$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f54a0b52-4519-4e6e-99b3-16c3bc056e7a.roa File: f54a0b52-4519-4e6e-99b3-16c3bc056e7a.roa (raw, json) Hash identifier: w4Orno3H1SHNomj4XfKdBZ3JLAyR1LOYpmO+eYKimGs= Subject key identifier: A8:02:43:BE:0B:9C:E5:9E:80:2E:B9:B6:1A:56:6C:24:55:85:52:6A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 615C216DB7B3ADCA1E24A84153E941CBDAFB8DD3 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f54a0b52-4519-4e6e-99b3-16c3bc056e7a.roa Signing time: Tue 19 Aug 2025 16:00:09 +0000 ROA not before: Tue 19 Aug 2025 16:00:09 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.160.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:5c:21:6d:b7:b3:ad:ca:1e:24:a8:41:53:e9:41:cb:da:fb:8d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:00:09 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=ed236900a68854ab18b6716d26afdfeff4a3b65d51fc4c1209180965cd3c50f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bb:d5:64:06:80:bd:f3:5e:22:84:fd:38:90: 50:b9:6b:b0:4a:da:df:44:b0:3e:31:a2:8d:c6:46: 31:a9:26:1e:da:9d:84:cf:94:2c:48:5e:c7:95:be: 37:09:cb:c4:26:52:c4:2a:67:48:35:42:58:9d:6c: 2a:95:16:ab:1a:d5:0b:1c:10:7c:18:02:32:e7:d8: 66:5f:55:0a:ca:29:65:32:e3:5c:9e:fb:6f:e3:b9: 77:fd:87:8f:fc:b3:51:40:75:37:5b:f4:b9:67:c7: 87:9b:fe:89:7c:81:01:2d:c6:73:97:15:da:d0:f6: 34:b3:43:22:8a:02:01:7c:70:80:ef:c0:97:b8:04: af:9c:ae:d8:b5:39:26:f9:b2:b1:ef:30:16:22:43: d0:96:b3:76:38:f9:66:ad:24:99:51:62:ef:05:8b: 30:ef:86:48:1a:bb:c4:3d:c8:cf:66:b4:c8:18:32: db:9f:27:55:d1:09:12:2f:47:f9:fd:19:89:d0:15: 72:f4:cc:01:a0:79:bc:0d:cb:e9:1b:0a:78:2c:d3: 83:1d:90:58:3d:89:d9:70:f1:52:57:52:ea:81:ed: b7:55:db:eb:68:67:22:08:c7:e7:7b:8a:80:70:66: e8:a8:e7:5a:d5:f6:81:ad:f9:3f:c3:55:27:4c:c6: d5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:02:43:BE:0B:9C:E5:9E:80:2E:B9:B6:1A:56:6C:24:55:85:52:6A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f54a0b52-4519-4e6e-99b3-16c3bc056e7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.160.0.0/18 Signature Algorithm: sha256WithRSAEncryption 60:55:f7:52:52:24:56:3e:a7:53:31:52:dc:60:15:a8:b3:df: ff:2d:e4:92:1f:60:10:54:3f:b1:3c:45:e4:22:4e:ab:e0:67: 11:2a:d8:7a:09:3c:8f:09:81:25:da:02:11:f5:79:65:73:36: a1:88:ed:61:ea:fe:4e:b7:c1:c8:14:89:5f:a0:21:94:ad:cd: 99:b1:fd:d5:4f:93:c9:b0:de:57:ea:0a:97:71:42:f9:aa:c8: 92:93:38:36:d7:52:87:5d:b7:f1:7d:36:43:39:56:12:9d:08: a6:9d:f1:57:fe:11:43:9c:5e:d9:dd:ea:a9:06:38:bb:a2:f9: a9:72:2e:9c:18:cf:06:09:af:d8:98:a4:f7:ca:e5:95:09:6b: 68:36:67:98:bd:b7:d3:35:9e:6c:d0:6e:7d:15:ae:ea:62:34: 1e:19:5e:46:62:5c:0d:4c:e7:e8:e2:d7:8e:ae:93:0e:60:2d: 0e:60:7b:62:9d:3c:fd:d4:21:0c:b5:d8:b4:de:0d:42:95:c8: 9b:9e:99:ed:c6:e2:14:b7:92:ed:29:e0:38:24:10:72:24:7a: 6c:22:11:e5:1d:1b:8d:a3:4d:cf:cf:b6:28:2a:33:a4:73:e7: 80:f0:c2:14:a9:0c:48:96:0a:69:66:67:37:61:56:9a:2d:75: ce:52:dc:06 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYVwhbbezrcoeJKhBU+lBy9r7jdMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTYwMDA5WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZDIzNjkwMGE2ODg1NGFiMThiNjcxNmQyNmFmZGZlZmY0 YTNiNjVkNTFmYzRjMTIwOTE4MDk2NWNkM2M1MGY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNu9VkBoC9814ihP04kFC5a7BK2t9EsD4xoo3GRjGpJh7a nYTPlCxIXseVvjcJy8QmUsQqZ0g1QlidbCqVFqsa1QscEHwYAjLn2GZfVQrKKWUy 41ye+2/juXf9h4/8s1FAdTdb9Llnx4eb/ol8gQEtxnOXFdrQ9jSzQyKKAgF8cIDv wJe4BK+crti1OSb5srHvMBYiQ9CWs3Y4+WatJJlRYu8FizDvhkgau8Q9yM9mtMgY MtufJ1XRCRIvR/n9GYnQFXL0zAGgebwNy+kbCngs04MdkFg9idlw8VJXUuqB7bdV 2+toZyIIx+d7ioBwZuio51rV9oGt+T/DVSdMxtXJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqAJDvguc5Z6ALrm2GlZsJFWFUmowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Y1NGEwYjUyLTQ1MTktNGU2ZS05OWIzLTE2YzNiYzA1NmU3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAY2oAAwDQYJKoZIhvcNAQELBQADggEBAGBV91JSJFY+p1MxUtxgFaiz3/8t 5JIfYBBUP7E8ReQiTqvgZxEq2HoJPI8JgSXaAhH1eWVzNqGI7WHq/k63wcgUiV+g IZStzZmx/dVPk8mw3lfqCpdxQvmqyJKTODbXUoddt/F9NkM5VhKdCKad8Vf+EUOc Xtnd6qkGOLui+alyLpwYzwYJr9iYpPfK5ZUJa2g2Z5i9t9M1nmzQbn0VrupiNB4Z XkZiXA1M5+ji146ukw5gLQ5ge2KdPP3UIQy12LTeDUKVyJueme3G4hS3ku0p4Dgk EHIkemwiEeUdG42jTc/PtigqM6Rz54DwwhSpDEiWCmlmZzdhVpotdc5S3AY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:46 2025 by rpki-client