXKNRnHnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTcxMTAzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMDdhMzEzYWFjMjg0ZGJiOGJiNGUxMzA2NmI4MzVmNjVl OTcxZWY2M2M4ZDAyZTQ2ZTdlMzllOGY0MjlkNmFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8nJGEsjGRplm9uzDxfspb+TG5EJSOJOwbMOUK9jt+9nh3 xh4gnykDV9jEQfmq1NTS1lkxsYhNebn1/jTDTM6xJlk9V3pxC6Gmg/CusvmAV6LK +xPZYI1azBnvG5o6LcHYst8VtX35ASRhF1JkD5fzC+w6VFNQZsgKHyQfEYeyP4UW T9hCPq1QLR7le/eDqZEArZZKNjxXblwSrymOJ27HBB/XDnwvkZt9CB+E/LLPOGbj X7wabyF2BTQhbkNElFZY+1n5E2bPyOM0qsB1EhESLnixaZ+CzLlIokyXsaLtIqUl ETTTvY5CZasAkd7btQvybmS3TGSdSXTqkwnHnCd3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIJLh3+mlkobWDcfklxMDmJjSV8AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFlNzg1MDhiLTY2Y2QtNGQyZC1hY2NlLWI5YzIyMjBkNDgxZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE0X2wwDQYJKoZIhvcNAQELBQADggEBAHT1nuAnEtpitKjebIk0thXMg981 xZNmEkvf+0kPKcPyvEMgDRY/KWOIgzhK3MreIdmpU9b8uwyxdKXHGzd5Yo3MoEdY e7a9PbYkRFywhoBoXHZQmyWadX+GRyEUbtLgCz1Fl2ZAO1VF9NlADcTQgXYDDLo5 5a17KSRiOo+8j3xxM1x1GtQ0ZKm6ptAWVmrpc7SWKqf9sNAbm/WMp6zL8pUs7oeS nApVsG6DBBo0nu2mzsowdtZ6AJiA0Ro9os8c/NPH4wrEe91I3p8rwkXP6bD7vZ4b af5RCO4xzln1zyPgHWdJKjxIjYVrqjhmQn7tO1k/NCMmerHxJV6eyn2rvLE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:38 2025 by rpki-client