$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0b39767-6ac3-4c62-88d6-c3e7f91393c6.roa File: e0b39767-6ac3-4c62-88d6-c3e7f91393c6.roa (raw, json) Hash identifier: qQ7p3bbka3CMbAt3HvcXdho7pRMU4WGG34tOsad4H10= Subject key identifier: 84:A3:BA:17:D1:3B:57:DA:23:E1:4C:AE:4E:C5:5E:BE:7F:BA:CC:B4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3565E7BA4E88374A1832D186C0C47C6B534FA675 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0b39767-6ac3-4c62-88d6-c3e7f91393c6.roa Signing time: Tue 29 Jul 2025 18:10:12 +0000 ROA not before: Tue 29 Jul 2025 18:10:12 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.245.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:65:e7:ba:4e:88:37:4a:18:32:d1:86:c0:c4:7c:6b:53:4f:a6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 18:10:12 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=5654ecc588048fa1c459ed064896c93c28f1e39755524534836f39612601c247, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:86:c8:2e:37:33:7b:b5:29:c0:ac:06:88:b5: 78:52:e7:2b:d0:12:48:a7:b2:51:a3:b2:07:71:2e: fb:1a:26:33:bb:5b:49:da:17:56:64:5d:17:c6:26: a2:69:f1:ed:db:25:0d:1b:ae:c7:ab:3c:1e:7e:a3: 7b:87:3a:67:f9:03:7f:a8:04:22:37:51:46:4a:7e: 82:67:87:35:83:94:2e:c8:d3:56:cc:cb:aa:4f:6b: 28:58:23:d0:d1:86:ad:e6:1e:d2:45:f2:c9:78:1a: c3:db:0b:f0:26:d4:2b:0c:04:40:0c:6a:c6:80:ff: b8:b9:ac:6a:f6:1a:a8:7b:35:9e:57:e6:de:7a:da: 11:ef:91:09:f8:a0:b4:f4:13:e3:8c:e2:99:20:55: bd:45:99:5f:56:bd:31:2e:c2:b3:af:15:f5:40:fb: eb:97:4e:bb:82:71:73:b1:84:ae:93:50:da:7d:be: a0:89:00:80:a0:77:47:c5:a1:47:f0:cb:3b:7a:46: 88:2a:a4:41:d3:10:88:fc:07:af:26:7f:f9:d7:45: a5:46:37:4f:d5:77:53:c0:11:08:18:ff:30:86:1f: 7b:19:50:4d:b5:96:30:0f:95:89:7b:1c:b7:db:c9: 55:86:d3:cd:36:3e:f9:df:a2:29:6e:ba:d0:de:50: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A3:BA:17:D1:3B:57:DA:23:E1:4C:AE:4E:C5:5E:BE:7F:BA:CC:B4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0b39767-6ac3-4c62-88d6-c3e7f91393c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.245.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3e:e0:f1:3e:ab:95:25:c4:a9:2d:b0:e2:d7:a8:31:20:3d:d0: 2b:4e:ce:ef:90:22:a2:7f:3c:a7:b1:ef:fe:59:75:fb:a9:42: de:3a:1e:fc:99:25:c6:e2:0f:6f:51:71:05:ba:53:3b:40:c5: c5:0b:6c:f3:42:e3:a6:da:48:ee:52:33:c6:74:11:ea:88:39: 6f:dd:0a:7b:a7:c9:59:fc:5f:ab:4e:1b:d1:76:b3:b3:e4:ce: 4c:ca:07:cc:b9:c7:47:97:6d:d2:43:89:7a:e4:54:75:79:03: 4f:f4:b3:09:eb:41:7c:cf:9c:fa:24:d2:a5:0f:f7:d7:bd:2b: 76:9f:79:21:e3:05:be:4d:cc:97:67:fa:7c:03:35:fc:1b:b5: 3a:91:f1:f1:4f:0c:c5:4b:f1:ae:7c:d6:a8:b1:80:3a:57:e8: 88:9f:84:14:a7:8e:35:ba:0d:4a:d1:53:3c:4f:88:23:1e:ed: 43:13:4b:a9:c6:7c:a7:92:fe:59:f9:e1:cc:80:07:11:e5:6e: 27:b7:d8:a7:ea:d4:ba:d2:64:7a:55:05:99:10:2c:18:f4:6c: 02:25:ed:1d:64:0d:1c:b9:1c:0a:91:7e:ba:7a:a0:28:ab:a7: 7d:f0:b8:00:4f:8f:6e:fa:04:c8:9a:c6:a5:ab:76:e5:86:8b: d3:4c:a3:3c -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUNWXnuk6IN0oYMtGGwMR8a1NPpnUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTgxMDEyWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NjU0ZWNjNTg4MDQ4ZmExYzQ1OWVkMDY0ODk2YzkzYzI4 ZjFlMzk3NTU1MjQ1MzQ4MzZmMzk2MTI2MDFjMjQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfhsguNzN7tSnArAaItXhS5yvQEkinslGjsgdxLvsaJjO7 W0naF1ZkXRfGJqJp8e3bJQ0brserPB5+o3uHOmf5A3+oBCI3UUZKfoJnhzWDlC7I 01bMy6pPayhYI9DRhq3mHtJF8sl4GsPbC/Am1CsMBEAMasaA/7i5rGr2Gqh7NZ5X 5t562hHvkQn4oLT0E+OM4pkgVb1FmV9WvTEuwrOvFfVA++uXTruCcXOxhK6TUNp9 vqCJAICgd0fFoUfwyzt6RogqpEHTEIj8B68mf/nXRaVGN0/Vd1PAEQgY/zCGH3sZ UE21ljAPlYl7HLfbyVWG0802PvnfoiluutDeUNnXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUhKO6F9E7V9oj4UyuTsVevn+6zLQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UwYjM5NzY3LTZhYzMtNGM2Mi04OGQ2LWMzZTdmOTEzOTNjNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA29TANBgkqhkiG9w0BAQsFAAOCAQEAPuDxPquVJcSpLbDi16gxID3QK07O 75Aion88p7Hv/ll1+6lC3joe/JklxuIPb1FxBbpTO0DFxQts80LjptpI7lIzxnQR 6og5b90Ke6fJWfxfq04b0Xazs+TOTMoHzLnHR5dt0kOJeuRUdXkDT/SzCetBfM+c +iTSpQ/3170rdp95IeMFvk3Ml2f6fAM1/Bu1OpHx8U8MxUvxrnzWqLGAOlfoiJ+E FKeONboNStFTPE+IIx7tQxNLqcZ8p5L+WfnhzIAHEeVuJ7fYp+rUutJkelUFmRAs GPRsAiXtHWQNHLkcCpF+unqgKKunffC4AE+PbvoEyJrGpat25YaL00yjPA== -----END CERTIFICATE-----Generated at Mon Aug 4 21:41:18 2025 by rpki-client