$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa File: 118dcde3-a891-420a-8178-70f11115d6c3.roa (raw, json) Hash identifier: SKJ5VLbB+aTpotXGHzBcqlE4F/Yu+ODBmPQfwsu0MdE= Subject key identifier: CE:A2:4A:42:43:AA:80:B3:34:41:A1:23:89:AC:92:9C:F4:1B:7A:95 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 091810CB2A0CC50041C936D8B3DD7FE08B7465D4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa Signing time: Tue 29 Jul 2025 17:01:54 +0000 ROA not before: Tue 29 Jul 2025 17:01:54 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.236.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:18:10:cb:2a:0c:c5:00:41:c9:36:d8:b3:dd:7f:e0:8b:74:65:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 17:01:54 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=0ae75f40e7748eaf18ba5702c88cf90cb09f450e61ae8c88d063507bdcf11c3d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:04:df:ee:91:ed:86:61:fc:30:a3:68:ec: a4:1a:95:31:38:5f:49:71:5a:09:74:bd:5c:2d:e7: 7b:cc:cb:34:34:92:48:8e:34:e5:18:cd:74:9b:d0: 33:90:47:53:d2:99:58:77:d4:b8:7b:4e:b9:ff:c7: 47:1c:2c:6c:9a:8e:25:fd:2f:71:c4:93:c4:70:17: 65:48:3c:e4:29:47:70:8e:80:db:1b:cf:90:2d:be: 26:e6:2f:f7:55:86:bb:1b:fc:b8:57:d4:67:ad:c9: 65:c9:6c:50:29:e1:08:56:6b:37:56:41:36:f7:d9: c4:0a:18:34:2c:95:4f:15:8b:69:17:67:3d:aa:08: 12:b7:7e:4c:f3:a9:2d:08:af:f4:ed:98:42:34:bb: 1f:cc:f9:9c:a2:de:fd:07:05:29:7f:af:3a:f5:3c: 80:bc:3e:1c:0d:f4:ef:f8:fd:95:9f:cb:83:0c:b9: 21:dd:11:12:6f:ae:8e:a3:27:eb:14:4e:e2:1c:79: bd:23:1f:11:bf:1f:67:1b:1d:24:80:b9:a0:86:42: 2f:e2:11:c1:1f:a4:62:2d:b6:ad:29:25:ce:65:5f: cc:d6:4c:c8:04:5a:df:8c:31:a5:dc:b9:ff:1e:e5: f2:d6:2d:49:1e:b4:9e:e0:f8:21:39:81:6e:58:b1: 3d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A2:4A:42:43:AA:80:B3:34:41:A1:23:89:AC:92:9C:F4:1B:7A:95 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/118dcde3-a891-420a-8178-70f11115d6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.236.128.0/17 Signature Algorithm: sha256WithRSAEncryption 84:6c:6b:c3:8c:2c:fd:55:ba:b3:1c:ab:d1:48:54:ce:aa:5f: 69:13:7a:32:18:5c:73:42:0b:13:a6:26:0c:75:7e:e9:a3:30: 18:54:80:7e:5c:e9:b5:37:f1:18:aa:16:3f:c2:eb:a5:26:c5: 0d:24:ca:b1:96:f5:75:ed:b8:61:50:1e:8d:e0:2e:f6:e7:41: b6:84:2d:f2:61:cd:8b:87:7a:ee:a7:e8:63:29:55:7b:f3:14: 0a:a2:42:ea:97:ad:04:cf:b6:3f:f1:8b:76:a6:e2:5c:0a:70: 20:47:4f:48:5d:11:69:98:e4:af:e9:62:2b:8f:cb:89:a4:1e: 8d:47:5f:2c:31:4e:93:fc:bc:ba:49:d4:4c:69:b9:1c:bb:bb: d0:0f:43:f3:49:3a:ba:dd:f0:aa:af:6b:cf:c4:9a:38:e8:48: 47:bb:ab:93:50:3c:6e:21:2f:c4:8a:06:c4:40:75:74:ec:b1: a7:93:07:38:b7:e6:78:a1:d4:0c:bd:0a:11:d8:af:44:eb:ed: 04:39:6f:dc:1f:20:f8:e6:3e:ec:29:a5:e7:0f:51:bd:0b:1c: 6a:75:c7:7f:5a:ca:10:c6:0a:0d:f0:d5:e8:5f:8d:04:83:b7: 85:24:ed:d1:8b:a9:6e:df:b0:f8:f2:83:4a:ea:a8:7c:87:11: 54:21:93:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCRgQyyoMxQBByTbYs91/4It0ZdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTcwMTU0WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwYWU3NWY0MGU3NzQ4ZWFmMThiYTU3MDJjODhjZjkwY2Iw OWY0NTBlNjFhZThjODhkMDYzNTA3YmRjZjExYzNkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCKCwTf7pHthmH8MKNo7KQalTE4X0lxWgl0vVwt53vMyzQ0 kkiONOUYzXSb0DOQR1PSmVh31Lh7Trn/x0ccLGyajiX9L3HEk8RwF2VIPOQpR3CO gNsbz5AtvibmL/dVhrsb/LhX1GetyWXJbFAp4QhWazdWQTb32cQKGDQslU8Vi2kX Zz2qCBK3fkzzqS0Ir/TtmEI0ux/M+Zyi3v0HBSl/rzr1PIC8PhwN9O/4/ZWfy4MM uSHdERJvro6jJ+sUTuIceb0jHxG/H2cbHSSAuaCGQi/iEcEfpGIttq0pJc5lX8zW TMgEWt+MMaXcuf8e5fLWLUketJ7g+CE5gW5YsT21AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzqJKQkOqgLM0QaEjiaySnPQbepUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzExOGRjZGUzLWE4OTEtNDIwYS04MTc4LTcwZjExMTE1ZDZjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc27IAwDQYJKoZIhvcNAQELBQADggEBAIRsa8OMLP1VurMcq9FIVM6qX2kT ejIYXHNCCxOmJgx1fumjMBhUgH5c6bU38RiqFj/C66UmxQ0kyrGW9XXtuGFQHo3g LvbnQbaELfJhzYuHeu6n6GMpVXvzFAqiQuqXrQTPtj/xi3am4lwKcCBHT0hdEWmY 5K/pYiuPy4mkHo1HXywxTpP8vLpJ1ExpuRy7u9APQ/NJOrrd8Kqva8/EmjjoSEe7 q5NQPG4hL8SKBsRAdXTssaeTBzi35nih1Ay9ChHYr0Tr7QQ5b9wfIPjmPuwppecP Ub0LHGp1x39ayhDGCg3w1ehfjQSDt4Uk7dGLqW7fsPjyg0rqqHyHEVQhk90= -----END CERTIFICATE-----Generated at Mon Aug 4 14:07:05 2025 by rpki-client