$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfe68d6-b8d6-4c75-ba21-2e98007168ad.roa File: acfe68d6-b8d6-4c75-ba21-2e98007168ad.roa (raw, json) Hash identifier: wDGtNGStfEQmulq5hVOCJuIyoveoBRgcQXu+zVpgGXk= Subject key identifier: 0E:A4:F0:DD:23:4F:FE:88:FA:EE:7E:07:15:BD:4C:B7:F8:32:69:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E0E7C1C01A16CF07427441830FF932E28790EB2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfe68d6-b8d6-4c75-ba21-2e98007168ad.roa Signing time: Fri 22 Aug 2025 00:50:57 +0000 ROA not before: Fri 22 Aug 2025 00:50:57 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 52.90.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:0e:7c:1c:01:a1:6c:f0:74:27:44:18:30:ff:93:2e:28:79:0e:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 22 00:50:57 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=113c6b11df5f1ac25b095903f40c60f45e1bbb544b153536e32f6f9257d41dfc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ab:0c:da:a3:23:b1:55:84:ee:fb:90:d6:97: df:ac:26:05:6c:2c:16:09:51:7f:d0:8e:6f:2c:aa: 29:c0:a8:99:87:20:80:50:ec:f9:9d:67:e5:b9:c9: 0c:55:06:c1:9d:24:62:6d:2e:12:66:d1:4d:48:38: 0c:c8:64:dd:53:62:c5:fe:7b:6f:a0:49:a9:c3:ef: 5b:f4:95:ae:04:d0:88:85:21:9f:80:aa:92:9e:48: 06:e7:3e:7c:01:04:53:39:d2:02:d9:54:b7:21:0c: 74:db:21:6c:ac:66:64:bf:02:81:20:50:68:b2:ad: b0:38:2b:cd:0b:3c:ed:05:16:78:33:36:aa:e5:b9: a0:33:00:f5:32:6e:3a:8d:d2:8b:a9:4b:dd:6c:ad: ab:23:30:42:de:df:70:7a:b1:70:4d:f9:a3:c5:bb: cb:bb:84:fd:be:a1:5f:4f:53:13:d3:80:01:9b:bd: 7b:01:05:f2:b8:68:94:85:0b:ca:3c:43:92:c1:11: f3:f5:b6:5a:37:4d:ad:a5:81:21:bb:42:3c:36:07: 50:f4:b3:7e:fe:6a:08:e7:1e:b7:46:6a:b2:cc:c4: 2f:d8:78:63:54:00:f2:96:4e:16:d7:93:83:ea:de: 78:e1:21:50:de:9c:17:8a:86:21:20:7c:d7:62:98: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A4:F0:DD:23:4F:FE:88:FA:EE:7E:07:15:BD:4C:B7:F8:32:69:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfe68d6-b8d6-4c75-ba21-2e98007168ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.90.0.0/15 Signature Algorithm: sha256WithRSAEncryption 29:52:4d:d8:ca:76:64:54:ac:5f:8b:15:e9:91:59:f9:ce:82: f6:f5:3e:a5:f3:e8:ad:e4:db:ab:07:98:68:75:04:3c:ff:95: 9f:69:87:f7:5e:6c:5a:ed:19:6c:01:4b:fb:02:98:93:07:95: 7d:8e:9f:b5:de:cf:33:68:7a:b8:e1:31:12:67:2b:8c:2a:14: cf:fc:c7:53:d6:7f:38:d2:df:a5:9d:9e:11:05:9e:be:af:b1: e9:42:8e:31:8f:d3:05:26:15:00:bb:34:e8:19:71:53:a2:9f: aa:03:58:40:28:78:2c:62:5d:44:84:a5:ad:f8:7a:b8:3c:2d: 35:ee:ce:cc:ea:b7:ca:55:11:73:af:e5:45:aa:3e:f7:12:37: 72:94:ab:4e:1e:5c:51:d3:75:d4:29:41:25:57:e8:f9:96:97: 56:81:c5:80:b4:8b:ea:ce:73:ef:34:c7:62:f6:a5:84:12:84: 9a:c8:cc:d9:24:8f:02:3e:64:30:4d:d0:88:0d:ef:84:31:de: 8e:44:39:6d:fc:13:14:8a:a3:7f:e7:c7:3e:c5:e8:20:55:b9: 59:33:a7:05:0a:b2:96:6f:4d:bd:84:e0:48:81:74:3d:76:41: 74:39:89:9c:38:16:a7:a7:04:d7:ca:97:95:ea:24:c1:06:73: c0:be:2c:47 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDg58HAGhbPB0J0QYMP+TLih5DrIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIyMDA1MDU3WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AxMTNjNmIxMWRmNWYxYWMyNWIwOTU5MDNmNDBjNjBmNDVl MWJiYjU0NGIxNTM1MzZlMzJmNmY5MjU3ZDQxZGZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDAqwzaoyOxVYTu+5DWl9+sJgVsLBYJUX/Qjm8sqinAqJmH IIBQ7PmdZ+W5yQxVBsGdJGJtLhJm0U1IOAzIZN1TYsX+e2+gSanD71v0la4E0IiF IZ+AqpKeSAbnPnwBBFM50gLZVLchDHTbIWysZmS/AoEgUGiyrbA4K80LPO0FFngz NqrluaAzAPUybjqN0oupS91srasjMELe33B6sXBN+aPFu8u7hP2+oV9PUxPTgAGb vXsBBfK4aJSFC8o8Q5LBEfP1tlo3Ta2lgSG7Qjw2B1D0s37+agjnHrdGarLMxC/Y eGNUAPKWThbXk4Pq3njhIVDenBeKhiEgfNdimCtdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUDqTw3SNP/oj67n4HFb1Mt/gyaWUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjZmU2OGQ2LWI4ZDYtNGM3NS1iYTIxLTJlOTgwMDcxNjhhZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0WjANBgkqhkiG9w0BAQsFAAOCAQEAKVJN2Mp2ZFSsX4sV6ZFZ+c6C9vU+ pfPoreTbqweYaHUEPP+Vn2mH915sWu0ZbAFL+wKYkweVfY6ftd7PM2h6uOExEmcr jCoUz/zHU9Z/ONLfpZ2eEQWevq+x6UKOMY/TBSYVALs06BlxU6KfqgNYQCh4LGJd RISlrfh6uDwtNe7OzOq3ylURc6/lRao+9xI3cpSrTh5cUdN11ClBJVfo+ZaXVoHF gLSL6s5z7zTHYvalhBKEmsjM2SSPAj5kME3QiA3vhDHejkQ5bfwTFIqjf+fHPsXo IFW5WTOnBQqylm9NvYTgSIF0PXZBdDmJnDgWp6cE18qXleokwQZzwL4sRw== -----END CERTIFICATE-----Generated at Sat Aug 23 08:07:22 2025 by rpki-client