$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/375e438a-60e4-49fc-b642-eb3e14a5e897.roa File: 375e438a-60e4-49fc-b642-eb3e14a5e897.roa (raw, json) Hash identifier: 0gmpV8oqv2YyVwsXMAp9tyoal2V+0VT0M4+SqpCDx+U= Subject key identifier: 7E:4F:C5:AE:21:23:3C:F0:C8:06:E6:22:48:02:6A:6E:3C:B7:FE:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 164FE855684D41647936C77DC006C1A0FC930FAB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/375e438a-60e4-49fc-b642-eb3e14a5e897.roa Signing time: Mon 04 Aug 2025 18:21:24 +0000 ROA not before: Mon 04 Aug 2025 18:21:24 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4f:e8:55:68:4d:41:64:79:36:c7:7d:c0:06:c1:a0:fc:93:0f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 4 18:21:24 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=af54120717075ff60da3d960fc1fa022033cedadef21802be60b5ea587e14889, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:01:46:7d:db:54:62:c4:d9:aa:f3:d6:13: 32:cd:f8:e2:91:93:2e:36:9c:b3:09:e8:20:da:06: 37:15:b7:f2:cc:dc:f9:70:2b:5f:42:29:6c:d9:41: e5:66:52:6c:e8:4f:87:78:98:d0:a6:a7:ce:f8:f0: a6:0a:a7:32:4b:ab:29:f4:a5:c0:27:8b:c1:8b:aa: 0b:32:cc:9d:25:23:97:50:c9:46:c1:ce:1e:c9:48: bf:bb:eb:0f:ec:e9:15:b1:a2:20:e1:4d:56:9e:74: 39:bc:2b:a8:4c:03:e9:47:b3:f0:09:a3:00:6f:84: fb:0c:ac:41:0b:ad:8c:ae:07:c5:ea:03:b3:07:a4: 9b:e2:99:4f:4f:4a:a5:1f:4a:d2:92:a9:16:42:a0: 29:89:e3:61:1e:f5:0d:82:47:bd:72:23:6d:1e:c5: fa:d7:cb:c4:d4:c3:fa:f5:93:7c:0e:9f:81:c6:49: 8a:61:7f:91:ba:e0:64:dc:ab:4c:17:6c:db:42:f2: 5c:9f:c6:c7:c6:2e:b9:b6:cf:63:0e:cc:e9:ad:b0: 87:ff:b0:42:d8:5f:0b:bc:98:d3:cf:4f:cf:ab:ed: a0:93:4e:b2:71:39:35:b6:48:5f:8f:1d:ad:3a:c7: 83:52:5e:46:06:e6:a2:a3:a4:f1:33:3e:43:e0:2e: a6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4F:C5:AE:21:23:3C:F0:C8:06:E6:22:48:02:6A:6E:3C:B7:FE:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/375e438a-60e4-49fc-b642-eb3e14a5e897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.56.0/21 Signature Algorithm: sha256WithRSAEncryption 72:fb:df:34:f2:7c:76:f2:f6:9e:cf:be:e2:3f:f1:cd:22:18: b9:ff:67:19:91:42:ac:5e:2b:48:b4:bd:4e:65:a9:bf:f3:33: c0:bc:ed:1b:a3:6e:26:a4:c9:08:e4:c9:ee:4c:e8:c0:3f:7a: 97:68:7d:64:46:c6:96:7b:e0:15:d0:c2:3f:4f:36:35:cf:46: 69:c4:49:86:f1:24:17:7d:c9:54:bb:6f:ed:dd:e6:8b:e4:e6: 99:5a:df:1e:6c:27:7d:8a:88:d3:83:3b:47:12:c4:0a:c6:c2: 84:92:4d:3c:42:89:bc:fb:10:74:29:d2:5c:fc:6c:bf:55:e7: c3:97:36:16:06:16:77:0a:17:9e:cc:3a:fe:1f:a5:b5:d0:8e: 28:d4:43:dd:59:bf:e9:50:6d:90:2b:bd:a4:5f:a7:64:8e:e5: 2d:70:a0:10:2d:cc:c1:ef:52:2a:1b:1d:d8:19:44:90:3c:7f: 99:9f:3d:47:44:fd:76:84:09:e0:f3:16:29:b9:ee:72:09:3f: 56:f9:9b:79:ce:3b:c0:66:7c:2f:66:de:86:29:2e:16:5d:a5: 4a:30:41:9a:95:5a:62:61:f2:ca:4e:24:34:a1:f6:b3:80:dd: 8f:05:66:56:4b:b2:4c:e7:27:0a:91:85:45:72:f9:67:96:7d: 81:3e:53:05 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFk/oVWhNQWR5Nsd9wAbBoPyTD6swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA0MTgyMTI0WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjU0MTIwNzE3MDc1ZmY2MGRhM2Q5NjBmYzFmYTAyMjAz M2NlZGFkZWYyMTgwMmJlNjBiNWVhNTg3ZTE0ODg5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4NgFGfdtUYsTZqvPWEzLN+OKRky42nLMJ6CDaBjcVt/LM 3PlwK19CKWzZQeVmUmzoT4d4mNCmp8748KYKpzJLqyn0pcAni8GLqgsyzJ0lI5dQ yUbBzh7JSL+76w/s6RWxoiDhTVaedDm8K6hMA+lHs/AJowBvhPsMrEELrYyuB8Xq A7MHpJvimU9PSqUfStKSqRZCoCmJ42Ee9Q2CR71yI20exfrXy8TUw/r1k3wOn4HG SYphf5G64GTcq0wXbNtC8lyfxsfGLrm2z2MOzOmtsIf/sELYXwu8mNPPT8+r7aCT TrJxOTW2SF+PHa06x4NSXkYG5qKjpPEzPkPgLqZ1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfk/FriEjPPDIBuYiSAJqbjy3/kkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM3NWU0MzhhLTYwZTQtNDlmYy1iNjQyLWViM2UxNGE1ZTg5Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM27zgwDQYJKoZIhvcNAQELBQADggEBAHL73zTyfHby9p7PvuI/8c0iGLn/ ZxmRQqxeK0i0vU5lqb/zM8C87RujbiakyQjkye5M6MA/epdofWRGxpZ74BXQwj9P NjXPRmnESYbxJBd9yVS7b+3d5ovk5pla3x5sJ32KiNODO0cSxArGwoSSTTxCibz7 EHQp0lz8bL9V58OXNhYGFncKF57MOv4fpbXQjijUQ91Zv+lQbZArvaRfp2SO5S1w oBAtzMHvUiobHdgZRJA8f5mfPUdE/XaECeDzFim57nIJP1b5m3nOO8BmfC9m3oYp LhZdpUowQZqVWmJh8spOJDSh9rOA3Y8FZlZLskznJwqRhUVy+WeWfYE+UwU= -----END CERTIFICATE-----Generated at Mon Aug 4 21:47:04 2025 by rpki-client