$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e85c83f-04b1-43c6-b503-7865fc808ea9.roa File: 1e85c83f-04b1-43c6-b503-7865fc808ea9.roa (raw, json) Hash identifier: 67pDWGMu0PJv7XWpzR93WT1W/SFvyxC1+BdU4pilXiw= Subject key identifier: 32:04:42:B5:43:77:47:28:9A:D1:85:48:92:36:01:E2:55:9F:B2:7C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0975EC4B7032801585D49E6567F4EB51A0916F25 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e85c83f-04b1-43c6-b503-7865fc808ea9.roa Signing time: Tue 19 Aug 2025 15:10:23 +0000 ROA not before: Tue 19 Aug 2025 15:10:23 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.60.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:75:ec:4b:70:32:80:15:85:d4:9e:65:67:f4:eb:51:a0:91:6f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:10:23 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=fec1006a328d3f2417b4513f9d8ccab27f74f40389abe2dda85f0bb78da2593c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:e6:f5:e8:bf:57:03:19:97:ef:f0:5d:41: 8b:a4:41:ae:be:3f:86:d1:bf:19:e7:ad:9e:fe:65: 1d:74:ba:c7:f0:d7:c5:1b:e5:59:a2:e0:28:b7:43: 54:2e:82:92:6f:45:ff:cb:48:a9:89:54:bc:71:92: b9:9a:36:42:de:5f:f8:66:e4:35:97:99:b3:f8:de: 0a:94:0e:af:ad:7e:dd:77:1b:2f:c7:a6:b1:a2:6e: 1f:2d:f5:fe:13:fa:0b:9b:6b:30:d8:8f:06:c1:8b: 6e:d2:d7:83:d5:40:28:85:64:f0:63:4f:a1:fd:0d: 15:3c:98:7e:25:8a:b1:47:91:33:5b:97:d6:8b:a5: 4d:86:1e:9b:01:8d:5c:f2:89:c1:80:73:24:59:95: 65:5a:56:82:7c:34:21:92:90:d6:63:3a:81:8d:43: 96:fb:15:5a:35:30:bd:bb:1c:70:37:f2:37:70:27: b5:98:f7:eb:bd:68:e7:89:d6:56:bc:0b:9e:99:0d: ca:00:ea:f5:72:7a:e7:28:16:fa:9e:a8:01:15:2d: ad:29:98:69:71:dd:b5:a4:6f:2e:ec:d4:c9:f0:71: 21:f7:74:d1:63:5f:d4:0a:ff:89:7b:90:51:09:e2: 81:67:07:76:d5:8d:f1:d1:ca:c2:87:06:b7:ca:f9: 60:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:04:42:B5:43:77:47:28:9A:D1:85:48:92:36:01:E2:55:9F:B2:7C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1e85c83f-04b1-43c6-b503-7865fc808ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.60.152.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:42:53:98:2a:96:a8:05:ec:66:1f:6f:28:32:8b:1f:b8:23: 28:79:c1:dd:ca:17:80:8e:68:a9:f6:e2:92:b6:ea:18:18:01: a3:e0:cc:ee:8f:3f:3d:08:a1:3e:9c:c3:02:fb:d1:ae:ae:93: 09:62:28:c3:56:1f:04:b2:74:f4:7f:e5:a9:9d:81:24:cc:44: 30:b7:1a:6a:57:85:5c:c5:40:63:66:55:6b:e4:ff:39:ee:8b: 45:3a:b2:62:c2:62:d4:cc:ad:c0:85:e7:a3:a4:f4:a9:27:82: a2:a8:e5:c4:57:9e:44:93:f3:66:f4:24:e6:ad:0d:13:16:25: f5:b2:26:a1:cd:59:9e:86:17:7d:9d:5b:df:b8:e2:44:3a:a0: 6e:5e:52:bd:40:0d:1f:4e:de:b3:f2:14:b6:f1:20:17:96:46: ab:ba:65:ea:ce:86:e7:2a:38:86:77:d0:7a:18:e6:f5:9a:2e: 82:5c:2c:9b:4f:9c:86:60:b8:43:a1:f3:d1:bc:39:ce:f9:e6: 26:0b:0e:e7:f0:30:92:4f:6b:f2:2e:c5:8f:fb:b9:cc:e3:a1: 84:3a:0c:b7:74:53:dc:9d:fa:35:d0:89:cc:15:b0:a9:f3:ed: 82:fb:96:c3:a1:73:06:33:1d:f7:45:4e:dc:e9:f7:55:d1:5d: d8:6c:3e:c2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCXXsS3AygBWF1J5lZ/TrUaCRbyUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUxMDIzWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZWMxMDA2YTMyOGQzZjI0MTdiNDUxM2Y5ZDhjY2FiMjdm NzRmNDAzODlhYmUyZGRhODVmMGJiNzhkYTI1OTNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqe+b16L9XAxmX7/BdQYukQa6+P4bRvxnnrZ7+ZR10usfw 18Ub5Vmi4Ci3Q1QugpJvRf/LSKmJVLxxkrmaNkLeX/hm5DWXmbP43gqUDq+tft13 Gy/HprGibh8t9f4T+gubazDYjwbBi27S14PVQCiFZPBjT6H9DRU8mH4lirFHkTNb l9aLpU2GHpsBjVzyicGAcyRZlWVaVoJ8NCGSkNZjOoGNQ5b7FVo1ML27HHA38jdw J7WY9+u9aOeJ1la8C56ZDcoA6vVyeucoFvqeqAEVLa0pmGlx3bWkby7s1MnwcSH3 dNFjX9QK/4l7kFEJ4oFnB3bVjfHRysKHBrfK+WCdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMgRCtUN3Ryia0YVIkjYB4lWfsnwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFlODVjODNmLTA0YjEtNDNjNi1iNTAzLTc4NjVmYzgwOGVhOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAASPJgwDQYJKoZIhvcNAQELBQADggEBADxCU5gqlqgF7GYfbygyix+4Iyh5 wd3KF4COaKn24pK26hgYAaPgzO6PPz0IoT6cwwL70a6ukwliKMNWHwSydPR/5amd gSTMRDC3GmpXhVzFQGNmVWvk/znui0U6smLCYtTMrcCF56Ok9KkngqKo5cRXnkST 82b0JOatDRMWJfWyJqHNWZ6GF32dW9+44kQ6oG5eUr1ADR9O3rPyFLbxIBeWRqu6 ZerOhucqOIZ30HoY5vWaLoJcLJtPnIZguEOh89G8Oc755iYLDufwMJJPa/IuxY/7 uczjoYQ6DLd0U9yd+jXQicwVsKnz7YL7lsOhcwYzHfdFTtzp91XRXdhsPsI= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:04 2025 by rpki-client