$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f848bb7f-a3dc-417c-b361-0f83bad307d6.roa File: f848bb7f-a3dc-417c-b361-0f83bad307d6.roa (raw, json) Hash identifier: sMnH0tbi1Gn7tCu3RdTepBqYAliTtcpfVKczx7LIOZY= Subject key identifier: 20:21:BC:1E:AA:7D:2B:84:92:A3:B8:3B:DD:CB:70:A2:2E:4F:3D:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B95B27CDE890A7350846CED4AF6C1ADF4BB1228 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f848bb7f-a3dc-417c-b361-0f83bad307d6.roa Signing time: Tue 29 Jul 2025 15:11:56 +0000 ROA not before: Tue 29 Jul 2025 15:11:56 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.151.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:95:b2:7c:de:89:0a:73:50:84:6c:ed:4a:f6:c1:ad:f4:bb:12:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:11:56 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=2a7ef6e4d4296789eca1ba20f2a4dccd09076ea5aa281e015cf44d66b5423aea, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:f9:ad:09:97:3c:6a:81:d5:1c:f7:a6:53: 39:81:d7:07:bb:92:53:c5:13:fb:a7:b0:fc:9f:0f: fa:ed:e6:0e:7c:41:a3:8b:7a:49:e0:64:90:8b:85: 6f:4d:b1:f8:a1:d8:87:90:d7:f9:d7:3a:48:09:b6: 9f:7e:31:99:e3:11:54:83:f3:7e:7f:f3:26:0f:3a: 90:b0:54:d7:65:29:44:91:0d:23:b4:51:2e:b7:b2: ca:af:52:2c:2d:3f:36:03:5d:eb:c7:fd:93:13:33: f8:b7:02:9f:53:79:52:9a:cd:1e:1a:d6:c2:c8:01: 17:b1:08:26:05:55:c6:c9:0a:0d:57:6f:41:d1:a6: 70:e7:53:32:00:3c:fc:33:05:b1:81:eb:25:ef:40: 34:31:73:c9:eb:53:dd:e1:02:b6:0d:c9:67:8b:42: 47:48:0a:dd:49:d6:46:97:36:08:3d:0f:32:58:d3: 76:2f:86:5e:a2:80:8c:b1:74:5a:e9:4d:96:9b:cf: 2c:87:80:4a:b7:36:d3:00:1c:02:e9:fc:71:89:8f: 09:b0:b6:26:c2:2f:4b:c1:91:39:aa:f9:27:fd:3c: 02:ed:13:f8:61:67:eb:8f:b2:45:47:c7:9c:e0:e8: d1:92:02:5b:7e:ea:7d:10:50:c8:c8:ab:1f:08:70: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:21:BC:1E:AA:7D:2B:84:92:A3:B8:3B:DD:CB:70:A2:2E:4F:3D:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f848bb7f-a3dc-417c-b361-0f83bad307d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.151.128.0/18 Signature Algorithm: sha256WithRSAEncryption 68:4e:e3:ce:64:e7:df:00:92:2e:aa:34:d0:97:5b:80:a7:63: f6:b6:94:e7:5a:2a:06:b0:9c:06:f0:9d:73:63:57:70:85:6e: e9:30:56:2e:6d:bf:5d:c7:c0:d2:a1:c3:83:e8:aa:b0:fc:68: f2:3d:45:09:75:71:a6:5e:ae:ef:28:fb:b6:65:c1:37:b8:55: 74:1a:46:c9:f9:8c:84:f3:1f:ce:12:f4:25:b7:4e:90:bd:42: c5:20:32:25:9d:4b:7b:e7:8f:cf:3f:5f:f5:ae:f6:ac:e8:21: a1:d2:9b:ca:dd:82:ba:9b:b6:1a:19:5c:db:10:ca:b9:b6:fa: f8:e6:e2:3d:11:e5:99:88:5a:3e:e8:23:16:e3:7e:84:6b:41: 28:05:59:c7:b9:f3:fe:f7:b9:42:7c:ce:8e:37:d8:70:1c:d3: b2:75:03:77:e6:cd:b5:e4:56:e6:f0:42:85:7d:6a:78:5e:ae: 75:b4:9d:8a:7b:c0:a8:ad:80:19:c3:66:2e:40:a7:19:46:ec: 05:93:d9:08:c7:76:89:2a:98:58:56:cd:73:4a:7b:bd:2a:18: 3a:4f:ea:8f:75:de:17:8f:17:48:5c:af:e4:43:0f:1a:92:26: 8f:46:64:47:ec:f2:f4:bc:16:3e:1c:01:13:32:b2:06:a3:bb: 70:c4:b7:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUC5WyfN6JCnNQhGztSvbBrfS7EigwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTUxMTU2WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTdlZjZlNGQ0Mjk2Nzg5ZWNhMWJhMjBmMmE0ZGNjZDA5 MDc2ZWE1YWEyODFlMDE1Y2Y0NGQ2NmI1NDIzYWVhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0u/mtCZc8aoHVHPemUzmB1we7klPFE/unsPyfD/rt5g58 QaOLekngZJCLhW9Nsfih2IeQ1/nXOkgJtp9+MZnjEVSD835/8yYPOpCwVNdlKUSR DSO0US63ssqvUiwtPzYDXevH/ZMTM/i3Ap9TeVKazR4a1sLIARexCCYFVcbJCg1X b0HRpnDnUzIAPPwzBbGB6yXvQDQxc8nrU93hArYNyWeLQkdICt1J1kaXNgg9DzJY 03Yvhl6igIyxdFrpTZabzyyHgEq3NtMAHALp/HGJjwmwtibCL0vBkTmq+Sf9PALt E/hhZ+uPskVHx5zg6NGSAlt+6n0QUMjIqx8IcDeZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUICG8Hqp9K4SSo7g73ctwoi5PPeAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y4NDhiYjdmLWEzZGMtNDE3Yy1iMzYxLTBmODNiYWQzMDdkNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2l4AwDQYJKoZIhvcNAQELBQADggEBAGhO485k598Aki6qNNCXW4CnY/a2 lOdaKgawnAbwnXNjV3CFbukwVi5tv13HwNKhw4PoqrD8aPI9RQl1caZeru8o+7Zl wTe4VXQaRsn5jITzH84S9CW3TpC9QsUgMiWdS3vnj88/X/Wu9qzoIaHSm8rdgrqb thoZXNsQyrm2+vjm4j0R5ZmIWj7oIxbjfoRrQSgFWce58/73uUJ8zo432HAc07J1 A3fmzbXkVubwQoV9anhernW0nYp7wKitgBnDZi5ApxlG7AWT2QjHdokqmFhWzXNK e70qGDpP6o913hePF0hcr+RDDxqSJo9GZEfs8vS8Fj4cARMysgaju3DEt9g= -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:46 2025 by rpki-client