$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e791b-0b38-49c5-8065-92c771f9038a.roa File: 6d1e791b-0b38-49c5-8065-92c771f9038a.roa (raw, json) Hash identifier: CvSJJ5yAqvgRmrFLxH662sjwEbB07yB2laHxl97O39k= Subject key identifier: 0B:EF:6E:FA:E4:E7:D2:0C:6C:31:B6:FA:8B:CB:48:F8:4A:A5:41:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0AB97E1B969ACA61E949815FF0E7D7B7EB54CAB9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e791b-0b38-49c5-8065-92c771f9038a.roa Signing time: Mon 04 Aug 2025 18:20:10 +0000 ROA not before: Mon 04 Aug 2025 18:20:10 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.240.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b9:7e:1b:96:9a:ca:61:e9:49:81:5f:f0:e7:d7:b7:eb:54:ca:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 4 18:20:10 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=a5fe294054aa3ebfeba688052c7eb02c123fbdc412ab6ab1a0af23a370d33fda, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5f:58:e7:56:1e:2f:f2:53:ca:3e:7b:ca:27: 04:78:b6:c1:82:6c:e3:d8:13:82:55:62:c4:a3:90: fb:c8:63:d4:1e:58:51:7c:08:1b:ad:07:82:f8:59: 6b:dd:fb:46:c6:b0:47:10:6d:94:d6:bb:91:4e:f2: 35:f9:cd:ad:66:e4:ac:32:75:4d:e2:22:e4:cd:cb: f2:7d:22:1c:4b:c3:af:db:f0:63:ef:45:2e:db:b9: 4b:2e:40:66:ec:48:cd:ff:56:2f:aa:ab:c2:ed:48: 3d:02:f7:37:ca:cf:be:97:e4:95:21:eb:8a:99:df: 33:79:ad:ee:5d:d8:f9:81:d1:e1:e9:8a:11:e8:90: 77:29:67:96:5b:33:40:f1:a7:c7:e5:7f:ad:0c:17: 41:88:bb:55:bf:69:92:1d:21:11:cd:81:55:a1:44: 32:4c:dd:2e:7d:3c:92:21:00:76:3c:18:f2:af:44: e0:28:bf:3c:f3:b4:a9:be:d0:9e:78:2e:4e:46:24: b8:14:8a:5c:f3:a3:83:d8:92:5f:09:63:9e:23:38: 0f:40:37:0f:e0:e5:87:47:00:c3:27:2d:d6:03:48: 60:8a:e3:df:ed:01:76:43:17:79:d4:db:9c:f9:a2: b1:06:1e:bf:ea:9f:ae:b6:6a:61:57:78:7a:c2:e9: ce:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EF:6E:FA:E4:E7:D2:0C:6C:31:B6:FA:8B:CB:48:F8:4A:A5:41:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e791b-0b38-49c5-8065-92c771f9038a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.240.98.0/23 Signature Algorithm: sha256WithRSAEncryption 61:c8:1a:2a:ab:84:fd:4b:fd:5a:3f:66:4f:51:cc:28:09:3a: 41:28:2c:e4:8b:81:08:05:ee:12:09:39:a7:7a:f5:3d:07:c4: 32:78:88:33:fa:78:bd:9b:a1:ca:9b:18:4e:46:03:05:be:27: 20:83:a8:56:74:ea:7e:61:4c:e0:69:e9:e2:f8:09:dd:43:01: 71:18:39:f6:d8:52:ae:ef:1f:c1:e1:ab:10:5f:9b:79:a7:5e: 3f:a8:e9:5e:9a:36:8f:db:2a:68:17:af:02:3d:16:fc:c0:5a: 21:7a:9e:c5:e9:ce:40:5d:e1:2f:3c:26:91:c7:8d:16:82:57: 5a:9f:64:47:97:99:ab:7b:c2:52:d2:6d:e1:78:fa:c8:1c:a7: 7d:02:19:6f:3c:6c:f9:ac:0a:d9:22:f8:e9:0e:54:30:20:06: 7e:5f:c8:7f:a4:0d:a9:f5:1c:28:3e:c7:af:64:e3:04:8e:5c: 71:36:8a:21:1c:b7:cb:6c:f7:d6:cb:8b:74:72:06:ca:4c:f2: 95:26:82:e4:ce:5b:b4:d8:61:d5:5b:da:40:60:e6:b8:fc:9d: 16:78:e5:83:b0:f3:7c:f7:29:de:c4:cb:00:a2:b4:42:c6:a2: cc:00:ff:eb:11:1d:38:d2:54:41:f9:f0:4a:d6:0e:67:41:04: 39:76:9d:1d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCrl+G5aaymHpSYFf8OfXt+tUyrkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA0MTgyMDEwWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNWZlMjk0MDU0YWEzZWJmZWJhNjg4MDUyYzdlYjAyYzEy M2ZiZGM0MTJhYjZhYjFhMGFmMjNhMzcwZDMzZmRhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBX1jnVh4v8lPKPnvKJwR4tsGCbOPYE4JVYsSjkPvIY9Qe WFF8CButB4L4WWvd+0bGsEcQbZTWu5FO8jX5za1m5KwydU3iIuTNy/J9IhxLw6/b 8GPvRS7buUsuQGbsSM3/Vi+qq8LtSD0C9zfKz76X5JUh64qZ3zN5re5d2PmB0eHp ihHokHcpZ5ZbM0Dxp8flf60MF0GIu1W/aZIdIRHNgVWhRDJM3S59PJIhAHY8GPKv ROAovzzztKm+0J54Lk5GJLgUilzzo4PYkl8JY54jOA9ANw/g5YdHAMMnLdYDSGCK 49/tAXZDF3nU25z5orEGHr/qn662amFXeHrC6c7JAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC+9u+uTn0gxsMbb6i8tI+EqlQfkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZkMWU3OTFiLTBiMzgtNDljNS04MDY1LTkyYzc3MWY5MDM4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE28GIwDQYJKoZIhvcNAQELBQADggEBAGHIGiqrhP1L/Vo/Zk9RzCgJOkEo LOSLgQgF7hIJOad69T0HxDJ4iDP6eL2bocqbGE5GAwW+JyCDqFZ06n5hTOBp6eL4 Cd1DAXEYOfbYUq7vH8HhqxBfm3mnXj+o6V6aNo/bKmgXrwI9FvzAWiF6nsXpzkBd 4S88JpHHjRaCV1qfZEeXmat7wlLSbeF4+sgcp30CGW88bPmsCtki+OkOVDAgBn5f yH+kDan1HCg+x69k4wSOXHE2iiEct8ts99bLi3RyBspM8pUmguTOW7TYYdVb2kBg 5rj8nRZ45YOw83z3Kd7EywCitELGoswA/+sRHTjSVEH58ErWDmdBBDl2nR0= -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:51 2025 by rpki-client