$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65d7c64b-9772-467f-8f1b-c6113ca70c86.roa File: 65d7c64b-9772-467f-8f1b-c6113ca70c86.roa (raw, json) Hash identifier: dVmISdsFeaFbuKcxe5MqFPAipY5dBi1b8Pbees5PudQ= Subject key identifier: 48:1A:93:DD:43:44:CB:07:56:CE:8A:A6:0B:51:D2:F0:6D:27:A1:5D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C415F9AE8C7563535CE687E012D844C9105DC54 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65d7c64b-9772-467f-8f1b-c6113ca70c86.roa Signing time: Fri 25 Jul 2025 16:10:15 +0000 ROA not before: Fri 25 Jul 2025 16:10:15 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.190.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:41:5f:9a:e8:c7:56:35:35:ce:68:7e:01:2d:84:4c:91:05:dc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 16:10:15 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=934f8d9b01b905928cb3db00cdb03d88611d976801ea1b04119fc06c515efe09, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ac:78:7a:23:10:6e:b9:41:30:74:ec:f4:00: 19:17:02:10:87:f3:58:60:7b:94:07:7c:bf:d7:3c: d4:ef:2b:7e:30:dd:ff:90:55:fc:18:ed:f0:a8:5d: bf:32:05:7d:52:cc:a9:e8:b0:c2:3b:4c:10:dc:c8: 91:e7:f5:30:4f:e2:2a:4e:a6:7c:b5:80:39:e1:1e: 5c:e9:bb:0c:03:3c:eb:47:a5:83:f3:64:f0:ce:db: 4c:1c:1b:0f:71:4b:31:55:39:4c:af:91:36:af:41: d6:a3:e1:79:fd:56:1f:85:15:64:ac:3c:4e:dd:17: e8:01:f4:f2:b7:b0:72:c6:40:2b:f1:9d:1f:1c:b3: a3:6b:53:9a:7f:aa:f4:b6:54:d5:80:4a:b4:26:63: d2:68:db:89:c7:60:af:bc:4e:eb:f9:67:3f:ca:25: 7e:d0:6d:b0:46:aa:5f:fe:a0:cc:79:03:d7:bb:b7: b7:fd:c3:40:9c:75:a5:85:0b:b6:ea:16:e1:b7:23: bf:33:d9:10:a2:fc:83:fd:a0:58:0e:17:08:26:65: c2:3a:19:92:40:73:34:76:46:88:91:82:43:0f:6e: 86:72:1a:22:84:4c:04:ee:2e:76:9a:fa:7b:ad:50: a0:c8:f8:84:5c:c7:97:27:45:7f:06:b8:6c:68:72: 4e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1A:93:DD:43:44:CB:07:56:CE:8A:A6:0B:51:D2:F0:6D:27:A1:5D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/65d7c64b-9772-467f-8f1b-c6113ca70c86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.190.128.0/18 Signature Algorithm: sha256WithRSAEncryption 2e:61:f1:3d:a5:15:e8:a2:8a:be:95:88:c9:62:12:8a:5b:d0: 1f:91:19:e1:78:fe:f1:c1:c3:96:a4:ef:18:8c:0a:74:8d:81: da:7c:e6:e8:1c:b1:b2:2d:0c:15:bd:c4:c1:9c:6c:4a:de:0c: 09:50:2f:f8:28:35:c2:8f:1f:e7:1a:c4:ca:e9:e7:5c:cd:ba: b2:59:cf:17:35:6a:4f:93:8f:a9:28:97:92:55:cc:f3:6a:0f: ad:d3:51:b4:0f:1b:ff:a9:7e:da:a1:70:35:d4:32:28:10:ea: 32:f0:4a:e5:da:6f:49:de:a8:50:9b:d5:be:ce:e1:2d:a6:8f: 60:75:6b:a1:ed:78:1e:52:53:75:ee:fe:30:cf:cc:2e:55:eb: 5a:61:96:6b:5f:0c:4e:10:03:c3:7e:2e:a6:ea:1e:ba:c2:54: 3c:a7:7c:09:5e:d6:47:51:d4:b9:f3:2f:81:11:50:d0:a6:d8: 8b:69:e3:a0:8c:e5:a8:56:ca:11:71:67:0c:dd:8d:7a:a8:df: e2:f6:05:46:67:40:f3:d4:3b:95:4b:db:eb:53:a3:d9:f7:1f: d1:2f:76:e7:42:9a:7a:3a:c2:eb:c0:32:b2:de:d8:0f:72:13: 5a:59:32:69:c2:1e:02:b9:49:a0:c5:d2:15:89:d0:d0:67:2d: f8:1f:08:5c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTEFfmujHVjU1zmh+AS2ETJEF3FQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTYxMDE1WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MzRmOGQ5YjAxYjkwNTkyOGNiM2RiMDBjZGIwM2Q4ODYx MWQ5NzY4MDFlYTFiMDQxMTlmYzA2YzUxNWVmZTA5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzrHh6IxBuuUEwdOz0ABkXAhCH81hge5QHfL/XPNTvK34w 3f+QVfwY7fCoXb8yBX1SzKnosMI7TBDcyJHn9TBP4ipOpny1gDnhHlzpuwwDPOtH pYPzZPDO20wcGw9xSzFVOUyvkTavQdaj4Xn9Vh+FFWSsPE7dF+gB9PK3sHLGQCvx nR8cs6NrU5p/qvS2VNWASrQmY9Jo24nHYK+8Tuv5Zz/KJX7QbbBGql/+oMx5A9e7 t7f9w0CcdaWFC7bqFuG3I78z2RCi/IP9oFgOFwgmZcI6GZJAczR2RoiRgkMPboZy GiKETATuLnaa+nutUKDI+IRcx5cnRX8GuGxock4dAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUSBqT3UNEywdWzoqmC1HS8G0noV0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY1ZDdjNjRiLTk3NzItNDY3Zi04ZjFiLWM2MTEzY2E3MGM4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2voAwDQYJKoZIhvcNAQELBQADggEBAC5h8T2lFeiiir6ViMliEopb0B+R GeF4/vHBw5ak7xiMCnSNgdp85ugcsbItDBW9xMGcbEreDAlQL/goNcKPH+caxMrp 51zNurJZzxc1ak+Tj6kol5JVzPNqD63TUbQPG/+pftqhcDXUMigQ6jLwSuXab0ne qFCb1b7O4S2mj2B1a6HteB5SU3Xu/jDPzC5V61phlmtfDE4QA8N+LqbqHrrCVDyn fAle1kdR1LnzL4ERUNCm2Itp46CM5ahWyhFxZwzdjXqo3+L2BUZnQPPUO5VL2+tT o9n3H9EvdudCmno6wuvAMrLe2A9yE1pZMmnCHgK5SaDF0hWJ0NBnLfgfCFw= -----END CERTIFICATE-----Generated at Mon Aug 4 21:47:59 2025 by rpki-client