$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40ef5cc4-f868-4df8-bf27-0e3d1b18100f.roa File: 40ef5cc4-f868-4df8-bf27-0e3d1b18100f.roa (raw, json) Hash identifier: qBRL7caAYK3sZB33yAkjgIBsys53wBi+rq9+ABJUHJ8= Subject key identifier: 9C:8F:C7:7B:94:38:83:4A:30:40:76:F6:4C:55:86:F1:C5:63:C5:E9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 53FF48727FD4FFB083468646F3A221D1868D56F5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40ef5cc4-f868-4df8-bf27-0e3d1b18100f.roa Signing time: Fri 11 Jul 2025 16:50:47 +0000 ROA not before: Fri 11 Jul 2025 16:50:47 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.153.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ff:48:72:7f:d4:ff:b0:83:46:86:46:f3:a2:21:d1:86:8d:56:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 16:50:47 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=ab1eaded94db7ac417194008cc42c4fcdf82d4830197966d88ec59e4b2597921, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0c:11:08:f5:eb:a6:05:8a:c9:de:63:50:e9: 15:a1:6e:66:ac:cb:42:18:39:1f:05:d8:00:76:f0: a9:06:0d:04:dc:f5:fb:4b:9e:3f:5a:ab:61:f8:8b: 55:59:97:9e:dc:72:2e:21:55:32:1f:7f:af:0a:ea: 3f:2c:eb:1e:95:f2:06:4b:21:2d:24:d0:0b:25:fb: 19:66:3a:ad:7f:ff:ff:6a:89:43:e9:22:c6:1f:9c: d4:ea:9e:e8:f1:0b:26:e7:6f:da:cd:64:2a:f5:ed: 9e:96:19:c8:18:d1:0c:d0:86:02:bf:46:2c:32:85: ca:01:66:6c:9b:5a:cf:33:96:3a:ff:d6:c9:58:b8: df:4e:d1:92:62:e3:75:2a:fb:a7:7c:4d:d8:6c:9c: df:53:06:49:ca:b8:79:52:a1:cc:c9:dc:d4:77:eb: 00:d3:63:3f:13:da:32:79:9a:68:8d:0a:7c:6f:17: bd:fd:fa:2d:ef:a0:f0:63:65:97:86:e0:10:1b:8a: 30:67:f1:3b:27:76:3b:17:9b:ef:8b:32:e4:1f:7c: de:01:75:8c:67:20:b9:8b:9c:b9:dc:45:51:3f:1d: 1e:f9:41:a4:47:79:ac:88:a3:69:38:66:f7:b0:5e: b9:a0:0f:72:bc:80:c8:eb:76:8d:5d:99:af:cd:8f: c9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8F:C7:7B:94:38:83:4A:30:40:76:F6:4C:55:86:F1:C5:63:C5:E9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/40ef5cc4-f868-4df8-bf27-0e3d1b18100f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.153.0.0/22 Signature Algorithm: sha256WithRSAEncryption 26:e7:c0:3a:a0:b7:24:d7:45:84:9c:83:dd:14:fe:81:64:fb: 77:67:01:3a:80:c1:91:6e:17:08:52:03:7b:a7:38:39:af:41: dc:67:52:13:df:92:2d:06:32:f6:db:33:bf:52:82:2d:cb:5c: cd:19:91:8d:52:ab:f4:9b:75:f4:3a:5e:35:82:98:26:ee:89: 50:1f:e1:79:11:3c:a6:38:31:ee:ac:db:f2:d2:81:83:dd:8d: 35:e2:f6:b3:cf:9e:61:77:1e:fb:49:94:6c:c6:07:83:c5:f2: 61:7f:9a:e4:3a:3d:b6:ec:06:7d:56:cf:79:46:8e:77:a7:ce: 4a:15:75:eb:95:ad:fa:d9:47:bb:f8:e2:a2:a3:e2:96:31:e4: 3f:21:da:47:c0:0a:0b:d6:90:2c:74:72:70:f9:7b:f3:85:6e: 7f:6e:c5:47:cb:e5:1a:f6:62:f1:7e:12:83:01:76:56:5d:49: fd:4d:bc:6f:09:35:81:2d:9d:c4:2a:34:77:35:40:db:e2:af: 23:91:d4:a2:8c:8d:48:0d:11:e7:a4:33:7e:70:17:7b:21:c6: 30:c5:db:c6:0a:00:5c:c2:03:47:77:a1:64:94:0c:9b:81:6d: 6d:79:64:e5:48:46:34:32:5b:20:07:69:ee:b6:90:32:90:46: 7e:51:3a:77 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU/9Icn/U/7CDRoZG86Ih0YaNVvUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTY1MDQ3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BhYjFlYWRlZDk0ZGI3YWM0MTcxOTQwMDhjYzQyYzRmY2Rm ODJkNDgzMDE5Nzk2NmQ4OGVjNTllNGIyNTk3OTIxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD2DBEI9eumBYrJ3mNQ6RWhbmasy0IYOR8F2AB28KkGDQTc 9ftLnj9aq2H4i1VZl57cci4hVTIff68K6j8s6x6V8gZLIS0k0Asl+xlmOq1///9q iUPpIsYfnNTqnujxCybnb9rNZCr17Z6WGcgY0QzQhgK/RiwyhcoBZmybWs8zljr/ 1slYuN9O0ZJi43Uq+6d8TdhsnN9TBknKuHlSoczJ3NR36wDTYz8T2jJ5mmiNCnxv F739+i3voPBjZZeG4BAbijBn8TsndjsXm++LMuQffN4BdYxnILmLnLncRVE/HR75 QaRHeayIo2k4ZvewXrmgD3K8gMjrdo1dma/Nj8k9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnI/He5Q4g0owQHb2TFWG8cVjxekwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQwZWY1Y2M0LWY4NjgtNGRmOC1iZjI3LTBlM2QxYjE4MTAwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIjmQAwDQYJKoZIhvcNAQELBQADggEBACbnwDqgtyTXRYScg90U/oFk+3dn ATqAwZFuFwhSA3unODmvQdxnUhPfki0GMvbbM79Sgi3LXM0ZkY1Sq/SbdfQ6XjWC mCbuiVAf4XkRPKY4Me6s2/LSgYPdjTXi9rPPnmF3HvtJlGzGB4PF8mF/muQ6Pbbs Bn1Wz3lGjnenzkoVdeuVrfrZR7v44qKj4pYx5D8h2kfACgvWkCx0cnD5e/OFbn9u xUfL5Rr2YvF+EoMBdlZdSf1NvG8JNYEtncQqNHc1QNviryOR1KKMjUgNEeekM35w F3shxjDF28YKAFzCA0d3oWSUDJuBbW15ZOVIRjQyWyAHae62kDKQRn5ROnc= -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:09 2025 by rpki-client