$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacdf462-0556-407b-a28c-e4535bb978b3.roa File: bacdf462-0556-407b-a28c-e4535bb978b3.roa (raw, json) Hash identifier: xuGfppBQIwcbSzXyYWqCiQ4qRyyNYrAstolBdQOkBqY= Subject key identifier: B0:23:4A:83:64:11:E9:DF:DA:EC:B1:06:90:24:AF:0C:B1:5A:99:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5356C1D95FB96C493847330E79E3A217B07A2B20 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacdf462-0556-407b-a28c-e4535bb978b3.roa Signing time: Tue 29 Jul 2025 15:41:06 +0000 ROA not before: Tue 29 Jul 2025 15:41:06 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.204.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:56:c1:d9:5f:b9:6c:49:38:47:33:0e:79:e3:a2:17:b0:7a:2b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:41:06 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=6489fcf0835826c4896b58a60a12948b6554f2554f32a97cf76de8fca6ba7082, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:3c:d0:f3:0d:79:3f:06:43:cd:aa:c9:93:7c: 88:61:0c:8b:0e:80:0a:85:1d:ad:2c:59:af:66:5c: e7:d9:b2:c9:9f:75:0c:b9:d8:6f:bf:7c:f7:d0:d7: 11:fa:e5:7f:4f:0c:b0:b1:70:df:a3:dd:5e:f2:a0: ad:57:dc:7c:98:21:7b:a8:99:0d:74:6d:8e:6b:00: 97:0b:6b:a7:66:62:91:1c:06:c1:0c:c8:48:89:8e: 5a:a7:9d:01:0a:a9:e6:fa:28:c4:71:f1:20:ca:d8: fa:49:84:30:3e:c3:cf:8c:79:e7:e6:0d:e8:d9:0b: 9d:3b:96:28:07:71:42:db:d2:d0:5d:4c:85:cf:58: 6e:1f:22:54:db:91:32:cb:6b:c6:a3:8a:da:d6:c7: ae:af:3b:70:cc:98:c1:41:f8:77:73:6a:00:3b:86: e0:b2:2a:34:c8:d3:35:92:5c:da:5d:8a:cd:9a:de: da:c2:97:29:09:d5:49:5e:1a:a2:8c:ec:0d:d3:e2: 04:13:c6:7f:a1:f0:ba:2f:2d:ab:dc:d7:b4:2f:a3: bc:61:37:29:6a:1d:00:50:bc:a2:37:f7:aa:0f:25: d1:cf:db:60:20:f4:fc:66:80:e3:26:22:76:11:a6: 7f:0d:6a:e1:67:76:13:45:93:ce:19:70:a4:81:e4: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:23:4A:83:64:11:E9:DF:DA:EC:B1:06:90:24:AF:0C:B1:5A:99:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacdf462-0556-407b-a28c-e4535bb978b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.204.56.0/21 Signature Algorithm: sha256WithRSAEncryption 2b:e4:de:2d:a7:1a:4e:ec:c5:c2:b7:1d:45:d7:ad:2a:bb:15: 04:a5:8a:d5:81:2e:df:e8:8b:5b:b6:1b:a1:5e:3c:26:a3:18: b7:29:16:54:62:f3:61:fe:3a:87:d5:4a:58:78:c5:04:3e:fa: a0:2a:25:ee:41:9c:10:95:d1:2b:c8:18:84:39:08:d2:c5:73: 11:f8:61:2c:fb:83:ab:d2:74:70:57:01:db:b7:4d:ec:c4:44: ac:7c:55:2b:59:c9:5d:d9:23:7b:b8:77:20:a0:92:34:91:90: 26:6c:07:bf:9e:4f:f3:f6:99:ce:6c:78:f9:31:26:8b:05:36: ce:45:db:e7:59:15:99:8b:66:87:13:84:07:e1:c6:b6:fb:c4: 94:ac:7c:2b:91:9c:c4:e6:af:47:a9:78:74:f9:5b:3c:27:c7: 8b:c6:2e:43:d6:7f:92:fd:91:86:3e:16:61:b8:80:73:ba:04: 22:2d:20:ed:10:67:ff:fe:ac:8e:80:10:63:2a:8b:1f:1f:b7: ed:ac:1e:ed:69:59:bc:50:b4:d5:a9:ef:fe:ab:73:47:d9:56: ae:12:48:8b:3a:a5:10:43:4b:e6:23:78:70:82:3d:49:8a:86: 5a:51:09:b6:6f:b3:18:25:7c:0e:14:f3:ef:2e:da:07:8b:92: e8:12:1c:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU1bB2V+5bEk4RzMOeeOiF7B6KyAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTU0MTA2WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2NDg5ZmNmMDgzNTgyNmM0ODk2YjU4YTYwYTEyOTQ4YjY1 NTRmMjU1NGYzMmE5N2NmNzZkZThmY2E2YmE3MDgyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDxPNDzDXk/BkPNqsmTfIhhDIsOgAqFHa0sWa9mXOfZssmf dQy52G+/fPfQ1xH65X9PDLCxcN+j3V7yoK1X3HyYIXuomQ10bY5rAJcLa6dmYpEc BsEMyEiJjlqnnQEKqeb6KMRx8SDK2PpJhDA+w8+MeefmDejZC507ligHcULb0tBd TIXPWG4fIlTbkTLLa8ajitrWx66vO3DMmMFB+HdzagA7huCyKjTI0zWSXNpdis2a 3trClykJ1UleGqKM7A3T4gQTxn+h8LovLavc17Qvo7xhNylqHQBQvKI396oPJdHP 22Ag9PxmgOMmInYRpn8NauFndhNFk84ZcKSB5CuXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsCNKg2QR6d/a7LEGkCSvDLFamXgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JhY2RmNDYyLTA1NTYtNDA3Yi1hMjhjLWU0NTM1YmI5NzhiMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2zDgwDQYJKoZIhvcNAQELBQADggEBACvk3i2nGk7sxcK3HUXXrSq7FQSl itWBLt/oi1u2G6FePCajGLcpFlRi82H+OofVSlh4xQQ++qAqJe5BnBCV0SvIGIQ5 CNLFcxH4YSz7g6vSdHBXAdu3TezERKx8VStZyV3ZI3u4dyCgkjSRkCZsB7+eT/P2 mc5sePkxJosFNs5F2+dZFZmLZocThAfhxrb7xJSsfCuRnMTmr0epeHT5Wzwnx4vG LkPWf5L9kYY+FmG4gHO6BCItIO0QZ//+rI6AEGMqix8ft+2sHu1pWbxQtNWp7/6r c0fZVq4SSIs6pRBDS+YjeHCCPUmKhlpRCbZvsxglfA4U8+8u2geLkugSHLE= -----END CERTIFICATE-----Generated at Mon Aug 4 14:01:31 2025 by rpki-client