$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be5bf81-7974-4cac-8621-0cce3471aa2b.roa File: 4be5bf81-7974-4cac-8621-0cce3471aa2b.roa (raw, json) Hash identifier: jmoVuYVLSYrI7V3ZI8ev1owxLJvKLsxooT6xxoKLkVM= Subject key identifier: CD:DA:4B:AA:66:9F:8B:C7:9B:02:6C:A0:1C:CF:80:00:09:DF:41:7E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0F438ED41E443250270E067445E3DEB1840CA111 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be5bf81-7974-4cac-8621-0cce3471aa2b.roa Signing time: Tue 29 Jul 2025 17:40:16 +0000 ROA not before: Tue 29 Jul 2025 17:40:16 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.245.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:43:8e:d4:1e:44:32:50:27:0e:06:74:45:e3:de:b1:84:0c:a1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 17:40:16 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=68c846b18f8ce54e692532f4c01b0e06b85e5ae81315c8c1d80dcf7b4f194fca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:d1:15:3d:6b:62:c3:40:1f:33:a5:f8:95: 2b:cc:50:25:d1:21:aa:07:5f:73:43:15:b4:c9:cd: 67:74:bf:06:32:a4:1b:d9:a5:cd:7a:5f:0b:ef:47: 86:24:89:3f:97:fb:4c:33:a9:5a:e9:1a:b7:cd:76: 5b:6e:73:89:7b:02:1f:38:04:66:41:68:84:6f:ec: f0:a9:c1:ed:45:9a:a7:41:a5:fa:aa:62:af:7d:24: c7:5e:d8:5e:8a:82:96:45:42:d0:77:cf:19:97:4d: 7e:65:ee:62:94:44:af:4e:ab:8c:05:a7:a5:98:8c: 10:81:30:5c:93:57:82:47:f2:03:67:7c:56:00:90: 89:1d:5b:70:e7:7e:44:1c:21:5f:82:6d:ef:4e:58: f3:fa:8f:af:7b:fc:bb:ca:fb:e4:a0:7c:e5:b3:cb: a6:12:97:fc:12:a9:3a:47:5f:ff:d6:4c:a3:42:b9: ac:d6:e1:7c:2c:7b:7e:a9:a1:eb:cb:0f:f8:fd:42: 3e:5a:b6:aa:89:08:71:a6:4d:d8:48:c3:37:eb:9a: ff:67:bf:63:9f:a8:e3:2b:a2:77:18:80:97:4b:b9: 72:17:55:5e:f6:0b:bc:09:44:a7:57:6f:e0:73:35: 28:1e:d1:9b:5b:f6:84:84:82:9e:12:fe:da:9b:f6: 2b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DA:4B:AA:66:9F:8B:C7:9B:02:6C:A0:1C:CF:80:00:09:DF:41:7E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be5bf81-7974-4cac-8621-0cce3471aa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.245.160.0/21 Signature Algorithm: sha256WithRSAEncryption 00:fc:13:87:ab:b7:cb:b0:4a:12:94:56:9e:4a:c8:53:c4:47: 27:2c:ca:f9:5a:be:75:25:57:2d:99:31:88:80:80:90:c9:5e: 1a:3a:b6:85:72:cd:29:f1:22:39:93:ca:f2:fb:67:73:dc:d6: 6c:e0:a0:cf:08:a5:a3:1b:a6:07:41:ef:e4:22:5d:b8:ad:bc: 60:58:40:55:0e:7c:ad:d9:78:0b:3e:35:9b:b4:4f:68:f5:96: ef:ea:a4:9a:d3:bd:56:c9:2f:89:65:10:3d:76:f9:35:4d:e9: 5a:7e:54:9f:74:5f:3f:32:bb:3a:a9:b0:13:9c:4b:70:25:a1: 1e:60:1c:5c:f9:de:01:ce:d1:27:1b:e9:f0:8a:13:38:65:26: 17:49:e8:10:da:6b:80:2a:fa:f1:6a:c8:cd:b6:42:20:cf:bc: d0:ba:7b:db:6e:38:df:61:f2:99:5a:7b:10:34:f6:1b:c8:d2: fd:85:b3:ec:6d:ae:ed:80:9b:ee:b6:22:5e:5e:b8:5b:7b:21: 9c:2d:44:da:65:e8:4a:30:47:87:91:c2:cf:57:c5:9d:98:4c: f2:01:fe:48:6b:8f:ce:c5:66:7c:14:19:02:1c:e8:56:9e:c8: 56:36:f6:8b:53:aa:7c:b1:48:71:e5:f6:c2:ed:a3:2d:b0:cf: 02:44:f6:8a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUD0OO1B5EMlAnDgZ0RePesYQMoREwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTc0MDE2WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGM4NDZiMThmOGNlNTRlNjkyNTMyZjRjMDFiMGUwNmI4 NWU1YWU4MTMxNWM4YzFkODBkY2Y3YjRmMTk0ZmNhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDVMdEVPWtiw0AfM6X4lSvMUCXRIaoHX3NDFbTJzWd0vwYy pBvZpc16XwvvR4YkiT+X+0wzqVrpGrfNdltuc4l7Ah84BGZBaIRv7PCpwe1FmqdB pfqqYq99JMde2F6KgpZFQtB3zxmXTX5l7mKURK9Oq4wFp6WYjBCBMFyTV4JH8gNn fFYAkIkdW3DnfkQcIV+Cbe9OWPP6j697/LvK++SgfOWzy6YSl/wSqTpHX//WTKNC uazW4Xwse36poevLD/j9Qj5atqqJCHGmTdhIwzfrmv9nv2OfqOMroncYgJdLuXIX VV72C7wJRKdXb+BzNSge0Ztb9oSEgp4S/tqb9ivdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzdpLqmafi8ebAmygHM+AAAnfQX4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRiZTViZjgxLTc5NzQtNGNhYy04NjIxLTBjY2UzNDcxYWEyYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM29aAwDQYJKoZIhvcNAQELBQADggEBAAD8E4ert8uwShKUVp5KyFPERycs yvlavnUlVy2ZMYiAgJDJXho6toVyzSnxIjmTyvL7Z3Pc1mzgoM8IpaMbpgdB7+Qi XbitvGBYQFUOfK3ZeAs+NZu0T2j1lu/qpJrTvVbJL4llED12+TVN6Vp+VJ90Xz8y uzqpsBOcS3AloR5gHFz53gHO0Scb6fCKEzhlJhdJ6BDaa4Aq+vFqyM22QiDPvNC6 e9tuON9h8plaexA09hvI0v2Fs+xtru2Am+62Il5euFt7IZwtRNpl6EowR4eRws9X xZ2YTPIB/khrj87FZnwUGQIc6FaeyFY29otTqnyxSHHl9sLtoy2wzwJE9oo= -----END CERTIFICATE-----Generated at Mon Aug 4 21:46:32 2025 by rpki-client