$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf60b8d4-dabe-4a95-9b6a-9f2b13661c5d.roa File: cf60b8d4-dabe-4a95-9b6a-9f2b13661c5d.roa (raw, json) Hash identifier: 8mRyakS3pfwwBZ/ZCtGSXGz2Oj76Mr6Fi+O3y/QA7As= Subject key identifier: 7F:0F:2F:8D:FF:7C:D0:73:2E:25:1A:E6:C8:FA:70:AD:50:4E:25:CF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 178B59B2ABFAED5389AE2F33507CEB314A33F240 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf60b8d4-dabe-4a95-9b6a-9f2b13661c5d.roa Signing time: Mon 28 Jul 2025 16:00:14 +0000 ROA not before: Mon 28 Jul 2025 16:00:14 +0000 ROA not after: Mon 01 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.149.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:8b:59:b2:ab:fa:ed:53:89:ae:2f:33:50:7c:eb:31:4a:33:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 28 16:00:14 2025 GMT Not After : Sep 1 23:59:59 2025 GMT Subject: serialNumber=fa015cfa50c7600afb68756ee43df0a6ad64bc2849482e5522922caddd49a149, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:76:36:c4:5a:b7:98:f3:2f:7c:8e:d0:dc: 95:05:26:e5:6e:66:9e:db:7e:b3:ad:fb:bc:1d:f6: 30:1b:ff:96:03:04:e3:0b:2c:8a:f5:ea:03:04:eb: 4c:ae:10:f3:4d:8b:68:ef:b4:94:b8:fd:f4:d3:90: b0:6a:24:2b:44:1b:6f:98:ec:39:cc:a8:b3:1c:9c: c0:ef:ff:a7:57:4c:fa:e0:33:4f:d6:2d:f6:46:9c: a1:48:92:fa:85:e4:a0:fc:c9:e9:eb:c0:ef:00:d8: 3c:e4:68:82:8d:d4:7f:f3:62:fd:04:31:87:81:a0: 61:75:2b:76:27:66:c3:79:16:67:e6:87:8a:2f:4d: c9:55:26:b2:82:40:30:e1:0d:ff:3b:03:b6:8d:6c: 5f:48:1f:15:c2:1d:ea:15:54:f8:fe:26:95:ef:79: 44:cb:4a:aa:97:f4:58:e7:9d:62:a8:d1:a2:a5:39: 39:dc:fd:ef:0f:75:94:40:35:29:b5:4e:25:6b:9f: 02:1e:95:e5:c0:e4:68:87:b7:0b:36:05:58:ce:c4: af:30:35:c4:20:39:32:3f:1a:78:ba:34:4d:dc:8c: b0:11:04:49:0c:fc:77:da:9f:f8:16:d6:04:a0:29: 29:07:03:70:40:c2:cf:ca:94:a4:52:6f:a8:3c:6d: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0F:2F:8D:FF:7C:D0:73:2E:25:1A:E6:C8:FA:70:AD:50:4E:25:CF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf60b8d4-dabe-4a95-9b6a-9f2b13661c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.149.10.0/24 Signature Algorithm: sha256WithRSAEncryption 64:d5:78:bd:b0:06:35:36:13:7f:47:46:6a:80:65:76:1d:c8: 8e:ec:e8:a0:85:48:30:ae:b1:af:22:6b:54:4d:2c:6b:6f:d8: 6e:db:24:22:d9:af:11:19:43:f2:7b:04:c6:b6:a4:48:72:12: 18:40:54:7a:27:76:9d:be:c6:25:ed:3c:8d:47:c6:de:f4:fd: dd:d1:9f:84:66:21:9b:4d:00:2c:6b:21:96:fe:bc:97:c8:83: df:aa:f4:8f:d8:15:3e:fe:31:d5:98:32:a3:74:e0:b8:00:95: ff:f5:e8:42:b0:00:3b:25:7d:d6:7b:d3:80:5b:38:73:3e:a6: 2a:2b:15:cd:4b:47:4c:3c:ce:3f:a0:bb:9e:ba:f5:61:8d:ae: a5:ce:55:b4:65:30:58:33:0e:83:f6:58:8e:b5:f4:5a:7e:6a: 9c:65:ab:8c:77:e7:40:8a:51:a6:da:4f:3d:ae:8b:d0:22:00: 81:bc:07:bc:29:be:2f:da:56:94:a5:c2:bd:cc:df:76:d3:a0: de:29:ea:72:54:d4:ca:88:71:53:e8:68:8f:e5:79:8a:43:71: 95:62:96:1f:69:c8:25:d8:c6:2d:f1:18:87:10:ca:ff:b9:67: 78:d2:48:3e:0e:e9:d0:be:56:7a:74:dd:95:aa:9c:5d:38:65: 86:3f:ef:be -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUF4tZsqv67VOJri8zUHzrMUoz8kAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI4MTYwMDE0WhcNMjUwOTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYTAxNWNmYTUwYzc2MDBhZmI2ODc1NmVlNDNkZjBhNmFk NjRiYzI4NDk0ODJlNTUyMjkyMmNhZGRkNDlhMTQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCy13Y2xFq3mPMvfI7Q3JUFJuVuZp7bfrOt+7wd9jAb/5YD BOMLLIr16gME60yuEPNNi2jvtJS4/fTTkLBqJCtEG2+Y7DnMqLMcnMDv/6dXTPrg M0/WLfZGnKFIkvqF5KD8yenrwO8A2DzkaIKN1H/zYv0EMYeBoGF1K3YnZsN5Fmfm h4ovTclVJrKCQDDhDf87A7aNbF9IHxXCHeoVVPj+JpXveUTLSqqX9FjnnWKo0aKl OTnc/e8PdZRANSm1TiVrnwIeleXA5GiHtws2BVjOxK8wNcQgOTI/Gni6NE3cjLAR BEkM/Hfan/gW1gSgKSkHA3BAws/KlKRSb6g8bc9NAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfw8vjf980HMuJRrmyPpwrVBOJc8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NmNjBiOGQ0LWRhYmUtNGE5NS05YjZhLTlmMmIxMzY2MWM1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2lQowDQYJKoZIhvcNAQELBQADggEBAGTVeL2wBjU2E39HRmqAZXYdyI7s 6KCFSDCusa8ia1RNLGtv2G7bJCLZrxEZQ/J7BMa2pEhyEhhAVHondp2+xiXtPI1H xt70/d3Rn4RmIZtNACxrIZb+vJfIg9+q9I/YFT7+MdWYMqN04LgAlf/16EKwADsl fdZ704BbOHM+piorFc1LR0w8zj+gu5669WGNrqXOVbRlMFgzDoP2WI619Fp+apxl q4x350CKUabaTz2ui9AiAIG8B7wpvi/aVpSlwr3M33bToN4p6nJU1MqIcVPoaI/l eYpDcZVilh9pyCXYxi3xGIcQyv+5Z3jSSD4O6dC+Vnp03ZWqnF04ZYY/774= -----END CERTIFICATE-----Generated at Mon Aug 4 21:43:03 2025 by rpki-client