$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fead37cf-fd8d-43cb-8c50-1971d2dbdb01.roa File: fead37cf-fd8d-43cb-8c50-1971d2dbdb01.roa (raw, json) Hash identifier: SrXHDQdPC3wYKS/TUTb6zaK53xd+6u3dYiG85Lr1SPg= Subject key identifier: B1:53:85:B6:7F:C7:08:FC:B1:22:A1:0B:57:23:F9:A4:97:DA:4F:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1FCF0932773F56657FBF2B470758BF5FFDC5BF59 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fead37cf-fd8d-43cb-8c50-1971d2dbdb01.roa Signing time: Fri 11 Jul 2025 17:40:07 +0000 ROA not before: Fri 11 Jul 2025 17:40:07 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.74.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cf:09:32:77:3f:56:65:7f:bf:2b:47:07:58:bf:5f:fd:c5:bf:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 17:40:07 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=ee5fad0517e3debcd9a7f7ac310b89a81499f1a92b33d87b33ecc758c57b7039, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:46:03:18:20:8d:1c:82:ca:51:a7:01:6a:37: cd:2a:69:94:90:70:10:32:4e:e6:ce:80:5c:71:c8: a4:86:ef:85:35:2b:14:11:44:1a:f1:cb:93:1a:9d: ea:4a:f1:e5:21:38:7f:a6:09:08:8c:e5:6f:cc:45: f7:42:0d:10:84:38:bf:96:e6:c5:1f:52:7c:2e:aa: 56:9f:93:e6:ab:cb:16:17:bc:bf:40:39:75:9c:1a: c9:42:92:4b:54:eb:7d:ab:20:bf:d7:1f:c2:69:08: 56:36:aa:6c:5f:41:fd:b5:1c:3e:9f:c2:82:0a:2b: 11:6a:07:56:a3:f0:4d:56:a1:ef:f0:6c:3f:8f:67: ed:bd:9a:91:b7:32:c3:b7:7a:04:fb:17:53:51:fc: b0:94:01:ac:59:92:ef:84:bc:be:a0:00:23:c9:72: 7f:c7:fe:07:91:e6:6e:3d:7d:9e:54:f7:fc:a0:5b: a3:90:e5:4b:43:d9:63:cc:95:ad:fb:58:1d:02:b4: ea:33:11:0a:72:d9:fe:79:20:91:f3:c6:3c:05:1d: 40:6d:f3:44:8f:37:41:ad:85:c3:4f:3f:0a:38:c8: 5d:d5:8a:e0:c5:71:7e:ff:2c:01:25:1e:19:26:c7: de:5f:81:ce:a7:1e:72:47:85:60:19:56:54:4e:ad: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:53:85:B6:7F:C7:08:FC:B1:22:A1:0B:57:23:F9:A4:97:DA:4F:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fead37cf-fd8d-43cb-8c50-1971d2dbdb01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.74.0.0/17 Signature Algorithm: sha256WithRSAEncryption a3:66:5f:ba:b5:9b:ed:8b:c2:85:2c:32:70:f9:96:1d:12:fc: 4f:d3:8a:4a:fa:98:70:6a:15:75:94:b6:f4:0c:8f:cf:3b:76: 19:ee:14:9c:b1:c9:78:fb:60:b6:05:05:be:f2:90:1c:23:95: 51:fb:e0:37:ad:35:6f:21:6d:78:69:a4:ed:0a:d5:94:c7:f1: aa:18:4f:16:f9:ee:87:a7:76:47:e4:ba:b4:b8:d4:d2:d6:b9: e3:9d:dc:82:cb:72:49:f7:7e:e0:8f:30:39:5d:f1:38:ca:c9: 1c:2a:ae:40:d8:b7:6d:10:a3:40:4e:99:8f:c6:3c:45:c9:ab: d3:f8:a4:2b:30:e1:d2:fe:ff:18:9c:69:9d:7f:47:7a:ad:34: 88:ba:05:d1:35:84:bc:46:57:98:f3:0c:58:a4:bb:4b:cc:bb: 73:cd:de:8d:df:f9:62:f0:39:2c:11:c4:07:5b:36:d2:65:5d: 5a:d8:0b:19:db:65:3d:61:b3:7a:8c:d9:87:ec:c8:46:77:0a: 44:6e:24:23:2b:99:76:4e:45:11:cf:6b:d8:cf:de:17:0f:9c: 3d:5f:2f:cf:f8:6f:47:c9:a3:87:55:2c:9c:0b:1e:3c:81:72: 99:01:78:c6:92:8b:54:8e:07:4e:3e:ae:26:90:dc:29:49:30: c5:c3:1f:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUH88JMnc/VmV/vytHB1i/X/3Fv1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTc0MDA3WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTVmYWQwNTE3ZTNkZWJjZDlhN2Y3YWMzMTBiODlhODE0 OTlmMWE5MmIzM2Q4N2IzM2VjYzc1OGM1N2I3MDM5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoRgMYII0cgspRpwFqN80qaZSQcBAyTubOgFxxyKSG74U1 KxQRRBrxy5ManepK8eUhOH+mCQiM5W/MRfdCDRCEOL+W5sUfUnwuqlafk+aryxYX vL9AOXWcGslCkktU632rIL/XH8JpCFY2qmxfQf21HD6fwoIKKxFqB1aj8E1Woe/w bD+PZ+29mpG3MsO3egT7F1NR/LCUAaxZku+EvL6gACPJcn/H/geR5m49fZ5U9/yg W6OQ5UtD2WPMla37WB0CtOozEQpy2f55IJHzxjwFHUBt80SPN0GthcNPPwo4yF3V iuDFcX7/LAElHhkmx95fgc6nHnJHhWAZVlROrVvbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsVOFtn/HCPyxIqELVyP5pJfaTzMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZlYWQzN2NmLWZkOGQtNDNjYi04YzUwLTE5NzFkMmRiZGIwMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2SgAwDQYJKoZIhvcNAQELBQADggEBAKNmX7q1m+2LwoUsMnD5lh0S/E/T ikr6mHBqFXWUtvQMj887dhnuFJyxyXj7YLYFBb7ykBwjlVH74DetNW8hbXhppO0K 1ZTH8aoYTxb57oendkfkurS41NLWueOd3ILLckn3fuCPMDld8TjKyRwqrkDYt20Q o0BOmY/GPEXJq9P4pCsw4dL+/xicaZ1/R3qtNIi6BdE1hLxGV5jzDFiku0vMu3PN 3o3f+WLwOSwRxAdbNtJlXVrYCxnbZT1hs3qM2YfsyEZ3CkRuJCMrmXZORRHPa9jP 3hcPnD1fL8/4b0fJo4dVLJwLHjyBcpkBeMaSi1SOB04+riaQ3ClJMMXDH6w= -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:51 2025 by rpki-client