$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e2fc2c-0216-4669-8fc2-461eee322916.roa File: c3e2fc2c-0216-4669-8fc2-461eee322916.roa (raw, json) Hash identifier: jQHBW6DKGGK8a0VrjLXTgEwLUYdeP+kazPOu/1NfsAs= Subject key identifier: 6A:C0:EE:23:E7:45:6C:B5:72:B0:A8:E4:4A:8A:98:64:9C:A4:BA:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6F397D13CC59292E8821B42FD265C0EEAA7B2414 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e2fc2c-0216-4669-8fc2-461eee322916.roa Signing time: Tue 19 Aug 2025 16:20:26 +0000 ROA not before: Tue 19 Aug 2025 16:20:26 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.214.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:39:7d:13:cc:59:29:2e:88:21:b4:2f:d2:65:c0:ee:aa:7b:24:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 16:20:26 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=405e29d4f35dad72e350741d221c68b295a7b87df653a30243dd7e3a8050e9eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d6:85:1b:40:97:c4:80:a6:05:e1:a4:ad:11: c8:4f:c2:a5:9c:73:41:f4:e9:30:38:1b:2a:2b:e7: ad:13:e6:5c:1d:8e:29:13:dc:ac:01:97:22:47:9c: 20:fe:e8:56:64:e0:34:7e:22:0f:77:0a:57:9f:10: d7:53:82:21:23:da:5e:db:9d:65:26:8f:7a:88:b8: 05:13:75:36:d2:43:07:77:78:7d:6f:75:13:e0:10: ac:40:2e:4b:91:3a:5d:75:2b:af:ec:cc:f5:c2:1b: 1c:72:32:4f:68:4f:94:c1:4a:00:eb:b8:db:82:cc: f3:b0:66:50:fb:fb:cf:7f:36:9d:2e:e6:a3:6b:a7: 62:aa:b7:a1:a0:3f:e7:9d:de:72:6e:fe:81:ef:08: 56:ae:69:a6:9b:d9:9f:86:69:4a:c7:49:3b:1e:09: 7d:48:7b:fc:7d:8a:36:4f:87:a7:7f:ac:03:e0:3d: 5b:d8:75:34:17:15:af:9a:54:04:cd:48:98:18:0d: 29:a0:6a:fa:63:e2:8a:54:25:5f:8d:83:af:57:87: a3:23:18:6b:65:82:4d:58:e1:77:26:74:76:78:b3: d8:a0:13:1f:84:93:85:07:b8:d3:c8:12:a6:37:e1: a8:ed:bb:38:65:cd:c5:cd:9d:65:54:6d:60:f9:c3: 9a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C0:EE:23:E7:45:6C:B5:72:B0:A8:E4:4A:8A:98:64:9C:A4:BA:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3e2fc2c-0216-4669-8fc2-461eee322916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.214.56.0/21 Signature Algorithm: sha256WithRSAEncryption 65:d4:c7:85:91:bb:b6:09:58:b9:08:6f:ef:73:62:c8:8b:e3: ff:03:05:09:07:1a:20:1e:d6:df:b7:fb:9d:b4:49:df:26:14: 9f:e1:98:8d:e3:f3:3d:d0:d0:4f:b3:a2:50:83:df:c6:37:39: 1b:a2:cc:cf:d0:4a:d2:a0:cd:3b:7c:8b:77:de:7e:a4:f8:cf: 19:09:cf:7a:f0:ec:75:ba:8e:ca:07:f7:15:27:56:48:e0:65: f5:8f:e5:b1:10:9c:17:85:af:81:4f:c0:d5:18:b0:40:02:cf: dd:f1:51:2e:02:54:3b:87:9d:5f:19:08:68:99:9d:42:81:f2: fd:fb:38:9e:19:11:d4:76:13:93:2e:44:33:c8:a6:87:4b:e2: 1b:bc:51:34:8b:49:27:85:8b:03:34:fa:13:92:46:72:fd:9e: d5:2b:8e:78:5e:fb:0a:19:e3:7f:79:7c:4d:ad:97:e6:48:90: f7:eb:8c:89:83:ff:2d:57:e0:93:53:ba:44:68:2f:37:45:62: e1:97:e1:75:69:0c:8b:71:3c:ec:66:9e:ed:5e:6d:4b:15:37: 5b:14:a1:b0:17:ce:5a:1a:6e:f6:79:83:ab:6e:52:67:65:c7: 20:fb:19:a7:7b:7b:20:b4:a0:26:35:f7:6d:3a:2f:e6:59:b1: f0:a3:04:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbzl9E8xZKS6IIbQv0mXA7qp7JBQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTYyMDI2WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0MDVlMjlkNGYzNWRhZDcyZTM1MDc0MWQyMjFjNjhiMjk1 YTdiODdkZjY1M2EzMDI0M2RkN2UzYTgwNTBlOWViMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC11oUbQJfEgKYF4aStEchPwqWcc0H06TA4Gyor560T5lwd jikT3KwBlyJHnCD+6FZk4DR+Ig93ClefENdTgiEj2l7bnWUmj3qIuAUTdTbSQwd3 eH1vdRPgEKxALkuROl11K6/szPXCGxxyMk9oT5TBSgDruNuCzPOwZlD7+89/Np0u 5qNrp2Kqt6GgP+ed3nJu/oHvCFauaaab2Z+GaUrHSTseCX1Ie/x9ijZPh6d/rAPg PVvYdTQXFa+aVATNSJgYDSmgavpj4opUJV+Ng69Xh6MjGGtlgk1Y4XcmdHZ4s9ig Ex+Ek4UHuNPIEqY34ajtuzhlzcXNnWVUbWD5w5rPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUasDuI+dFbLVysKjkSoqYZJykukUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MzZTJmYzJjLTAyMTYtNDY2OS04ZmMyLTQ2MWVlZTMyMjkxNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAM21jgwDQYJKoZIhvcNAQELBQADggEBAGXUx4WRu7YJWLkIb+9zYsiL4/8D BQkHGiAe1t+3+520Sd8mFJ/hmI3j8z3Q0E+zolCD38Y3ORuizM/QStKgzTt8i3fe fqT4zxkJz3rw7HW6jsoH9xUnVkjgZfWP5bEQnBeFr4FPwNUYsEACz93xUS4CVDuH nV8ZCGiZnUKB8v37OJ4ZEdR2E5MuRDPIpodL4hu8UTSLSSeFiwM0+hOSRnL9ntUr jnhe+woZ4395fE2tl+ZIkPfrjImD/y1X4JNTukRoLzdFYuGX4XVpDItxPOxmnu1e bUsVN1sUobAXzloabvZ5g6tuUmdlxyD7Gad7eyC0oCY19206L+ZZsfCjBEk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:46 2025 by rpki-client