$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde6b734-227e-4567-82e5-7071cf9ff5cc.roa File: bde6b734-227e-4567-82e5-7071cf9ff5cc.roa (raw, json) Hash identifier: +AgWnhAXNDdxKZrZgpYqg87zXrEUIh3hvjNoDiPzXRQ= Subject key identifier: A7:BE:20:09:36:31:40:C2:4C:57:C2:24:00:3C:A4:F6:1F:D3:11:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1E91850A29531B8BB4BF5D10891F39AE01A0C841 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde6b734-227e-4567-82e5-7071cf9ff5cc.roa Signing time: Tue 19 Aug 2025 15:50:23 +0000 ROA not before: Tue 19 Aug 2025 15:50:23 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 52.86.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:91:85:0a:29:53:1b:8b:b4:bf:5d:10:89:1f:39:ae:01:a0:c8:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:50:23 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=68ddff911d4f89dc136befbe246429096c0550005f38980e606a80ea8cbef22e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:39:92:21:84:c8:80:cb:b5:7e:02:12:7e:fc: 40:b0:f2:c0:14:23:19:42:7f:58:37:37:a8:e7:56: 3b:01:d0:6d:45:4a:83:2f:05:72:8e:79:2f:c6:8a: 29:b9:0d:40:a9:ff:d5:c2:0e:60:3c:12:33:46:21: 26:b7:e2:46:11:0a:3a:84:ee:8c:40:3c:12:81:00: b9:74:a2:9a:82:d9:5d:c1:72:2c:f0:7e:2b:fd:b9: 6f:03:1a:9e:0d:a8:be:99:64:e9:2c:65:b0:61:fa: a2:7c:53:29:b8:f9:46:fd:19:44:2b:2f:06:c1:df: 15:09:ea:1f:d7:08:dc:0a:dd:b2:d4:7e:65:92:c1: 66:44:98:6e:2a:9c:d0:5a:df:77:f1:76:5f:af:a7: 0b:f0:30:2a:72:88:ff:40:c6:3e:70:71:b9:21:a7: 5a:9a:84:64:f2:9e:0a:41:cf:d2:08:36:78:01:7b: e0:4e:60:d8:85:ee:47:cb:15:23:75:54:49:66:f6: 33:a4:ce:50:39:14:6d:7d:93:2e:62:ed:31:83:c3: 48:26:11:1c:5f:8f:15:c8:c0:db:d9:a5:59:29:83: 38:1a:4c:27:b9:95:84:bd:a7:66:3d:45:ba:00:b7: 94:15:d0:13:79:e5:8f:79:d9:1a:45:b0:02:46:3e: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BE:20:09:36:31:40:C2:4C:57:C2:24:00:3C:A4:F6:1F:D3:11:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bde6b734-227e-4567-82e5-7071cf9ff5cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 52.86.0.0/15 Signature Algorithm: sha256WithRSAEncryption 01:e7:62:12:04:13:ed:90:77:40:93:59:a3:a9:9e:e3:49:76: fa:d2:dc:c4:ab:e6:eb:e2:0c:38:2c:fd:d1:82:1e:21:8f:74: 00:e2:c8:23:19:2a:83:e2:fb:09:37:e3:44:91:c3:26:20:cc: 61:fa:80:e4:56:09:95:c2:18:28:ed:f5:6e:99:ca:d8:9f:9a: ea:b4:0a:08:fd:e2:cf:6e:bf:df:e8:59:02:3b:96:27:57:ce: 8f:fa:52:8f:d9:06:a4:5d:76:c9:df:e2:61:eb:ae:0f:49:3f: 41:b4:90:c0:dd:39:e3:1b:90:45:18:f5:95:fd:8b:5f:08:dc: aa:51:7b:93:d9:d3:4a:68:2c:b8:23:18:4d:63:ee:99:2e:01: a7:a3:80:9c:06:69:6d:5e:84:6e:99:5e:38:c3:f3:33:bc:0f: a0:0d:d7:f2:58:df:a6:56:42:c0:1c:26:a0:b6:53:06:2f:f5: 09:3b:c3:96:97:ef:75:0e:a3:fd:6d:72:11:51:37:99:b7:65: d9:a8:c1:e1:21:e4:1d:0c:72:ac:93:c5:b1:60:e2:ca:fe:8f: 6f:25:e3:27:96:16:62:52:2b:14:2f:5f:5d:05:8a:87:ca:1a: b2:40:8c:bc:76:2b:d9:33:6a:88:d3:d1:4f:78:df:0c:f1:f5: 2a:cf:d7:a8 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHpGFCilTG4u0v10QiR85rgGgyEEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTU1MDIzWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGRkZmY5MTFkNGY4OWRjMTM2YmVmYmUyNDY0MjkwOTZj MDU1MDAwNWYzODk4MGU2MDZhODBlYThjYmVmMjJlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9OZIhhMiAy7V+AhJ+/ECw8sAUIxlCf1g3N6jnVjsB0G1F SoMvBXKOeS/Giim5DUCp/9XCDmA8EjNGISa34kYRCjqE7oxAPBKBALl0opqC2V3B cizwfiv9uW8DGp4NqL6ZZOksZbBh+qJ8Uym4+Ub9GUQrLwbB3xUJ6h/XCNwK3bLU fmWSwWZEmG4qnNBa33fxdl+vpwvwMCpyiP9Axj5wcbkhp1qahGTyngpBz9IINngB e+BOYNiF7kfLFSN1VElm9jOkzlA5FG19ky5i7TGDw0gmERxfjxXIwNvZpVkpgzga TCe5lYS9p2Y9RboAt5QV0BN55Y952RpFsAJGPhX3AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUp74gCTYxQMJMV8IkADyk9h/TERswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkZTZiNzM0LTIyN2UtNDU2Ny04MmU1LTcwNzFjZjlmZjVjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE0VjANBgkqhkiG9w0BAQsFAAOCAQEAAediEgQT7ZB3QJNZo6me40l2+tLc xKvm6+IMOCz90YIeIY90AOLIIxkqg+L7CTfjRJHDJiDMYfqA5FYJlcIYKO31bpnK 2J+a6rQKCP3iz26/3+hZAjuWJ1fOj/pSj9kGpF12yd/iYeuuD0k/QbSQwN054xuQ RRj1lf2LXwjcqlF7k9nTSmgsuCMYTWPumS4Bp6OAnAZpbV6EbpleOMPzM7wPoA3X 8ljfplZCwBwmoLZTBi/1CTvDlpfvdQ6j/W1yEVE3mbdl2ajB4SHkHQxyrJPFsWDi yv6PbyXjJ5YWYlIrFC9fXQWKh8oaskCMvHYr2TNqiNPRT3jfDPH1Ks/XqA== -----END CERTIFICATE-----Generated at Wed Aug 20 10:38:53 2025 by rpki-client