$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa File: 33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa (raw, json) Hash identifier: OzomCt8O0wQ2sGJy3zTzmpIdssMdDl/4Ivv0qkV+qu4= Subject key identifier: B7:0B:D6:D6:F9:AD:8E:D7:76:AD:A1:12:97:6A:0E:38:3D:A5:85:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44F2A46F7A22B225B7C4C598C190E4A9E33A7E87 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa Signing time: Fri 11 Jul 2025 17:30:19 +0000 ROA not before: Fri 11 Jul 2025 17:30:19 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.75.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f2:a4:6f:7a:22:b2:25:b7:c4:c5:98:c1:90:e4:a9:e3:3a:7e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:30:19 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=483a81d5d1396ab641627dcafc703fd160c1868b15cb2910e89f85550f7a4e3a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:37:56:03:d1:fd:ff:e0:15:13:32:d4:64:4b: 5b:66:7a:8a:dd:6f:17:09:39:7d:ce:d5:3c:34:ad: 46:01:89:13:e0:b8:19:40:12:38:7b:e3:b0:9d:75: 9e:c3:4b:25:bd:8d:cf:81:7a:44:c6:04:39:36:fa: e8:0d:62:a0:95:00:f4:03:64:74:41:23:b7:7a:f0: d8:ac:f3:3b:70:1e:33:a2:a0:88:24:0b:08:b3:56: bc:32:63:79:86:69:29:8b:3a:11:3d:c6:36:6b:df: 90:30:c4:70:3b:a4:bd:fd:7a:64:86:bf:bc:00:f7: e5:0d:eb:dd:42:85:c3:fe:69:3f:b2:d5:94:7e:d2: 87:13:66:ad:04:29:32:5f:9e:28:4d:05:fc:8e:e6: a8:09:08:72:e2:64:b8:f0:3b:16:1b:fd:a0:97:2d: f1:dd:8c:7f:9a:0d:e3:07:ac:62:86:11:4d:da:90: a2:9a:eb:1b:c0:84:d3:22:4f:77:cb:ea:9d:9e:b5: 1d:48:08:5c:81:53:27:d4:3d:9e:db:1b:47:2d:c2: e1:1e:6c:40:d7:29:70:c1:dd:3f:77:33:99:cb:a6: e1:1e:cc:a6:ec:e1:ea:58:83:a9:8c:a4:cf:55:a7: 68:58:61:e3:0f:e7:97:21:f8:8a:a1:1a:3a:1a:a0: 14:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0B:D6:D6:F9:AD:8E:D7:76:AD:A1:12:97:6A:0E:38:3D:A5:85:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.75.192.0/19 Signature Algorithm: sha256WithRSAEncryption 5f:37:e2:6b:2a:1b:7f:4a:ec:bc:95:18:39:f8:49:a0:19:8e: 6a:0e:00:2d:12:d3:3d:bf:3f:9b:93:26:8a:21:40:b9:13:ac: 7a:fb:4c:85:1e:68:bf:87:96:01:15:b9:dc:5c:f6:73:b3:52: d3:ee:1b:96:f4:04:ae:4c:9e:d0:6b:db:20:71:ae:0c:b1:c7: c7:e2:cc:4e:be:51:b8:27:9b:94:ce:a6:3b:d3:6d:7a:ba:7f: ef:71:b0:44:ae:b3:64:46:02:cb:55:9f:94:1f:9f:75:32:37: 21:3c:10:a7:f0:3c:f4:fc:46:8d:55:9a:5a:aa:07:31:5f:0b: c5:63:19:68:fb:9a:3f:8e:6f:86:81:02:79:c7:67:91:37:f8: b2:fe:ad:47:8f:f2:77:de:21:7a:49:7a:64:12:06:25:15:12: 3a:08:ce:09:25:8d:61:cf:f4:44:5f:5c:9f:1c:ad:71:53:0c: ed:d8:f4:91:40:24:46:bb:a5:5d:62:27:8d:23:2b:3e:3c:e6: 39:8c:c4:a5:9e:35:ec:67:61:e5:5d:39:3f:88:71:91:5b:32: 2f:ac:9e:25:51:a7:85:56:28:59:45:7a:d1:72:99:22:6b:4f: 6e:1f:56:3e:ad:a9:3b:25:d4:95:d3:79:1f:d4:9a:89:30:dc: 2b:be:a2:a2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURPKkb3oisiW3xMWYwZDkqeM6focwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTczMDE5WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ODNhODFkNWQxMzk2YWI2NDE2MjdkY2FmYzcwM2ZkMTYw YzE4NjhiMTVjYjI5MTBlODlmODU1NTBmN2E0ZTNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDaN1YD0f3/4BUTMtRkS1tmeordbxcJOX3O1Tw0rUYBiRPg uBlAEjh747CddZ7DSyW9jc+BekTGBDk2+ugNYqCVAPQDZHRBI7d68Nis8ztwHjOi oIgkCwizVrwyY3mGaSmLOhE9xjZr35AwxHA7pL39emSGv7wA9+UN691ChcP+aT+y 1ZR+0ocTZq0EKTJfnihNBfyO5qgJCHLiZLjwOxYb/aCXLfHdjH+aDeMHrGKGEU3a kKKa6xvAhNMiT3fL6p2etR1ICFyBUyfUPZ7bG0ctwuEebEDXKXDB3T93M5nLpuEe zKbs4epYg6mMpM9Vp2hYYeMP55ch+IqhGjoaoBRHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUtwvW1vmtjtd2raESl2oOOD2lhVAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzMzZjhmNDRhLWMwYjYtNGVlOS05ZTNlLWUxNDkzMDQ4ZTc0Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2S8AwDQYJKoZIhvcNAQELBQADggEBAF834msqG39K7LyVGDn4SaAZjmoO AC0S0z2/P5uTJoohQLkTrHr7TIUeaL+HlgEVudxc9nOzUtPuG5b0BK5MntBr2yBx rgyxx8fizE6+Ubgnm5TOpjvTbXq6f+9xsESus2RGAstVn5Qfn3UyNyE8EKfwPPT8 Ro1VmlqqBzFfC8VjGWj7mj+Ob4aBAnnHZ5E3+LL+rUeP8nfeIXpJemQSBiUVEjoI zgkljWHP9ERfXJ8crXFTDO3Y9JFAJEa7pV1iJ40jKz485jmMxKWeNexnYeVdOT+I cZFbMi+sniVRp4VWKFlFetFymSJrT24fVj6tqTsl1JXTeR/Umokw3Cu+oqI= -----END CERTIFICATE-----Generated at Mon Aug 4 21:29:24 2025 by rpki-client