$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa File: ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa (raw, json) Hash identifier: KYn1UFmkMchSvwm1Fk1KqfymuJ4Z38ihQ0qwRSpq5YI= Subject key identifier: 8B:2C:47:46:A9:52:39:98:49:60:65:29:AF:E0:DA:12:79:89:8B:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72DF4E4B5D77597C90E908A7670536737F9D90AA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa Signing time: Fri 11 Jul 2025 17:20:19 +0000 ROA not before: Fri 11 Jul 2025 17:20:19 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.221.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:df:4e:4b:5d:77:59:7c:90:e9:08:a7:67:05:36:73:7f:9d:90:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:20:19 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=caa06c8806915e0edc0e1f1bc3aa7abaa18a2f5d172e219d76733924e5cb8b5e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:45:2c:b1:72:d2:66:90:a0:17:0d:28:f7: 82:82:c8:a0:b6:08:e6:fd:3e:d7:37:9f:87:85:39: fa:54:3a:45:87:06:6a:3c:ad:e4:c4:73:39:4d:f4: 1f:f2:53:1b:5c:3f:93:47:cc:2a:a8:ed:85:dd:f9: 3a:2b:44:d0:a2:c1:a8:f6:8c:79:f8:a2:72:f3:8e: 32:13:0b:91:19:d2:f8:52:ee:d1:7a:d5:df:cb:b0: 75:7f:20:34:1e:dc:39:8c:32:d0:39:ed:57:d0:bc: e4:9a:a9:ab:ec:8d:d6:95:d4:79:b8:c9:fb:58:0d: f5:66:d3:77:77:fb:15:3a:e5:db:0d:52:c7:da:bf: 48:5d:59:83:8a:72:43:8c:5b:9f:2b:4b:bf:71:99: 86:a0:34:ac:9d:0a:c8:3f:4f:1b:c9:9e:60:e7:20: b5:a8:2e:4d:08:e3:ac:bf:1f:27:ef:93:a1:9d:f0: 8e:cc:ca:75:03:4b:84:4b:84:fd:a1:5b:f2:ec:2f: ba:d3:7c:37:c4:e2:86:ac:59:95:a4:65:71:67:48: fd:5e:52:c8:5f:5f:5b:94:94:27:ef:09:a7:3f:3a: 65:c2:7c:46:77:31:67:bc:43:50:b3:fe:56:79:85: 11:75:be:22:29:51:24:34:de:0c:1a:72:00:d1:7a: 60:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:2C:47:46:A9:52:39:98:49:60:65:29:AF:E0:DA:12:79:89:8B:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae759f63-6d2f-4f0d-b389-c27c11afb7a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.221.192.0/18 Signature Algorithm: sha256WithRSAEncryption b1:e6:26:dd:11:fb:f0:59:c5:21:c9:dd:9d:69:94:ba:c0:f4: 3f:20:e8:fd:fc:37:77:a6:54:c5:8c:2a:88:df:aa:f6:a9:10: 49:ca:c4:26:3d:17:26:79:07:49:0d:bd:31:1a:82:93:83:78: 02:05:09:1f:fb:80:57:96:83:af:4e:90:14:05:b6:45:9e:14: aa:d2:fa:9e:e2:14:00:8c:4d:69:8c:67:31:ae:ea:d1:b3:aa: d5:c8:0a:bc:90:38:79:6d:de:6f:8b:1f:b7:73:34:ca:ef:0c: e9:03:3b:31:7b:49:e0:dd:84:5d:b6:c6:5e:d2:2a:ef:f1:5e: bc:7a:d9:7d:2c:c1:3c:34:1d:60:17:37:8f:88:6e:1f:11:17: 48:b7:d7:43:75:f2:f4:0c:7e:3e:e7:e9:b3:02:c4:e9:56:ea: 76:c4:0f:ad:a5:d2:93:9b:4f:42:2c:6d:4d:39:0e:5b:b8:7d: ee:23:8b:c1:59:17:60:e8:eb:0b:ff:4c:07:05:d3:14:e0:76: 5d:36:9e:20:d6:70:5f:b6:11:2e:1e:7e:70:81:bb:d2:dc:41: ff:27:b8:e6:21:b1:1e:ef:fe:8c:89:02:3f:5e:fc:02:e2:2f: 93:68:b4:29:de:7b:86:f8:1b:fb:08:a6:60:4a:0b:77:5b:2a: f7:a4:c4:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUct9OS113WXyQ6QinZwU2c3+dkKowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTcyMDE5WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWEwNmM4ODA2OTE1ZTBlZGMwZTFmMWJjM2FhN2FiYWEx OGEyZjVkMTcyZTIxOWQ3NjczMzkyNGU1Y2I4YjVlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCOjUUssXLSZpCgFw0o94KCyKC2COb9Ptc3n4eFOfpUOkWH Bmo8reTEczlN9B/yUxtcP5NHzCqo7YXd+TorRNCiwaj2jHn4onLzjjITC5EZ0vhS 7tF61d/LsHV/IDQe3DmMMtA57VfQvOSaqavsjdaV1Hm4yftYDfVm03d3+xU65dsN Usfav0hdWYOKckOMW58rS79xmYagNKydCsg/TxvJnmDnILWoLk0I46y/Hyfvk6Gd 8I7MynUDS4RLhP2hW/LsL7rTfDfE4oasWZWkZXFnSP1eUshfX1uUlCfvCac/OmXC fEZ3MWe8Q1Cz/lZ5hRF1viIpUSQ03gwacgDRemBfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiyxHRqlSOZhJYGUpr+DaEnmJi4IwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FlNzU5ZjYzLTZkMmYtNGYwZC1iMzg5LWMyN2MxMWFmYjdhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY23cAwDQYJKoZIhvcNAQELBQADggEBALHmJt0R+/BZxSHJ3Z1plLrA9D8g 6P38N3emVMWMKojfqvapEEnKxCY9FyZ5B0kNvTEagpODeAIFCR/7gFeWg69OkBQF tkWeFKrS+p7iFACMTWmMZzGu6tGzqtXICryQOHlt3m+LH7dzNMrvDOkDOzF7SeDd hF22xl7SKu/xXrx62X0swTw0HWAXN4+Ibh8RF0i310N18vQMfj7n6bMCxOlW6nbE D62l0pObT0IsbU05Dlu4fe4ji8FZF2Do6wv/TAcF0xTgdl02niDWcF+2ES4efnCB u9LcQf8nuOYhsR7v/oyJAj9e/ALiL5NotCnee4b4G/sIpmBKC3dbKvekxIQ= -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:35 2025 by rpki-client