$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cab1659-de7c-4978-90e0-3df497387c42.roa File: 8cab1659-de7c-4978-90e0-3df497387c42.roa (raw, json) Hash identifier: ve1iTDNoYBNwIUw6E3rJxfLRdZIBGollqsc6oHe5WuI= Subject key identifier: 1F:C9:E6:27:27:91:69:A0:17:5B:CB:D4:9C:F8:D7:9B:D9:83:7F:6E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51D542D26D280A52CBD949B3AB87475616771060 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cab1659-de7c-4978-90e0-3df497387c42.roa Signing time: Sat 23 Aug 2025 00:51:28 +0000 ROA not before: Sat 23 Aug 2025 00:51:28 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.88.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:d5:42:d2:6d:28:0a:52:cb:d9:49:b3:ab:87:47:56:16:77:10:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 23 00:51:28 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=2a452f2d6c3e98daa0848ccd4a07503559b0f0c8a098e01933cb93a7e83ebb09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:59:63:43:b0:17:42:89:24:9d:f0:09:e6: 65:7d:24:76:1c:03:21:d8:50:d6:62:b4:f1:d8:1f: a6:f7:57:e5:83:95:70:b7:34:8d:c0:02:a0:8d:36: 54:38:b7:a4:a4:a9:03:41:88:fb:3f:75:6f:d2:77: a2:2a:f7:20:aa:8d:5f:b8:d2:d4:02:00:23:d7:93: 18:24:0e:24:c9:2b:3f:79:01:16:cf:79:91:e5:20: 03:e7:55:2e:bc:b9:9e:a8:1f:a8:de:e4:8d:c4:db: 0b:dc:ac:c7:b4:56:74:04:3c:70:49:55:8a:bd:58: 15:c3:98:ec:e5:c0:37:1e:47:45:6c:4d:31:8d:12: 33:83:1f:00:15:89:01:3b:4b:55:83:c8:7b:02:bf: a8:6a:96:fa:07:78:e4:71:17:eb:98:fb:21:b6:41: 9a:2b:0e:0c:17:25:f8:11:e3:46:34:0a:dd:2a:5c: 9b:0f:10:80:ab:b5:58:27:b4:b2:6a:b9:de:05:46: da:43:4f:a0:c4:ec:09:a6:aa:10:f6:7a:c4:7c:84: ea:e9:6a:21:03:6b:5d:ae:db:b4:bc:2e:f0:eb:5f: 54:2c:99:c3:2a:7e:1a:fb:8e:c5:6f:7b:37:93:1d: 09:0f:6e:4c:64:00:25:9d:17:6d:5a:56:1a:4a:f0: 4b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C9:E6:27:27:91:69:A0:17:5B:CB:D4:9C:F8:D7:9B:D9:83:7F:6E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cab1659-de7c-4978-90e0-3df497387c42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.88.0.0/13 Signature Algorithm: sha256WithRSAEncryption 87:d8:17:7c:9a:7f:36:d7:b0:80:c4:eb:4b:27:fd:4a:33:8a: 69:1d:b1:33:09:c3:65:3f:cd:3d:78:93:47:81:1b:ef:5a:cb: 35:3a:9c:56:c8:c3:e4:76:6d:e2:61:15:34:f4:f9:e2:8a:e3: b6:3b:75:af:de:9c:b1:7e:a2:14:5d:de:5f:01:cd:9a:c9:a9: 33:0d:e7:01:d5:5a:69:b9:8c:8f:8b:53:75:75:9d:74:fa:b3: 22:c1:ac:6d:ab:48:e7:d6:96:03:c6:8b:97:bb:9f:a7:19:e0: db:7d:c0:5b:5e:80:8b:d3:f0:8b:4c:26:94:23:03:20:f0:2e: bf:ee:45:35:7c:0c:fe:e0:f1:a3:e7:cb:c6:51:a3:ae:2f:ec: 3f:34:1f:d7:c0:4e:0f:6b:7a:6c:27:63:36:bd:34:3b:bd:61: 7e:4a:52:87:ba:5c:0b:58:01:f0:02:0a:d6:f8:5a:bd:22:64: 4e:6c:7e:d5:9a:f1:b6:fa:e6:34:e1:a5:1e:ea:7c:29:49:4e: 26:18:9b:b9:9f:eb:21:71:69:e6:6e:f4:30:eb:87:10:56:70: fc:ff:69:93:e0:2c:64:23:4e:e4:b1:8c:c9:68:87:73:8d:f5: 68:9a:bd:c1:db:7c:91:85:c9:13:e8:7b:4e:d8:f7:4e:4c:57: b5:58:14:00 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUdVC0m0oClLL2Umzq4dHVhZ3EGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIzMDA1MTI4WhcNMjUwOTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTQ1MmYyZDZjM2U5OGRhYTA4NDhjY2Q0YTA3NTAzNTU5 YjBmMGM4YTA5OGUwMTkzM2NiOTNhN2U4M2ViYjA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4blljQ7AXQokknfAJ5mV9JHYcAyHYUNZitPHYH6b3V+WD lXC3NI3AAqCNNlQ4t6SkqQNBiPs/dW/Sd6Iq9yCqjV+40tQCACPXkxgkDiTJKz95 ARbPeZHlIAPnVS68uZ6oH6je5I3E2wvcrMe0VnQEPHBJVYq9WBXDmOzlwDceR0Vs TTGNEjODHwAViQE7S1WDyHsCv6hqlvoHeORxF+uY+yG2QZorDgwXJfgR40Y0Ct0q XJsPEICrtVgntLJqud4FRtpDT6DE7AmmqhD2esR8hOrpaiEDa12u27S8LvDrX1Qs mcMqfhr7jsVvezeTHQkPbkxkACWdF21aVhpK8EsNAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUH8nmJyeRaaAXW8vUnPjXm9mDf24wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhjYWIxNjU5LWRlN2MtNDk3OC05MGUwLTNkZjQ5NzM4N2M0Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwM0WDANBgkqhkiG9w0BAQsFAAOCAQEAh9gXfJp/NtewgMTrSyf9SjOKaR2x MwnDZT/NPXiTR4Eb71rLNTqcVsjD5HZt4mEVNPT54orjtjt1r96csX6iFF3eXwHN msmpMw3nAdVaabmMj4tTdXWddPqzIsGsbatI59aWA8aLl7ufpxng233AW16Ai9Pw i0wmlCMDIPAuv+5FNXwM/uDxo+fLxlGjri/sPzQf18BOD2t6bCdjNr00O71hfkpS h7pcC1gB8AIK1vhavSJkTmx+1ZrxtvrmNOGlHup8KUlOJhibuZ/rIXFp5m70MOuH EFZw/P9pk+AsZCNO5LGMyWiHc431aJq9wdt8kYXJE+h7Ttj3TkxXtVgUAA== -----END CERTIFICATE-----Generated at Sat Aug 23 08:12:31 2025 by rpki-client