$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb048e1-25d5-48c0-b618-70720af8d5e7.roa File: 4eb048e1-25d5-48c0-b618-70720af8d5e7.roa (raw, json) Hash identifier: hVWV5eqLxEpNgBE6uXbpwq+4WooHCi2jMqagLmCzGQ4= Subject key identifier: 12:D8:DF:E5:C4:F2:93:D9:FE:D3:EB:83:38:EE:2D:E5:FE:F3:4B:E8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5DC824CB83E0A4544EBB8A3880F9A5D27476C1A5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb048e1-25d5-48c0-b618-70720af8d5e7.roa Signing time: Tue 19 Aug 2025 16:01:29 +0000 ROA not before: Tue 19 Aug 2025 16:01:29 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.168.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c8:24:cb:83:e0:a4:54:4e:bb:8a:38:80:f9:a5:d2:74:76:c1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:01:29 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=2b03b5ffdaea198f618d978455a1862d12435e923b6c0c186b6d137a1822a40a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:56:37:28:dd:12:96:3b:86:79:35:8a:74:4b: 66:30:0c:5a:b4:95:e0:28:b7:94:6e:b3:f0:e5:2a: 5c:44:82:a1:8b:4f:a5:59:e6:47:a4:7f:e2:b2:dd: 0a:8e:26:15:04:8b:fe:d7:62:68:25:fe:e7:ed:2b: 79:7a:20:88:87:30:f2:4b:97:52:2c:73:d3:3b:b4: 86:94:c7:73:67:2a:e7:c0:d3:58:f5:9e:a5:e8:ba: b6:24:97:2e:b7:85:0f:ae:97:53:74:28:90:3b:24: f4:b8:87:b3:20:26:de:6b:e1:27:80:cb:d6:12:ab: c1:49:c2:c6:71:43:ef:92:ca:68:3d:19:e3:5a:78: 1f:a9:41:d5:8b:b8:53:18:df:a8:e9:bf:c4:c2:25: ee:1e:4e:8a:98:b0:8f:9e:68:06:bb:e5:4d:f0:a9: f4:91:53:8a:b9:7d:28:b7:2b:7c:df:8c:a4:58:f8: e6:99:91:d6:76:89:b6:51:28:08:c9:fb:56:17:fc: cc:49:56:3b:39:32:cf:6e:fd:02:79:24:6b:c2:a7: d4:df:48:02:02:ae:a7:da:ae:f0:fe:44:f7:db:e0: 02:b9:8e:f8:00:3b:c1:a6:77:d8:2c:f9:cd:79:16: 76:f8:b5:39:a1:4d:c1:53:0d:a9:18:ff:60:a8:4b: 49:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D8:DF:E5:C4:F2:93:D9:FE:D3:EB:83:38:EE:2D:E5:FE:F3:4B:E8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4eb048e1-25d5-48c0-b618-70720af8d5e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.168.224.0/21 Signature Algorithm: sha256WithRSAEncryption 2c:be:6c:df:61:69:4b:55:0f:d7:cf:bd:5a:e6:03:df:85:04: 39:26:86:df:97:37:5c:44:34:72:74:89:94:26:05:ee:aa:9b: c3:28:b8:91:db:7c:53:78:0a:1a:cf:8d:38:63:be:b4:9a:a1: 23:49:bc:cf:e6:10:6e:f4:55:57:07:50:f7:e2:40:b1:b3:b1: 85:57:b1:98:32:78:9a:e8:b4:08:3c:7f:07:cc:61:dc:ab:f5: 5b:81:50:40:48:9e:df:1b:e1:7e:91:06:ef:51:ba:f3:fe:78: 6f:2b:15:00:4a:78:d4:dc:38:b8:26:a3:f9:48:e7:84:f8:ad: 1c:29:bc:ff:c4:cb:42:75:3a:9c:06:11:43:65:f1:8d:15:f3: b1:ae:1f:1e:65:3c:37:5b:11:88:97:75:d2:5e:6e:e3:e4:df: 81:9f:5a:2d:67:2f:47:7b:82:18:84:74:3d:db:96:69:90:d2: 7a:2b:dc:eb:32:f4:0f:d5:48:8d:6d:f2:0e:cc:57:ae:2c:f3: 21:03:4e:b2:3c:6f:c9:e9:97:74:eb:4d:cb:11:97:c2:38:4b: a3:1f:2e:5c:1f:b9:dc:eb:a5:cf:e7:5b:94:97:86:6d:a9:cd: 13:3c:77:47:3d:a6:c3:dd:93:ba:e2:26:40:a3:0c:df:a2:b9: ab:f1:a1:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXcgky4PgpFROu4o4gPml0nR2waUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTYwMTI5WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjAzYjVmZmRhZWExOThmNjE4ZDk3ODQ1NWExODYyZDEy NDM1ZTkyM2I2YzBjMTg2YjZkMTM3YTE4MjJhNDBhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDCVjco3RKWO4Z5NYp0S2YwDFq0leAot5Rus/DlKlxEgqGL T6VZ5kekf+Ky3QqOJhUEi/7XYmgl/uftK3l6IIiHMPJLl1Isc9M7tIaUx3NnKufA 01j1nqXourYkly63hQ+ul1N0KJA7JPS4h7MgJt5r4SeAy9YSq8FJwsZxQ++Symg9 GeNaeB+pQdWLuFMY36jpv8TCJe4eToqYsI+eaAa75U3wqfSRU4q5fSi3K3zfjKRY +OaZkdZ2ibZRKAjJ+1YX/MxJVjs5Ms9u/QJ5JGvCp9TfSAICrqfarvD+RPfb4AK5 jvgAO8Gmd9gs+c15Fnb4tTmhTcFTDakY/2CoS0mXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEtjf5cTyk9n+0+uDOO4t5f7zS+gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRlYjA0OGUxLTI1ZDUtNDhjMC1iNjE4LTcwNzIwYWY4ZDVlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM2qOAwDQYJKoZIhvcNAQELBQADggEBACy+bN9haUtVD9fPvVrmA9+FBDkm ht+XN1xENHJ0iZQmBe6qm8MouJHbfFN4ChrPjThjvrSaoSNJvM/mEG70VVcHUPfi QLGzsYVXsZgyeJrotAg8fwfMYdyr9VuBUEBInt8b4X6RBu9RuvP+eG8rFQBKeNTc OLgmo/lI54T4rRwpvP/Ey0J1OpwGEUNl8Y0V87GuHx5lPDdbEYiXddJebuPk34Gf Wi1nL0d7ghiEdD3blmmQ0nor3Osy9A/VSI1t8g7MV64s8yEDTrI8b8npl3TrTcsR l8I4S6MfLlwfudzrpc/nW5SXhm2pzRM8d0c9psPdk7riJkCjDN+iuavxoco= -----END CERTIFICATE-----Generated at Wed Aug 20 12:53:57 2025 by rpki-client