$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b00961a2-4723-4ec5-a15f-d6465bbc7f89.roa File: b00961a2-4723-4ec5-a15f-d6465bbc7f89.roa (raw, json) Hash identifier: jfgzytuiMYWoaYzhmQW4zQzi3dzWGbWosR0oZVaKU18= Subject key identifier: 79:4D:CE:64:97:25:5B:FC:59:6D:F7:B8:1B:1C:F1:C4:0D:75:E3:30 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4C257E7449784CD3EBDFEE4F8A495EE4DE91CA4F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b00961a2-4723-4ec5-a15f-d6465bbc7f89.roa Signing time: Tue 29 Jul 2025 16:11:04 +0000 ROA not before: Tue 29 Jul 2025 16:11:04 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.196.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:25:7e:74:49:78:4c:d3:eb:df:ee:4f:8a:49:5e:e4:de:91:ca:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 16:11:04 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=702c43d6528a6cf58655489832d238fe1a65c9247906996b747bf3de2c26d059, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6b:da:3e:81:b8:d9:3a:c2:10:08:ca:e8:5d: 35:e0:57:95:55:79:ba:0b:be:b5:1f:74:c1:3d:86: fa:d5:63:ad:4c:f2:02:54:e6:9a:89:3f:99:95:a8: e9:e5:43:01:9e:86:bb:b0:bf:06:65:c4:09:ca:19: 4b:2f:18:50:4d:3c:2b:d7:bf:9a:01:1f:c0:6b:9e: 95:d4:db:19:70:fb:bb:56:69:35:ac:76:1c:3c:b4: 3f:7e:f6:62:e5:ee:4c:9d:04:a0:ad:6d:5a:c0:a5: d1:7d:8c:77:51:7b:ee:f7:b6:84:b7:6e:6c:43:52: b2:86:62:c8:82:97:4a:71:5b:7c:1a:a0:0b:bb:fa: ce:42:32:3c:88:7d:db:31:f2:02:b1:7a:4c:5d:d6: 8d:bc:ae:82:27:1b:fb:bf:9c:14:f7:db:e7:93:0c: 0b:c1:31:2d:04:02:a5:0a:9a:9f:cd:c2:0d:23:0d: ed:d6:95:1d:88:d5:b9:b2:37:72:f7:9c:26:d6:71: c9:78:62:61:e9:bf:12:b3:b3:7d:e5:0e:87:6b:68: 4c:70:1b:38:81:f4:47:72:ea:87:15:b9:fa:e1:2f: 16:58:83:7f:e2:f6:58:29:56:41:4b:31:b9:8d:f8: 41:66:4b:ff:32:65:21:d4:e3:bd:44:2f:21:dc:c4: ce:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4D:CE:64:97:25:5B:FC:59:6D:F7:B8:1B:1C:F1:C4:0D:75:E3:30 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b00961a2-4723-4ec5-a15f-d6465bbc7f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.196.0.0/15 Signature Algorithm: sha256WithRSAEncryption 35:47:67:ea:aa:99:5e:c8:02:7d:8f:82:54:63:31:d7:57:7c: 11:05:98:75:cf:7f:f1:54:2e:7a:32:7d:be:2d:73:23:c3:9e: 48:21:15:2e:0b:83:2f:d2:f7:55:c9:80:d5:ff:0e:f2:74:9e: 82:be:ca:6d:d7:4c:15:48:2d:32:d4:f1:11:74:74:24:4b:6a: 24:38:1c:d3:bf:76:47:4d:e9:43:40:a5:06:4a:91:5c:50:75: f6:df:9c:f9:44:9b:be:0b:e9:37:bd:6e:02:28:48:40:8a:1a: 33:07:25:a0:8d:08:50:a1:32:0a:a6:2b:c6:e2:d3:c6:ad:0a: 46:89:ba:c3:29:45:3e:d9:c0:50:48:d0:57:dc:5d:3b:7b:d9: 5d:8e:ae:66:72:89:61:ca:88:d0:30:08:8c:a7:29:92:35:82: 0a:d3:57:2f:c0:e2:4a:e4:e4:33:b5:64:3f:e1:40:32:d7:d0: 6a:7c:28:e5:e9:57:e4:a7:d9:69:c8:95:fc:eb:6d:69:42:63: 73:17:d6:1d:97:f0:23:68:9b:2d:a9:9f:05:15:3e:3c:be:d1: e6:62:dd:44:49:80:6f:ec:e8:f7:9f:37:b1:c6:4f:1d:ae:1e: bd:43:ec:86:ee:9f:a1:10:b7:ad:cf:e1:22:c3:1e:8d:83:d3: 0a:04:c3:70 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTCV+dEl4TNPr3+5Pikle5N6Ryk8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTYxMTA0WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MDJjNDNkNjUyOGE2Y2Y1ODY1NTQ4OTgzMmQyMzhmZTFh NjVjOTI0NzkwNjk5NmI3NDdiZjNkZTJjMjZkMDU5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpa9o+gbjZOsIQCMroXTXgV5VVeboLvrUfdME9hvrVY61M 8gJU5pqJP5mVqOnlQwGehruwvwZlxAnKGUsvGFBNPCvXv5oBH8BrnpXU2xlw+7tW aTWsdhw8tD9+9mLl7kydBKCtbVrApdF9jHdRe+73toS3bmxDUrKGYsiCl0pxW3wa oAu7+s5CMjyIfdsx8gKxekxd1o28roInG/u/nBT32+eTDAvBMS0EAqUKmp/Nwg0j De3WlR2I1bmyN3L3nCbWccl4YmHpvxKzs33lDodraExwGziB9Edy6ocVufrhLxZY g3/i9lgpVkFLMbmN+EFmS/8yZSHU471ELyHcxM6zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUeU3OZJclW/xZbfe4GxzxxA114zAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IwMDk2MWEyLTQ3MjMtNGVjNS1hMTVmLWQ2NDY1YmJjN2Y4OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2xDANBgkqhkiG9w0BAQsFAAOCAQEANUdn6qqZXsgCfY+CVGMx11d8EQWY dc9/8VQuejJ9vi1zI8OeSCEVLguDL9L3VcmA1f8O8nSegr7KbddMFUgtMtTxEXR0 JEtqJDgc0792R03pQ0ClBkqRXFB19t+c+USbvgvpN71uAihIQIoaMwcloI0IUKEy CqYrxuLTxq0KRom6wylFPtnAUEjQV9xdO3vZXY6uZnKJYcqI0DAIjKcpkjWCCtNX L8DiSuTkM7VkP+FAMtfQanwo5elX5KfZaciV/OttaUJjcxfWHZfwI2ibLamfBRU+ PL7R5mLdREmAb+zo9583scZPHa4evUPshu6foRC3rc/hIsMejYPTCgTDcA== -----END CERTIFICATE-----Generated at Mon Aug 4 21:48:37 2025 by rpki-client