$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ecc54f-4435-475b-81e9-0c3601cefce7.roa File: 99ecc54f-4435-475b-81e9-0c3601cefce7.roa (raw, json) Hash identifier: r4sL13P8suFwb9n5x3yNEQsSMzN7lf8GXPh/eJNgOBU= Subject key identifier: 29:CC:94:BC:F7:77:50:25:62:A9:9A:E4:1D:30:50:F0:37:75:AA:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 169E1BEEC2BF27DEFF999E800729AC8E3E45854B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ecc54f-4435-475b-81e9-0c3601cefce7.roa Signing time: Tue 05 Aug 2025 17:51:30 +0000 ROA not before: Tue 05 Aug 2025 17:51:30 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.80.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9e:1b:ee:c2:bf:27:de:ff:99:9e:80:07:29:ac:8e:3e:45:85:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:51:30 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=841825d769fd7e481d1b7b949da7624a093882a113bd80377fbcc2e604c441e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:47:bc:61:a9:01:c0:93:5a:1c:eb:63:f4: 8f:7f:72:22:e3:92:fd:9e:3a:33:2e:89:77:2e:31: af:94:e3:c4:1d:b9:99:ea:eb:ec:34:64:1d:8f:9d: 0e:e7:19:5a:96:8d:60:7e:fa:87:ad:a7:87:ec:81: d4:21:d2:af:0f:27:fb:bf:e1:7d:a4:f3:15:2a:c5: 22:f5:0d:db:5c:80:14:61:64:62:03:dd:5c:a6:8f: 7a:01:15:e3:07:fa:9c:f8:eb:57:50:6a:a2:3a:2c: 4a:ce:16:3e:70:48:96:21:c4:13:53:ce:d5:d2:5c: a4:0d:8a:72:0f:83:0d:6e:ff:e9:5d:fe:17:8c:e9: 0f:7f:d7:d9:1d:99:b6:21:3b:6e:cd:3b:52:93:0a: 9a:b4:6b:fe:0c:b9:29:44:97:60:0d:d7:65:24:34: ad:1e:ef:e5:ea:11:86:2a:9f:7c:d4:2d:e7:bf:79: 4d:75:9c:2d:df:4c:0b:75:b7:5e:fe:73:0c:51:6d: a3:33:6a:94:60:77:96:30:f7:a0:97:a9:a2:e8:a5: 61:aa:1b:5c:63:57:bb:ea:97:84:62:d3:ae:88:ae: f2:e7:d6:5d:57:d3:37:63:51:da:05:c5:55:e4:65: 96:75:52:b6:47:a6:1f:b5:f9:12:0b:91:1c:74:8e: 7d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CC:94:BC:F7:77:50:25:62:A9:9A:E4:1D:30:50:F0:37:75:AA:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/99ecc54f-4435-475b-81e9-0c3601cefce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.80.0.0/14 Signature Algorithm: sha256WithRSAEncryption aa:a9:b0:40:5c:d1:47:6c:d0:4b:05:60:96:f8:11:b3:ba:f4: bc:b2:81:da:32:38:73:49:2d:21:8e:73:0f:0f:37:a2:ef:48: 42:a7:d2:71:f9:6e:3c:99:3a:a4:4d:ea:44:15:42:53:c9:08: 16:bd:10:d2:eb:53:4e:fc:10:c8:c7:83:1f:4f:9d:09:75:6e: cc:62:5f:e0:bd:f2:b1:0c:ca:3c:b6:2d:d9:7f:5b:3e:d7:06: a0:d8:78:3f:a6:bc:bd:b7:6b:cc:58:b9:e2:17:8c:46:c9:b6: af:db:4e:a0:46:cd:1c:9e:84:ab:97:60:61:f1:4f:3e:11:f6: ad:de:6c:00:bb:8d:21:1d:fd:2d:d5:ca:eb:21:ef:43:77:60: 32:63:b1:9f:83:23:90:66:7b:f5:2e:14:8f:07:e4:bf:1b:d1: ee:7e:cc:6f:89:e1:35:fc:19:33:26:38:62:a9:93:db:78:0d: a7:b6:c6:f5:b4:16:3b:6e:5b:e9:27:84:de:49:72:75:b7:61: df:09:21:a4:37:6c:58:56:4e:a6:ab:71:ea:42:54:7f:d4:b8: 11:bf:32:c3:9a:79:3f:c6:d3:83:86:0d:ee:49:05:e9:5f:84: c5:35:68:34:09:ea:79:e3:54:b8:32:00:c6:cc:a3:50:6d:48: 49:35:a4:d3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUFp4b7sK/J97/mZ6ABymsjj5FhUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTc1MTMwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4NDE4MjVkNzY5ZmQ3ZTQ4MWQxYjdiOTQ5ZGE3NjI0YTA5 Mzg4MmExMTNiZDgwMzc3ZmJjYzJlNjA0YzQ0MWU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq9Ue8YakBwJNaHOtj9I9/ciLjkv2eOjMuiXcuMa+U48Qd uZnq6+w0ZB2PnQ7nGVqWjWB++oetp4fsgdQh0q8PJ/u/4X2k8xUqxSL1DdtcgBRh ZGID3Vymj3oBFeMH+pz461dQaqI6LErOFj5wSJYhxBNTztXSXKQNinIPgw1u/+ld /heM6Q9/19kdmbYhO27NO1KTCpq0a/4MuSlEl2AN12UkNK0e7+XqEYYqn3zULee/ eU11nC3fTAt1t17+cwxRbaMzapRgd5Yw96CXqaLopWGqG1xjV7vql4Ri066IrvLn 1l1X0zdjUdoFxVXkZZZ1UrZHph+1+RILkRx0jn39AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKcyUvPd3UCViqZrkHTBQ8Dd1qlcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk5ZWNjNTRmLTQ0MzUtNDc1Yi04MWU5LTBjMzYwMWNlZmNlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI2UDANBgkqhkiG9w0BAQsFAAOCAQEAqqmwQFzRR2zQSwVglvgRs7r0vLKB 2jI4c0ktIY5zDw83ou9IQqfScfluPJk6pE3qRBVCU8kIFr0Q0utTTvwQyMeDH0+d CXVuzGJf4L3ysQzKPLYt2X9bPtcGoNh4P6a8vbdrzFi54heMRsm2r9tOoEbNHJ6E q5dgYfFPPhH2rd5sALuNIR39LdXK6yHvQ3dgMmOxn4MjkGZ79S4UjwfkvxvR7n7M b4nhNfwZMyY4YqmT23gNp7bG9bQWO25b6SeE3klydbdh3wkhpDdsWFZOpqtx6kJU f9S4Eb8yw5p5P8bTg4YN7kkF6V+ExTVoNAnqeeNUuDIAxsyjUG1ISTWk0w== -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:46 2025 by rpki-client