$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1acc933f-5e14-4e81-92b2-9397f82dc79b.roa File: 1acc933f-5e14-4e81-92b2-9397f82dc79b.roa (raw, json) Hash identifier: jjUa2F7G/ScyEpUH5ct3PVF/9dKzSWXUSaTiY7k2kDs= Subject key identifier: D5:47:49:1F:52:A0:97:0D:D8:39:BA:B6:58:A5:9D:F0:C1:55:E2:A6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: A3E9C1FC58B3E8C1DDE61D169F4F734182EB3E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1acc933f-5e14-4e81-92b2-9397f82dc79b.roa Signing time: Tue 19 Aug 2025 16:11:52 +0000 ROA not before: Tue 19 Aug 2025 16:11:52 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.190.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a3:e9:c1:fc:58:b3:e8:c1:dd:e6:1d:16:9f:4f:73:41:82:eb:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:11:52 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=1f9d6434b3b983163d0ec12583f6ceb08a5c069e3d4fa2233d0db3cc7c09b93b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:4c:53:b2:3a:b6:8b:4c:c8:f4:61:0e:ef: 24:d1:40:ee:64:88:2f:a9:34:77:f7:f6:bd:d4:fe: c7:67:44:3c:fe:31:e6:7b:94:46:0a:f8:0e:35:ae: 18:26:75:cc:e6:c0:79:69:ff:c6:34:f4:15:83:36: 14:d7:47:15:f9:d8:52:27:16:cb:46:52:52:85:6d: d0:ed:1f:63:0f:7e:fc:5e:34:48:df:b6:bb:a4:f2: 66:fa:4f:6f:2a:95:b4:d6:7d:91:8b:49:f3:d8:30: 69:28:a5:6f:e8:c4:b5:a0:f0:8e:88:90:50:c0:1b: fa:39:05:8a:8f:5f:f2:7f:ea:2c:4e:19:35:c3:f3: 08:45:ac:e0:45:52:5d:01:3c:2d:e9:f8:cc:96:0f: 92:9c:d2:6d:17:1c:a3:56:3c:d2:34:b2:53:4a:f8: 30:39:0f:81:36:62:3e:7a:4e:dd:f7:e4:f1:b9:5e: 45:fb:2a:61:4e:e2:eb:3a:b5:ad:96:95:f3:a2:b2: a6:f3:83:2e:15:94:53:1c:30:ec:48:fe:14:7f:15: ab:a6:12:cf:53:e9:63:e3:d0:45:26:ec:b0:7b:85: 14:7c:ac:15:8a:81:1c:43:0c:44:f9:d6:81:cd:f4: bc:d9:2a:40:4b:9e:5a:55:bd:47:41:15:14:25:24: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:47:49:1F:52:A0:97:0D:D8:39:BA:B6:58:A5:9D:F0:C1:55:E2:A6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1acc933f-5e14-4e81-92b2-9397f82dc79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.190.192.0/19 Signature Algorithm: sha256WithRSAEncryption 09:5b:e6:24:b7:2d:91:03:1b:fc:2f:48:0b:44:63:e4:d6:9f: 3a:93:6a:48:8d:8b:0a:73:41:94:5f:1a:a2:0e:5d:ce:20:7b: 5c:09:a2:d1:91:c9:09:19:4a:ac:de:1c:d9:22:f0:01:b3:a3: ad:da:53:f5:2a:55:44:93:31:71:88:da:fa:9a:63:7e:78:8f: eb:fa:78:48:1b:11:e1:6b:24:18:b5:67:fa:e0:de:73:fd:61: 79:1b:94:a6:21:cd:89:5c:0e:1a:c0:ec:74:36:b8:78:7b:8f: fb:4e:d5:5f:e9:e2:68:4f:b8:54:4c:76:1f:16:d1:8f:8d:b2: cf:09:81:d6:0a:79:56:8d:f5:5c:8c:91:12:a7:3c:75:f4:07: f8:bd:74:73:cd:c7:e3:3c:7a:6b:16:87:ee:a5:7d:84:0b:38: 26:bd:98:8b:1c:d6:d6:1b:d1:3b:ba:58:b7:6d:3f:e4:57:0b: e1:70:ef:0e:67:04:13:b0:b6:0f:c2:1d:33:5b:d5:ef:de:1e: 08:cf:ac:b2:68:78:66:07:7c:6c:4f:42:92:2e:a3:5e:e2:f7: 36:e1:36:66:3d:b3:ed:bb:ad:29:d6:d1:27:bc:8b:c0:9b:e7: c3:3e:f4:ae:47:10:f2:35:c7:ea:c9:cd:2b:3c:d1:4e:f5:26: 2c:9e:12:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAKPpwfxYs+jB3eYdFp9Pc0GC6z4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTYxMTUyWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AxZjlkNjQzNGIzYjk4MzE2M2QwZWMxMjU4M2Y2Y2ViMDhh NWMwNjllM2Q0ZmEyMjMzZDBkYjNjYzdjMDliOTNiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDTOExTsjq2i0zI9GEO7yTRQO5kiC+pNHf39r3U/sdnRDz+ MeZ7lEYK+A41rhgmdczmwHlp/8Y09BWDNhTXRxX52FInFstGUlKFbdDtH2MPfvxe NEjftruk8mb6T28qlbTWfZGLSfPYMGkopW/oxLWg8I6IkFDAG/o5BYqPX/J/6ixO GTXD8whFrOBFUl0BPC3p+MyWD5Kc0m0XHKNWPNI0slNK+DA5D4E2Yj56Tt335PG5 XkX7KmFO4us6ta2WlfOisqbzgy4VlFMcMOxI/hR/FaumEs9T6WPj0EUm7LB7hRR8 rBWKgRxDDET51oHN9LzZKkBLnlpVvUdBFRQlJMz5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1UdJH1Kglw3YObq2WKWd8MFV4qYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFhY2M5MzNmLTVlMTQtNGU4MS05MmIyLTkzOTdmODJkYzc5Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2vsAwDQYJKoZIhvcNAQELBQADggEBAAlb5iS3LZEDG/wvSAtEY+TWnzqT akiNiwpzQZRfGqIOXc4ge1wJotGRyQkZSqzeHNki8AGzo63aU/UqVUSTMXGI2vqa Y354j+v6eEgbEeFrJBi1Z/rg3nP9YXkblKYhzYlcDhrA7HQ2uHh7j/tO1V/p4mhP uFRMdh8W0Y+Nss8JgdYKeVaN9VyMkRKnPHX0B/i9dHPNx+M8emsWh+6lfYQLOCa9 mIsc1tYb0Tu6WLdtP+RXC+Fw7w5nBBOwtg/CHTNb1e/eHgjPrLJoeGYHfGxPQpIu o17i9zbhNmY9s+27rSnW0Se8i8Cb58M+9K5HEPI1x+rJzSs80U71JiyeErc= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:39 2025 by rpki-client