$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cd1065d-bc68-4e4c-a06a-7db171219996.roa File: 4cd1065d-bc68-4e4c-a06a-7db171219996.roa (raw, json) Hash identifier: y2H1V7FIFJt3Vn/ICrTWt2hhVcU3lc/n6LfFX44tKtM= Subject key identifier: 59:46:07:A8:13:30:3F:DD:FB:3C:E5:69:94:31:8E:E1:0F:D3:CC:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2EEEDF75DECA18F7B0F495DB3984E9F6D3599C39 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cd1065d-bc68-4e4c-a06a-7db171219996.roa Signing time: Fri 25 Jul 2025 16:20:15 +0000 ROA not before: Fri 25 Jul 2025 16:20:15 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.188.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ee:df:75:de:ca:18:f7:b0:f4:95:db:39:84:e9:f6:d3:59:9c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 16:20:15 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=086b52b41d91552474fcabdf8b9bf9863a2234cbaa7d9daffddea223eaaab386, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:dd:40:29:ac:d7:8f:e6:08:80:ee:18:99: 1e:6c:0b:94:a4:97:9d:be:db:d1:d4:58:a3:e5:79: 21:ba:cb:24:03:cd:4b:6a:b0:7e:15:93:13:78:cb: 74:f7:5d:0b:2a:e8:03:d5:86:c3:06:19:21:1b:f3: e5:7e:b7:1d:d5:4b:af:5e:82:93:3c:ef:a5:94:3a: d5:37:3f:1d:b1:f3:a7:ab:80:95:45:98:42:73:d7: bb:bf:91:0f:ce:57:71:c1:1b:d5:c6:8a:1c:4f:cc: 6e:66:7c:b3:8a:dc:3f:f7:52:66:71:e1:ff:f9:db: 91:bc:62:e0:a1:3e:74:c5:f0:60:50:0d:ea:af:6f: aa:f0:44:84:54:6f:a3:cd:40:93:3d:10:e8:c6:d6: bd:b1:60:c7:95:68:9d:49:13:5b:66:36:de:75:73: e5:52:5f:a1:81:b3:67:17:ac:5e:83:95:ef:eb:b8: fb:d9:d6:1c:42:91:be:9a:4a:51:7d:fb:1f:d4:ca: cf:d9:fa:64:8f:df:06:d3:f3:d3:57:1a:57:0e:fe: 11:9e:e5:c7:69:3d:b0:dd:8d:ef:e0:ac:82:bb:23: 1e:ab:21:83:bd:d8:50:b9:b1:3f:4d:45:95:17:db: 6d:74:0a:05:6c:40:53:67:6d:e9:c7:8c:b4:69:c5: 2e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:46:07:A8:13:30:3F:DD:FB:3C:E5:69:94:31:8E:E1:0F:D3:CC:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cd1065d-bc68-4e4c-a06a-7db171219996.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.188.128.0/17 Signature Algorithm: sha256WithRSAEncryption 7e:45:81:dc:2c:6c:7f:69:40:3b:fc:89:e5:88:b7:8c:69:c0: f4:af:8f:91:d0:62:f7:fb:b7:f7:97:a6:cf:45:30:e3:ba:04: 0b:fb:ed:bb:8d:52:16:f8:fb:78:0a:d9:ff:37:fa:ae:fe:93: 7b:60:d4:a6:64:d0:55:ce:ea:0b:ba:26:07:69:77:b6:5d:65: 6c:64:7b:dd:9f:e4:8f:8c:7b:47:8c:79:55:02:ca:a0:ac:25: c9:ae:e6:91:08:e1:49:fc:39:51:19:84:e9:98:ad:ef:a1:3a: 3f:40:66:5f:87:21:30:24:62:68:da:de:cd:fa:61:a6:64:f0: a1:4d:3d:92:29:31:0f:9b:60:03:1d:fe:f0:70:a7:3d:aa:6e: 53:90:28:e7:7f:c3:1f:cb:2e:b0:d4:8b:a8:bb:77:2a:a9:6c: 62:3d:85:77:7c:65:d6:48:d7:f4:e2:05:84:48:6c:cf:9b:18: 9d:68:16:8d:f1:31:f2:ec:6e:2e:4a:a9:bf:b4:ec:de:cf:26: 81:b8:e6:2e:d2:9f:a5:87:3c:f5:3e:fa:75:fe:cb:d5:f7:70: 46:f0:05:93:81:77:d7:ad:26:74:66:2d:63:e8:a6:a7:77:23: 3e:c4:07:a3:b0:3c:d8:9f:c9:ba:58:3c:4e:24:99:ed:e7:0e: f0:69:80:3d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULu7fdd7KGPew9JXbOYTp9tNZnDkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTYyMDE1WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwODZiNTJiNDFkOTE1NTI0NzRmY2FiZGY4YjliZjk4NjNh MjIzNGNiYWE3ZDlkYWZmZGRlYTIyM2VhYWFiMzg2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDWet1AKazXj+YIgO4YmR5sC5Skl52+29HUWKPleSG6yyQD zUtqsH4VkxN4y3T3XQsq6APVhsMGGSEb8+V+tx3VS69egpM876WUOtU3Px2x86er gJVFmEJz17u/kQ/OV3HBG9XGihxPzG5mfLOK3D/3UmZx4f/525G8YuChPnTF8GBQ Deqvb6rwRIRUb6PNQJM9EOjG1r2xYMeVaJ1JE1tmNt51c+VSX6GBs2cXrF6Dle/r uPvZ1hxCkb6aSlF9+x/Uys/Z+mSP3wbT89NXGlcO/hGe5cdpPbDdje/grIK7Ix6r IYO92FC5sT9NRZUX2210CgVsQFNnbenHjLRpxS6RAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUWUYHqBMwP937POVplDGO4Q/TzGcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjZDEwNjVkLWJjNjgtNGU0Yy1hMDZhLTdkYjE3MTIxOTk5Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2vIAwDQYJKoZIhvcNAQELBQADggEBAH5FgdwsbH9pQDv8ieWIt4xpwPSv j5HQYvf7t/eXps9FMOO6BAv77buNUhb4+3gK2f83+q7+k3tg1KZk0FXO6gu6Jgdp d7ZdZWxke92f5I+Me0eMeVUCyqCsJcmu5pEI4Un8OVEZhOmYre+hOj9AZl+HITAk Ymja3s36YaZk8KFNPZIpMQ+bYAMd/vBwpz2qblOQKOd/wx/LLrDUi6i7dyqpbGI9 hXd8ZdZI1/TiBYRIbM+bGJ1oFo3xMfLsbi5Kqb+07N7PJoG45i7Sn6WHPPU++nX+ y9X3cEbwBZOBd9etJnRmLWPopqd3Iz7EB6OwPNifybpYPE4kme3nDvBpgD0= -----END CERTIFICATE-----Generated at Mon Aug 4 21:42:20 2025 by rpki-client