$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/513aab4b-5a3c-4079-bd59-5fb9f38144e4.roa File: 513aab4b-5a3c-4079-bd59-5fb9f38144e4.roa (raw, json) Hash identifier: 7dCTcDHdANRhP1sTp8ltftPaFKf9bgnsL0DB/PvLFEk= Subject key identifier: 9E:3F:C8:89:84:57:64:A0:A3:3A:D3:C8:6B:75:B3:2C:B0:1F:57:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C02FF4F50C2554178FB84977885983A3EFBBD65 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/513aab4b-5a3c-4079-bd59-5fb9f38144e4.roa Signing time: Fri 19 Sep 2025 00:57:49 +0000 ROA not before: Fri 19 Sep 2025 00:57:49 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:02:ff:4f:50:c2:55:41:78:fb:84:97:78:85:98:3a:3e:fb:bd:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:57:49 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=76b38973ca684ca830bb461adb5e543038782589956dabd34e29cc4dc58e64db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f4:ce:1d:e8:bf:e4:d6:de:6b:44:03:b8:00: 93:53:37:8c:4d:bb:41:ec:ae:fd:5f:3e:58:9c:93: 55:7c:87:3a:cf:8a:5b:ec:4c:8b:a9:96:bc:7f:96: 5e:1d:37:41:7f:bf:b7:07:1e:da:17:94:bd:e8:e4: b9:e6:79:4b:04:98:65:57:45:8a:45:19:22:62:77: c5:c7:7e:d4:37:25:e6:ae:26:a2:6c:07:92:c2:15: 72:51:1a:c5:33:ff:1b:96:99:fa:43:b8:86:c2:9c: a7:3e:7b:2d:14:53:18:66:cd:b8:de:6c:cc:d9:93: 4b:8b:64:a6:1f:b6:eb:08:82:8b:e3:f5:9a:c1:de: 25:f9:72:b2:13:6a:e7:15:10:9d:b8:d9:0a:79:db: ba:08:ad:e1:59:a4:38:62:79:64:bc:f5:ca:d8:30: 48:b2:2b:35:d0:73:5c:37:7c:60:b2:06:f3:ec:ff: 40:db:08:ba:23:c3:c8:2a:5a:cc:9b:fd:93:35:19: 96:51:1b:9d:35:da:64:f5:84:96:15:30:be:21:d4: ad:ab:80:f0:05:5f:b8:c8:08:af:73:60:91:f4:bc: 62:7e:3b:33:87:01:6d:d4:68:08:2b:80:d5:66:6f: ca:cf:38:f6:ea:fe:3d:a6:b3:06:3c:1b:c6:3b:ba: 64:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:3F:C8:89:84:57:64:A0:A3:3A:D3:C8:6B:75:B3:2C:B0:1F:57:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/513aab4b-5a3c-4079-bd59-5fb9f38144e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.240.0/24 Signature Algorithm: sha256WithRSAEncryption 97:f9:9a:aa:af:a0:eb:66:3c:85:a3:3b:f0:9b:2c:22:76:b9: 06:60:30:23:cf:66:9e:a2:74:60:5e:34:56:58:56:43:87:e6: 21:9d:83:9a:d8:2a:34:e3:b9:eb:95:b2:d7:20:db:d7:b7:f1: 6c:f8:be:30:80:3d:37:6c:9a:51:2d:d5:22:4b:89:03:ca:3b: 27:50:97:19:0a:71:76:75:ef:82:98:f7:31:67:51:31:95:be: eb:ef:b5:66:70:c8:65:f4:e5:ad:fe:81:17:96:ba:0e:ff:d7: 5e:31:47:d3:98:4c:fc:03:57:6f:b2:7d:41:2d:0b:ca:13:7d: 3e:08:b6:97:a2:4a:97:4b:b6:9a:e1:df:0e:1e:79:f7:81:86: dc:a5:45:d3:37:57:90:48:6c:87:1a:d0:9a:46:33:48:d6:82: 75:8c:f6:7a:e2:94:4d:22:71:8c:49:81:1f:22:a3:a0:cb:19: 64:8e:79:e7:fb:84:9a:03:b2:39:b2:ab:8f:cd:d0:42:f1:0a: 92:82:4c:89:f0:6a:4b:74:a0:3c:7b:b6:a4:24:06:57:c1:9c: db:ba:ca:19:51:ec:d5:7b:c4:95:85:49:1d:2a:ca:19:24:00: ed:22:08:9b:7a:6e:9f:18:0e:d9:6d:59:9e:61:75:9e:1c:38: d3:23:24:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPAL/T1DCVUF4+4SXeIWYOj77vWUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDA1NzQ5WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmIzODk3M2NhNjg0Y2E4MzBiYjQ2MWFkYjVlNTQzMDM4 NzgyNTg5OTU2ZGFiZDM0ZTI5Y2M0ZGM1OGU2NGRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCD9M4d6L/k1t5rRAO4AJNTN4xNu0Hsrv1fPlick1V8hzrP ilvsTIuplrx/ll4dN0F/v7cHHtoXlL3o5LnmeUsEmGVXRYpFGSJid8XHftQ3Jeau JqJsB5LCFXJRGsUz/xuWmfpDuIbCnKc+ey0UUxhmzbjebMzZk0uLZKYftusIgovj 9ZrB3iX5crITaucVEJ242Qp527oIreFZpDhieWS89crYMEiyKzXQc1w3fGCyBvPs /0DbCLojw8gqWsyb/ZM1GZZRG5012mT1hJYVML4h1K2rgPAFX7jICK9zYJH0vGJ+ OzOHAW3UaAgrgNVmb8rPOPbq/j2mswY8G8Y7umT5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnj/IiYRXZKCjOtPIa3WzLLAfVw8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUxM2FhYjRiLTVhM2MtNDA3OS1iZDU5LTVmYjlmMzgxNDRlNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fPAwDQYJKoZIhvcNAQELBQADggEBAJf5mqqvoOtmPIWjO/CbLCJ2uQZg MCPPZp6idGBeNFZYVkOH5iGdg5rYKjTjueuVstcg29e38Wz4vjCAPTdsmlEt1SJL iQPKOydQlxkKcXZ174KY9zFnUTGVvuvvtWZwyGX05a3+gReWug7/114xR9OYTPwD V2+yfUEtC8oTfT4ItpeiSpdLtprh3w4eefeBhtylRdM3V5BIbIca0JpGM0jWgnWM 9nrilE0icYxJgR8io6DLGWSOeef7hJoDsjmyq4/N0ELxCpKCTInwakt0oDx7tqQk BlfBnNu6yhlR7NV7xJWFSR0qyhkkAO0iCJt6bp8YDtltWZ5hdZ4cONMjJP8= -----END CERTIFICATE-----Generated at Fri Sep 19 04:37:56 2025 by rpki-client