$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53eaccbd-d110-425d-abff-5d3b35eacb6e.roa File: 53eaccbd-d110-425d-abff-5d3b35eacb6e.roa (raw, json) Hash identifier: 67mdyR2NqqAx6kL82YTOPS9lpba1zGyDyza0Qf5uAVk= Subject key identifier: A2:CC:32:B0:0B:7D:A8:1B:D9:1A:69:CE:9F:46:BF:E8:72:58:C7:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1AD34D4E8978E19AA1BF78B4BD4C0F523D82FA8C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53eaccbd-d110-425d-abff-5d3b35eacb6e.roa Signing time: Fri 19 Sep 2025 00:53:44 +0000 ROA not before: Fri 19 Sep 2025 00:53:44 +0000 ROA not after: Fri 24 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.124.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d3:4d:4e:89:78:e1:9a:a1:bf:78:b4:bd:4c:0f:52:3d:82:fa:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 19 00:53:44 2025 GMT Not After : Oct 24 23:59:59 2025 GMT Subject: serialNumber=fc0d435d2e8a9753e159adc3af7f0106fa153fc775bd3f08eee252148f417c50, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b5:98:42:75:81:57:ba:48:0c:d4:e7:c1:e5: ef:b1:a7:36:a4:62:9a:83:44:99:ca:80:ec:fa:ab: 6e:bb:9b:ca:30:c2:f9:ce:f4:8d:9f:eb:f4:79:62: 2d:41:43:8e:51:d7:31:45:c0:20:2f:0a:0d:13:a5: b4:1c:d7:85:67:11:d9:0a:3a:72:c6:6f:88:19:ec: b4:be:78:8f:4e:7a:01:35:22:49:ec:8a:44:56:0a: af:a3:5e:21:f7:56:14:be:e7:e8:9a:d2:d9:fb:38: 8e:9f:f3:9f:d2:ac:af:86:36:ef:b7:de:4a:95:d4: 5c:24:64:79:63:f0:94:0c:ca:16:e3:d1:d0:d4:8d: be:a5:d1:87:13:2d:65:62:1c:dd:32:ef:93:f5:e7: a2:d7:83:6b:32:68:d0:3c:e3:df:68:60:35:62:55: e2:49:99:50:e8:3c:1b:8d:fd:85:40:2c:38:42:b4: a5:eb:45:2c:6a:15:b5:f4:d3:ee:af:e1:b6:8b:55: 28:86:8f:72:73:f7:c6:25:d0:a7:7c:85:ac:a9:c1: 5e:b8:30:4a:8d:d2:0d:eb:22:97:c7:9e:d9:71:85: f0:1c:fc:b0:13:01:72:51:33:91:e8:0b:07:b2:c4: 6c:d6:3a:0f:d3:34:49:c4:25:2f:07:54:56:16:19: 43:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CC:32:B0:0B:7D:A8:1B:D9:1A:69:CE:9F:46:BF:E8:72:58:C7:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53eaccbd-d110-425d-abff-5d3b35eacb6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.124.154.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:72:16:7d:4b:27:07:1e:cb:74:cb:7e:51:05:13:67:1b:65: 11:db:72:f1:38:10:ee:a1:e5:17:5d:e8:00:be:03:8d:09:8b: af:0a:7d:83:58:28:5b:7b:88:88:dc:b1:02:41:d1:42:97:4e: ff:1d:3f:2e:07:18:d2:2e:d9:bb:23:5e:e2:76:7c:5e:be:b4: 3b:87:fb:09:1e:e1:0f:5d:6b:ae:db:16:25:54:2a:c3:1c:47: 28:2f:f3:84:a5:31:ab:14:f5:93:e5:e6:64:f0:c9:ce:58:41: ff:49:3f:ae:35:b7:02:fc:31:27:82:21:f3:03:ee:a6:4c:f1: 51:3d:1b:60:34:98:0a:28:cc:89:7a:89:cd:8d:d0:50:24:4b: b4:11:9f:16:1a:17:51:56:96:35:68:f8:34:d7:7a:17:4c:7f: 03:ba:3f:5b:24:97:8f:60:04:bd:9d:fd:c6:37:50:c5:c5:4a: 12:ff:2a:3e:0f:1e:ce:e2:04:48:cc:70:95:82:41:a5:df:49: b0:0c:88:2b:63:dc:ca:c8:cc:9e:fb:90:1e:70:1b:43:15:19: 03:10:22:d8:2c:cb:6b:4d:36:94:39:a6:f1:81:8c:49:b3:f9: f2:cf:a1:1b:5a:4a:48:e4:38:df:71:b1:8d:27:9e:3b:7f:08: 64:1b:5b:e6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGtNNTol44Zqhv3i0vUwPUj2C+owwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTE5MDA1MzQ0WhcNMjUxMDI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzBkNDM1ZDJlOGE5NzUzZTE1OWFkYzNhZjdmMDEwNmZh MTUzZmM3NzViZDNmMDhlZWUyNTIxNDhmNDE3YzUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCtZhCdYFXukgM1OfB5e+xpzakYpqDRJnKgOz6q267m8ow wvnO9I2f6/R5Yi1BQ45R1zFFwCAvCg0TpbQc14VnEdkKOnLGb4gZ7LS+eI9OegE1 IknsikRWCq+jXiH3VhS+5+ia0tn7OI6f85/SrK+GNu+33kqV1FwkZHlj8JQMyhbj 0dDUjb6l0YcTLWViHN0y75P156LXg2syaNA8499oYDViVeJJmVDoPBuN/YVALDhC tKXrRSxqFbX00+6v4baLVSiGj3Jz98Yl0Kd8haypwV64MEqN0g3rIpfHntlxhfAc /LATAXJRM5HoCweyxGzWOg/TNEnEJS8HVFYWGUMVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoswysAt9qBvZGmnOn0a/6HJYxxgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUzZWFjY2JkLWQxMTAtNDI1ZC1hYmZmLTVkM2IzNWVhY2I2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA0fJowDQYJKoZIhvcNAQELBQADggEBAE9yFn1LJwcey3TLflEFE2cbZRHb cvE4EO6h5Rdd6AC+A40Ji68KfYNYKFt7iIjcsQJB0UKXTv8dPy4HGNIu2bsjXuJ2 fF6+tDuH+wke4Q9da67bFiVUKsMcRygv84SlMasU9ZPl5mTwyc5YQf9JP641twL8 MSeCIfMD7qZM8VE9G2A0mAoozIl6ic2N0FAkS7QRnxYaF1FWljVo+DTXehdMfwO6 P1skl49gBL2d/cY3UMXFShL/Kj4PHs7iBEjMcJWCQaXfSbAMiCtj3MrIzJ77kB5w G0MVGQMQItgsy2tNNpQ5pvGBjEmz+fLPoRtaSkjkON9xsY0nnjt/CGQbW+Y= -----END CERTIFICATE-----Generated at Fri Sep 19 04:35:51 2025 by rpki-client