$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/729f57a1-2802-4df9-8207-2be1edbefde3.roa File: 729f57a1-2802-4df9-8207-2be1edbefde3.roa (raw, json) Hash identifier: eqaeUR5moy9r/HCD5YpuBP9mDRi5VQ2TwsOPe2+vnB8= Subject key identifier: 8C:15:A2:BC:95:5A:98:41:DA:AB:D9:D4:F4:72:41:87:F9:A6:0F:97 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28B96B8944AB8CC3F740C115DC5D6D8012413DB3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/729f57a1-2802-4df9-8207-2be1edbefde3.roa Signing time: Tue 19 Aug 2025 16:01:46 +0000 ROA not before: Tue 19 Aug 2025 16:01:46 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.170.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b9:6b:89:44:ab:8c:c3:f7:40:c1:15:dc:5d:6d:80:12:41:3d:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:01:46 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=a87cb54ffbcda5797220efa557275446545d631357ba23e2298850138aa10a8f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f6:17:5a:83:8d:9e:df:55:b7:9a:09:68:6c: 19:84:17:ea:fd:3e:f0:92:bd:4d:48:11:24:8a:9b: 33:61:38:ec:c9:01:c7:58:ed:77:9b:24:97:ca:20: 84:23:42:0f:0d:ab:e9:ba:79:df:a9:04:d3:67:d5: 51:af:b0:ff:2b:e2:63:ce:e8:c3:f5:19:3d:16:d2: ee:5b:df:ff:46:dc:f0:cb:a8:66:58:0d:87:d1:eb: f0:4f:46:9d:eb:4f:fd:b9:4a:0f:da:34:c4:c3:13: 4b:39:57:10:e8:6c:7f:ec:2c:c6:cf:82:5e:e7:c7: 34:d4:1a:a1:35:37:e4:12:d9:de:57:88:d9:c2:75: ae:05:a7:60:20:a4:6f:fe:ee:ce:59:f7:93:81:9e: c5:af:49:b2:bf:55:97:5a:c3:7a:4b:6d:96:c6:11: c5:39:54:f1:70:d2:22:29:b0:a1:d0:db:e6:5c:ef: b7:a6:86:41:44:01:44:1d:c9:ec:43:59:3b:ff:1d: 1e:99:15:45:cf:f1:b8:22:bd:8b:98:6d:6e:dc:b7: 4c:31:b2:50:43:ac:2a:b2:5d:0b:8a:53:e2:7f:ed: fc:3c:90:4f:6d:7f:5b:be:82:cb:b1:26:5d:44:92: 06:71:39:a6:d2:94:d9:1a:3b:43:f9:69:7d:cf:5c: e9:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:15:A2:BC:95:5A:98:41:DA:AB:D9:D4:F4:72:41:87:F9:A6:0F:97 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/729f57a1-2802-4df9-8207-2be1edbefde3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.170.192.0/18 Signature Algorithm: sha256WithRSAEncryption 4f:84:6e:44:ee:c7:ee:0f:85:78:c3:4e:98:dc:e5:c8:1e:b4: d2:69:a6:20:d4:9d:cf:2b:0f:0e:b5:02:87:6b:65:6f:50:ae: 2a:9a:bf:7c:75:ca:72:f4:e0:a5:a2:05:07:4d:1f:ac:ce:14: b6:b9:4e:39:b2:b8:38:98:af:a8:c6:75:71:d4:d8:dd:04:f5: aa:93:b6:31:5b:a6:dc:c8:d6:09:9c:87:57:7b:46:5b:44:0d: 33:17:24:c8:43:4f:81:4d:87:97:16:e6:65:4e:68:60:b4:3c: 16:b5:53:d6:22:e2:59:aa:95:14:23:8d:bc:9b:ad:c5:4f:ad: db:63:10:65:00:4d:f4:da:04:e8:a4:02:e2:a4:24:4b:be:db: d3:4c:04:98:d7:3d:56:62:83:2c:2b:f9:e4:36:9e:df:0d:97: 92:11:31:c5:e1:ef:7b:b4:eb:df:1a:e6:fb:49:1c:2c:15:1e: 3f:31:f2:35:88:25:93:56:b1:d5:88:95:39:58:60:59:89:01: 86:d9:20:b3:54:8a:13:64:05:65:ba:c7:99:86:20:5f:38:ff: 71:b5:48:48:e9:46:55:2b:dd:5a:3d:13:1d:f2:c5:1d:ba:07: c2:ca:2f:30:b0:bc:04:c4:fc:4c:02:23:bc:52:01:d7:88:d6: f5:01:58:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKLlriUSrjMP3QMEV3F1tgBJBPbMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTYwMTQ2WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhODdjYjU0ZmZiY2RhNTc5NzIyMGVmYTU1NzI3NTQ0NjU0 NWQ2MzEzNTdiYTIzZTIyOTg4NTAxMzhhYTEwYThmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDW9hdag42e31W3mglobBmEF+r9PvCSvU1IESSKmzNhOOzJ AcdY7XebJJfKIIQjQg8Nq+m6ed+pBNNn1VGvsP8r4mPO6MP1GT0W0u5b3/9G3PDL qGZYDYfR6/BPRp3rT/25Sg/aNMTDE0s5VxDobH/sLMbPgl7nxzTUGqE1N+QS2d5X iNnCda4Fp2AgpG/+7s5Z95OBnsWvSbK/VZdaw3pLbZbGEcU5VPFw0iIpsKHQ2+Zc 77emhkFEAUQdyexDWTv/HR6ZFUXP8bgivYuYbW7ct0wxslBDrCqyXQuKU+J/7fw8 kE9tf1u+gsuxJl1EkgZxOabSlNkaO0P5aX3PXOm5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjBWivJVamEHaq9nU9HJBh/mmD5cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcyOWY1N2ExLTI4MDItNGRmOS04MjA3LTJiZTFlZGJlZmRlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2qsAwDQYJKoZIhvcNAQELBQADggEBAE+EbkTux+4PhXjDTpjc5cgetNJp piDUnc8rDw61AodrZW9Qriqav3x1ynL04KWiBQdNH6zOFLa5TjmyuDiYr6jGdXHU 2N0E9aqTtjFbptzI1gmch1d7RltEDTMXJMhDT4FNh5cW5mVOaGC0PBa1U9Yi4lmq lRQjjbybrcVPrdtjEGUATfTaBOikAuKkJEu+29NMBJjXPVZigywr+eQ2nt8Nl5IR McXh73u0698a5vtJHCwVHj8x8jWIJZNWsdWIlTlYYFmJAYbZILNUihNkBWW6x5mG IF84/3G1SEjpRlUr3Vo9Ex3yxR26B8LKLzCwvATE/EwCI7xSAdeI1vUBWFo= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:04 2025 by rpki-client