$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc2f771-de5b-4e2a-931b-9ce89a364c11.roa File: bdc2f771-de5b-4e2a-931b-9ce89a364c11.roa (raw, json) Hash identifier: SxzfynefKCi0TLb/dHfawKT1Iogwnz7gfjh9dgZlFHA= Subject key identifier: 9D:76:E8:4B:15:6F:35:1A:61:EA:72:99:48:43:77:52:CC:5E:D5:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 743340EAF503D790976996A2E491C8818EBEA1DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc2f771-de5b-4e2a-931b-9ce89a364c11.roa Signing time: Tue 19 Aug 2025 15:20:14 +0000 ROA not before: Tue 19 Aug 2025 15:20:14 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.254.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:33:40:ea:f5:03:d7:90:97:69:96:a2:e4:91:c8:81:8e:be:a1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:20:14 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=8b70777983577773824c253434bbc226b99aa5aae57fa9fda6be4f03ea2de2f7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:0b:f4:5c:86:eb:30:84:20:13:8f:84:d3:9e: c7:f5:7f:18:fe:09:9d:3c:99:d3:81:94:da:8e:16: cf:2c:4d:43:81:a9:14:4c:98:a9:6d:b8:a4:01:43: a2:ba:08:f8:7d:63:98:93:de:56:b2:02:e4:ac:0e: 9b:65:b1:31:61:71:4d:c3:12:d6:13:06:de:2d:05: ea:40:32:85:d6:60:bb:87:ac:33:a1:c0:be:7a:4a: c4:be:7a:d0:e0:2b:ec:26:ba:d4:24:22:2e:aa:37: 9e:c2:72:46:9b:8c:f0:e5:6e:7b:9a:e5:d5:f9:11: b9:56:fd:38:f8:1d:11:8c:8e:b5:34:22:81:1e:10: 16:b1:0b:6b:67:3a:d9:90:12:24:b6:f4:7f:a1:d6: c4:2a:76:f5:2e:49:3a:4b:8e:3a:21:68:83:a1:5a: 2d:d0:ac:7f:0b:9d:1e:07:3e:e0:3a:5c:3c:07:db: 73:b8:71:ae:43:b2:28:6f:0e:a8:c0:df:14:63:a4: 2e:f1:bf:23:36:88:6d:31:1b:29:5d:58:25:af:c6: 39:ca:ad:76:d7:b2:5c:1c:68:09:74:bf:09:30:fd: ed:47:e5:6b:eb:2d:e5:20:13:c7:17:75:bf:58:ba: 99:02:9f:07:d0:87:b3:3d:09:13:60:bc:84:db:3b: ef:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:76:E8:4B:15:6F:35:1A:61:EA:72:99:48:43:77:52:CC:5E:D5:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bdc2f771-de5b-4e2a-931b-9ce89a364c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.254.64.0/18 Signature Algorithm: sha256WithRSAEncryption 70:59:4a:83:df:a8:f3:68:5b:1e:04:eb:69:cf:db:f6:95:22: b0:61:22:3e:50:37:2a:b7:ea:95:f6:4c:83:7f:60:9d:db:70: a3:96:c7:8e:4a:15:43:07:3b:13:52:6b:43:3b:62:09:3e:c0: 2b:e0:0c:f9:74:0b:4d:1c:d5:c9:9e:a6:b3:45:2a:c5:80:ce: 20:51:99:50:2e:64:35:0b:4b:b2:39:b7:12:21:4b:40:61:27: 43:79:83:33:be:2f:33:e9:93:36:75:48:90:6f:b3:84:1e:fb: 6a:40:68:10:c9:4a:c1:2d:e1:15:af:c1:3d:ac:9c:60:80:d4: 04:77:9a:bb:e4:4f:8b:5d:55:ac:e7:c1:4e:b3:69:80:5d:0f: 0f:3c:26:60:16:01:1a:13:7d:68:e9:cf:62:9e:68:56:1f:b1: d0:12:a9:e4:ba:f4:ef:d0:b6:0c:fb:4d:8b:57:72:5b:fc:43: 73:b4:41:5c:4b:0e:d4:3f:d5:48:88:1f:79:78:55:dd:71:94: 88:2d:2f:a8:90:fc:68:eb:c2:5d:96:e3:5e:6f:fc:8c:a3:5f: 0a:39:59:7f:7f:49:2b:9a:03:6b:f9:7f:26:5a:9a:58:7b:13: 68:48:e7:6d:14:88:a4:26:58:95:0f:15:04:9c:28:b6:56:64: 6c:7f:74:f0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdDNA6vUD15CXaZai5JHIgY6+odswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUyMDE0WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjcwNzc3OTgzNTc3NzczODI0YzI1MzQzNGJiYzIyNmI5 OWFhNWFhZTU3ZmE5ZmRhNmJlNGYwM2VhMmRlMmY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwC/RchuswhCATj4TTnsf1fxj+CZ08mdOBlNqOFs8sTUOB qRRMmKltuKQBQ6K6CPh9Y5iT3layAuSsDptlsTFhcU3DEtYTBt4tBepAMoXWYLuH rDOhwL56SsS+etDgK+wmutQkIi6qN57CckabjPDlbnua5dX5EblW/Tj4HRGMjrU0 IoEeEBaxC2tnOtmQEiS29H+h1sQqdvUuSTpLjjohaIOhWi3QrH8LnR4HPuA6XDwH 23O4ca5DsihvDqjA3xRjpC7xvyM2iG0xGyldWCWvxjnKrXbXslwcaAl0vwkw/e1H 5WvrLeUgE8cXdb9YupkCnwfQh7M9CRNgvITbO+/7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnXboSxVvNRph6nKZSEN3Usxe1VgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JkYzJmNzcxLWRlNWItNGUyYS05MzFiLTljZTg5YTM2NGMxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi/kAwDQYJKoZIhvcNAQELBQADggEBAHBZSoPfqPNoWx4E62nP2/aVIrBh Ij5QNyq36pX2TIN/YJ3bcKOWx45KFUMHOxNSa0M7Ygk+wCvgDPl0C00c1cmeprNF KsWAziBRmVAuZDULS7I5txIhS0BhJ0N5gzO+LzPpkzZ1SJBvs4Qe+2pAaBDJSsEt 4RWvwT2snGCA1AR3mrvkT4tdVaznwU6zaYBdDw88JmAWARoTfWjpz2KeaFYfsdAS qeS69O/Qtgz7TYtXclv8Q3O0QVxLDtQ/1UiIH3l4Vd1xlIgtL6iQ/Gjrwl2W415v /IyjXwo5WX9/SSuaA2v5fyZamlh7E2hI520UiKQmWJUPFQScKLZWZGx/dPA= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:37 2025 by rpki-client