$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d12f6635-a0b8-4c70-9bbf-9436e055df84.roa File: d12f6635-a0b8-4c70-9bbf-9436e055df84.roa (raw, json) Hash identifier: 6uLP88kD7+WtWyDldx/kqFvvMKaoG3Yi8iBrsW2EOI8= Subject key identifier: 19:FE:F8:3E:02:02:2A:7E:18:B4:83:01:EC:59:F9:F3:E1:A0:EF:82 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D265A1DD502789CEB55929AFED8667E4168FA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d12f6635-a0b8-4c70-9bbf-9436e055df84.roa Signing time: Fri 11 Jul 2025 17:41:26 +0000 ROA not before: Fri 11 Jul 2025 17:41:26 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.82.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:26:5a:1d:d5:02:78:9c:eb:55:92:9a:fe:d8:66:7e:41:68:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:41:26 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=db75fa6a919565e73a54e22c07a384367b3f10135ab4cc3e7aee07c8859e5b74, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1f:97:c7:e5:fa:be:35:3d:cd:bc:38:54:61: f6:b9:54:38:7d:8a:02:46:5c:1d:58:45:48:1b:22: fa:45:3d:b0:59:f2:c4:54:b0:ab:d5:25:ca:1d:6c: ef:27:95:c6:6c:50:d3:d6:e8:b7:74:9b:24:c9:10: 49:4f:7c:b3:20:03:72:46:b4:8b:65:23:03:91:57: 61:69:1b:fa:e0:c0:0f:57:d5:73:19:fe:36:eb:d9: 9f:28:94:bb:33:0d:24:41:df:b2:fd:4c:1e:1c:b1: 04:70:34:53:d9:f3:aa:73:93:b6:22:48:35:1f:6d: 59:5f:cf:a7:4b:8b:99:5e:70:a5:ff:3a:59:cd:a8: bc:70:5a:dd:22:29:ac:12:31:5d:71:7b:fc:85:0e: 7e:14:0d:d5:e9:f1:f2:f8:22:c0:2c:cb:d7:ff:7d: 13:47:c2:59:cc:94:c2:de:e2:9f:6a:9a:c5:59:0c: 0d:ba:cb:01:ee:3e:4c:27:c7:0a:42:36:0b:5d:96: 18:dd:ee:d8:09:c5:7c:48:63:12:44:29:02:2f:55: c3:ca:7a:8f:c9:26:ea:7c:64:b7:a4:8f:4d:7f:24: 10:95:f1:7c:fa:9d:3e:3e:11:8b:ea:a3:a9:5e:f8: 14:22:5d:77:b9:75:75:f0:7b:86:71:d1:38:c1:f2: 2b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:FE:F8:3E:02:02:2A:7E:18:B4:83:01:EC:59:F9:F3:E1:A0:EF:82 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d12f6635-a0b8-4c70-9bbf-9436e055df84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.82.160.0/19 Signature Algorithm: sha256WithRSAEncryption b0:25:dd:e2:05:9d:fe:ce:9f:84:73:e4:d6:9b:b1:76:48:c5: 1e:0a:db:c3:5a:81:5f:33:94:24:2f:b7:d9:3d:b3:e7:40:53: d3:ee:ee:39:b5:41:11:3d:36:c9:9e:d6:53:09:be:98:e8:0b: 98:5f:2c:b8:fa:18:5c:28:a3:92:b6:4f:b9:71:f5:15:b7:6c: dd:ff:98:61:92:78:91:55:3e:e4:86:50:c4:44:c5:20:29:bc: 6a:3b:5f:86:50:4f:72:6d:dc:8f:85:05:d1:68:01:0f:74:bc: 31:da:03:ed:e3:15:21:5c:81:72:b5:0a:1e:b0:22:53:f7:f7: 8f:d9:4c:af:30:95:f9:ca:13:7c:89:e0:2d:85:7a:71:ec:73: 39:d3:d2:90:f3:80:ee:72:8a:d0:d1:d1:c1:87:7e:0a:25:1c: 88:ab:9c:ae:2c:7a:51:75:47:f4:46:32:2e:8f:a4:03:06:5e: 45:11:67:b4:46:97:68:fb:54:80:4c:a2:6c:b1:b5:ec:3e:06: b5:c2:f1:f3:a3:a2:4e:06:e0:7a:b0:0c:21:64:f1:1c:2b:5c: 5d:5b:05:24:95:93:b7:99:b2:7a:28:58:0d:8d:68:5a:3f:8a: 06:6f:ed:c5:fa:fd:ee:ce:b9:05:78:32:f9:c4:e5:89:0b:7c: 9e:24:98:e3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITbSZaHdUCeJzrVZKa/thmfkFo+jANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA3MTExNzQxMjZaFw0yNTA4MTUyMzU5NTla MHoxSTBHBgNVBAUTQGRiNzVmYTZhOTE5NTY1ZTczYTU0ZTIyYzA3YTM4NDM2N2Iz ZjEwMTM1YWI0Y2MzZTdhZWUwN2M4ODU5ZTViNzQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAMYfl8fl+r41Pc28OFRh9rlUOH2KAkZcHVhFSBsi+kU9sFny xFSwq9Ulyh1s7yeVxmxQ09bot3SbJMkQSU98syADcka0i2UjA5FXYWkb+uDAD1fV cxn+NuvZnyiUuzMNJEHfsv1MHhyxBHA0U9nzqnOTtiJINR9tWV/Pp0uLmV5wpf86 Wc2ovHBa3SIprBIxXXF7/IUOfhQN1enx8vgiwCzL1/99E0fCWcyUwt7in2qaxVkM DbrLAe4+TCfHCkI2C12WGN3u2AnFfEhjEkQpAi9Vw8p6j8km6nxkt6SPTX8kEJXx fPqdPj4Ri+qjqV74FCJdd7l1dfB7hnHROMHyK1kCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBQZ/vg+AgIqfhi0gwHsWfnz4aDvgjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZDEyZjY2MzUtYTBiOC00YzcwLTliYmYtOTQzNmUwNTVkZjg0LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTZSoDANBgkqhkiG9w0BAQsFAAOCAQEAsCXd4gWd/s6fhHPk1puxdkjFHgrb w1qBXzOUJC+32T2z50BT0+7uObVBET02yZ7WUwm+mOgLmF8suPoYXCijkrZPuXH1 Fbds3f+YYZJ4kVU+5IZQxETFICm8ajtfhlBPcm3cj4UF0WgBD3S8MdoD7eMVIVyB crUKHrAiU/f3j9lMrzCV+coTfIngLYV6cexzOdPSkPOA7nKK0NHRwYd+CiUciKuc rix6UXVH9EYyLo+kAwZeRRFntEaXaPtUgEyibLG17D4GtcLx86OiTgbgerAMIWTx HCtcXVsFJJWTt5myeihYDY1oWj+KBm/txfr97s65BXgy+cTliQt8niSY4w== -----END CERTIFICATE-----Generated at Mon Aug 4 21:36:58 2025 by rpki-client