$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa File: aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa (raw, json) Hash identifier: j1BuUA/9d025Fm0W38NgkYHIYEIF0QeW4W5VGN3+MNE= Subject key identifier: DF:32:A2:81:54:F2:47:06:E4:71:4F:45:A2:8A:F9:F1:1B:C5:C5:36 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 58560FFAB5FFBEDCD0A62805ECD6F67B1228AB03 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa Signing time: Tue 19 Aug 2025 16:31:46 +0000 ROA not before: Tue 19 Aug 2025 16:31:46 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.215.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:56:0f:fa:b5:ff:be:dc:d0:a6:28:05:ec:d6:f6:7b:12:28:ab:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:31:46 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=9d940f18c85d55c28efcb21b080643816635a3557507a69086e93665e6cd5ff6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:9e:eb:d7:a8:e0:78:da:a9:6e:3e:8c:02: 88:8d:fe:fb:4a:8f:a4:72:8b:c8:79:88:c7:20:7a: ef:3e:67:63:f6:4b:98:e4:e0:9f:d2:21:df:a2:77: 20:30:c3:57:41:63:c5:de:ad:16:18:91:9d:94:a4: c9:d7:11:75:ea:02:7a:2e:6b:c2:56:2e:f8:b5:c0: 96:b7:94:b8:7d:8a:21:91:c4:2a:2a:5b:64:e6:a7: 6e:e7:e5:b7:34:e3:ee:77:b8:84:35:77:43:57:3b: d9:30:91:5c:ca:bc:43:66:f0:8b:e6:40:3c:5f:05: 5a:72:c5:9b:a1:53:8a:e4:54:87:bb:9f:b5:ba:73: 1e:cf:5a:f4:44:a4:d9:6a:d3:bc:1a:c0:46:b8:aa: 03:13:d3:8e:52:97:3b:14:a3:99:ab:76:a5:0c:ed: 3a:19:ac:b1:d7:06:82:66:07:4b:f9:6b:18:bb:c8: 86:3d:86:ab:fc:87:8c:85:03:60:b1:90:8d:75:c0: 9b:af:05:33:a9:95:be:1d:7b:71:70:28:0f:17:09: 4c:0a:c6:2b:93:1e:17:ce:2e:1a:42:3c:84:5a:51: e0:ec:05:81:5f:0e:a4:d6:ef:b8:9a:0c:5e:b0:41: ce:00:d2:f7:3e:96:35:34:ee:c7:8f:36:44:38:f0: f3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:32:A2:81:54:F2:47:06:E4:71:4F:45:A2:8A:F9:F1:1B:C5:C5:36 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa3f9cf5-e792-4102-90b6-d3b0a0246399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.215.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7a:a2:19:51:b1:5d:34:a2:e1:bc:18:df:a4:24:0f:5e:03:37: aa:6c:c1:a9:6e:c0:c1:96:b1:c9:16:28:33:28:40:cc:4b:1d: 6f:85:5a:45:b0:a6:fa:bc:69:09:5a:73:e4:20:18:fb:0d:b9: 0a:f6:36:36:71:18:81:d1:f8:78:e0:81:38:e3:58:42:31:fe: 87:77:78:44:a9:65:1c:a6:6a:52:36:1a:05:35:d3:e2:5a:5c: 36:4b:24:22:de:b2:d0:0e:58:7f:23:f3:6b:58:2a:98:18:66: 2d:c5:cf:8b:44:fd:62:3e:88:30:f5:5f:4a:42:f1:ab:3c:92: 2d:38:89:67:7b:7a:b7:d8:a9:d9:d1:0b:cf:48:80:8f:66:80: 57:27:2f:63:c6:80:22:fa:79:e8:86:3d:91:ce:92:aa:6a:af: 74:0b:17:6a:8d:c0:1f:04:92:d2:02:f0:27:d3:93:06:55:f9: 41:32:77:e4:77:a0:fa:11:eb:fd:bd:60:b0:9e:85:01:68:b3: ba:98:45:5b:5e:9e:27:99:74:5f:85:d4:3b:12:98:95:98:ec: f1:e9:25:91:31:40:2b:d2:cb:cc:9c:33:df:4c:43:0e:6c:6b: fe:e8:82:61:6f:cd:f9:11:74:18:d5:12:c9:12:a2:20:2d:07: 80:d2:8a:92 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWFYP+rX/vtzQpigF7Nb2exIoqwMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTYzMTQ2WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A5ZDk0MGYxOGM4NWQ1NWMyOGVmY2IyMWIwODA2NDM4MTY2 MzVhMzU1NzUwN2E2OTA4NmU5MzY2NWU2Y2Q1ZmY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQT57r16jgeNqpbj6MAoiN/vtKj6Ryi8h5iMcgeu8+Z2P2 S5jk4J/SId+idyAww1dBY8XerRYYkZ2UpMnXEXXqAnoua8JWLvi1wJa3lLh9iiGR xCoqW2Tmp27n5bc04+53uIQ1d0NXO9kwkVzKvENm8IvmQDxfBVpyxZuhU4rkVIe7 n7W6cx7PWvREpNlq07wawEa4qgMT045SlzsUo5mrdqUM7ToZrLHXBoJmB0v5axi7 yIY9hqv8h4yFA2CxkI11wJuvBTOplb4de3FwKA8XCUwKxiuTHhfOLhpCPIRaUeDs BYFfDqTW77iaDF6wQc4A0vc+ljU07sePNkQ48POBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3zKigVTyRwbkcU9Foor58RvFxTYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhM2Y5Y2Y1LWU3OTItNDEwMi05MGI2LWQzYjBhMDI0NjM5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwA21zANBgkqhkiG9w0BAQsFAAOCAQEAeqIZUbFdNKLhvBjfpCQPXgM3qmzB qW7AwZaxyRYoMyhAzEsdb4VaRbCm+rxpCVpz5CAY+w25CvY2NnEYgdH4eOCBOONY QjH+h3d4RKllHKZqUjYaBTXT4lpcNkskIt6y0A5YfyPza1gqmBhmLcXPi0T9Yj6I MPVfSkLxqzySLTiJZ3t6t9ip2dELz0iAj2aAVycvY8aAIvp56IY9kc6SqmqvdAsX ao3AHwSS0gLwJ9OTBlX5QTJ35Heg+hHr/b1gsJ6FAWizuphFW16eJ5l0X4XUOxKY lZjs8eklkTFAK9LLzJwz30xDDmxr/uiCYW/N+RF0GNUSyRKiIC0HgNKKkg== -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:11 2025 by rpki-client