$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f83fc8-abec-4353-b7c2-957a26ea015a.roa File: a7f83fc8-abec-4353-b7c2-957a26ea015a.roa (raw, json) Hash identifier: 4lR00nqEF5Ecdh12zPMuNb7G2nK0D7G5FIx6PWrPZyw= Subject key identifier: AF:2B:9E:AB:F8:D7:93:A4:23:B1:9D:CA:22:0B:52:2A:95:27:B7:22 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6109F20ADA7C373E16E0774C68C7B029699CB6C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f83fc8-abec-4353-b7c2-957a26ea015a.roa Signing time: Fri 25 Jul 2025 16:31:04 +0000 ROA not before: Fri 25 Jul 2025 16:31:04 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.219.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:09:f2:0a:da:7c:37:3e:16:e0:77:4c:68:c7:b0:29:69:9c:b6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 16:31:04 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=ebdec46b7eab92c738c565c47cbf6c18c35306e9a8c882f5fd42694fc2f083ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ef:79:d5:b5:17:5e:c6:c5:58:6e:cf:57:6f: 50:f4:02:3f:75:9a:20:9b:06:0c:51:33:83:e1:07: e0:7e:b2:4a:34:56:49:54:62:74:64:63:62:cc:90: 24:af:74:db:b3:cd:95:8a:e7:38:c5:78:43:96:50: 67:2f:0f:91:40:e9:e6:2b:89:6a:cb:0b:18:ee:2d: 3b:6b:57:dd:b8:9e:40:61:48:19:ce:7a:60:3a:8d: 27:74:e9:f9:9a:b3:a6:12:81:7d:9b:1d:84:5c:69: 1c:9a:6c:30:26:41:06:13:eb:4e:62:65:58:d2:40: 5f:1f:a0:a4:98:ee:9c:92:42:e1:ed:6e:75:26:13: e6:96:fa:2f:5f:50:56:f1:72:59:dc:05:12:95:29: 4a:c6:f9:0d:30:c8:03:42:63:f4:22:19:1a:f2:6f: 9e:39:a1:1b:a4:7a:29:b0:6e:0d:13:10:a8:86:ac: af:47:44:50:60:88:b7:08:d9:b5:e8:ef:21:2c:f8: 18:9e:7f:04:db:71:73:13:11:35:bf:7b:d0:56:77: 54:64:3a:c2:51:ed:50:ca:c0:da:7f:f2:5d:49:ed: 0c:7d:da:23:bf:c2:de:a0:68:a7:ec:59:ef:10:89: d0:92:4c:53:43:3c:0b:5f:6c:c4:da:f8:78:b1:32: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2B:9E:AB:F8:D7:93:A4:23:B1:9D:CA:22:0B:52:2A:95:27:B7:22 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a7f83fc8-abec-4353-b7c2-957a26ea015a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.219.240.0/21 Signature Algorithm: sha256WithRSAEncryption 12:db:da:9e:ed:11:32:f9:0f:5f:b3:13:57:fe:5b:36:1b:0f: 06:48:f7:26:60:a0:b0:4c:16:b3:80:6f:d1:72:3f:bf:e2:33: bd:a9:51:5f:0d:57:f9:a9:88:c7:41:06:59:2d:36:99:10:ac: 19:1e:ee:ef:70:c0:c2:42:7b:df:69:8b:6b:bd:b7:a5:b1:90: 25:c8:4b:07:ad:d5:c9:de:9d:93:4a:c6:b1:1d:7e:f0:32:a6: fb:7f:96:5c:b0:00:10:60:00:36:50:35:ea:79:3f:4f:03:50: 9a:b7:bc:ef:f0:57:d9:99:a5:35:69:23:16:77:d6:66:55:da: 07:f9:d5:71:74:4b:5e:26:7f:4b:f2:b7:9c:c8:92:51:4c:00: e1:60:7d:33:d0:a8:d4:ea:72:1f:b5:d1:0f:49:4b:53:da:3a: 75:63:0b:30:3d:dc:0d:d7:bb:fa:06:15:9d:1c:9b:5f:44:80: 1b:75:83:7c:a0:ee:8d:3b:c7:95:6e:71:a9:54:98:58:1e:01: d5:8b:35:03:ba:e5:49:30:d6:03:2b:1a:73:78:3c:9f:57:df: 2a:a4:89:fb:29:e5:8f:80:47:f8:16:f9:84:0c:8b:38:6b:ba: 3b:fa:e0:23:62:11:a4:8e:09:09:18:a3:a0:08:7e:54:02:f7: 48:eb:9a:9b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYQnyCtp8Nz4W4HdMaMewKWmctsUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTYzMTA0WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYmRlYzQ2YjdlYWI5MmM3MzhjNTY1YzQ3Y2JmNmMxOGMz NTMwNmU5YThjODgyZjVmZDQyNjk0ZmMyZjA4M2VmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDK73nVtRdexsVYbs9Xb1D0Aj91miCbBgxRM4PhB+B+sko0 VklUYnRkY2LMkCSvdNuzzZWK5zjFeEOWUGcvD5FA6eYriWrLCxjuLTtrV924nkBh SBnOemA6jSd06fmas6YSgX2bHYRcaRyabDAmQQYT605iZVjSQF8foKSY7pySQuHt bnUmE+aW+i9fUFbxclncBRKVKUrG+Q0wyANCY/QiGRryb545oRukeimwbg0TEKiG rK9HRFBgiLcI2bXo7yEs+BiefwTbcXMTETW/e9BWd1RkOsJR7VDKwNp/8l1J7Qx9 2iO/wt6gaKfsWe8QidCSTFNDPAtfbMTa+HixMksdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUryueq/jXk6QjsZ3KIgtSKpUntyIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E3ZjgzZmM4LWFiZWMtNDM1My1iN2MyLTk1N2EyNmVhMDE1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM22/AwDQYJKoZIhvcNAQELBQADggEBABLb2p7tETL5D1+zE1f+WzYbDwZI 9yZgoLBMFrOAb9FyP7/iM72pUV8NV/mpiMdBBlktNpkQrBke7u9wwMJCe99pi2u9 t6WxkCXISwet1cnenZNKxrEdfvAypvt/llywABBgADZQNep5P08DUJq3vO/wV9mZ pTVpIxZ31mZV2gf51XF0S14mf0vyt5zIklFMAOFgfTPQqNTqch+10Q9JS1PaOnVj CzA93A3Xu/oGFZ0cm19EgBt1g3yg7o07x5VucalUmFgeAdWLNQO65Ukw1gMrGnN4 PJ9X3yqkifsp5Y+AR/gW+YQMizhrujv64CNiEaSOCQkYo6AIflQC90jrmps= -----END CERTIFICATE-----Generated at Tue Aug 5 16:36:15 2025 by rpki-client