$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04fa1e62-f24e-4154-ac38-16475627997a.roa File: 04fa1e62-f24e-4154-ac38-16475627997a.roa (raw, json) Hash identifier: HwrqkkQErwHfGV+QLvhAFtNT9toPq9IPAY7zCUgMjBI= Subject key identifier: EC:B7:8F:4F:A5:B3:0A:FF:F1:44:BD:47:44:1B:92:C4:1E:53:D2:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F9462CD948052C73BBB3CD611D86A3B5D575249 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04fa1e62-f24e-4154-ac38-16475627997a.roa Signing time: Fri 25 Jul 2025 16:00:22 +0000 ROA not before: Fri 25 Jul 2025 16:00:22 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.163.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:94:62:cd:94:80:52:c7:3b:bb:3c:d6:11:d8:6a:3b:5d:57:52:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 16:00:22 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=5dd0e354bc2f2eb327f2d3b05765a223119f2babbac2a6ac0f2937b8c15b4104, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:38:bb:eb:2c:00:32:96:c2:8d:fe:2f:28:71: 63:71:d1:4f:56:84:40:c5:83:7c:8e:65:35:81:49: 80:98:5b:d0:29:a3:a9:8c:33:68:d8:10:70:cd:af: 74:c9:85:51:a1:23:c7:68:49:c2:bb:b1:5e:07:fc: 06:d1:e1:88:56:af:36:ae:35:12:c4:b7:af:75:b3: 87:e3:2e:70:f0:47:9e:5e:d4:33:66:22:fb:c8:32: 85:f1:fc:c2:e9:ed:43:23:2d:5f:68:43:cb:ae:1e: ef:f9:5e:fc:25:ef:0b:45:77:b3:c2:2b:f9:d7:1e: 93:36:43:a3:dc:a6:a6:55:20:63:ec:ae:88:78:aa: e7:70:92:b4:08:5b:36:6f:a0:43:d9:e9:82:a6:d6: ce:ab:86:52:0f:ee:10:29:5b:44:fd:6a:42:ee:0d: 13:1e:00:9c:26:21:bb:a3:9d:05:1c:85:d2:32:4f: 0a:af:01:75:3a:1b:9d:22:e5:9e:4e:ef:23:ba:ec: 2a:d9:c1:e1:f9:c1:29:b4:9e:fb:b9:5b:92:b3:0b: 93:5c:09:82:fe:2d:54:68:a6:5f:f5:fb:c3:c8:9f: f9:b0:e7:f0:91:b3:1f:f5:b0:b4:41:2e:cf:c1:b6: db:49:7b:d9:2d:ac:ec:ab:dd:60:e6:b0:2a:2d:a4: e9:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B7:8F:4F:A5:B3:0A:FF:F1:44:BD:47:44:1B:92:C4:1E:53:D2:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04fa1e62-f24e-4154-ac38-16475627997a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.163.0.0/18 Signature Algorithm: sha256WithRSAEncryption b1:89:ac:10:c7:b6:8d:25:c5:4b:eb:08:55:8a:9f:d0:0d:96: 59:28:5c:bd:b9:48:dd:f2:2e:02:b2:72:73:9b:9c:86:8b:62: 10:f2:87:5e:6d:e1:c4:c6:02:3d:27:e3:0b:6c:f1:bf:d9:86: 91:9b:a9:7c:66:7b:cd:36:bc:7d:d5:3a:6d:39:cf:62:1e:d2: 0c:17:3b:33:0e:7f:02:52:3f:92:46:4b:2e:1f:f2:c7:5e:36: 64:1c:df:38:48:e6:a5:41:67:c1:73:6e:aa:d4:74:59:62:65: 75:df:90:44:ed:8b:7a:41:d1:bd:80:0b:9e:4a:33:3c:b9:1d: 5a:90:cd:9a:c5:8d:32:a6:af:58:ad:57:10:1e:6c:f7:44:7c: d8:0f:bd:91:cf:b2:34:a8:54:bb:88:d6:f4:53:8f:1f:c2:8b: 97:b8:4c:35:eb:ec:a5:58:80:59:5e:bf:28:e7:66:70:f0:4d: ff:af:c2:67:38:31:a3:aa:6d:aa:75:97:e3:62:29:77:d7:ab: 28:1e:6a:3a:6b:cf:64:74:92:48:72:ee:64:25:c1:a1:70:b5: 67:96:4d:cb:53:a4:64:b3:91:85:bb:38:33:3e:02:a5:11:83: 4c:c2:31:aa:3d:6c:65:22:e2:07:34:b7:77:1e:da:dc:36:d9: 84:06:45:90 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb5RizZSAUsc7uzzWEdhqO11XUkkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTYwMDIyWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZGQwZTM1NGJjMmYyZWIzMjdmMmQzYjA1NzY1YTIyMzEx OWYyYmFiYmFjMmE2YWMwZjI5MzdiOGMxNWI0MTA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9OLvrLAAylsKN/i8ocWNx0U9WhEDFg3yOZTWBSYCYW9Ap o6mMM2jYEHDNr3TJhVGhI8doScK7sV4H/AbR4YhWrzauNRLEt691s4fjLnDwR55e 1DNmIvvIMoXx/MLp7UMjLV9oQ8uuHu/5Xvwl7wtFd7PCK/nXHpM2Q6PcpqZVIGPs roh4qudwkrQIWzZvoEPZ6YKm1s6rhlIP7hApW0T9akLuDRMeAJwmIbujnQUchdIy TwqvAXU6G50i5Z5O7yO67CrZweH5wSm0nvu5W5KzC5NcCYL+LVRopl/1+8PIn/mw 5/CRsx/1sLRBLs/BtttJe9ktrOyr3WDmsCotpOmtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7LePT6WzCv/xRL1HRBuSxB5T0h8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0ZmExZTYyLWYyNGUtNDE1NC1hYzM4LTE2NDc1NjI3OTk3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2owAwDQYJKoZIhvcNAQELBQADggEBALGJrBDHto0lxUvrCFWKn9ANllko XL25SN3yLgKycnObnIaLYhDyh15t4cTGAj0n4wts8b/ZhpGbqXxme802vH3VOm05 z2Ie0gwXOzMOfwJSP5JGSy4f8sdeNmQc3zhI5qVBZ8FzbqrUdFliZXXfkETti3pB 0b2AC55KMzy5HVqQzZrFjTKmr1itVxAebPdEfNgPvZHPsjSoVLuI1vRTjx/Ci5e4 TDXr7KVYgFlevyjnZnDwTf+vwmc4MaOqbap1l+NiKXfXqygeajprz2R0kkhy7mQl waFwtWeWTctTpGSzkYW7ODM+AqURg0zCMao9bGUi4gc0t3ce2tw22YQGRZA= -----END CERTIFICATE-----Generated at Mon Aug 4 21:41:13 2025 by rpki-client