$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870cbeeb-ca0c-473d-b087-7586f6ba6061.roa File: 870cbeeb-ca0c-473d-b087-7586f6ba6061.roa (raw, json) Hash identifier: kFN4CA0l+fvvCkm8M+DCV+n41Pq0Gl4I5xhI4ghDZ0g= Subject key identifier: D3:62:F4:64:42:3C:90:38:6E:FB:DC:1D:F4:25:33:F4:52:2E:BA:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29C35A0283B4A5730538A72F7BD73B0DF96F70E0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870cbeeb-ca0c-473d-b087-7586f6ba6061.roa Signing time: Tue 29 Jul 2025 17:01:29 +0000 ROA not before: Tue 29 Jul 2025 17:01:29 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.228.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c3:5a:02:83:b4:a5:73:05:38:a7:2f:7b:d7:3b:0d:f9:6f:70:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 17:01:29 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=aace75a71f6633cc08b3e8683d9278f0f1d212270a19f753a36e9a37d31cbc95, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:91:05:24:bf:b7:2d:84:65:fb:09:02:83:61: 7d:0b:3b:f6:34:dc:5e:41:ca:f0:d0:fc:60:db:ef: ce:34:e2:38:cd:27:e9:a4:4f:61:da:82:d4:f5:31: eb:90:04:2a:3e:b7:3e:3d:f3:8b:a2:ee:5f:77:0f: b9:70:a4:a4:08:33:2c:7f:5a:a9:94:33:8d:63:63: db:4a:76:a3:1d:72:7d:1b:1c:44:df:b3:b3:9b:93: c2:68:07:0c:d1:ba:29:5a:e1:ca:08:a3:13:83:d3: e3:58:dc:85:20:c8:0d:35:60:9f:9d:a4:d4:f8:be: d0:ab:2b:f7:70:e8:62:11:79:ca:e1:1c:a1:de:25: ea:b4:72:6f:69:ae:43:e0:37:e1:df:61:11:a4:dd: 41:8f:80:da:0f:3d:3d:fc:93:e0:af:2d:69:3b:15: 5b:5f:e0:15:8e:99:e8:c1:eb:79:ee:5b:d0:31:c4: 8e:87:77:5b:35:9c:9f:db:4e:45:61:c2:43:a5:82: c3:f4:04:10:4a:9f:14:24:42:3b:84:31:b9:a2:98: 0e:f9:aa:a4:b9:eb:8c:cf:a0:ad:ce:75:af:a7:aa: 04:e8:e1:b5:0f:b4:96:8c:43:7e:64:3b:6d:d2:4d: 6f:25:c8:a4:99:e7:97:f2:b4:95:81:e7:10:fa:d5: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:62:F4:64:42:3C:90:38:6E:FB:DC:1D:F4:25:33:F4:52:2E:BA:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/870cbeeb-ca0c-473d-b087-7586f6ba6061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7e:48:16:d6:d5:c0:7d:8f:f9:67:b6:d1:2d:8b:93:e1:03:42: a8:88:c1:24:a0:e3:ff:cb:b7:07:64:8b:fa:63:89:06:19:49: 0d:d0:52:f0:a6:d6:c3:24:e4:6f:62:69:6a:bc:0a:a7:46:9d: 9e:3e:f3:43:d2:d3:57:22:13:6d:7a:a9:3c:ee:f8:d5:a7:db: 6f:48:df:2b:4a:68:99:25:b8:8e:30:e0:15:4f:d2:47:dc:20: f8:b8:9b:8a:8a:e4:a9:ae:73:be:e0:52:7a:c5:bd:16:64:b2: 59:84:c7:39:68:3d:61:78:81:19:c3:65:13:79:12:9b:40:31: 26:bb:90:f9:42:58:e7:4b:d8:bd:66:f1:70:dc:a6:20:ba:a1: 72:9d:2f:9e:c5:9e:e4:db:6a:c9:47:c7:b2:bc:52:22:92:13: 97:03:ea:44:17:39:12:98:c9:95:b2:e8:b6:c0:3e:66:8d:a7: 03:92:5c:7d:5f:78:f5:2c:54:8b:90:34:9c:5c:26:c8:32:c8: d1:dd:60:c4:35:13:ec:f9:70:d1:af:4d:03:28:c8:54:71:99: 01:8a:53:a4:61:7d:ed:64:f7:93:1f:cd:a9:b6:95:b6:ff:6c: 17:65:b9:d2:8f:3d:17:ae:f3:19:58:75:92:d2:49:01:f6:f4: 88:c7:d3:2e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKcNaAoO0pXMFOKcve9c7DflvcOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTcwMTI5WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWNlNzVhNzFmNjYzM2NjMDhiM2U4NjgzZDkyNzhmMGYx ZDIxMjI3MGExOWY3NTNhMzZlOWEzN2QzMWNiYzk1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwkQUkv7cthGX7CQKDYX0LO/Y03F5ByvDQ/GDb78404jjN J+mkT2HagtT1MeuQBCo+tz4984ui7l93D7lwpKQIMyx/WqmUM41jY9tKdqMdcn0b HETfs7Obk8JoBwzRuila4coIoxOD0+NY3IUgyA01YJ+dpNT4vtCrK/dw6GIRecrh HKHeJeq0cm9prkPgN+HfYRGk3UGPgNoPPT38k+CvLWk7FVtf4BWOmejB63nuW9Ax xI6Hd1s1nJ/bTkVhwkOlgsP0BBBKnxQkQjuEMbmimA75qqS564zPoK3Oda+nqgTo 4bUPtJaMQ35kO23STW8lyKSZ55fytJWB5xD61ZN5AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU02L0ZEI8kDhu+9wd9CUz9FIuuvkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg3MGNiZWViLWNhMGMtNDczZC1iMDg3LTc1ODZmNmJhNjA2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA25DANBgkqhkiG9w0BAQsFAAOCAQEAfkgW1tXAfY/5Z7bRLYuT4QNCqIjB JKDj/8u3B2SL+mOJBhlJDdBS8KbWwyTkb2JparwKp0adnj7zQ9LTVyITbXqpPO74 1afbb0jfK0pomSW4jjDgFU/SR9wg+Libiorkqa5zvuBSesW9FmSyWYTHOWg9YXiB GcNlE3kSm0AxJruQ+UJY50vYvWbxcNymILqhcp0vnsWe5NtqyUfHsrxSIpITlwPq RBc5EpjJlbLotsA+Zo2nA5JcfV949SxUi5A0nFwmyDLI0d1gxDUT7Plw0a9NAyjI VHGZAYpTpGF97WT3kx/NqbaVtv9sF2W50o89F67zGVh1ktJJAfb0iMfTLg== -----END CERTIFICATE-----Generated at Tue Aug 5 08:24:57 2025 by rpki-client