$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8951f6a-bd26-4399-9d52-23555496cd80.roa File: d8951f6a-bd26-4399-9d52-23555496cd80.roa (raw, json) Hash identifier: tkcUiKjtc4Rx1ZLV3oebgXX1T/FVgLKtmBrLa3D/JZ8= Subject key identifier: D8:A6:15:6D:CF:88:73:C0:D3:C8:25:5B:E3:E9:DF:59:41:14:BD:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DC3575777CE6D74EDF0909E0412F50C1943A455 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8951f6a-bd26-4399-9d52-23555496cd80.roa Signing time: Fri 25 Jul 2025 16:10:24 +0000 ROA not before: Fri 25 Jul 2025 16:10:24 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.183.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c3:57:57:77:ce:6d:74:ed:f0:90:9e:04:12:f5:0c:19:43:a4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 16:10:24 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=eaf70fb6158de5ed1730da9886d72ea859b935a49f9cefdfec0c52d66e142ea8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:09:68:d0:d5:83:9c:76:99:7e:3b:cb:b3: f7:24:6d:18:44:ec:64:31:35:9f:47:c8:19:9c:3b: 6e:e8:2c:25:c1:e0:c3:a7:6f:14:c2:2c:a3:81:73: a6:93:d1:8d:8e:03:b7:c6:9f:45:d4:2a:22:c8:95: f3:91:82:9c:be:e5:71:b2:ce:0f:54:b5:69:0a:31: 4c:ff:a5:d6:1c:22:63:d1:3b:f6:fc:9f:49:10:b2: f0:9d:a4:1c:21:59:ab:a3:e3:0d:f4:75:3d:06:b0: e0:8f:20:46:12:21:6c:00:aa:17:73:b6:1b:ef:76: d1:6a:b0:3a:7e:51:dd:ae:2a:a8:07:cf:b7:d8:d6: 65:ab:0d:57:e8:0d:f8:19:04:9d:1b:54:8d:fe:9c: 7f:f5:7d:ba:56:e9:26:c5:5b:d6:06:06:ad:78:26: 10:e7:4b:3f:7f:e9:91:10:67:00:33:fc:43:ce:60: cf:17:cc:8e:ca:78:dc:b8:15:46:92:f7:7f:b0:13: c2:0d:0d:70:07:1e:2e:da:80:8d:38:c7:f7:bd:72: b2:97:80:b9:8c:20:a3:6e:79:05:0f:b9:cd:a9:76: 14:08:ca:2e:4c:b4:05:1f:6f:6c:71:37:da:95:59: d5:ac:1d:01:bd:c5:6a:39:c3:e5:f9:21:f2:c5:45: 81:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A6:15:6D:CF:88:73:C0:D3:C8:25:5B:E3:E9:DF:59:41:14:BD:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d8951f6a-bd26-4399-9d52-23555496cd80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.183.0.0/16 Signature Algorithm: sha256WithRSAEncryption 73:65:11:10:19:f1:d0:7a:55:7b:fc:72:f8:e8:fe:f1:6e:f4: 31:01:be:3d:21:d5:2e:f9:c6:1f:d4:5e:8f:a2:28:b0:21:1c: d4:20:c6:27:88:c1:18:34:1f:cd:5e:b1:b8:0b:81:41:e9:41: ea:2a:f2:87:67:0d:4b:1d:55:2a:62:ed:b6:66:26:fe:cf:6d: 5f:d2:1a:52:d6:31:29:2e:2d:cf:f2:a6:5d:5e:bf:49:9a:db: 0c:8f:00:d9:9a:00:3a:0e:6c:8c:50:2c:5a:e5:33:82:31:2b: e9:c4:19:6f:96:dd:24:50:06:bd:67:4e:9e:90:7a:67:cc:15: 14:4e:f4:89:c5:b8:88:e4:42:38:a4:29:30:fb:cf:b9:62:83: 08:5a:89:6a:2b:ae:ad:0e:c2:8a:80:4a:98:c3:3d:e1:b1:e7: fc:1b:5d:94:e9:42:22:8b:4d:a0:81:c8:fd:75:81:e3:65:8a: 18:bc:fb:a0:40:55:09:52:03:de:e2:1d:e1:8a:fb:d7:d1:a6: c7:5c:f5:07:1d:a1:b1:10:ba:67:dd:ba:fa:e7:f2:21:dc:3d: 6e:f1:35:2c:24:63:1e:76:96:29:07:61:30:11:33:12:f2:ac: c7:7a:52:e7:16:c1:cc:e1:fb:db:d1:ec:1e:3a:8c:4b:52:ec: b3:30:ee:55 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbcNXV3fObXTt8JCeBBL1DBlDpFUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTYxMDI0WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYWY3MGZiNjE1OGRlNWVkMTczMGRhOTg4NmQ3MmVhODU5 YjkzNWE0OWY5Y2VmZGZlYzBjNTJkNjZlMTQyZWE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5wwlo0NWDnHaZfjvLs/ckbRhE7GQxNZ9HyBmcO27oLCXB 4MOnbxTCLKOBc6aT0Y2OA7fGn0XUKiLIlfORgpy+5XGyzg9UtWkKMUz/pdYcImPR O/b8n0kQsvCdpBwhWauj4w30dT0GsOCPIEYSIWwAqhdzthvvdtFqsDp+Ud2uKqgH z7fY1mWrDVfoDfgZBJ0bVI3+nH/1fbpW6SbFW9YGBq14JhDnSz9/6ZEQZwAz/EPO YM8XzI7KeNy4FUaS93+wE8INDXAHHi7agI04x/e9crKXgLmMIKNueQUPuc2pdhQI yi5MtAUfb2xxN9qVWdWsHQG9xWo5w+X5IfLFRYH9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU2KYVbc+Ic8DTyCVb4+nfWUEUvY8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q4OTUxZjZhLWJkMjYtNDM5OS05ZDUyLTIzNTU1NDk2Y2Q4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA2tzANBgkqhkiG9w0BAQsFAAOCAQEAc2UREBnx0HpVe/xy+Oj+8W70MQG+ PSHVLvnGH9Rej6IosCEc1CDGJ4jBGDQfzV6xuAuBQelB6iryh2cNSx1VKmLttmYm /s9tX9IaUtYxKS4tz/KmXV6/SZrbDI8A2ZoAOg5sjFAsWuUzgjEr6cQZb5bdJFAG vWdOnpB6Z8wVFE70icW4iORCOKQpMPvPuWKDCFqJaiuurQ7CioBKmMM94bHn/Btd lOlCIotNoIHI/XWB42WKGLz7oEBVCVID3uId4Yr719Gmx1z1Bx2hsRC6Z926+ufy Idw9bvE1LCRjHnaWKQdhMBEzEvKsx3pS5xbBzOH729HsHjqMS1LsszDuVQ== -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:25 2025 by rpki-client