$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9487ba47-1b45-4224-8411-6d3c73f151a4.roa File: 9487ba47-1b45-4224-8411-6d3c73f151a4.roa (raw, json) Hash identifier: h0sUIeYQbBDktSvykZ9rgl4SKq2HDxtlu3xcrFbKWDA= Subject key identifier: 26:A8:10:72:2F:C3:9F:F9:32:7A:B9:9E:B9:A6:3C:CF:32:B4:D3:14 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 29B1FC2D492D5ED66BB54937FDC1B191871C51F0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9487ba47-1b45-4224-8411-6d3c73f151a4.roa Signing time: Fri 25 Jul 2025 16:00:23 +0000 ROA not before: Fri 25 Jul 2025 16:00:23 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.170.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b1:fc:2d:49:2d:5e:d6:6b:b5:49:37:fd:c1:b1:91:87:1c:51:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 16:00:23 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=a30a2fd6501b7bfccd2dc06c63f399ac01742863fbd49365cbb575c324666c85, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:08:c4:83:b4:f7:56:70:60:de:74:10:7f:de: fa:12:cb:5c:0f:3d:fa:c5:fe:24:12:91:d5:a0:a1: 2f:19:28:22:a3:b0:9c:50:c6:c7:84:cd:23:8a:4e: 39:4a:3a:3a:e6:91:91:15:f2:f9:51:83:00:87:27: d3:e6:20:5a:11:75:11:b4:e3:a4:e7:61:1b:67:ce: bd:e8:77:8d:bc:8a:9b:15:95:ca:18:1d:7e:85:a8: 7c:8a:18:0b:c5:76:ab:90:7e:3e:f4:8f:19:46:dc: 4c:2f:8c:df:8d:ce:9c:e8:80:b3:91:a4:19:9c:99: 24:a3:09:8d:a4:3b:51:b9:98:33:56:13:22:9e:3e: 3e:b9:7a:51:90:dd:15:24:2e:e2:d8:8e:42:06:7f: bd:8b:b9:6b:7d:ff:eb:5a:9e:24:49:35:d2:37:e6: c6:80:a9:d8:18:a3:75:1b:7a:26:c5:d0:74:b1:98: 0b:9b:21:a5:92:0f:4c:44:30:40:6a:30:91:a8:8c: b2:ff:e3:ba:61:66:23:3f:15:f3:4a:fd:31:ad:9c: df:67:7e:c9:a0:49:b4:75:c8:24:ef:c6:35:7a:57: bf:e3:94:b8:b3:ef:ab:60:80:05:56:68:28:f7:2d: 67:02:d8:e7:29:86:3f:13:5a:97:4e:3a:cd:32:3f: 70:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A8:10:72:2F:C3:9F:F9:32:7A:B9:9E:B9:A6:3C:CF:32:B4:D3:14 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9487ba47-1b45-4224-8411-6d3c73f151a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.170.64.0/18 Signature Algorithm: sha256WithRSAEncryption 9d:0c:e0:b3:c3:4a:4a:12:37:37:1a:22:30:5f:a1:2a:12:b5: 83:4f:90:b5:c1:e1:d5:a9:56:76:ef:52:ca:f6:4e:49:15:0a: 7f:4b:f2:cb:f9:85:a5:6b:59:94:e3:86:cf:04:0a:b5:0f:48: e8:98:b4:7e:bf:64:42:01:77:52:30:bd:78:db:e0:94:36:48: e9:c0:6c:e5:f6:11:9e:ee:c3:32:43:a3:10:9c:5f:15:c2:bf: a5:c0:6d:c8:0d:d9:ac:b0:81:35:00:e8:c0:61:3a:44:97:27: e6:81:4c:b9:93:9a:6c:06:d7:88:93:3b:d5:25:3b:c8:1b:40: 54:58:69:ac:b6:e0:cd:e0:31:16:40:50:87:d7:fc:b0:bc:23: 1f:10:22:d1:fd:52:31:9a:4f:2d:5f:af:95:39:56:15:a4:2b: 73:1c:b7:e5:10:bd:3c:df:12:8d:e8:bc:8a:0e:ac:95:a9:ae: 55:5a:82:3a:01:8d:4b:de:3c:40:e3:86:57:41:65:26:47:07: 33:49:f9:98:d2:3b:6a:e0:33:3b:c7:ce:95:1a:15:15:af:44: 11:e1:ed:83:53:bf:40:d6:b3:42:ec:6c:e1:54:96:f5:06:31: 06:71:3c:96:3e:a3:27:42:02:48:ac:dc:09:3b:67:5b:a7:d5: d4:dc:50:c5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKbH8LUktXtZrtUk3/cGxkYccUfAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTYwMDIzWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMzBhMmZkNjUwMWI3YmZjY2QyZGMwNmM2M2YzOTlhYzAx NzQyODYzZmJkNDkzNjVjYmI1NzVjMzI0NjY2Yzg1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGCMSDtPdWcGDedBB/3voSy1wPPfrF/iQSkdWgoS8ZKCKj sJxQxseEzSOKTjlKOjrmkZEV8vlRgwCHJ9PmIFoRdRG046TnYRtnzr3od428ipsV lcoYHX6FqHyKGAvFdquQfj70jxlG3EwvjN+NzpzogLORpBmcmSSjCY2kO1G5mDNW EyKePj65elGQ3RUkLuLYjkIGf72LuWt9/+taniRJNdI35saAqdgYo3UbeibF0HSx mAubIaWSD0xEMEBqMJGojLL/47phZiM/FfNK/TGtnN9nfsmgSbR1yCTvxjV6V7/j lLiz76tggAVWaCj3LWcC2Ocphj8TWpdOOs0yP3ANAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJqgQci/Dn/kyermeuaY8zzK00xQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0ODdiYTQ3LTFiNDUtNDIyNC04NDExLTZkM2M3M2YxNTFhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2qkAwDQYJKoZIhvcNAQELBQADggEBAJ0M4LPDSkoSNzcaIjBfoSoStYNP kLXB4dWpVnbvUsr2TkkVCn9L8sv5haVrWZTjhs8ECrUPSOiYtH6/ZEIBd1IwvXjb 4JQ2SOnAbOX2EZ7uwzJDoxCcXxXCv6XAbcgN2aywgTUA6MBhOkSXJ+aBTLmTmmwG 14iTO9UlO8gbQFRYaay24M3gMRZAUIfX/LC8Ix8QItH9UjGaTy1fr5U5VhWkK3Mc t+UQvTzfEo3ovIoOrJWprlVagjoBjUvePEDjhldBZSZHBzNJ+ZjSO2rgMzvHzpUa FRWvRBHh7YNTv0DWs0LsbOFUlvUGMQZxPJY+oydCAkis3Ak7Z1un1dTcUMU= -----END CERTIFICATE-----Generated at Mon Aug 4 21:47:12 2025 by rpki-client