$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62ec428d-1293-43fe-8461-3ac8ad5e698d.roa File: 62ec428d-1293-43fe-8461-3ac8ad5e698d.roa (raw, json) Hash identifier: cho0t1N2xFAiJcBe/Y7NmqnAXxdzfGIEbSwIIdr+SfM= Subject key identifier: 5B:41:C9:2C:FC:D5:99:35:9A:47:FF:15:19:95:C8:21:57:9E:C3:96 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 27B1681F9D594E4295CF5BE9E7FB88360944DA73 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62ec428d-1293-43fe-8461-3ac8ad5e698d.roa Signing time: Tue 29 Jul 2025 16:51:33 +0000 ROA not before: Tue 29 Jul 2025 16:51:33 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.238.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:b1:68:1f:9d:59:4e:42:95:cf:5b:e9:e7:fb:88:36:09:44:da:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 16:51:33 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=4f8c8478ca0082bd7347d3754e2070c7155ef1ee9df6db0627666ca42b037f88, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:a7:6c:b2:0c:3d:1f:4b:4f:4e:96:a2:6d: 1e:67:3a:ce:bd:06:b1:3a:0a:38:06:c8:22:f5:f3: 17:f3:5b:0a:41:d7:38:af:8c:db:98:5d:ec:0b:8a: 5b:8f:11:f9:50:16:d6:c8:fe:75:58:2b:b3:76:ac: 20:55:a2:e2:d9:06:bc:72:eb:98:8a:c6:d4:d4:69: e6:c6:40:99:fc:52:fb:55:8a:6b:a3:55:9d:c1:2b: 1b:f8:37:39:0e:bd:df:82:16:44:01:7a:f1:a2:9d: 47:0d:94:40:ae:56:53:c6:3d:10:42:50:bd:fb:d4: 22:13:63:39:17:7b:6a:ff:6b:1b:1f:77:66:18:ae: 22:b5:2b:38:af:d1:ad:a8:ea:49:11:42:e2:34:90: a6:fb:1c:37:cf:c3:ac:19:bd:81:b5:81:63:10:f5: 29:ce:7c:51:b5:a4:18:5f:43:48:17:50:6c:d9:bc: fa:23:71:2c:aa:d9:c8:7f:a9:db:b0:7e:13:32:bf: 8a:57:d4:bf:62:e6:b8:f0:bf:3b:83:36:ea:61:4d: d4:47:53:7c:3c:e4:df:93:8a:ce:fa:95:56:05:06: 8a:30:5c:8c:5c:21:36:71:73:ac:9f:10:55:2c:3a: 7f:d7:36:cc:bb:0e:a7:96:9a:cf:4e:ab:d8:0b:83: 9a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:41:C9:2C:FC:D5:99:35:9A:47:FF:15:19:95:C8:21:57:9E:C3:96 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/62ec428d-1293-43fe-8461-3ac8ad5e698d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.238.64.0/19 Signature Algorithm: sha256WithRSAEncryption 13:ee:f1:5c:f5:a8:ca:11:ca:77:a7:a4:89:47:4b:d1:a4:e1: d1:71:c4:93:8c:ee:aa:49:bc:70:b3:14:b1:1d:f0:95:2f:e0: 08:02:f3:4e:82:95:b2:62:d6:9a:ac:00:a9:e5:be:99:85:52: 4e:ba:c8:09:41:6f:45:86:8a:48:9f:4e:b9:3d:58:00:cb:d9: de:d9:94:e6:ab:5a:99:d5:c7:07:ec:3c:95:c1:52:63:59:80: c2:0c:e1:9a:7b:f2:f5:b6:1c:90:c8:3e:61:30:a4:25:64:27: 58:44:e9:0a:42:64:db:ad:a6:6b:84:a2:2f:26:45:dd:15:03: c1:8b:d1:00:c5:d1:17:93:ce:a9:2e:79:5a:3f:f1:a0:b6:d1: 3b:99:97:62:2d:55:24:96:99:c7:41:13:1d:69:f1:06:c1:d4: 38:77:70:bd:99:f1:e4:b7:26:1c:61:b5:9b:98:ca:33:33:fe: b4:73:27:31:b0:82:f1:ed:91:04:ae:61:c4:05:96:ad:9b:bf: fb:41:e8:7a:24:8b:69:0b:ff:50:2f:ee:54:cd:23:d9:74:6c: c6:ac:60:ac:1b:4a:ab:ad:df:7c:c7:82:f0:3c:ce:13:8c:80: 73:24:6a:d6:b8:a1:d0:d4:3f:6e:ad:eb:42:9a:ea:61:16:11: 4b:f5:d0:72 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJ7FoH51ZTkKVz1vp5/uINglE2nMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTY1MTMzWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjhjODQ3OGNhMDA4MmJkNzM0N2QzNzU0ZTIwNzBjNzE1 NWVmMWVlOWRmNmRiMDYyNzY2NmNhNDJiMDM3Zjg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6Dqdssgw9H0tPTpaibR5nOs69BrE6CjgGyCL18xfzWwpB 1zivjNuYXewLiluPEflQFtbI/nVYK7N2rCBVouLZBrxy65iKxtTUaebGQJn8UvtV imujVZ3BKxv4NzkOvd+CFkQBevGinUcNlECuVlPGPRBCUL371CITYzkXe2r/axsf d2YYriK1Kziv0a2o6kkRQuI0kKb7HDfPw6wZvYG1gWMQ9SnOfFG1pBhfQ0gXUGzZ vPojcSyq2ch/qduwfhMyv4pX1L9i5rjwvzuDNuphTdRHU3w85N+Tis76lVYFBoow XIxcITZxc6yfEFUsOn/XNsy7DqeWms9Oq9gLg5qXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW0HJLPzVmTWaR/8VGZXIIVeew5YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYyZWM0MjhkLTEyOTMtNDNmZS04NDYxLTNhYzhhZDVlNjk4ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU27kAwDQYJKoZIhvcNAQELBQADggEBABPu8Vz1qMoRynenpIlHS9Gk4dFx xJOM7qpJvHCzFLEd8JUv4AgC806ClbJi1pqsAKnlvpmFUk66yAlBb0WGikifTrk9 WADL2d7ZlOarWpnVxwfsPJXBUmNZgMIM4Zp78vW2HJDIPmEwpCVkJ1hE6QpCZNut pmuEoi8mRd0VA8GL0QDF0ReTzqkueVo/8aC20TuZl2ItVSSWmcdBEx1p8QbB1Dh3 cL2Z8eS3JhxhtZuYyjMz/rRzJzGwgvHtkQSuYcQFlq2bv/tB6Hoki2kL/1Av7lTN I9l0bMasYKwbSqut33zHgvA8zhOMgHMkata4odDUP26t60Ka6mEWEUv10HI= -----END CERTIFICATE-----Generated at Tue Aug 5 08:20:57 2025 by rpki-client