$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfc8985-f30d-4aee-baa4-fb39c7f7d7b5.roa File: 5bfc8985-f30d-4aee-baa4-fb39c7f7d7b5.roa (raw, json) Hash identifier: 21EKoyHJJc1Lbw7ICay34ZE9vYtqXhPk5FhGGAwW81w= Subject key identifier: A6:FF:08:96:F1:E2:92:3F:57:DF:7E:94:58:3A:4B:A5:AB:B9:AD:B1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2AF9FE5B174BF467DF52174F90F9EDD9936F16C4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfc8985-f30d-4aee-baa4-fb39c7f7d7b5.roa Signing time: Fri 11 Jul 2025 17:41:48 +0000 ROA not before: Fri 11 Jul 2025 17:41:48 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.92.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f9:fe:5b:17:4b:f4:67:df:52:17:4f:90:f9:ed:d9:93:6f:16:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:41:48 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=52d84479aeb634aa5184c165fa543e1c72da5788e33f19986a5366d30a5e0783, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:4f:0e:8b:4a:5e:84:ce:c9:ff:36:7d:42: bf:41:df:d4:c0:d1:21:c9:f6:ea:ea:1f:06:3a:a2: c8:2f:16:a4:ce:0a:34:83:ac:2e:03:86:a8:7a:38: 2d:51:2a:82:b7:cb:d6:51:c9:71:81:22:85:6a:42: 0d:aa:b7:e6:92:b5:fb:e4:33:44:39:6a:dd:85:ce: 2b:1e:48:75:eb:96:d8:65:86:a8:4c:e5:44:de:f2: 5d:21:b9:9b:86:02:72:9f:37:0a:33:69:f9:2d:4d: b0:2d:be:c0:d7:53:0c:7b:65:bc:3e:4c:6f:17:b0: 79:a1:d9:50:09:e0:4e:23:da:dd:aa:e3:c2:9d:01: 92:68:5f:38:a9:79:1b:79:76:2f:fd:6c:71:e7:57: f7:f7:40:a7:9b:9f:f0:d9:02:51:c7:6e:03:da:67: 37:99:69:25:02:ff:16:47:58:a4:37:9d:97:7d:35: d7:00:74:3f:dd:b3:5e:ca:37:ab:73:31:0f:e9:ef: 65:0f:12:70:80:e5:92:10:7f:02:63:1e:07:df:8a: 18:54:7a:9b:4c:30:b7:77:27:0e:2f:6a:8b:2a:ac: 43:a3:c1:00:77:d4:b8:57:9b:54:42:5c:86:ef:60: 19:df:fb:f0:54:5f:e6:76:b8:15:e1:fc:4a:74:cc: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FF:08:96:F1:E2:92:3F:57:DF:7E:94:58:3A:4B:A5:AB:B9:AD:B1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfc8985-f30d-4aee-baa4-fb39c7f7d7b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.92.128.0/17 Signature Algorithm: sha256WithRSAEncryption 26:93:20:54:c0:6b:76:6a:e5:85:f3:42:81:33:7f:ba:56:25: 22:76:3b:a0:1d:d8:b1:7e:81:32:8d:2b:b9:c0:98:a1:77:a4: bc:7a:75:49:1e:58:71:fc:52:a5:83:76:f5:b3:07:65:73:10: 43:1f:1b:f3:a4:21:da:3f:84:aa:4e:eb:ed:a2:db:70:c8:ba: 07:fe:69:fb:4d:97:fe:3d:1c:c0:c7:05:50:e0:80:bc:d6:85: f9:e0:38:dc:7e:42:51:fd:60:95:f6:13:d9:e4:74:0f:82:52: b0:64:2e:8c:ab:51:9a:a9:7c:1c:5b:94:c2:3c:42:91:c1:1e: 69:a9:35:c2:fc:be:26:5e:ba:6e:22:0c:a7:2b:75:08:d1:43: bc:6c:fb:67:be:70:f2:b5:1b:eb:f4:9b:db:d9:0b:23:e1:54: 1d:fc:85:ca:83:59:3c:4f:3d:59:5a:f2:c4:ce:8d:e8:3d:e1: 3d:96:9f:e0:d8:ff:cb:71:41:e1:7e:df:b0:6b:bb:79:93:03: dc:a8:d5:c4:da:c1:7c:67:7d:db:7d:cf:f2:ec:fb:dd:8b:60: cf:3b:9d:9a:cb:33:5a:5e:28:fd:49:e0:35:e1:80:22:7b:ec: b8:52:6c:50:2c:e5:32:f9:27:8b:b6:0c:d6:5d:ec:7a:96:3a: 94:ad:92:4f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKvn+WxdL9GffUhdPkPnt2ZNvFsQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTc0MTQ4WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmQ4NDQ3OWFlYjYzNGFhNTE4NGMxNjVmYTU0M2UxYzcy ZGE1Nzg4ZTMzZjE5OTg2YTUzNjZkMzBhNWUwNzgzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCqhk8Oi0pehM7J/zZ9Qr9B39TA0SHJ9urqHwY6osgvFqTO CjSDrC4Dhqh6OC1RKoK3y9ZRyXGBIoVqQg2qt+aStfvkM0Q5at2FziseSHXrlthl hqhM5UTe8l0huZuGAnKfNwozafktTbAtvsDXUwx7Zbw+TG8XsHmh2VAJ4E4j2t2q 48KdAZJoXzipeRt5di/9bHHnV/f3QKebn/DZAlHHbgPaZzeZaSUC/xZHWKQ3nZd9 NdcAdD/ds17KN6tzMQ/p72UPEnCA5ZIQfwJjHgffihhUeptMMLd3Jw4vaosqrEOj wQB31LhXm1RCXIbvYBnf+/BUX+Z2uBXh/Ep0zH8FAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpv8IlvHikj9X336UWDpLpau5rbEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzViZmM4OTg1LWYzMGQtNGFlZS1iYWE0LWZiMzljN2Y3ZDdiNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2XIAwDQYJKoZIhvcNAQELBQADggEBACaTIFTAa3Zq5YXzQoEzf7pWJSJ2 O6Ad2LF+gTKNK7nAmKF3pLx6dUkeWHH8UqWDdvWzB2VzEEMfG/OkIdo/hKpO6+2i 23DIugf+aftNl/49HMDHBVDggLzWhfngONx+QlH9YJX2E9nkdA+CUrBkLoyrUZqp fBxblMI8QpHBHmmpNcL8viZeum4iDKcrdQjRQ7xs+2e+cPK1G+v0m9vZCyPhVB38 hcqDWTxPPVla8sTOjeg94T2Wn+DY/8txQeF+37Bru3mTA9yo1cTawXxnfdt9z/Ls +92LYM87nZrLM1peKP1J4DXhgCJ77LhSbFAs5TL5J4u2DNZd7HqWOpStkk8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:08:48 2025 by rpki-client