$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13e6bbf6-0b71-42ec-b6f7-2786014d5c3d.roa File: 13e6bbf6-0b71-42ec-b6f7-2786014d5c3d.roa (raw, json) Hash identifier: mLiyfQFNKRkjnQHWqV32KyHikpERnhWcMeizVCgAOyo= Subject key identifier: 7F:CB:84:22:11:20:AF:BE:C0:35:D0:DB:A3:19:A5:97:82:D2:6C:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0E975374E559709C1392160191BEAAB75259AE53 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13e6bbf6-0b71-42ec-b6f7-2786014d5c3d.roa Signing time: Tue 29 Jul 2025 15:51:38 +0000 ROA not before: Tue 29 Jul 2025 15:51:38 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.195.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:97:53:74:e5:59:70:9c:13:92:16:01:91:be:aa:b7:52:59:ae:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:51:38 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=c3a98b8321deb3c6e0508465d714c9f8e28567bb5dc7e8dd0b4ed9e330a8b075, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:3e:bd:3f:f4:90:d4:72:f1:4a:a0:ee:fd: 87:62:e4:34:5a:a4:15:4d:04:cf:1c:a9:a0:41:65: 99:c1:d2:3b:92:f2:88:27:49:86:55:b8:1d:0b:bf: b5:96:a4:40:96:3c:45:ab:97:7a:26:d9:0e:62:e4: a7:99:ec:b1:7b:cb:16:76:a4:75:65:6c:bd:03:94: ac:11:ee:b2:b2:93:89:b9:28:8d:ad:16:64:42:2a: 69:49:f3:95:cc:2f:77:fd:65:6c:89:90:d5:2a:4d: 9c:fe:fd:17:9c:d4:28:36:5e:6c:d4:04:62:f0:00: 9d:5a:db:a4:67:a8:3f:89:b3:e4:3d:8c:a6:ba:64: 80:46:27:43:4d:cc:84:c9:c4:ff:7d:d1:81:ad:32: c3:c2:0d:0c:48:23:34:29:6d:0e:0e:f9:61:9e:56: 3b:22:b3:61:26:24:2b:71:c5:df:75:78:98:8e:96: a4:42:96:0e:9c:9f:4a:51:ac:dc:90:8f:9d:26:46: 98:ae:1c:6e:35:5b:bb:ef:13:d6:1c:55:45:50:28: 47:17:16:68:91:dd:99:6b:f8:71:88:8f:79:07:61: f6:bb:d3:fe:18:6c:bd:e8:f8:d9:75:59:5c:dd:75: 90:8e:fa:c8:98:8c:8d:03:74:21:52:60:c1:33:cd: e4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CB:84:22:11:20:AF:BE:C0:35:D0:DB:A3:19:A5:97:82:D2:6C:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/13e6bbf6-0b71-42ec-b6f7-2786014d5c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.195.88.0/21 Signature Algorithm: sha256WithRSAEncryption 58:20:4f:d6:71:f5:b9:cf:77:e0:87:f7:05:3c:37:ad:f1:2e: 2d:aa:56:0a:1e:2c:b3:4a:2d:0b:26:94:e9:f5:0f:b9:c3:fc: 21:ee:2c:4d:5e:11:a5:af:08:9e:3f:69:29:43:f8:3a:a0:e5: 43:59:06:19:a2:27:c4:84:c3:bf:24:ca:e5:a8:76:9f:ba:68: 69:52:e6:d1:4a:76:c9:64:2e:8d:9a:66:e5:72:26:69:f3:db: 4a:4b:39:97:ec:73:1e:da:86:67:e0:e7:23:b7:3e:cc:cc:d4: 59:77:fb:4f:ec:84:43:f1:f1:db:56:e9:5f:96:4f:ca:45:82: 8f:4b:7e:83:96:44:c0:ca:3f:25:ff:84:c0:15:c0:d8:0c:24: 2a:3e:c4:39:5a:81:2e:c8:3f:e8:21:25:52:6d:c7:57:e1:e7: b2:8b:81:0f:dc:19:3e:f8:eb:71:62:48:4f:e1:e5:e4:e8:c1: 3c:ff:f0:98:6c:f3:30:88:3a:08:79:e2:db:4f:bf:f5:6f:fe: 17:a4:dc:d5:a4:33:68:4d:1d:4a:4a:ad:be:80:bb:7e:52:08: c8:ae:9a:35:a2:b1:a8:49:b3:7a:30:b8:9e:8d:31:0d:c9:ff: ef:c1:c7:9b:e8:ab:f0:78:9d:a6:2d:bb:f6:c8:23:32:14:94: c9:00:a3:15 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDpdTdOVZcJwTkhYBkb6qt1JZrlMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTU1MTM4WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2E5OGI4MzIxZGViM2M2ZTA1MDg0NjVkNzE0YzlmOGUy ODU2N2JiNWRjN2U4ZGQwYjRlZDllMzMwYThiMDc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDblD69P/SQ1HLxSqDu/Ydi5DRapBVNBM8cqaBBZZnB0juS 8ognSYZVuB0Lv7WWpECWPEWrl3om2Q5i5KeZ7LF7yxZ2pHVlbL0DlKwR7rKyk4m5 KI2tFmRCKmlJ85XML3f9ZWyJkNUqTZz+/Rec1Cg2XmzUBGLwAJ1a26RnqD+Js+Q9 jKa6ZIBGJ0NNzITJxP990YGtMsPCDQxIIzQpbQ4O+WGeVjsis2EmJCtxxd91eJiO lqRClg6cn0pRrNyQj50mRpiuHG41W7vvE9YcVUVQKEcXFmiR3Zlr+HGIj3kHYfa7 0/4YbL3o+Nl1WVzddZCO+siYjI0DdCFSYMEzzeS3AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUf8uEIhEgr77ANdDboxmll4LSbMkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzZTZiYmY2LTBiNzEtNDJlYy1iNmY3LTI3ODYwMTRkNWMzZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2w1gwDQYJKoZIhvcNAQELBQADggEBAFggT9Zx9bnPd+CH9wU8N63xLi2q VgoeLLNKLQsmlOn1D7nD/CHuLE1eEaWvCJ4/aSlD+Dqg5UNZBhmiJ8SEw78kyuWo dp+6aGlS5tFKdslkLo2aZuVyJmnz20pLOZfscx7ahmfg5yO3PszM1Fl3+0/shEPx 8dtW6V+WT8pFgo9LfoOWRMDKPyX/hMAVwNgMJCo+xDlagS7IP+ghJVJtx1fh57KL gQ/cGT7463FiSE/h5eTowTz/8Jhs8zCIOgh54ttPv/Vv/hek3NWkM2hNHUpKrb6A u35SCMiumjWisahJs3owuJ6NMQ3J/+/Bx5voq/B4naYtu/bIIzIUlMkAoxU= -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:31 2025 by rpki-client