$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbacf636-ea8a-4d61-a985-109683cc4a86.roa File: bbacf636-ea8a-4d61-a985-109683cc4a86.roa (raw, json) Hash identifier: 7Pc8X6Z+a3guCWKPpVSIU3Q+w4XtbCKngCCLH+IrBoQ= Subject key identifier: 80:ED:E3:41:94:4E:E2:01:D2:0D:E0:D9:2C:2F:40:87:38:89:86:A3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 46F3853F6A5507EF26B92E4554009B65E32B5946 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbacf636-ea8a-4d61-a985-109683cc4a86.roa Signing time: Tue 19 Aug 2025 16:40:14 +0000 ROA not before: Tue 19 Aug 2025 16:40:14 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.218.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:f3:85:3f:6a:55:07:ef:26:b9:2e:45:54:00:9b:65:e3:2b:59:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:40:14 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=f179a90ff17cb82d327583e3e9ab4a4a565d2733905c10979ec10b9242a02101, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e8:79:c7:f3:72:f4:41:d0:5e:e0:f4:d0:6f: 41:bd:c4:f1:a5:d3:66:ee:18:f4:e7:ca:3a:09:de: 5f:f7:2a:a7:14:a2:4f:f4:6e:68:3e:df:d0:09:5e: 3d:6a:73:22:c0:04:92:58:f9:d0:2e:20:54:38:a7: 3a:cd:f8:1e:69:50:63:47:cb:65:af:33:7e:69:ca: 4a:80:4d:51:40:fa:08:d9:ca:f1:9a:74:e0:ce:5f: e2:9f:b3:ac:7c:a6:52:81:97:a9:ee:78:e6:85:f0: 1c:47:64:ee:46:85:1e:24:ff:89:48:51:f9:b1:57: 30:1c:72:90:05:eb:4e:c0:da:66:be:bd:19:be:d9: 44:74:d3:3e:2f:f3:33:2d:78:51:f2:f9:9b:96:58: 87:a3:c2:33:e9:fe:da:43:05:a2:f7:b7:b7:b0:86: 87:0b:31:dd:43:8b:1b:d8:c3:6c:86:0c:6e:27:57: 8c:3d:f4:68:87:9d:65:fc:9c:05:e5:28:d7:19:87: 60:7c:30:cd:9e:ad:90:a5:b3:f4:70:43:1e:5b:71: 23:e3:2b:60:77:1c:84:1d:dc:af:55:86:10:cc:e4: 34:55:5e:a5:63:1a:83:cd:65:03:0e:11:20:b4:99: 4f:ba:85:40:19:ef:d4:a8:37:a3:32:2d:2c:87:82: fe:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:ED:E3:41:94:4E:E2:01:D2:0D:E0:D9:2C:2F:40:87:38:89:86:A3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bbacf636-ea8a-4d61-a985-109683cc4a86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.218.128.0/17 Signature Algorithm: sha256WithRSAEncryption 68:62:21:a3:e5:a3:13:5f:c5:c2:42:ab:1b:0d:06:44:4f:2c: 5d:65:0b:e7:8d:c0:68:c9:6d:6d:7c:7c:2e:42:5f:21:66:14: f6:53:e6:55:40:f1:f5:35:48:7e:c7:c6:02:bb:ee:2e:56:20: e4:98:21:08:e0:76:04:ca:83:9e:54:96:d1:02:32:d5:3c:6a: 2b:94:b2:e0:42:5d:ea:2b:4a:8f:3b:7f:69:06:d5:fc:dd:2e: 80:a5:cd:4c:f6:54:30:a6:b2:ed:f1:08:0d:13:ac:a3:38:bf: 19:38:4a:a0:4a:6e:b4:1d:99:64:05:bd:03:a9:1f:94:f0:16: 30:fd:b4:b4:7d:a6:d6:3d:0d:1a:f9:d2:91:8d:66:46:45:41: 15:61:95:df:40:a5:61:f1:e2:54:e7:00:ce:1b:10:e9:81:d0: 45:b1:c1:e4:8a:80:e0:6b:dc:c1:8b:d0:ae:f1:5f:db:d9:04: ae:64:a2:62:ec:ac:24:e4:d0:7d:09:b1:cf:de:83:ff:65:a5: 42:1a:f8:21:ff:e8:2e:d3:0a:ef:ad:ac:2d:fb:f7:44:38:34: 0b:34:eb:40:be:92:b7:f0:8e:55:b5:1c:12:07:3d:30:e8:82: e9:a8:e4:da:d7:1b:ff:7b:61:6d:d5:40:b6:02:cc:18:23:d5: 70:b9:26:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURvOFP2pVB+8muS5FVACbZeMrWUYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTY0MDE0WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTc5YTkwZmYxN2NiODJkMzI3NTgzZTNlOWFiNGE0YTU2 NWQyNzMzOTA1YzEwOTc5ZWMxMGI5MjQyYTAyMTAxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCk6HnH83L0QdBe4PTQb0G9xPGl02buGPTnyjoJ3l/3KqcU ok/0bmg+39AJXj1qcyLABJJY+dAuIFQ4pzrN+B5pUGNHy2WvM35pykqATVFA+gjZ yvGadODOX+Kfs6x8plKBl6nueOaF8BxHZO5GhR4k/4lIUfmxVzAccpAF607A2ma+ vRm+2UR00z4v8zMteFHy+ZuWWIejwjPp/tpDBaL3t7ewhocLMd1DixvYw2yGDG4n V4w99GiHnWX8nAXlKNcZh2B8MM2erZCls/RwQx5bcSPjK2B3HIQd3K9VhhDM5DRV XqVjGoPNZQMOESC0mU+6hUAZ79SoN6MyLSyHgv5zAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgO3jQZRO4gHSDeDZLC9AhziJhqMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JiYWNmNjM2LWVhOGEtNGQ2MS1hOTg1LTEwOTY4M2NjNGE4Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc22oAwDQYJKoZIhvcNAQELBQADggEBAGhiIaPloxNfxcJCqxsNBkRPLF1l C+eNwGjJbW18fC5CXyFmFPZT5lVA8fU1SH7HxgK77i5WIOSYIQjgdgTKg55UltEC MtU8aiuUsuBCXeorSo87f2kG1fzdLoClzUz2VDCmsu3xCA0TrKM4vxk4SqBKbrQd mWQFvQOpH5TwFjD9tLR9ptY9DRr50pGNZkZFQRVhld9ApWHx4lTnAM4bEOmB0EWx weSKgOBr3MGL0K7xX9vZBK5komLsrCTk0H0Jsc/eg/9lpUIa+CH/6C7TCu+trC37 90Q4NAs060C+krfwjlW1HBIHPTDogumo5NrXG/97YW3VQLYCzBgj1XC5JkQ= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:37 2025 by rpki-client