$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74efc46d-10bb-4104-b254-c7c85216f368.roa File: 74efc46d-10bb-4104-b254-c7c85216f368.roa (raw, json) Hash identifier: TcRqGOq0W2DYTiARc2Q6fzDRWEDMdJAo2VqK/3hByak= Subject key identifier: CC:1D:82:08:E1:28:C9:2D:CE:4B:57:AF:71:A1:B5:1D:BE:F8:C1:56 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2C5B5A812CEE0E2A6B93091D7708BA3F7DDC60C4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74efc46d-10bb-4104-b254-c7c85216f368.roa Signing time: Tue 29 Jul 2025 17:01:20 +0000 ROA not before: Tue 29 Jul 2025 17:01:20 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.234.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:5b:5a:81:2c:ee:0e:2a:6b:93:09:1d:77:08:ba:3f:7d:dc:60:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 17:01:20 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=69cea762c6009117e75ba29eec6848ce0a90cad8f81a0c984125f31f4ce74f51, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:19:86:16:6a:54:89:bf:22:5c:b1:66:20: 18:fb:eb:88:96:37:50:80:48:7c:c0:00:1b:a8:c0: 8d:da:4c:2d:14:10:20:b8:4a:43:5b:ab:be:20:ed: c4:9b:d4:60:ce:6b:a3:59:b5:f5:18:a6:a0:c6:1b: ce:a2:46:32:36:88:a9:c8:0e:3b:76:e1:40:70:66: 84:99:c4:c8:39:4f:f2:5e:a1:9d:0c:98:60:84:5e: 73:f0:c4:2a:e1:34:bb:87:dd:33:91:d9:ba:39:97: c6:20:1b:0f:19:57:e1:07:a3:7f:8f:5f:84:0c:2a: 47:65:6b:67:34:88:2c:b6:45:41:ff:e9:5c:c8:51: 18:e4:51:ed:8d:ab:27:a3:61:e9:02:44:ff:7b:95: ba:e5:ab:6d:24:2a:69:ba:b6:50:aa:f2:38:45:ec: a6:02:15:d2:c0:54:b4:d4:ac:2b:2b:c0:b0:b4:d4: 48:ce:cb:70:48:8a:f5:ee:32:28:12:b5:ac:26:30: 01:7f:6d:e9:67:ff:f5:7e:69:95:40:92:cb:fc:53: 87:f3:57:02:ff:db:8c:5a:41:cc:1c:de:cf:72:65: c2:1f:8b:20:c9:11:8a:12:38:07:33:aa:a1:03:80: 74:98:33:9f:b3:55:37:dc:ee:37:11:d6:b1:99:04: 7f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:1D:82:08:E1:28:C9:2D:CE:4B:57:AF:71:A1:B5:1D:BE:F8:C1:56 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74efc46d-10bb-4104-b254-c7c85216f368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.234.0.0/15 Signature Algorithm: sha256WithRSAEncryption 93:bd:3a:fd:39:e2:83:50:02:0a:40:55:53:09:be:15:47:ad: 1c:0f:67:c3:04:90:9c:49:cc:48:f5:a3:bd:1e:b7:dc:7f:8a: 0e:0e:0f:74:f6:5d:17:37:d5:3b:f3:32:ca:fc:d9:84:71:81: 41:d5:85:98:85:c3:cb:30:8f:9d:0a:dc:a8:47:38:4b:a8:c0: cf:e6:6d:ab:f3:ed:09:23:53:51:bd:13:a8:e0:16:0d:e6:37: 4d:f0:30:89:60:a1:91:72:e6:1f:89:79:61:3b:95:4e:3f:3f: 3d:93:bc:57:94:53:5f:47:06:6c:25:72:a8:a6:c8:aa:45:36: 6d:d5:db:66:27:cb:46:0f:d3:10:d6:62:fe:cb:62:3a:41:30: 6e:07:24:a0:29:ae:f7:42:31:59:f2:b1:8b:96:cf:f5:0b:7e: 96:ab:b7:3a:38:ff:d9:22:ef:ad:f8:d7:01:57:0f:40:76:f4: 6e:fd:43:41:44:9c:25:ab:bb:1c:9e:7e:34:b6:3e:a5:bd:02: 7c:ce:89:b2:13:51:03:e6:05:2d:35:78:56:02:94:cc:92:95: 3a:74:09:23:bd:a4:34:b0:0b:2b:c1:e3:16:80:e0:f8:63:a2: d7:61:07:a3:fe:47:8f:d5:ae:f9:1b:b2:cb:69:71:dd:0c:bf: 2f:bc:5e:62 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULFtagSzuDiprkwkddwi6P33cYMQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTcwMTIwWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OWNlYTc2MmM2MDA5MTE3ZTc1YmEyOWVlYzY4NDhjZTBh OTBjYWQ4ZjgxYTBjOTg0MTI1ZjMxZjRjZTc0ZjUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2wxmGFmpUib8iXLFmIBj764iWN1CASHzAABuowI3aTC0U ECC4SkNbq74g7cSb1GDOa6NZtfUYpqDGG86iRjI2iKnIDjt24UBwZoSZxMg5T/Je oZ0MmGCEXnPwxCrhNLuH3TOR2bo5l8YgGw8ZV+EHo3+PX4QMKkdla2c0iCy2RUH/ 6VzIURjkUe2NqyejYekCRP97lbrlq20kKmm6tlCq8jhF7KYCFdLAVLTUrCsrwLC0 1EjOy3BIivXuMigStawmMAF/beln//V+aZVAksv8U4fzVwL/24xaQcwc3s9yZcIf iyDJEYoSOAczqqEDgHSYM5+zVTfc7jcR1rGZBH+lAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUzB2CCOEoyS3OS1evcaG1Hb74wVYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc0ZWZjNDZkLTEwYmItNDEwNC1iMjU0LWM3Yzg1MjE2ZjM2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE26jANBgkqhkiG9w0BAQsFAAOCAQEAk706/Tnig1ACCkBVUwm+FUetHA9n wwSQnEnMSPWjvR633H+KDg4PdPZdFzfVO/MyyvzZhHGBQdWFmIXDyzCPnQrcqEc4 S6jAz+Ztq/PtCSNTUb0TqOAWDeY3TfAwiWChkXLmH4l5YTuVTj8/PZO8V5RTX0cG bCVyqKbIqkU2bdXbZifLRg/TENZi/stiOkEwbgckoCmu90IxWfKxi5bP9Qt+lqu3 Ojj/2SLvrfjXAVcPQHb0bv1DQUScJau7HJ5+NLY+pb0CfM6JshNRA+YFLTV4VgKU zJKVOnQJI72kNLALK8HjFoDg+GOi12EHo/5Hj9Wu+Ruyy2lx3Qy/L7xeYg== -----END CERTIFICATE-----Generated at Mon Aug 4 21:45:13 2025 by rpki-client