$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e202ae42-2c9b-4b35-b659-5feeca0266af.roa File: e202ae42-2c9b-4b35-b659-5feeca0266af.roa (raw, json) Hash identifier: EF1FZjc/VuXEpt73WIqJBEuDX21O6C4uIdPNBlc6Ato= Subject key identifier: 83:0F:DB:C4:9E:7A:B8:39:7D:EE:F0:68:A4:53:9C:84:60:A7:E2:04 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B39BAB1F3F7925AD7424BEF81F9EC04CF4795A8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e202ae42-2c9b-4b35-b659-5feeca0266af.roa Signing time: Fri 22 Aug 2025 00:51:28 +0000 ROA not before: Fri 22 Aug 2025 00:51:28 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 8987 IP address blocks: 52.61.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:39:ba:b1:f3:f7:92:5a:d7:42:4b:ef:81:f9:ec:04:cf:47:95:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 22 00:51:28 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=885e7e279ebf01d245ee925ddc6eab4e8840ce01fa0e5f3cf47cad3c703c5c85, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:ff:12:24:1a:2b:1e:d2:aa:0e:c4:0d:a8: db:4c:4f:ac:ea:92:5d:b8:36:c3:37:a8:17:e1:68: 45:a2:cc:2e:16:aa:2c:ba:3c:30:1f:15:5b:25:98: 73:00:51:69:9c:42:50:4a:5f:1a:72:ab:72:65:3e: b7:2d:6b:07:7e:08:44:a2:84:87:91:ae:7d:1d:54: b1:31:4b:ba:55:85:9e:b7:ac:44:fc:62:a7:8f:7f: fc:f5:47:3c:11:f6:83:bb:63:1c:67:2d:b9:fb:70: 18:d2:df:96:dc:8b:fb:0e:94:ab:34:0b:72:00:43: 7d:6e:a9:42:51:56:7d:1a:32:2c:91:56:42:48:c8: f3:1a:80:9f:95:69:bc:8b:9b:a6:cc:ed:f8:99:47: c4:83:75:72:4f:47:ed:ec:4d:b7:52:9a:f3:3e:c4: d2:b4:d0:a1:5b:fb:b2:03:24:3d:b8:2e:66:55:7a: dc:8d:e0:cd:5f:05:64:ab:ec:f3:3b:2e:6a:06:00: 35:cb:12:c9:d2:fc:e1:f3:10:2f:4b:02:79:28:3e: d7:df:2d:27:af:cc:99:25:f3:d8:e4:1c:7d:50:a6: ca:8b:1e:6b:6f:17:29:61:9c:8d:61:b5:12:e5:aa: 47:62:9d:3d:c1:2d:4e:67:e5:29:17:9e:d1:90:96: 2e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0F:DB:C4:9E:7A:B8:39:7D:EE:F0:68:A4:53:9C:84:60:A7:E2:04 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e202ae42-2c9b-4b35-b659-5feeca0266af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.61.0.0/16 Signature Algorithm: sha256WithRSAEncryption aa:b8:4b:5f:28:cf:cf:ba:3c:da:56:94:39:8a:f3:48:8b:5f: 5d:e7:c6:d5:ad:ed:c1:5e:10:3b:a2:a3:83:f8:af:9d:4f:8a: 3d:f3:de:b0:50:ea:33:17:da:c2:66:6f:29:43:49:12:98:25: 97:cf:5a:a3:ec:4c:0a:c0:aa:2b:b5:b2:90:37:2d:78:a5:9e: 89:3a:83:f5:2e:74:ee:2e:f2:2a:f8:da:a4:38:ce:6f:84:8e: 3a:bf:39:34:1c:09:4c:2b:ab:32:c7:fa:61:ce:16:3a:b8:47: cc:a0:09:6b:f0:62:0f:2b:ae:e1:06:02:80:c6:5f:b2:b5:4f: c4:4e:2d:f7:d3:1d:3a:87:2c:62:07:7b:53:75:ca:c0:31:2b: ee:15:17:58:40:63:b3:0e:6c:2d:37:13:f8:41:27:17:50:c5: f7:15:fa:0f:8e:05:ea:fa:81:48:6d:43:b6:b5:cb:b8:c9:a8: 7b:96:d4:37:f9:22:89:9d:e6:48:4d:82:bf:f1:a5:4c:26:05: 5b:71:16:71:27:02:2c:42:f6:08:6b:a7:11:fd:60:6e:f5:07: f1:10:d6:e9:c6:0e:b8:5c:86:d0:ba:6f:2a:de:69:e0:14:bd: ea:b7:f5:2b:e2:5c:27:07:30:f7:20:3a:85:67:1a:25:34:d7: 5d:20:77:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKzm6sfP3klrXQkvvgfnsBM9HlagwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIyMDA1MTI4WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A4ODVlN2UyNzllYmYwMWQyNDVlZTkyNWRkYzZlYWI0ZTg4 NDBjZTAxZmEwZTVmM2NmNDdjYWQzYzcwM2M1Yzg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCcKf8SJBorHtKqDsQNqNtMT6zqkl24NsM3qBfhaEWizC4W qiy6PDAfFVslmHMAUWmcQlBKXxpyq3JlPrctawd+CESihIeRrn0dVLExS7pVhZ63 rET8YqePf/z1RzwR9oO7YxxnLbn7cBjS35bci/sOlKs0C3IAQ31uqUJRVn0aMiyR VkJIyPMagJ+VabyLm6bM7fiZR8SDdXJPR+3sTbdSmvM+xNK00KFb+7IDJD24LmZV etyN4M1fBWSr7PM7LmoGADXLEsnS/OHzEC9LAnkoPtffLSevzJkl89jkHH1QpsqL HmtvFylhnI1htRLlqkdinT3BLU5n5SkXntGQli57AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgw/bxJ56uDl97vBopFOchGCn4gQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UyMDJhZTQyLTJjOWItNGIzNS1iNjU5LTVmZWVjYTAyNjZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA0PTANBgkqhkiG9w0BAQsFAAOCAQEAqrhLXyjPz7o82laUOYrzSItfXefG 1a3twV4QO6Kjg/ivnU+KPfPesFDqMxfawmZvKUNJEpgll89ao+xMCsCqK7WykDct eKWeiTqD9S507i7yKvjapDjOb4SOOr85NBwJTCurMsf6Yc4WOrhHzKAJa/BiDyuu 4QYCgMZfsrVPxE4t99MdOocsYgd7U3XKwDEr7hUXWEBjsw5sLTcT+EEnF1DF9xX6 D44F6vqBSG1DtrXLuMmoe5bUN/kiiZ3mSE2Cv/GlTCYFW3EWcScCLEL2CGunEf1g bvUH8RDW6cYOuFyG0LpvKt5p4BS96rf1K+JcJwcw9yA6hWcaJTTXXSB3FA== -----END CERTIFICATE-----Generated at Sat Aug 23 13:18:33 2025 by rpki-client