$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c846091-cf5f-4adb-a925-a64ba2af30f0.roa File: 4c846091-cf5f-4adb-a925-a64ba2af30f0.roa (raw, json) Hash identifier: rqaEIsBEV+iCK4AE/yBhGKdk6vLiai/fPYqFEfnHu30= Subject key identifier: 51:23:1F:99:95:08:10:D0:08:87:A9:6F:69:B7:2A:37:C9:5B:C0:17 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2B37F03E852FF86D8DCEF2DFA624902E66DF37DF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c846091-cf5f-4adb-a925-a64ba2af30f0.roa Signing time: Tue 29 Jul 2025 16:11:40 +0000 ROA not before: Tue 29 Jul 2025 16:11:40 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.194.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:37:f0:3e:85:2f:f8:6d:8d:ce:f2:df:a6:24:90:2e:66:df:37:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 16:11:40 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=ce3e1db1c1021a70c84e8c7755bf93d808ed6949420de9c710e85d22741f8a87, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:d2:60:e1:d4:2d:d2:14:3a:10:08:fb:7e: cc:6c:95:4a:0f:9c:e6:ab:d8:9f:22:55:0e:8b:95: 42:3d:3a:35:e0:e1:ca:8f:b8:af:92:70:0f:e1:33: 79:60:76:ab:d4:e4:31:7f:fa:44:e6:e7:b8:be:57: 4d:48:74:1b:c7:ab:c9:f1:3d:6e:55:96:ca:bf:12: f3:2c:33:29:95:29:18:24:1e:4b:41:ae:77:ac:48: 9b:bf:cd:e7:3c:65:8b:e9:48:d1:75:2e:1b:79:ae: a3:12:a1:8a:03:28:80:21:13:c2:a6:30:06:ff:e5: 2a:e0:03:55:c0:8b:89:e9:74:8f:ae:26:17:f3:f7: a0:f2:d8:8c:bf:08:66:7b:8f:22:fc:e0:1a:38:8e: 79:82:c6:c0:a0:50:41:a2:6d:53:90:f2:63:cc:f6: d5:bf:51:06:f4:ed:c2:56:7c:c9:aa:3d:7a:9e:1b: 40:72:9b:2c:20:ef:4c:02:55:f7:98:bf:c0:72:29: b2:8a:21:ee:ad:29:72:26:71:12:66:55:11:f4:ff: 79:db:97:f3:08:c8:5d:06:2e:54:86:ca:26:62:43: 25:c9:95:6f:8c:5e:52:c7:f3:d8:5b:2c:a0:7b:33: 44:f4:ec:04:49:dd:59:57:12:74:60:36:c2:5e:1c: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:23:1F:99:95:08:10:D0:08:87:A9:6F:69:B7:2A:37:C9:5B:C0:17 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c846091-cf5f-4adb-a925-a64ba2af30f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.194.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4b:6a:d5:90:8b:d3:ee:8b:24:da:db:fd:03:2f:3d:b5:8a:8c: 45:94:aa:70:1e:4f:06:ea:9e:0c:83:ac:83:8d:19:d3:09:3a: 39:2c:87:e2:f9:bf:8c:3d:0b:6e:cf:3f:36:f2:45:88:5b:fa: 56:c6:59:a5:1d:4c:93:79:15:d6:99:9a:4b:57:6c:33:57:70: 00:a3:c1:04:d2:c4:43:05:43:cf:36:bc:67:63:a8:6c:d7:02: 43:fd:7a:10:76:34:7d:2e:61:b8:6f:e3:06:9f:e1:35:6c:08: 79:45:7a:28:00:3d:2a:09:3e:bd:46:63:f6:6d:a0:e8:d2:99: b3:6c:d9:bf:cf:f4:ba:1d:be:19:38:b4:ac:56:95:77:a1:f2: 44:f4:0a:7e:0b:ec:37:9a:b1:06:0c:fd:6c:96:05:88:b8:70: 59:5d:f8:bc:36:4a:31:e6:7a:8e:e2:54:0a:df:de:72:dc:1a: 8f:44:53:b2:e8:9d:f4:b1:ec:fd:c6:45:7b:98:50:de:70:21: 7b:c9:ee:4a:32:ad:7b:5e:39:ed:02:bf:6f:c7:bf:99:78:22: 0d:32:7b:bd:c9:2d:7f:53:13:57:f0:9a:26:ca:7f:00:dc:d3: 5d:9e:e9:96:d8:e3:6b:f8:c6:f6:40:be:7a:bf:73:47:8b:d1: 48:ae:b2:82 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKzfwPoUv+G2NzvLfpiSQLmbfN98wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTYxMTQwWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjZTNlMWRiMWMxMDIxYTcwYzg0ZThjNzc1NWJmOTNkODA4 ZWQ2OTQ5NDIwZGU5YzcxMGU4NWQyMjc0MWY4YTg3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4OdJg4dQt0hQ6EAj7fsxslUoPnOar2J8iVQ6LlUI9OjXg 4cqPuK+ScA/hM3lgdqvU5DF/+kTm57i+V01IdBvHq8nxPW5Vlsq/EvMsMymVKRgk HktBrnesSJu/zec8ZYvpSNF1Lht5rqMSoYoDKIAhE8KmMAb/5SrgA1XAi4npdI+u Jhfz96Dy2Iy/CGZ7jyL84Bo4jnmCxsCgUEGibVOQ8mPM9tW/UQb07cJWfMmqPXqe G0Bymywg70wCVfeYv8ByKbKKIe6tKXImcRJmVRH0/3nbl/MIyF0GLlSGyiZiQyXJ lW+MXlLH89hbLKB7M0T07ARJ3VlXEnRgNsJeHB2nAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUUSMfmZUIENAIh6lvabcqN8lbwBcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjODQ2MDkxLWNmNWYtNGFkYi1hOTI1LWE2NGJhMmFmMzBmMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2wjANBgkqhkiG9w0BAQsFAAOCAQEAS2rVkIvT7osk2tv9Ay89tYqMRZSq cB5PBuqeDIOsg40Z0wk6OSyH4vm/jD0Lbs8/NvJFiFv6VsZZpR1Mk3kV1pmaS1ds M1dwAKPBBNLEQwVDzza8Z2OobNcCQ/16EHY0fS5huG/jBp/hNWwIeUV6KAA9Kgk+ vUZj9m2g6NKZs2zZv8/0uh2+GTi0rFaVd6HyRPQKfgvsN5qxBgz9bJYFiLhwWV34 vDZKMeZ6juJUCt/ectwaj0RTsuid9LHs/cZFe5hQ3nAhe8nuSjKte1457QK/b8e/ mXgiDTJ7vcktf1MTV/CaJsp/ANzTXZ7pltjja/jG9kC+er9zR4vRSK6ygg== -----END CERTIFICATE-----Generated at Mon Aug 4 21:31:57 2025 by rpki-client