$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/253639a0-9b2b-4736-baff-039ebafb881f.roa File: 253639a0-9b2b-4736-baff-039ebafb881f.roa (raw, json) Hash identifier: QgQ/htPiC8/X/Yt3C6PI4Xd8FFm+7/qZMoBQAVGi/98= Subject key identifier: 47:EC:DB:56:3E:3E:37:64:D9:5E:E2:37:65:0B:C8:9D:FF:B3:F7:59 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 397A460587FF83896CA41F3FE141E3CDAAF2199A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/253639a0-9b2b-4736-baff-039ebafb881f.roa Signing time: Tue 19 Aug 2025 16:40:10 +0000 ROA not before: Tue 19 Aug 2025 16:40:10 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.216.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7a:46:05:87:ff:83:89:6c:a4:1f:3f:e1:41:e3:cd:aa:f2:19:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:40:10 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=0491586d78cc4e976e03ba2e2b5d6302e3f5dd8aead8f66ee1749fda550467c3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:89:32:5b:53:3c:b2:af:9e:15:34:34:c7:ea: 02:00:1a:73:9e:c8:99:92:9e:eb:eb:90:6f:0e:a9: 6c:dc:6b:17:4f:5b:66:74:6b:d9:d0:0b:60:59:49: a2:3c:d6:41:cd:50:55:b4:93:cc:c3:37:f0:bf:54: b9:7d:8b:7a:69:75:fc:e4:71:f0:77:7c:e8:cb:b0: b3:34:bb:3a:8c:99:56:cf:a1:26:4f:02:b1:ea:f7: 9f:42:fd:ff:7c:ae:ae:85:99:c8:04:20:20:50:38: f1:a4:06:ab:4d:09:ca:77:40:46:4a:02:2e:81:bf: 9d:25:4d:d1:f5:a2:41:9e:15:4e:63:2b:6f:7b:94: 1c:5e:4e:4f:1b:0d:94:72:4d:ea:64:47:67:a4:34: 60:24:a9:22:72:47:4d:68:ef:b4:27:7c:c7:f2:b6: 82:b7:4d:48:05:7e:66:3f:ba:f7:88:35:d3:c8:61: cd:0e:33:72:60:a8:a1:fe:d5:e1:d3:eb:40:09:ec: bc:f6:7d:0f:cd:ce:11:a0:c4:6c:18:81:3d:b8:30: 9a:f0:94:38:2d:a0:58:62:d1:23:b8:87:cf:6e:e9: 39:b9:cc:c4:31:9c:b6:aa:ff:a7:41:96:92:ca:fb: d5:79:61:bc:1b:90:00:98:e1:91:f7:cb:50:85:2b: df:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EC:DB:56:3E:3E:37:64:D9:5E:E2:37:65:0B:C8:9D:FF:B3:F7:59 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/253639a0-9b2b-4736-baff-039ebafb881f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.216.128.0/18 Signature Algorithm: sha256WithRSAEncryption 22:8a:1e:e7:0e:8c:7e:50:4b:ca:65:d6:0b:73:7d:14:2d:a9: 33:57:5f:be:1c:81:05:54:97:0e:af:c0:60:33:1c:6a:c5:2b: d4:3a:ca:8a:fe:75:28:ff:68:08:d3:1d:87:c5:cf:9b:14:d9: 18:65:a8:10:07:b3:4b:b0:36:69:67:79:8c:a0:9b:df:72:11: 21:7e:04:1d:f1:3c:30:f3:d3:1c:e3:ed:57:9a:bb:fe:28:e7: af:04:52:f9:eb:83:21:77:fc:9f:86:f8:e9:51:68:c9:13:73: 31:02:1c:7c:b0:58:05:56:f8:bf:24:33:ab:99:dd:b3:97:00: 79:c0:61:0c:94:47:8d:5c:b6:77:55:4d:59:cd:19:a0:e3:be: 85:d3:32:fa:11:17:25:6c:27:18:74:09:3d:ad:1b:38:7a:69: 56:bc:15:be:e4:f9:f0:cb:2b:14:55:43:07:5e:36:b0:28:06: a2:ad:f0:bb:26:69:40:61:8e:ad:7a:ea:27:2c:89:57:4d:36: 14:02:b2:3a:43:98:54:da:7f:ff:02:95:f9:c6:05:64:75:d4: 86:1c:e7:27:d7:26:81:9e:b3:61:40:db:98:7f:2f:4e:c1:c3: bf:a6:ba:d8:3f:2a:13:ed:4e:06:2c:8e:1c:41:92:54:76:5b: fd:d4:d9:84 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOXpGBYf/g4lspB8/4UHjzaryGZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTY0MDEwWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNDkxNTg2ZDc4Y2M0ZTk3NmUwM2JhMmUyYjVkNjMwMmUz ZjVkZDhhZWFkOGY2NmVlMTc0OWZkYTU1MDQ2N2MzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDYiTJbUzyyr54VNDTH6gIAGnOeyJmSnuvrkG8OqWzcaxdP W2Z0a9nQC2BZSaI81kHNUFW0k8zDN/C/VLl9i3ppdfzkcfB3fOjLsLM0uzqMmVbP oSZPArHq959C/f98rq6FmcgEICBQOPGkBqtNCcp3QEZKAi6Bv50lTdH1okGeFU5j K297lBxeTk8bDZRyTepkR2ekNGAkqSJyR01o77QnfMfytoK3TUgFfmY/uveINdPI Yc0OM3JgqKH+1eHT60AJ7Lz2fQ/NzhGgxGwYgT24MJrwlDgtoFhi0SO4h89u6Tm5 zMQxnLaq/6dBlpLK+9V5YbwbkACY4ZH3y1CFK989AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUR+zbVj4+N2TZXuI3ZQvInf+z91kwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1MzYzOWEwLTliMmItNDczNi1iYWZmLTAzOWViYWZiODgxZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY22IAwDQYJKoZIhvcNAQELBQADggEBACKKHucOjH5QS8pl1gtzfRQtqTNX X74cgQVUlw6vwGAzHGrFK9Q6yor+dSj/aAjTHYfFz5sU2RhlqBAHs0uwNmlneYyg m99yESF+BB3xPDDz0xzj7Veau/4o568EUvnrgyF3/J+G+OlRaMkTczECHHywWAVW +L8kM6uZ3bOXAHnAYQyUR41ctndVTVnNGaDjvoXTMvoRFyVsJxh0CT2tGzh6aVa8 Fb7k+fDLKxRVQwdeNrAoBqKt8LsmaUBhjq166icsiVdNNhQCsjpDmFTaf/8ClfnG BWR11IYc5yfXJoGes2FA25h/L07Bw7+mutg/KhPtTgYsjhxBklR2W/3U2YQ= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:33 2025 by rpki-client