$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7908ae7-232d-4be2-ae56-a94a531ab45b.roa File: d7908ae7-232d-4be2-ae56-a94a531ab45b.roa (raw, json) Hash identifier: HcNmnWHAaTS6CTLmtF5tjnit0ywVZ8Su8YRvkB7Es2Y= Subject key identifier: 0F:42:96:C3:9E:0E:C6:B1:06:A5:AF:BA:C9:B1:10:1F:8E:34:51:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 290614FA503E823408D45822C11BF2457433B6F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7908ae7-232d-4be2-ae56-a94a531ab45b.roa Signing time: Tue 29 Jul 2025 16:50:56 +0000 ROA not before: Tue 29 Jul 2025 16:50:56 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.236.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:06:14:fa:50:3e:82:34:08:d4:58:22:c1:1b:f2:45:74:33:b6:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 16:50:56 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=03d4031ffa5d68bb0fae018bb4620b9a23b1de4dbe6bea6ce994756289dac045, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:81:a0:bd:9b:7e:04:11:63:48:58:b1:09:c0: 96:a1:2d:ff:18:36:5f:e5:dd:f5:f7:29:8e:3e:3d: 66:fa:1f:1a:50:4a:69:b7:1c:43:3b:c3:0f:62:80: e9:63:39:8c:c7:23:fb:80:2a:47:11:8d:26:c1:2d: 3a:f7:98:71:53:4a:a3:e6:6c:67:bf:fc:b5:d6:9b: 75:3d:95:92:30:12:03:f5:61:70:f8:d6:17:94:d4: dc:d4:ce:a0:57:fa:ab:5d:73:00:8d:ca:41:31:9b: ab:b3:9a:15:15:e6:10:36:88:af:1c:51:c3:a4:23: d8:c2:dc:86:9f:60:28:26:99:e9:04:b0:6d:b6:4a: 07:51:91:fd:ce:54:cf:60:10:2c:98:fe:4d:91:e4: c9:a7:59:ca:16:61:77:7d:02:29:db:28:59:8b:45: 78:0a:cf:a4:59:08:ea:f6:fa:2e:07:bf:a7:f9:1d: b8:89:e0:37:29:f4:3c:ce:d5:1c:2f:1e:6d:a1:00: 90:17:b8:4c:42:a0:48:af:6b:4a:e2:c3:a8:90:c6: 1d:1a:f1:8c:b8:21:37:58:45:22:63:1b:ee:0f:28: 3f:f6:57:d2:93:c6:9c:b7:c1:7e:cc:da:07:99:b0: c2:80:49:02:10:96:47:74:c9:80:ff:4e:15:fb:61: b1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:42:96:C3:9E:0E:C6:B1:06:A5:AF:BA:C9:B1:10:1F:8E:34:51:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d7908ae7-232d-4be2-ae56-a94a531ab45b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.236.0.0/18 Signature Algorithm: sha256WithRSAEncryption a1:75:70:0a:ca:e7:15:12:5e:d7:6c:28:88:8d:f0:29:88:48: 8e:d7:8f:69:99:a0:73:80:39:5f:c8:5d:ef:88:8d:30:f0:03: 05:e6:1e:4f:1c:d4:3d:96:75:de:53:15:93:a4:cd:af:94:bb: f7:06:a6:b6:e4:65:5a:31:d8:03:ed:16:b4:47:f9:77:08:26: be:7d:37:a1:64:6c:fd:f9:7a:9b:af:09:e1:a9:89:20:62:1c: 6c:71:27:6d:2e:ff:da:4b:60:e3:0d:5f:60:f1:32:a2:fe:87: 8e:2b:bc:c6:70:0d:00:ad:b9:0a:17:95:8e:80:0f:bc:20:e0: e4:43:83:95:3f:cd:d1:3a:bc:28:7d:35:16:96:f8:c2:21:6e: de:46:6b:43:97:62:35:bb:bc:15:79:33:37:b2:d0:08:ed:89: b5:90:88:7b:f1:48:a4:4f:ae:73:08:20:38:c7:47:63:14:cc: 94:c6:58:f0:63:32:c9:64:b2:da:e8:e7:16:12:75:9a:9b:2b: 93:28:53:af:e0:59:22:29:d2:db:cd:c2:e4:31:0e:52:b1:cb: d0:99:37:a4:d8:44:66:05:cf:bc:a7:29:80:5e:2f:d2:30:8b: c9:8f:a2:a6:e8:33:1e:42:5f:dd:f2:7a:3f:1e:10:54:18:50: 95:65:54:33 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKQYU+lA+gjQI1FgiwRvyRXQztvQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTY1MDU2WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwM2Q0MDMxZmZhNWQ2OGJiMGZhZTAxOGJiNDYyMGI5YTIz YjFkZTRkYmU2YmVhNmNlOTk0NzU2Mjg5ZGFjMDQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDrgaC9m34EEWNIWLEJwJahLf8YNl/l3fX3KY4+PWb6HxpQ Smm3HEM7ww9igOljOYzHI/uAKkcRjSbBLTr3mHFTSqPmbGe//LXWm3U9lZIwEgP1 YXD41heU1NzUzqBX+qtdcwCNykExm6uzmhUV5hA2iK8cUcOkI9jC3IafYCgmmekE sG22SgdRkf3OVM9gECyY/k2R5MmnWcoWYXd9AinbKFmLRXgKz6RZCOr2+i4Hv6f5 HbiJ4Dcp9DzO1RwvHm2hAJAXuExCoEiva0riw6iQxh0a8Yy4ITdYRSJjG+4PKD/2 V9KTxpy3wX7M2geZsMKASQIQlkd0yYD/ThX7YbEbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUD0KWw54OxrEGpa+6ybEQH440UcQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q3OTA4YWU3LTIzMmQtNGJlMi1hZTU2LWE5NGE1MzFhYjQ1Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY27AAwDQYJKoZIhvcNAQELBQADggEBAKF1cArK5xUSXtdsKIiN8CmISI7X j2mZoHOAOV/IXe+IjTDwAwXmHk8c1D2Wdd5TFZOkza+Uu/cGprbkZVox2APtFrRH +XcIJr59N6FkbP35epuvCeGpiSBiHGxxJ20u/9pLYOMNX2DxMqL+h44rvMZwDQCt uQoXlY6AD7wg4ORDg5U/zdE6vCh9NRaW+MIhbt5Ga0OXYjW7vBV5Mzey0AjtibWQ iHvxSKRPrnMIIDjHR2MUzJTGWPBjMslkstro5xYSdZqbK5MoU6/gWSIp0tvNwuQx DlKxy9CZN6TYRGYFz7ynKYBeL9Iwi8mPoqboMx5CX93yej8eEFQYUJVlVDM= -----END CERTIFICATE-----Generated at Mon Aug 4 21:33:01 2025 by rpki-client