$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bfb24ea-a4ab-4219-960d-d69263c98e98.roa File: 8bfb24ea-a4ab-4219-960d-d69263c98e98.roa (raw, json) Hash identifier: 8r/KfWA2le68UHhKnAXCoST44zmy8HrDdb6tXMm2nJg= Subject key identifier: 14:FB:40:27:B2:55:DD:2E:07:56:3D:8B:07:58:39:18:64:EE:60:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 31A90A6B3052E1B0CC4A5D0FBFABDF1CE71D6E65 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bfb24ea-a4ab-4219-960d-d69263c98e98.roa Signing time: Tue 29 Jul 2025 15:00:14 +0000 ROA not before: Tue 29 Jul 2025 15:00:14 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.145.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a9:0a:6b:30:52:e1:b0:cc:4a:5d:0f:bf:ab:df:1c:e7:1d:6e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:00:14 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=f5e8040bbcb09690b0d62062c960f011a1c705ae22fa544bb4f9a18d7a4f22ab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:20:e9:aa:36:d9:92:bb:42:01:e8:cb:8b:33: e2:08:53:a6:c0:6c:11:6f:e1:93:25:62:6a:c0:9f: b1:2b:44:26:86:c1:78:cb:18:88:91:17:13:e1:e7: 13:31:e4:47:fd:7e:c7:8c:69:be:03:d8:3c:db:ac: 4d:82:e8:fa:f3:5a:b2:93:51:db:7a:60:55:e8:e3: 2b:d4:d9:3e:99:dc:e5:e7:5d:34:3b:0c:ef:d2:22: b5:f4:3b:99:22:24:7f:79:bc:fa:12:55:8d:e1:38: 42:eb:f9:95:13:d1:1c:44:85:db:10:ef:47:e8:89: f5:50:25:26:0d:15:a5:83:5f:56:05:e2:18:9a:71: ae:67:0c:42:7c:bc:e7:f1:39:e3:ed:d3:4e:34:cc: 81:e7:af:e6:5b:b5:0e:e6:fe:e1:55:84:79:bb:41: 55:1b:9b:14:0e:1d:6c:26:4e:ac:61:fd:12:55:04: d7:f2:64:e3:ac:bd:87:70:b3:53:c4:80:8c:63:42: 25:7b:ac:1c:53:5b:e4:8c:00:e6:5b:b3:00:60:e8: 1a:37:f5:21:34:c1:33:8b:c9:4f:46:23:f4:bd:cf: 4b:2e:a8:b7:59:ac:43:91:1c:85:10:78:9f:ad:61: da:60:07:9c:e7:26:00:31:4c:8b:b3:6f:ab:c9:e4: 10:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FB:40:27:B2:55:DD:2E:07:56:3D:8B:07:58:39:18:64:EE:60:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8bfb24ea-a4ab-4219-960d-d69263c98e98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.145.64.0/18 Signature Algorithm: sha256WithRSAEncryption 41:a9:43:c2:21:b7:75:a8:d1:ce:17:31:28:62:f4:be:b5:50: 08:2d:5f:c9:5e:1c:4b:33:f7:87:48:f7:d1:66:e3:dd:d7:6f: 2f:a8:51:eb:15:db:a4:f2:45:69:3b:45:b1:23:49:c7:25:f3: a6:fb:82:6b:ed:55:d7:47:e0:e6:77:2d:86:b9:54:b3:7f:d2: 6d:92:bf:2b:7c:13:02:ff:de:58:3b:3a:d0:8f:f3:ee:6b:06: 46:af:33:cd:77:5b:1c:45:54:80:82:d4:3d:c1:8a:d1:ab:63: 6d:e3:d9:d6:63:43:a6:f2:d9:9c:96:23:07:48:8c:29:02:8c: 53:28:67:8f:1e:f5:69:7b:3e:be:32:48:5f:50:a2:53:28:78: 37:4e:06:95:77:f8:d2:a8:df:9e:d5:7e:a6:2c:4d:04:08:e4: 90:ed:de:58:ea:8b:34:ef:55:11:39:79:14:dd:af:ad:4e:c9: 0f:be:fe:37:91:82:6a:3b:70:8f:c2:49:a0:c3:b0:23:93:cc: c3:a1:c7:d2:6e:60:9a:2e:fc:3b:b3:83:1c:8c:3a:d5:07:77: db:06:e1:f4:9f:ad:3c:3d:83:74:37:a3:86:9b:1b:8e:b0:b8: 06:aa:11:6f:76:1c:ef:eb:f5:a6:88:3b:88:d3:9d:25:b2:79: fb:4d:6d:d5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMakKazBS4bDMSl0Pv6vfHOcdbmUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTUwMDE0WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWU4MDQwYmJjYjA5NjkwYjBkNjIwNjJjOTYwZjAxMWEx YzcwNWFlMjJmYTU0NGJiNGY5YTE4ZDdhNGYyMmFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDlIOmqNtmSu0IB6MuLM+IIU6bAbBFv4ZMlYmrAn7ErRCaG wXjLGIiRFxPh5xMx5Ef9fseMab4D2DzbrE2C6PrzWrKTUdt6YFXo4yvU2T6Z3OXn XTQ7DO/SIrX0O5kiJH95vPoSVY3hOELr+ZUT0RxEhdsQ70foifVQJSYNFaWDX1YF 4hiaca5nDEJ8vOfxOePt0040zIHnr+ZbtQ7m/uFVhHm7QVUbmxQOHWwmTqxh/RJV BNfyZOOsvYdws1PEgIxjQiV7rBxTW+SMAOZbswBg6Bo39SE0wTOLyU9GI/S9z0su qLdZrEORHIUQeJ+tYdpgB5znJgAxTIuzb6vJ5BBFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFPtAJ7JV3S4HVj2LB1g5GGTuYFcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhiZmIyNGVhLWE0YWItNDIxOS05NjBkLWQ2OTI2M2M5OGU5OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2kUAwDQYJKoZIhvcNAQELBQADggEBAEGpQ8Iht3Wo0c4XMShi9L61UAgt X8leHEsz94dI99Fm493Xby+oUesV26TyRWk7RbEjSccl86b7gmvtVddH4OZ3LYa5 VLN/0m2Svyt8EwL/3lg7OtCP8+5rBkavM813WxxFVICC1D3BitGrY23j2dZjQ6by 2ZyWIwdIjCkCjFMoZ48e9Wl7Pr4ySF9QolMoeDdOBpV3+NKo357VfqYsTQQI5JDt 3ljqizTvVRE5eRTdr61OyQ++/jeRgmo7cI/CSaDDsCOTzMOhx9JuYJou/DuzgxyM OtUHd9sG4fSfrTw9g3Q3o4abG46wuAaqEW92HO/r9aaIO4jTnSWyeftNbdU= -----END CERTIFICATE-----Generated at Mon Aug 4 14:06:47 2025 by rpki-client