$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08ca3505-e84e-4908-a266-f38d4aefc525.roa File: 08ca3505-e84e-4908-a266-f38d4aefc525.roa (raw, json) Hash identifier: XNMrUKOvsFEDgeLAOXpaupMZhDtpi8EoCjeA3i/jdlA= Subject key identifier: 82:B1:29:57:7E:1B:AC:3A:BC:F4:B2:8F:7F:7D:F0:5C:F5:DB:03:D7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 66087175049312C4754BA59CA6889E6C7674FD29 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08ca3505-e84e-4908-a266-f38d4aefc525.roa Signing time: Sat 23 Aug 2025 00:51:34 +0000 ROA not before: Sat 23 Aug 2025 00:51:34 +0000 ROA not after: Sat 27 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 54.156.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:08:71:75:04:93:12:c4:75:4b:a5:9c:a6:88:9e:6c:76:74:fd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 23 00:51:34 2025 GMT Not After : Sep 27 23:59:59 2025 GMT Subject: serialNumber=bb4b6be3ceafb766b9162ad3c9e0479ec2cb8538d06c988e89e88027c07a38ed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:59:7e:a4:90:41:d0:b7:55:6a:f0:75:02: e6:97:7f:87:a3:ea:fa:2a:ac:a7:ea:9f:b0:f9:51: 6d:52:17:74:da:62:b3:b3:69:7a:16:ef:d7:ad:38: 6e:93:6c:8b:11:fb:42:fe:4f:93:50:5f:d8:26:a3: fd:de:96:e6:1c:e0:e6:c1:a5:64:b7:23:f6:80:f7: fc:7e:14:db:da:5a:68:c4:51:e3:df:7e:51:4f:0e: 0a:0e:df:13:a8:f7:1a:c5:db:62:21:b5:c0:df:01: 2b:a0:e5:af:01:1e:c0:69:74:33:3d:d7:1f:54:65: 7a:a6:4f:cc:31:0b:32:df:72:ef:58:6f:77:c4:48: 5c:a2:a9:c0:f2:63:49:e0:eb:f7:f3:bc:19:8b:10: 08:7e:e0:0b:49:d0:36:51:f9:51:1a:05:e6:70:b7: 58:63:e0:8c:ce:16:ec:4a:c7:6a:bc:ba:fe:f5:5b: 71:48:b5:24:7a:1e:bc:6a:8a:5d:f3:27:0b:45:cd: 54:75:5f:4d:f7:e4:5f:1f:cf:1e:d0:67:a4:2f:16: 91:06:5e:10:5e:01:d8:8a:0d:ec:6f:9f:e0:81:5e: 4d:a6:0e:5c:f6:74:86:44:d5:ee:1d:1e:c5:20:1b: 60:92:72:86:0b:da:c4:c5:f6:73:80:a7:26:75:98: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B1:29:57:7E:1B:AC:3A:BC:F4:B2:8F:7F:7D:F0:5C:F5:DB:03:D7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/08ca3505-e84e-4908-a266-f38d4aefc525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.156.0.0/14 Signature Algorithm: sha256WithRSAEncryption ad:ba:a7:84:f2:e8:dc:16:82:a5:cb:56:5e:e9:0b:be:96:c6: ce:ba:05:aa:7d:50:fe:44:b6:2d:f7:24:f1:84:37:75:69:73: 38:82:2d:7c:16:aa:f4:57:bb:83:ef:c9:2f:a5:47:54:1c:6b: 30:68:fe:1e:b5:34:b7:09:12:d6:b4:1c:5c:f0:d5:a0:9f:ba: e6:cb:5a:d0:00:dd:ee:0c:3a:ea:57:36:27:01:e2:97:a1:a3: aa:e5:b4:cd:90:f2:90:09:17:3d:72:55:ac:2b:e1:08:40:7d: c0:54:f1:05:4a:a2:47:b2:54:53:cf:01:ab:51:2d:e8:cc:af: 05:7a:4b:92:05:d2:b7:0a:47:c9:53:80:4b:dd:52:a5:90:8f: 5d:b6:52:70:65:3d:45:f1:eb:b5:bd:99:66:f2:cf:3b:e4:5c: 14:bf:6d:63:16:23:68:9f:16:e3:52:b3:ce:ac:f0:5e:60:a5: b8:13:b5:be:a2:b2:52:49:32:5b:be:1e:89:e8:79:54:dc:38: cb:98:b6:17:36:96:6c:a1:c1:51:54:49:e3:26:cc:f8:4b:b8: 95:04:fc:70:11:01:e1:c1:6a:34:f8:d6:a4:c8:a2:99:8c:1a: a8:59:11:4f:fa:c7:b1:14:ea:89:b1:a5:6f:5e:8b:2b:2e:f1: e8:8f:49:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUZghxdQSTEsR1S6WcpoiebHZ0/SkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIzMDA1MTM0WhcNMjUwOTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BiYjRiNmJlM2NlYWZiNzY2YjkxNjJhZDNjOWUwNDc5ZWMy Y2I4NTM4ZDA2Yzk4OGU4OWU4ODAyN2MwN2EzOGVkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8aFl+pJBB0LdVavB1AuaXf4ej6voqrKfqn7D5UW1SF3Ta YrOzaXoW79etOG6TbIsR+0L+T5NQX9gmo/3eluYc4ObBpWS3I/aA9/x+FNvaWmjE UePfflFPDgoO3xOo9xrF22IhtcDfASug5a8BHsBpdDM91x9UZXqmT8wxCzLfcu9Y b3fESFyiqcDyY0ng6/fzvBmLEAh+4AtJ0DZR+VEaBeZwt1hj4IzOFuxKx2q8uv71 W3FItSR6Hrxqil3zJwtFzVR1X0335F8fzx7QZ6QvFpEGXhBeAdiKDexvn+CBXk2m Dlz2dIZE1e4dHsUgG2CScoYL2sTF9nOApyZ1mOcnAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUgrEpV34brDq89LKPf33wXPXbA9cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA4Y2EzNTA1LWU4NGUtNDkwOC1hMjY2LWYzOGQ0YWVmYzUyNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwI2nDANBgkqhkiG9w0BAQsFAAOCAQEArbqnhPLo3BaCpctWXukLvpbGzroF qn1Q/kS2Lfck8YQ3dWlzOIItfBaq9Fe7g+/JL6VHVBxrMGj+HrU0twkS1rQcXPDV oJ+65sta0ADd7gw66lc2JwHil6GjquW0zZDykAkXPXJVrCvhCEB9wFTxBUqiR7JU U88Bq1Et6MyvBXpLkgXStwpHyVOAS91SpZCPXbZScGU9RfHrtb2ZZvLPO+RcFL9t YxYjaJ8W41KzzqzwXmCluBO1vqKyUkkyW74eieh5VNw4y5i2FzaWbKHBUVRJ4ybM +Eu4lQT8cBEB4cFqNPjWpMiimYwaqFkRT/rHsRTqibGlb16LKy7x6I9JAg== -----END CERTIFICATE-----Generated at Sat Aug 23 12:04:07 2025 by rpki-client