$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa File: 17beaf1d-23cc-42f2-907d-15cc6155337a.roa (raw, json) Hash identifier: p91JoHNJw7nraha4S6Z4RNIUp2bsSZc/dKdYKVc4CuA= Subject key identifier: 9A:B0:5A:9F:31:93:0B:59:59:4D:F9:42:84:A7:64:58:56:5E:2E:C1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3D2131B96A0C2C8388A41DF75C0F7E946A1D26B6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa Signing time: Mon 18 Aug 2025 16:00:51 +0000 ROA not before: Mon 18 Aug 2025 16:00:51 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.56.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:21:31:b9:6a:0c:2c:83:88:a4:1d:f7:5c:0f:7e:94:6a:1d:26:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 16:00:51 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=36e566bdcd44b52a18df9cb3aaf69f35f36284eaa7bbc735aaa7d619c66463bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0a:d7:6b:05:a8:9a:1e:09:e1:38:1b:d3:6d: c6:40:18:b5:a8:af:a6:1e:df:0d:e3:82:fb:ad:d4: 32:13:5f:d1:c0:55:ae:94:8b:60:6c:5f:62:bc:da: 34:b8:5f:88:17:b4:f6:9a:b4:90:aa:6a:e4:19:7b: 5f:10:51:27:4c:26:ec:cb:4a:dc:d1:b7:d6:aa:92: f5:85:fa:f2:79:1d:49:c4:a9:59:ca:e5:25:b8:41: 84:c2:a8:aa:12:5e:67:ba:e4:91:e3:fd:48:51:30: 68:ed:dd:bd:94:3f:c6:41:9e:93:c5:7c:33:5b:40: 09:5c:a8:41:e7:3e:93:60:77:4c:20:32:13:0b:cd: b4:b2:8d:c9:31:38:82:61:99:d7:d7:76:16:c2:a9: 0e:27:e8:68:d8:b5:a0:37:bf:b4:0c:9a:f9:56:25: cb:69:70:dd:44:79:9c:9d:23:d9:d1:da:43:a2:31: 28:44:31:23:bd:8b:f4:97:e5:79:6a:42:9d:9c:8d: b5:94:d8:f1:b5:14:d7:57:f9:71:5e:4f:cd:d6:21: 03:ca:d0:74:b5:cc:ce:66:16:e4:8b:76:ba:57:38: a6:a0:75:75:b3:d2:ea:66:a6:30:67:6f:89:e7:34: 79:ed:f3:56:59:0d:bd:fa:6d:d5:73:e7:80:a8:6a: 24:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:B0:5A:9F:31:93:0B:59:59:4D:F9:42:84:A7:64:58:56:5E:2E:C1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17beaf1d-23cc-42f2-907d-15cc6155337a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.56.0.0/18 Signature Algorithm: sha256WithRSAEncryption 97:3a:0d:ea:31:e9:c3:64:c8:5f:c0:b7:2f:2b:da:31:d8:26: 69:c8:e8:db:bc:b3:b9:67:30:67:14:41:8f:10:50:4f:6a:93: 8c:27:6d:3b:49:f7:73:ca:73:ed:42:92:1b:76:81:13:68:7c: 40:01:c9:12:11:07:24:f7:dc:eb:44:fd:1c:ef:d3:0c:d3:9f: ba:26:19:04:c5:76:bc:e7:d6:50:05:44:1b:6e:26:56:4d:c9: 80:16:42:98:e6:fb:5c:c7:45:6b:7d:dc:23:ca:19:a9:0b:0a: 39:f3:19:47:b3:68:f8:38:eb:ce:fb:02:16:27:c5:10:19:e0: 7b:f0:32:30:de:b2:d2:d8:b1:c2:62:bf:5b:05:bc:60:ba:9e: 25:70:69:ea:4e:da:4d:41:e1:72:d4:e5:f6:6b:76:4c:73:b7: 3e:8c:0d:8f:76:68:a8:0a:e8:9d:e0:bd:ed:d4:c9:e5:84:d8: 6b:55:e7:ed:9a:9b:3b:b7:d8:3f:f0:ec:8e:f7:0f:5a:72:77: d9:9d:00:fb:b2:00:2d:a9:ce:e6:55:d6:59:c9:bd:ad:9e:4e: b2:11:f3:a1:58:e0:15:08:46:cd:af:8d:1b:df:3c:54:b4:db: 76:2c:73:ae:30:a5:dc:73:f0:7a:24:6d:1f:e5:21:c4:85:6e: bb:7e:c5:07 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPSExuWoMLIOIpB33XA9+lGodJrYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTYwMDUxWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AzNmU1NjZiZGNkNDRiNTJhMThkZjljYjNhYWY2OWYzNWYz NjI4NGVhYTdiYmM3MzVhYWE3ZDYxOWM2NjQ2M2JiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3CtdrBaiaHgnhOBvTbcZAGLWor6Ye3w3jgvut1DITX9HA Va6Ui2BsX2K82jS4X4gXtPaatJCqauQZe18QUSdMJuzLStzRt9aqkvWF+vJ5HUnE qVnK5SW4QYTCqKoSXme65JHj/UhRMGjt3b2UP8ZBnpPFfDNbQAlcqEHnPpNgd0wg MhMLzbSyjckxOIJhmdfXdhbCqQ4n6GjYtaA3v7QMmvlWJctpcN1EeZydI9nR2kOi MShEMSO9i/SX5XlqQp2cjbWU2PG1FNdX+XFeT83WIQPK0HS1zM5mFuSLdrpXOKag dXWz0upmpjBnb4nnNHnt81ZZDb36bdVz54CoaiTVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmrBanzGTC1lZTflChKdkWFZeLsEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE3YmVhZjFkLTIzY2MtNDJmMi05MDdkLTE1Y2M2MTU1MzM3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNOAAwDQYJKoZIhvcNAQELBQADggEBAJc6Deox6cNkyF/Aty8r2jHYJmnI 6Nu8s7lnMGcUQY8QUE9qk4wnbTtJ93PKc+1Ckht2gRNofEAByRIRByT33OtE/Rzv 0wzTn7omGQTFdrzn1lAFRBtuJlZNyYAWQpjm+1zHRWt93CPKGakLCjnzGUezaPg4 6877AhYnxRAZ4HvwMjDestLYscJiv1sFvGC6niVwaepO2k1B4XLU5fZrdkxztz6M DY92aKgK6J3gve3UyeWE2GtV5+2amzu32D/w7I73D1pyd9mdAPuyAC2pzuZV1lnJ va2eTrIR86FY4BUIRs2vjRvfPFS023Ysc64wpdxz8HokbR/lIcSFbrt+xQc= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:58 2025 by rpki-client