$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa88505d-f931-400f-80fb-f3525fadfa37.roa File: fa88505d-f931-400f-80fb-f3525fadfa37.roa (raw, json) Hash identifier: V3rSVdTAmihSB+NlCwxqwoempSwzoOUi4gOsiNj263Q= Subject key identifier: F4:A2:BF:1E:08:B8:8F:0D:6D:2F:3A:4F:CE:BF:06:C7:56:94:75:73 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D98B6673D78F4FFF46C82957489749E40D64294 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa88505d-f931-400f-80fb-f3525fadfa37.roa Signing time: Tue 19 Aug 2025 16:11:12 +0000 ROA not before: Tue 19 Aug 2025 16:11:12 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.166.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:98:b6:67:3d:78:f4:ff:f4:6c:82:95:74:89:74:9e:40:d6:42:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:11:12 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=8d661dfafa3ae9ca9209ecf5b782271e2a12773e40d8e87a724a47c61755a104, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f6:fc:b4:f1:d6:1c:89:29:21:db:91:6d:2a: 15:a5:c3:1d:1d:14:8b:76:0c:e4:d5:aa:d0:ed:93: 67:28:45:70:c9:c9:e9:4d:20:95:77:51:e3:8f:e2: c4:77:e0:d4:02:dd:00:cf:ef:2b:3f:d8:ac:9a:fb: 0d:92:3c:06:27:ce:05:82:3f:f2:ec:7a:2f:6a:0f: fb:79:42:9a:6a:bc:ee:2a:3c:3c:25:b8:b0:37:aa: e8:9b:28:e2:ba:0a:91:c1:d0:22:79:33:df:cf:93: c7:4c:eb:e8:23:57:e8:50:ae:24:70:c5:1f:82:7a: ab:b9:6f:cf:0a:e9:6b:24:b6:ab:ef:c8:8a:3a:c3: 7d:71:a4:87:60:1d:39:6d:f8:7b:71:10:48:0f:2d: 92:5b:d5:26:bf:e5:f1:a6:a0:98:a7:e8:5d:80:a5: 04:02:33:6b:62:43:c5:32:bc:25:ea:f8:63:f3:9e: 9b:19:d3:af:e7:2c:aa:2e:47:e5:2e:42:a0:98:9e: 2c:aa:95:22:de:48:22:dc:a0:69:3d:2b:b9:2c:76: 08:cb:cc:d0:7f:71:41:ae:c9:53:65:fb:0d:79:00: 0c:7c:02:74:31:9e:5a:32:d1:95:7a:71:8f:45:b1: c8:3c:30:85:36:9f:56:19:90:f8:99:16:89:3d:9a: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A2:BF:1E:08:B8:8F:0D:6D:2F:3A:4F:CE:BF:06:C7:56:94:75:73 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fa88505d-f931-400f-80fb-f3525fadfa37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.166.0.0/17 Signature Algorithm: sha256WithRSAEncryption 83:f5:b6:28:a7:26:30:8a:5d:3a:5f:74:4d:9f:c9:ab:3f:e5: b7:a1:d1:0a:b6:ed:79:ab:8a:dd:07:b0:70:d6:9d:cf:eb:a8: 7d:c3:69:2f:50:d4:03:ba:52:09:cf:10:99:66:62:c4:30:20: 97:6d:b8:7e:60:2f:53:78:9a:94:84:95:28:b1:1c:e1:56:1d: b7:0f:df:c0:c6:db:0a:06:40:0e:ba:f9:b3:62:62:ba:80:11: 2a:ec:18:3d:f7:2b:25:fe:72:83:f7:f8:45:24:ff:0e:b6:4d: c3:64:ea:0e:ff:9d:6a:5b:99:8b:c7:71:d3:1c:9c:d8:97:bf: 2f:e9:1a:05:b5:ca:00:9b:1b:8b:35:e4:80:83:b3:06:9b:a1: b0:54:b8:5a:aa:3f:1b:f2:79:87:ec:fe:00:f3:2a:ed:e4:41: 38:7d:1e:32:b4:5d:e2:ba:12:4c:31:53:14:09:fe:53:61:a7: 80:98:1e:f8:90:35:9a:99:e0:c5:9d:40:d2:a4:ce:d4:c8:d3: f2:98:6c:ae:d1:e5:26:a6:7d:96:04:c3:07:48:ca:72:ee:27: 1f:94:32:bb:a6:e1:2d:3e:4a:49:f6:f3:77:ed:f6:7f:2b:43: c3:e5:03:99:1f:b5:6a:c9:4d:f9:cd:48:46:e0:12:46:9d:d5: 96:ef:38:ca -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHZi2Zz149P/0bIKVdIl0nkDWQpQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTYxMTEyWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDY2MWRmYWZhM2FlOWNhOTIwOWVjZjViNzgyMjcxZTJh MTI3NzNlNDBkOGU4N2E3MjRhNDdjNjE3NTVhMTA0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDX9vy08dYciSkh25FtKhWlwx0dFIt2DOTVqtDtk2coRXDJ yelNIJV3UeOP4sR34NQC3QDP7ys/2Kya+w2SPAYnzgWCP/Lsei9qD/t5QppqvO4q PDwluLA3quibKOK6CpHB0CJ5M9/Pk8dM6+gjV+hQriRwxR+Cequ5b88K6Wsktqvv yIo6w31xpIdgHTlt+HtxEEgPLZJb1Sa/5fGmoJin6F2ApQQCM2tiQ8UyvCXq+GPz npsZ06/nLKouR+UuQqCYniyqlSLeSCLcoGk9K7ksdgjLzNB/cUGuyVNl+w15AAx8 AnQxnloy0ZV6cY9Fscg8MIU2n1YZkPiZFok9miRfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9KK/Hgi4jw1tLzpPzr8Gx1aUdXMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZhODg1MDVkLWY5MzEtNDAwZi04MGZiLWYzNTI1ZmFkZmEzNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAc2pgAwDQYJKoZIhvcNAQELBQADggEBAIP1tiinJjCKXTpfdE2fyas/5beh 0Qq27Xmrit0HsHDWnc/rqH3DaS9Q1AO6UgnPEJlmYsQwIJdtuH5gL1N4mpSElSix HOFWHbcP38DG2woGQA66+bNiYrqAESrsGD33KyX+coP3+EUk/w62TcNk6g7/nWpb mYvHcdMcnNiXvy/pGgW1ygCbG4s15ICDswabobBUuFqqPxvyeYfs/gDzKu3kQTh9 HjK0XeK6EkwxUxQJ/lNhp4CYHviQNZqZ4MWdQNKkztTI0/KYbK7R5SamfZYEwwdI ynLuJx+UMrum4S0+Skn283ft9n8rQ8PlA5kftWrJTfnNSEbgEkad1ZbvOMo= -----END CERTIFICATE-----Generated at Sat Aug 23 06:45:07 2025 by rpki-client