$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa File: 753970ff-6395-428f-bb4f-1fc404ce49d5.roa (raw, json) Hash identifier: vEDhqBhOm/xNWbdAeIosVr6FXeC+2S/boZ/mm//98XU= Subject key identifier: 0B:BD:48:F5:4F:82:60:9F:E8:9B:7A:F3:9E:00:5E:A3:58:DC:D8:E8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7CD18732F68AE9D4C5DBC95F12894A561F640573 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa Signing time: Tue 05 Aug 2025 17:41:12 +0000 ROA not before: Tue 05 Aug 2025 17:41:12 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.90.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d1:87:32:f6:8a:e9:d4:c5:db:c9:5f:12:89:4a:56:1f:64:05:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:41:12 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=2a39de2605cb4cb563d5339afc52e43163d0ece06ee71a5b5e2488ed07d8c096, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d1:76:c3:7f:21:bb:7f:e7:0f:94:af:70:15: c9:9b:dc:48:17:6e:0b:9e:2c:0b:e1:32:ef:a5:99: 0e:40:de:9c:5a:30:d6:3a:6d:6f:aa:52:a4:e4:a0: 19:9a:42:4a:ce:ea:10:98:72:a4:76:37:f8:bd:e4: 1a:19:ce:1a:9a:cf:af:5f:e7:5a:75:c4:be:2f:bc: 72:08:6d:52:cd:24:ac:70:c7:03:e9:58:64:ec:fa: c2:bc:42:d5:3d:bf:c3:ae:31:49:21:6c:89:ed:83: 0a:92:1d:ab:8b:52:59:4e:60:90:d4:2a:a9:48:d2: 9f:1d:58:99:9d:f4:ca:4d:dc:8a:b4:90:22:51:41: 41:fb:23:f2:a0:e8:f1:ed:88:a2:59:d8:b1:83:4f: 1d:33:32:ac:39:c9:8f:6d:2a:16:8e:9c:db:d4:e6: bb:98:97:a6:52:5b:fe:a0:7d:24:37:d6:20:b8:90: 65:02:35:34:93:79:60:b6:8d:af:9a:35:bb:40:fa: 01:dc:9a:1e:0b:50:ab:4e:9b:ce:ef:64:7b:25:06: fa:42:3a:03:88:0f:9e:af:f2:54:b9:5b:b1:30:33: 5e:fa:ec:e2:71:e4:16:66:ee:00:4c:6a:90:b4:44: 02:06:12:84:a8:93:b4:20:56:1e:9e:c3:47:99:52: f8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:BD:48:F5:4F:82:60:9F:E8:9B:7A:F3:9E:00:5E:A3:58:DC:D8:E8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753970ff-6395-428f-bb4f-1fc404ce49d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.90.64.0/18 Signature Algorithm: sha256WithRSAEncryption 48:52:54:52:f9:a1:b0:2f:2c:e2:81:d2:15:c6:25:53:19:6d: 3b:87:a8:63:ce:79:99:1f:12:4a:b1:e9:ed:ed:50:1f:0a:77: 1b:f6:78:db:f6:0b:aa:46:86:90:2d:13:ea:35:dc:67:0f:67: f8:57:65:20:f2:29:19:a8:77:fc:36:f6:6c:94:3e:82:b1:11: 71:53:61:a9:74:d2:7a:17:ca:a5:c0:00:5f:6b:2d:0e:b6:28: 6c:61:17:3f:80:db:a4:0d:30:3a:dd:f7:e7:cf:46:e6:d1:b4: f6:d4:e5:bc:66:a2:a6:ac:97:34:0b:05:91:2f:73:42:22:70: c6:f6:19:51:e7:67:ec:e8:b1:7d:55:13:ac:43:e5:5f:20:67: 96:a0:f1:e9:6c:4e:23:00:b8:56:ef:19:44:77:ba:b1:7e:c3: c3:e8:6d:d0:e1:61:28:9e:45:62:8c:39:07:8d:d9:c4:fe:a7: fe:cf:55:d8:35:21:f9:08:94:bf:03:e7:ed:2e:92:a7:11:21: 50:a9:48:ef:cf:20:1d:04:79:c4:a5:25:68:36:33:24:89:c0: dc:27:41:d5:0b:63:8b:9f:d0:48:a4:0d:db:3c:99:bb:d1:4a: af:a1:c9:0b:09:c6:c8:45:22:6d:19:d3:89:0b:db:13:bd:b8: 7c:96:ba:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfNGHMvaK6dTF28lfEolKVh9kBXMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTc0MTEyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTM5ZGUyNjA1Y2I0Y2I1NjNkNTMzOWFmYzUyZTQzMTYz ZDBlY2UwNmVlNzFhNWI1ZTI0ODhlZDA3ZDhjMDk2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDi0XbDfyG7f+cPlK9wFcmb3EgXbgueLAvhMu+lmQ5A3pxa MNY6bW+qUqTkoBmaQkrO6hCYcqR2N/i95BoZzhqaz69f51p1xL4vvHIIbVLNJKxw xwPpWGTs+sK8QtU9v8OuMUkhbIntgwqSHauLUllOYJDUKqlI0p8dWJmd9MpN3Iq0 kCJRQUH7I/Kg6PHtiKJZ2LGDTx0zMqw5yY9tKhaOnNvU5ruYl6ZSW/6gfSQ31iC4 kGUCNTSTeWC2ja+aNbtA+gHcmh4LUKtOm87vZHslBvpCOgOID56v8lS5W7EwM176 7OJx5BZm7gBMapC0RAIGEoSok7QgVh6ew0eZUvitAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC71I9U+CYJ/om3rzngBeo1jc2OgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1Mzk3MGZmLTYzOTUtNDI4Zi1iYjRmLTFmYzQwNGNlNDlkNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2WkAwDQYJKoZIhvcNAQELBQADggEBAEhSVFL5obAvLOKB0hXGJVMZbTuH qGPOeZkfEkqx6e3tUB8Kdxv2eNv2C6pGhpAtE+o13GcPZ/hXZSDyKRmod/w29myU PoKxEXFTYal00noXyqXAAF9rLQ62KGxhFz+A26QNMDrd9+fPRubRtPbU5bxmoqas lzQLBZEvc0IicMb2GVHnZ+zosX1VE6xD5V8gZ5ag8elsTiMAuFbvGUR3urF+w8Po bdDhYSieRWKMOQeN2cT+p/7PVdg1IfkIlL8D5+0ukqcRIVCpSO/PIB0EecSlJWg2 MySJwNwnQdULY4uf0EikDds8mbvRSq+hyQsJxshFIm0Z04kL2xO9uHyWuvE= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:13 2025 by rpki-client