$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818c0bc4-5e55-439d-ba09-555f71053c53.roa File: 818c0bc4-5e55-439d-ba09-555f71053c53.roa (raw, json) Hash identifier: QDkcaXcgrsEcsOVSr96kugVYeMXjhwkWy6SLui26uYg= Subject key identifier: E2:FA:7A:11:F2:DD:8D:78:14:4A:A5:A0:DF:6C:F5:C1:DA:34:42:E6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74F0423E74092B9DFE9E29B7BCF2FFACD15435EE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818c0bc4-5e55-439d-ba09-555f71053c53.roa Signing time: Tue 19 Aug 2025 15:41:03 +0000 ROA not before: Tue 19 Aug 2025 15:41:03 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.18.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f0:42:3e:74:09:2b:9d:fe:9e:29:b7:bc:f2:ff:ac:d1:54:35:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:41:03 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=d364aefaa2c4360ea82d94e00ac945b3dd6b203ecdfee674f927f1cdf060db09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:a9:29:e7:2b:98:e5:f2:78:aa:79:ff:b1: a7:de:37:52:d2:bf:9c:a2:2c:db:2d:8f:5d:19:94: e9:30:47:d1:06:96:74:d0:2a:cd:b2:f6:ad:d8:e3: 0c:bd:50:db:b6:71:d9:18:e5:71:a3:70:48:44:7a: 2a:02:45:08:9e:e5:74:ca:68:1f:e1:3d:5a:eb:f5: d1:5c:f3:c0:45:4c:78:b8:00:15:79:1d:6d:7d:d4: e2:5b:ce:87:d7:03:6c:cc:6c:5c:04:c9:e5:b6:0a: cc:3c:3d:2f:b5:a0:4f:86:0e:8b:64:67:89:ae:3a: 49:7b:6e:7a:27:66:3c:69:b7:6a:68:e6:75:e3:76: c8:6e:aa:10:bb:d5:10:d7:46:93:d1:20:96:3d:e2: 67:08:fd:19:8b:6e:eb:9b:26:4c:8c:fc:b7:18:f0: af:0c:88:52:fa:ed:77:31:aa:6e:f6:8f:82:47:5c: ca:bf:9d:8b:97:55:cb:2a:3d:db:8b:c9:7b:b4:b2: f9:1c:a9:8f:84:ce:1f:e5:ed:3f:6a:f0:a0:4b:1e: 48:44:7c:29:43:c6:0a:81:bb:bb:5f:4a:95:7e:f0: 0b:c2:90:eb:1b:2c:4c:55:7a:67:42:c8:dc:b2:1c: 68:9c:92:c4:7e:81:a1:cb:5d:99:3d:dc:0f:b9:ef: d3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FA:7A:11:F2:DD:8D:78:14:4A:A5:A0:DF:6C:F5:C1:DA:34:42:E6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/818c0bc4-5e55-439d-ba09-555f71053c53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.18.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6c:fe:48:bf:58:f0:b0:d1:3f:0b:c7:2b:d4:3d:79:48:7d:26: 5b:d7:e3:31:ad:95:35:a6:9a:70:92:70:ed:b5:86:48:25:be: 0a:51:c2:36:08:ae:03:de:a4:87:e1:2a:2b:a2:de:1b:fd:f8: 10:53:18:ac:33:5f:99:22:e2:72:6f:b0:06:3b:91:b1:ca:8e: c3:cf:0c:13:5d:6c:fc:fb:2a:c3:0a:0c:60:ff:d6:47:a7:d8: 2f:a7:e1:d5:97:09:9c:5a:86:e1:13:ea:39:71:47:64:cc:8d: 69:7e:f8:01:37:be:2b:cc:e4:5c:ea:c3:6e:0d:09:c0:8a:d9: 2f:e6:83:c2:f0:cf:64:33:57:60:a8:61:cc:cb:04:34:ee:7e: 83:a8:6b:d2:ea:7b:65:9f:98:25:b4:9d:29:9d:8e:18:ab:d0: c5:0c:d6:7e:a7:67:73:df:0d:4a:86:2c:b7:ab:9a:48:cb:38: a8:da:3b:d2:ef:e9:93:49:cf:be:53:f6:97:38:63:88:2c:72: e7:ca:31:c7:ae:4f:96:05:9d:62:49:00:f8:63:5e:8b:f6:85: 01:e4:a0:7e:a8:5c:8c:98:21:bd:7c:82:bf:58:7c:c7:c7:48: 7d:6b:35:01:cf:30:88:ef:ba:be:25:02:ed:d3:48:07:02:52: 1c:11:20:79 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdPBCPnQJK53+nim3vPL/rNFUNe4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTU0MTAzWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMzY0YWVmYWEyYzQzNjBlYTgyZDk0ZTAwYWM5NDViM2Rk NmIyMDNlY2RmZWU2NzRmOTI3ZjFjZGYwNjBkYjA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVY6kp5yuY5fJ4qnn/safeN1LSv5yiLNstj10ZlOkwR9EG lnTQKs2y9q3Y4wy9UNu2cdkY5XGjcEhEeioCRQie5XTKaB/hPVrr9dFc88BFTHi4 ABV5HW191OJbzofXA2zMbFwEyeW2Csw8PS+1oE+GDotkZ4muOkl7bnonZjxpt2po 5nXjdshuqhC71RDXRpPRIJY94mcI/RmLbuubJkyM/LcY8K8MiFL67Xcxqm72j4JH XMq/nYuXVcsqPduLyXu0svkcqY+Ezh/l7T9q8KBLHkhEfClDxgqBu7tfSpV+8AvC kOsbLExVemdCyNyyHGicksR+gaHLXZk93A+579NVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU4vp6EfLdjXgUSqWg32z1wdo0QuYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgxOGMwYmM0LTVlNTUtNDM5ZC1iYTA5LTU1NWY3MTA1M2M1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0EjANBgkqhkiG9w0BAQsFAAOCAQEAbP5Iv1jwsNE/C8cr1D15SH0mW9fj Ma2VNaaacJJw7bWGSCW+ClHCNgiuA96kh+EqK6LeG/34EFMYrDNfmSLicm+wBjuR scqOw88ME11s/PsqwwoMYP/WR6fYL6fh1ZcJnFqG4RPqOXFHZMyNaX74ATe+K8zk XOrDbg0JwIrZL+aDwvDPZDNXYKhhzMsENO5+g6hr0up7ZZ+YJbSdKZ2OGKvQxQzW fqdnc98NSoYst6uaSMs4qNo70u/pk0nPvlP2lzhjiCxy58oxx65PlgWdYkkA+GNe i/aFAeSgfqhcjJghvXyCv1h8x8dIfWs1Ac8wiO+6viUC7dNIBwJSHBEgeQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:29 2025 by rpki-client