$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e207b60-7db8-440a-8bf8-12e72b314795.roa File: 6e207b60-7db8-440a-8bf8-12e72b314795.roa (raw, json) Hash identifier: XLGkkpST3j4wLxy9g8PXb/Sv01St4TXrYJtJSJcrL0I= Subject key identifier: CC:31:C3:8D:22:3B:EA:A5:D6:73:30:F9:8F:52:B3:95:FE:37:05:A6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23A3773D6608F8B1948DD14E8A191CC04253498E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e207b60-7db8-440a-8bf8-12e72b314795.roa Signing time: Tue 29 Jul 2025 15:51:45 +0000 ROA not before: Tue 29 Jul 2025 15:51:45 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.197.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:a3:77:3d:66:08:f8:b1:94:8d:d1:4e:8a:19:1c:c0:42:53:49:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:51:45 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=8b7de4ccad64f79fd4fbb4ce4026a40820a21efecd63ab8d19320c5e039fc91f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:74:cf:4a:6c:fc:77:46:8e:30:a5:de:3d: ba:51:d5:08:8b:8a:0c:e9:6c:e4:a6:26:ac:fe:f0: 8c:2b:44:18:a5:c5:ce:3b:53:8b:6d:49:81:a2:ad: 2a:a9:c6:6b:d2:06:b3:71:61:f7:90:05:82:be:68: 39:05:b1:58:7f:64:ea:4d:2f:7b:08:19:67:a8:65: 49:01:8e:13:da:74:49:ae:49:d5:ff:33:ec:6c:af: c9:c9:6b:92:e3:43:75:64:a5:60:61:85:56:40:d0: 43:94:40:9a:ce:9d:24:1d:a8:0b:60:7b:ea:a5:24: a5:bb:50:09:66:b4:fe:e4:e7:cd:4f:76:28:2a:a7: 50:bc:07:07:0d:14:d5:6d:62:1f:4d:d3:46:79:53: bc:35:64:70:20:7b:b2:1c:78:5f:79:7e:a3:1f:77: f4:af:88:8b:fc:79:80:c2:06:6f:03:0a:ee:cf:9b: 24:ac:0b:1f:84:48:32:f0:75:7d:2f:2b:ce:3c:6f: 57:34:6f:b9:8c:e1:69:3f:4a:fc:93:38:81:be:fc: ee:e8:4a:47:6f:da:bd:89:25:58:66:58:36:4f:f9: 43:65:34:59:b4:ea:f2:07:c7:52:55:39:38:21:43: 07:aa:5e:32:c7:ac:25:30:5b:c2:2d:ff:b0:06:ae: 15:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:31:C3:8D:22:3B:EA:A5:D6:73:30:F9:8F:52:B3:95:FE:37:05:A6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e207b60-7db8-440a-8bf8-12e72b314795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.197.48.0/20 Signature Algorithm: sha256WithRSAEncryption 4d:6b:5d:17:78:60:b3:9a:cc:3d:10:ec:81:d1:86:a7:71:74: 72:06:30:c5:5f:cd:ed:c4:18:9d:59:16:32:1c:fb:42:26:41: b9:bf:4e:44:33:3e:15:bb:23:80:42:b2:c2:21:7d:09:ba:0b: ff:5a:db:d6:9b:5a:14:cd:c7:34:69:6a:a4:a8:68:04:01:33: e7:42:47:90:72:fc:af:35:f7:c9:8c:6a:b2:f4:86:56:84:c4: 1b:ca:26:4f:17:6c:36:16:5c:3d:1f:aa:9c:3f:c1:b6:08:c8: 5f:1a:43:cc:39:27:2c:27:63:19:86:39:1c:d5:97:c2:f5:d6: c9:d7:f3:88:e5:a0:10:7a:73:0c:0a:f0:27:29:bd:e9:06:64: 15:9c:18:43:30:e8:9b:f9:74:e7:20:4b:b6:e3:65:da:58:cc: 09:e3:bd:15:7b:d3:30:15:01:34:be:72:fe:71:6c:01:6d:0d: 63:04:c2:a6:f7:41:fe:07:a1:65:eb:17:45:c5:c1:fc:c9:47: 15:d1:1e:be:23:5e:fc:6e:7b:e4:f7:52:8e:b3:6b:8f:a8:6a: e1:d7:fc:7d:3d:91:95:d0:90:c5:ce:11:3d:fa:85:32:01:36: 21:4e:ed:39:96:18:82:ab:4e:ee:35:0b:2d:ab:2a:f5:94:5e: 92:56:76:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI6N3PWYI+LGUjdFOihkcwEJTSY4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTU1MTQ1WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjdkZTRjY2FkNjRmNzlmZDRmYmI0Y2U0MDI2YTQwODIw YTIxZWZlY2Q2M2FiOGQxOTMyMGM1ZTAzOWZjOTFmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3N3TPSmz8d0aOMKXePbpR1QiLigzpbOSmJqz+8IwrRBil xc47U4ttSYGirSqpxmvSBrNxYfeQBYK+aDkFsVh/ZOpNL3sIGWeoZUkBjhPadEmu SdX/M+xsr8nJa5LjQ3VkpWBhhVZA0EOUQJrOnSQdqAtge+qlJKW7UAlmtP7k581P digqp1C8BwcNFNVtYh9N00Z5U7w1ZHAge7IceF95fqMfd/SviIv8eYDCBm8DCu7P mySsCx+ESDLwdX0vK848b1c0b7mM4Wk/SvyTOIG+/O7oSkdv2r2JJVhmWDZP+UNl NFm06vIHx1JVOTghQweqXjLHrCUwW8It/7AGrhXNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzDHDjSI76qXWczD5j1Kzlf43BaYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZlMjA3YjYwLTdkYjgtNDQwYS04YmY4LTEyZTcyYjMxNDc5NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQ2xTAwDQYJKoZIhvcNAQELBQADggEBAE1rXRd4YLOazD0Q7IHRhqdxdHIG MMVfze3EGJ1ZFjIc+0ImQbm/TkQzPhW7I4BCssIhfQm6C/9a29abWhTNxzRpaqSo aAQBM+dCR5By/K8198mMarL0hlaExBvKJk8XbDYWXD0fqpw/wbYIyF8aQ8w5Jywn YxmGORzVl8L11snX84jloBB6cwwK8CcpvekGZBWcGEMw6Jv5dOcgS7bjZdpYzAnj vRV70zAVATS+cv5xbAFtDWMEwqb3Qf4HoWXrF0XFwfzJRxXRHr4jXvxue+T3Uo6z a4+oauHX/H09kZXQkMXOET36hTIBNiFO7TmWGIKrTu41Cy2rKvWUXpJWdnA= -----END CERTIFICATE-----Generated at Mon Aug 4 15:27:31 2025 by rpki-client