$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a81d8d-43e6-421b-a4b5-270fd2adc0e6.roa File: b2a81d8d-43e6-421b-a4b5-270fd2adc0e6.roa (raw, json) Hash identifier: nCF95TanGGZZW+pE0AB08fhaweul4U6L94JswMzswr0= Subject key identifier: B8:AD:8F:98:A9:ED:35:3B:1A:4E:68:39:81:42:7C:D2:1D:B5:8C:0C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A1E39B80359060B02051C08C3144C4E6004F98E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a81d8d-43e6-421b-a4b5-270fd2adc0e6.roa Signing time: Fri 11 Jul 2025 17:31:26 +0000 ROA not before: Fri 11 Jul 2025 17:31:26 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.66.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:1e:39:b8:03:59:06:0b:02:05:1c:08:c3:14:4c:4e:60:04:f9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:31:26 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=51790cb9400781f0606f27b21fb5535cabd979e364cdd64b548f9933c759b287, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d3:95:54:3c:1c:ab:ab:55:a2:1e:35:5b:7a: 98:03:14:73:a7:b7:1f:81:61:85:0d:22:f7:ff:fe: b0:f9:e6:15:79:f1:1b:c0:0d:4e:b1:28:1e:8c:6e: 45:57:8a:6e:c3:f0:f3:57:67:0f:49:fe:ef:b2:77: f4:7b:70:62:60:79:cf:e5:15:af:7f:bc:be:05:76: 7c:2c:32:96:9a:75:e8:6e:a5:5b:37:35:6b:49:b1: 62:91:22:4f:05:b9:5c:31:51:f9:09:5b:3a:bb:62: 8e:58:d7:c6:a1:c5:5c:62:6b:1b:0f:c6:42:6c:14: 39:95:33:8d:27:5d:f8:59:34:00:b4:d5:20:6a:a5: 39:00:35:27:15:8f:7b:ee:46:85:db:c8:48:44:bb: ec:3c:54:e3:24:26:38:83:69:4b:39:cf:5d:91:74: 1d:e9:69:00:26:ee:fb:fb:14:b6:7c:4a:2c:20:4f: bc:99:7a:9e:1c:1b:e6:57:b2:44:71:6a:3c:4f:9d: 28:6e:d2:62:e1:83:0e:52:fc:78:59:13:d5:88:71: 31:b3:06:91:18:32:dc:0c:e0:d3:27:10:3a:be:20: c8:98:eb:69:a8:32:a3:0e:ff:66:04:e6:19:22:24: c7:c7:8c:af:c0:e7:9f:39:e1:08:92:12:1c:8f:5c: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AD:8F:98:A9:ED:35:3B:1A:4E:68:39:81:42:7C:D2:1D:B5:8C:0C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2a81d8d-43e6-421b-a4b5-270fd2adc0e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.66.112.0/21 Signature Algorithm: sha256WithRSAEncryption 17:72:ac:6c:a3:42:da:f4:62:c3:e3:1e:50:8e:f0:81:1d:a8: 57:c3:a0:f1:f1:d4:15:4c:eb:29:f3:11:30:62:69:d7:9f:44: 1f:c2:8f:66:79:59:40:38:8e:58:ce:53:3a:07:8b:97:a3:b4: d6:99:66:bc:4c:26:05:70:52:ec:f3:53:f9:35:1e:63:e6:60: c3:a6:8d:51:64:3c:8a:24:ba:5c:cc:b0:24:5b:47:f7:fa:39: 70:2e:1b:0a:ea:29:b5:bb:f4:46:ae:c0:6a:a0:07:2d:26:3d: f0:c4:42:57:c9:1b:6d:5a:52:2b:aa:b3:4f:de:21:cb:19:87: f7:a0:b3:67:ac:ff:4e:6f:bf:df:07:4a:bc:68:65:7d:db:11: 05:0c:6b:23:f1:04:49:2c:1b:14:0f:5b:65:cc:7d:88:c5:19: 2e:cd:82:08:fe:9f:f1:a5:e9:36:4c:c4:7d:d5:ad:40:2e:63: 80:9a:99:e5:bc:dd:d2:25:fa:10:6f:8e:09:d8:f8:f0:4c:4b: 8c:6c:cd:f8:71:d4:6c:8c:ea:29:ca:65:15:68:9f:86:9c:e7: 76:71:ea:48:90:a0:4f:31:f5:c5:14:8b:a3:e5:f0:78:28:79: 61:e6:4f:99:9b:07:8c:47:ec:e5:7e:77:68:62:49:14:9e:57: 68:92:6a:96 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOh45uANZBgsCBRwIwxRMTmAE+Y4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTczMTI2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MTc5MGNiOTQwMDc4MWYwNjA2ZjI3YjIxZmI1NTM1Y2Fi ZDk3OWUzNjRjZGQ2NGI1NDhmOTkzM2M3NTliMjg3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDV05VUPByrq1WiHjVbepgDFHOntx+BYYUNIvf//rD55hV5 8RvADU6xKB6MbkVXim7D8PNXZw9J/u+yd/R7cGJgec/lFa9/vL4FdnwsMpaadehu pVs3NWtJsWKRIk8FuVwxUfkJWzq7Yo5Y18ahxVxiaxsPxkJsFDmVM40nXfhZNAC0 1SBqpTkANScVj3vuRoXbyEhEu+w8VOMkJjiDaUs5z12RdB3paQAm7vv7FLZ8Siwg T7yZep4cG+ZXskRxajxPnShu0mLhgw5S/HhZE9WIcTGzBpEYMtwM4NMnEDq+IMiY 62moMqMO/2YE5hkiJMfHjK/A55854QiSEhyPXF2PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUuK2PmKntNTsaTmg5gUJ80h21jAwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyYTgxZDhkLTQzZTYtNDIxYi1hNGI1LTI3MGZkMmFkYzBlNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2QnAwDQYJKoZIhvcNAQELBQADggEBABdyrGyjQtr0YsPjHlCO8IEdqFfD oPHx1BVM6ynzETBiadefRB/Cj2Z5WUA4jljOUzoHi5ejtNaZZrxMJgVwUuzzU/k1 HmPmYMOmjVFkPIokulzMsCRbR/f6OXAuGwrqKbW79EauwGqgBy0mPfDEQlfJG21a Uiuqs0/eIcsZh/egs2es/05vv98HSrxoZX3bEQUMayPxBEksGxQPW2XMfYjFGS7N ggj+n/Gl6TZMxH3VrUAuY4CameW83dIl+hBvjgnY+PBMS4xszfhx1GyM6inKZRVo n4ac53Zx6kiQoE8x9cUUi6Pl8HgoeWHmT5mbB4xH7OV+d2hiSRSeV2iSapY= -----END CERTIFICATE-----Generated at Mon Aug 4 21:37:07 2025 by rpki-client