$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88d2724f-340f-4d60-af79-3bc14d2a763f.roa File: 88d2724f-340f-4d60-af79-3bc14d2a763f.roa (raw, json) Hash identifier: e0cl8Z0x3TIp2FBrYOe8ksvUIOjQAB3dF61XxcDYRl4= Subject key identifier: 2D:B4:FA:61:7C:E0:11:9D:F4:05:A8:57:9B:81:4B:BD:34:B3:25:1E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 54D5CBF8CEF859AC76CC3666CCE72114329C60F8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88d2724f-340f-4d60-af79-3bc14d2a763f.roa Signing time: Tue 29 Jul 2025 18:11:43 +0000 ROA not before: Tue 29 Jul 2025 18:11:43 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.250.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d5:cb:f8:ce:f8:59:ac:76:cc:36:66:cc:e7:21:14:32:9c:60:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 18:11:43 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=67652682da1b95a1b399875b7f2e19816c5e31b6c07ed9b7dc65529e2962a04d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:dc:bc:c4:0e:1c:96:72:af:01:bd:5c:7d:63: 4f:86:6b:fe:c8:c1:f9:d9:71:35:e8:cc:7a:bc:b6: 37:0b:92:11:d7:43:60:97:3d:50:f2:03:5a:f8:a6: 3a:af:aa:30:f6:71:20:ab:88:b8:58:97:18:1b:58: 10:02:20:c2:5c:45:a6:2f:1b:ae:6e:d7:4e:71:96: a1:dc:f1:4f:f4:d4:56:15:92:cd:46:29:d8:11:d6: 15:57:70:1d:58:bc:47:af:70:20:47:0b:94:8c:62: c5:c6:d8:06:8e:0a:3f:a8:2a:56:17:b0:20:95:13: 57:1b:8b:de:8d:ed:91:6d:42:24:8f:85:51:20:6d: b6:7d:20:a9:ba:1f:49:3f:cd:40:27:29:33:d8:71: 27:1c:27:bb:be:d1:6d:a4:af:ab:a8:f4:61:2e:08: 62:9d:cd:2c:2b:ea:71:ac:24:21:e4:4e:29:06:17: 16:43:d0:37:d6:70:c7:38:95:e9:12:3f:ec:7e:57: 00:79:ef:fa:bc:60:24:a3:be:6f:c2:86:79:9c:6f: c5:c7:0c:8d:34:0c:75:b4:de:bd:c0:88:00:87:c7: c5:89:32:38:1a:93:2a:f7:12:c6:e3:13:76:76:1f: 39:7d:dd:94:85:91:d2:45:0f:51:39:f6:14:c8:27: aa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B4:FA:61:7C:E0:11:9D:F4:05:A8:57:9B:81:4B:BD:34:B3:25:1E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88d2724f-340f-4d60-af79-3bc14d2a763f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.250.0.0/18 Signature Algorithm: sha256WithRSAEncryption 60:3f:ba:63:36:1d:70:b5:da:49:4a:04:d8:10:f7:2a:95:c5: 12:cd:db:16:2d:ba:07:48:0e:a1:19:0c:c0:09:e7:72:c0:93: 5b:35:0d:96:48:2f:0a:bb:ad:e6:52:65:90:ad:12:89:63:8b: 8e:25:e2:46:a0:44:30:b2:32:4c:64:0d:af:7d:e5:0a:ba:cb: 43:90:05:07:6f:a9:e3:15:d0:fb:36:f3:ce:7b:d0:5e:cf:e4: 20:ac:5d:eb:97:a9:80:22:5f:f7:85:88:43:17:9c:51:1e:39: ba:29:68:57:99:a4:9c:9b:f7:40:6b:58:7e:ba:fc:a0:bb:38: bd:36:97:7d:28:f3:a6:10:57:e5:ce:a6:05:58:79:e4:4b:f7: 50:5f:04:6c:df:ab:2f:6e:0f:df:0a:56:38:9e:62:70:f5:ef: 26:a0:71:77:8b:d9:f3:d5:b3:20:5f:20:82:81:32:02:ec:48: ab:09:17:8e:58:13:ab:71:81:ef:4f:63:05:75:a3:78:a7:b2: 71:6c:8d:90:eb:61:13:47:a7:3c:68:80:9e:0c:60:6a:ea:9d: db:52:fd:c0:6e:d1:d9:00:68:2d:19:76:3e:ef:87:38:ed:a4: 67:8f:e7:9d:13:fa:6f:37:43:97:12:22:74:ca:49:be:67:a0: 03:65:a4:7a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVNXL+M74Wax2zDZmzOchFDKcYPgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTgxMTQzWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NzY1MjY4MmRhMWI5NWExYjM5OTg3NWI3ZjJlMTk4MTZj NWUzMWI2YzA3ZWQ5YjdkYzY1NTI5ZTI5NjJhMDRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCc3LzEDhyWcq8BvVx9Y0+Ga/7IwfnZcTXozHq8tjcLkhHX Q2CXPVDyA1r4pjqvqjD2cSCriLhYlxgbWBACIMJcRaYvG65u105xlqHc8U/01FYV ks1GKdgR1hVXcB1YvEevcCBHC5SMYsXG2AaOCj+oKlYXsCCVE1cbi96N7ZFtQiSP hVEgbbZ9IKm6H0k/zUAnKTPYcSccJ7u+0W2kr6uo9GEuCGKdzSwr6nGsJCHkTikG FxZD0DfWcMc4lekSP+x+VwB57/q8YCSjvm/Chnmcb8XHDI00DHW03r3AiACHx8WJ Mjgakyr3EsbjE3Z2Hzl93ZSFkdJFD1E59hTIJ6pJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULbT6YXzgEZ30BahXm4FLvTSzJR4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4ZDI3MjRmLTM0MGYtNGQ2MC1hZjc5LTNiYzE0ZDJhNzYzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2+gAwDQYJKoZIhvcNAQELBQADggEBAGA/umM2HXC12klKBNgQ9yqVxRLN 2xYtugdIDqEZDMAJ53LAk1s1DZZILwq7reZSZZCtEolji44l4kagRDCyMkxkDa99 5Qq6y0OQBQdvqeMV0Ps288570F7P5CCsXeuXqYAiX/eFiEMXnFEeObopaFeZpJyb 90BrWH66/KC7OL02l30o86YQV+XOpgVYeeRL91BfBGzfqy9uD98KVjieYnD17yag cXeL2fPVsyBfIIKBMgLsSKsJF45YE6txge9PYwV1o3insnFsjZDrYRNHpzxogJ4M YGrqndtS/cBu0dkAaC0Zdj7vhzjtpGeP550T+m83Q5cSInTKSb5noANlpHo= -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:31 2025 by rpki-client