$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfd61984-853e-4c70-ba2f-e3904db31c4b.roa File: dfd61984-853e-4c70-ba2f-e3904db31c4b.roa (raw, json) Hash identifier: Dge1zwIOabpxBq+OUoLD+M4YVuo1cMssEqoZAzoI05w= Subject key identifier: C1:21:E9:FE:55:23:69:03:D4:C2:98:84:70:A7:84:30:76:1B:86:F7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 560285CE7583C9313B6FD55EBBF955F82DAB290F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfd61984-853e-4c70-ba2f-e3904db31c4b.roa Signing time: Tue 05 Aug 2025 17:50:23 +0000 ROA not before: Tue 05 Aug 2025 17:50:23 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.80.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:02:85:ce:75:83:c9:31:3b:6f:d5:5e:bb:f9:55:f8:2d:ab:29:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:50:23 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=a2faed23eaa9612378bf7a462297aa5e11c2b8fba4c6d149f9330bf774ea7c2d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ff:42:89:d3:7b:a0:e7:40:70:98:48:ea:21: 15:f9:48:3e:88:1d:31:94:70:59:b0:53:1b:c6:f2: 3e:00:4b:6f:47:d9:c2:8f:b8:f3:30:b0:61:38:55: 6c:d5:45:de:61:4f:4a:0f:ff:4b:68:85:8a:7e:18: 1c:5d:5e:71:c4:75:6b:f0:36:56:fe:b6:5b:ef:ba: 16:2a:36:08:bc:13:05:b9:06:62:c6:b9:ab:51:b4: 53:a9:b7:1d:4e:cf:9e:1a:16:e1:cb:72:63:a9:16: 40:93:5a:a4:bf:f4:37:11:7c:39:95:be:27:d8:db: 2e:c3:eb:b0:29:f5:fd:e6:4b:17:75:aa:38:bc:a7: c5:b4:18:a7:16:36:2e:f4:9a:cd:8c:d7:51:31:bc: 12:9f:0a:82:6a:e3:ef:33:a9:15:9a:1d:88:43:bf: 6f:e5:9c:6b:ef:c5:ac:39:b7:30:96:d2:1f:48:c7: 32:5c:cf:e5:4a:11:12:3e:f7:20:25:f1:ad:f5:6f: 41:49:e1:ea:8a:d5:ba:fd:15:6d:d5:6a:a7:77:3a: 30:b2:7c:37:a7:33:2b:3c:85:06:c1:2c:87:4c:17: e2:38:88:e4:51:96:c8:b6:5d:2d:02:5d:58:e6:a5: 65:dc:f1:eb:d8:f4:40:3b:68:31:16:d8:a2:e0:e3: af:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:21:E9:FE:55:23:69:03:D4:C2:98:84:70:A7:84:30:76:1B:86:F7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfd61984-853e-4c70-ba2f-e3904db31c4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.80.0.0/15 Signature Algorithm: sha256WithRSAEncryption 5d:ce:b1:06:44:97:17:77:09:4e:40:c3:16:47:24:90:58:40: 3c:b6:e3:2a:18:17:5a:6a:21:4f:b5:9e:c3:8b:92:cd:72:41: 73:e0:21:11:3f:2c:a4:cf:e8:25:b4:fa:0f:fb:76:0e:aa:c9: d0:19:68:05:2b:70:c8:d9:ff:cc:ca:48:ae:71:0f:70:eb:ff: bd:25:d7:0f:18:1c:d3:dd:58:04:e1:30:e0:29:b4:d1:69:e1: 12:6e:67:b0:f5:25:f4:eb:a8:82:94:25:7b:46:86:4d:de:e8: 66:ed:c5:2d:d2:21:fd:7d:2e:03:07:e4:91:84:b0:94:f6:26: ed:47:a3:a3:b3:e8:60:7f:f8:48:00:3d:83:f4:1c:2f:65:54: 49:d7:7f:8f:7f:d9:1e:af:e2:47:aa:85:cd:cb:75:11:24:b4: a2:3d:2b:47:32:b6:4b:6e:39:64:c7:2a:69:9e:a4:87:0d:33: 6c:44:83:f9:10:8c:5e:a7:7a:ac:35:80:2e:a8:39:91:0d:1b: e3:1b:d0:82:99:83:8f:bb:e6:0b:fe:61:6f:b7:6f:0c:84:11: 6f:52:da:17:83:a0:7e:c0:8f:fd:a0:21:fd:68:2f:4f:8d:91: c6:ea:1f:8e:86:6e:ad:0f:43:4c:ac:9f:b5:c7:ee:2f:44:02: ac:a2:c6:15 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUVgKFznWDyTE7b9Veu/lV+C2rKQ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTc1MDIzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMmZhZWQyM2VhYTk2MTIzNzhiZjdhNDYyMjk3YWE1ZTEx YzJiOGZiYTRjNmQxNDlmOTMzMGJmNzc0ZWE3YzJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2/0KJ03ug50BwmEjqIRX5SD6IHTGUcFmwUxvG8j4AS29H 2cKPuPMwsGE4VWzVRd5hT0oP/0tohYp+GBxdXnHEdWvwNlb+tlvvuhYqNgi8EwW5 BmLGuatRtFOptx1Oz54aFuHLcmOpFkCTWqS/9DcRfDmVvifY2y7D67Ap9f3mSxd1 qji8p8W0GKcWNi70ms2M11ExvBKfCoJq4+8zqRWaHYhDv2/lnGvvxaw5tzCW0h9I xzJcz+VKERI+9yAl8a31b0FJ4eqK1br9FW3Vaqd3OjCyfDenMys8hQbBLIdMF+I4 iORRlsi2XS0CXVjmpWXc8evY9EA7aDEW2KLg469DAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUwSHp/lUjaQPUwpiEcKeEMHYbhvcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmZDYxOTg0LTg1M2UtNGM3MC1iYTJmLWUzOTA0ZGIzMWM0Yi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwE2UDANBgkqhkiG9w0BAQsFAAOCAQEAXc6xBkSXF3cJTkDDFkckkFhAPLbj KhgXWmohT7Wew4uSzXJBc+AhET8spM/oJbT6D/t2DqrJ0BloBStwyNn/zMpIrnEP cOv/vSXXDxgc091YBOEw4Cm00WnhEm5nsPUl9OuogpQle0aGTd7oZu3FLdIh/X0u AwfkkYSwlPYm7Uejo7PoYH/4SAA9g/QcL2VUSdd/j3/ZHq/iR6qFzct1ESS0oj0r RzK2S245ZMcqaZ6khw0zbESD+RCMXqd6rDWALqg5kQ0b4xvQgpmDj7vmC/5hb7dv DIQRb1LaF4OgfsCP/aAh/WgvT42RxuofjoZurQ9DTKyftcfuL0QCrKLGFQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:34 2025 by rpki-client