$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c474d9e-d017-4b10-8416-98cd563f111c.roa File: 4c474d9e-d017-4b10-8416-98cd563f111c.roa (raw, json) Hash identifier: qF2fd0417qttA97ql1RTWaHv7OvQ68DDyFURma1fnZM= Subject key identifier: 6A:1E:02:39:7A:03:30:00:03:08:83:A0:E3:C2:4B:52:06:56:56:40 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5C443CC4EED2777E4135992B1A227000129B07C2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c474d9e-d017-4b10-8416-98cd563f111c.roa Signing time: Tue 29 Jul 2025 16:11:30 +0000 ROA not before: Tue 29 Jul 2025 16:11:30 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.204.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:44:3c:c4:ee:d2:77:7e:41:35:99:2b:1a:22:70:00:12:9b:07:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 16:11:30 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=23555af6307c1938ee600011dae8b8684eb2e148bb9d6b8863f553db48293abf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:83:09:ab:a4:14:19:fd:eb:f2:16:71:c2:8e: a0:8f:70:10:f7:4d:14:54:85:e1:91:e9:67:3a:70: fc:33:5b:7f:be:d3:6d:cd:2b:b1:18:39:93:e6:92: b5:1c:08:f4:51:bb:b6:ba:f3:b2:a1:69:12:15:70: af:e9:ed:60:a0:9f:03:bb:2d:28:b3:d4:9a:26:81: ad:eb:6b:25:3c:c8:63:30:e1:7e:d6:11:7c:a3:63: bb:b3:16:cf:c1:59:ec:dd:0b:0a:de:fc:69:97:30: 39:07:a5:a4:2d:88:3a:00:12:33:45:e8:fa:39:05: 74:67:0b:34:44:e8:0d:1c:a8:3d:0f:3e:6c:4c:02: b4:3c:9b:15:a6:40:f5:1c:b2:28:78:26:4c:86:cf: 96:ae:dc:23:76:8e:fa:14:19:8b:be:87:6b:d5:6c: 4d:28:ae:2f:c1:0d:06:93:b0:c8:4c:58:59:ab:0c: be:4f:c6:de:9f:44:d2:06:06:11:59:59:a4:35:7a: 15:12:ed:4c:24:02:d2:13:3f:b6:40:c8:34:44:cd: 48:d9:e0:3b:c5:cd:59:33:e8:96:6c:a1:58:c5:41: 87:c8:01:f2:9f:47:21:05:d1:86:a2:52:21:13:5e: 06:e5:20:64:fd:7a:fe:67:30:60:82:bd:2d:13:ef: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1E:02:39:7A:03:30:00:03:08:83:A0:E3:C2:4B:52:06:56:56:40 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c474d9e-d017-4b10-8416-98cd563f111c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.204.128.0/17 Signature Algorithm: sha256WithRSAEncryption 21:3e:d7:72:c0:74:af:7b:3b:c5:31:e1:08:15:37:41:9a:16: 23:94:7c:28:be:49:79:2e:c3:b0:69:b7:0d:50:74:48:b0:06: be:38:a7:33:c5:a3:3a:89:d9:01:30:f1:22:37:16:45:4d:58: 19:31:6b:2b:00:a2:8c:eb:94:ba:72:1d:8c:4c:6d:bf:fd:f2: 6d:2e:8b:48:80:80:5f:cd:e9:69:46:18:81:a6:90:9a:62:23: f2:ba:59:25:bd:cc:8e:ff:ef:72:79:02:a7:06:53:6c:f6:ae: 99:f4:97:ab:3d:6a:59:55:a1:5e:16:8f:7b:1e:7d:4d:0b:6c: 97:11:9e:64:03:db:c4:12:70:28:11:e5:fb:3e:b4:92:ca:56: 1a:15:2e:43:8d:e7:f7:ea:46:ac:9e:00:5e:64:2e:e5:77:b9: a3:2e:29:a5:f2:e8:ee:16:de:eb:0f:45:06:f2:ff:7d:74:39: cf:db:ce:be:83:18:8e:c4:9a:67:da:74:08:9e:4c:d8:7b:ec: 89:ea:b4:6b:3d:63:77:ed:38:3a:9b:fb:3f:34:dd:5e:98:94: 87:16:6e:1e:db:36:65:fa:61:ca:b1:e1:1d:c3:07:f0:a3:e4: f8:06:af:ec:40:96:6a:04:d5:d0:18:51:65:a2:82:c7:71:52: 54:7c:72:fe -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXEQ8xO7Sd35BNZkrGiJwABKbB8IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTYxMTMwWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyMzU1NWFmNjMwN2MxOTM4ZWU2MDAwMTFkYWU4Yjg2ODRl YjJlMTQ4YmI5ZDZiODg2M2Y1NTNkYjQ4MjkzYWJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDogwmrpBQZ/evyFnHCjqCPcBD3TRRUheGR6Wc6cPwzW3++ 023NK7EYOZPmkrUcCPRRu7a687KhaRIVcK/p7WCgnwO7LSiz1Jomga3rayU8yGMw 4X7WEXyjY7uzFs/BWezdCwre/GmXMDkHpaQtiDoAEjNF6Po5BXRnCzRE6A0cqD0P PmxMArQ8mxWmQPUcsih4JkyGz5au3CN2jvoUGYu+h2vVbE0ori/BDQaTsMhMWFmr DL5Pxt6fRNIGBhFZWaQ1ehUS7UwkAtITP7ZAyDREzUjZ4DvFzVkz6JZsoVjFQYfI AfKfRyEF0YaiUiETXgblIGT9ev5nMGCCvS0T74w9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUah4COXoDMAADCIOg48JLUgZWVkAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjNDc0ZDllLWQwMTctNGIxMC04NDE2LTk4Y2Q1NjNmMTExYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2zIAwDQYJKoZIhvcNAQELBQADggEBACE+13LAdK97O8Ux4QgVN0GaFiOU fCi+SXkuw7Bptw1QdEiwBr44pzPFozqJ2QEw8SI3FkVNWBkxaysAoozrlLpyHYxM bb/98m0ui0iAgF/N6WlGGIGmkJpiI/K6WSW9zI7/73J5AqcGU2z2rpn0l6s9allV oV4Wj3sefU0LbJcRnmQD28QScCgR5fs+tJLKVhoVLkON5/fqRqyeAF5kLuV3uaMu KaXy6O4W3usPRQby/310Oc/bzr6DGI7EmmfadAieTNh77InqtGs9Y3ftODqb+z80 3V6YlIcWbh7bNmX6Ycqx4R3DB/Cj5PgGr+xAlmoE1dAYUWWigsdxUlR8cv4= -----END CERTIFICATE-----Generated at Mon Aug 4 15:59:45 2025 by rpki-client