$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa File: c23cc3c2-e83d-490c-955a-29d56b95286e.roa (raw, json) Hash identifier: SeL5H/yXFcsAgyl5IIW9n5u4JaLsfzoOWZmSY7fCZ0k= Subject key identifier: 0D:D2:92:AA:A0:9B:A3:56:B8:C1:46:E6:FB:A5:E8:B8:F5:BD:2F:00 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 10CD0DC46FF3E2306A68B05900FB643F4A8B7474 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa Signing time: Fri 22 Aug 2025 15:00:39 +0000 ROA not before: Fri 22 Aug 2025 15:00:39 +0000 ROA not after: Fri 26 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.156.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cd:0d:c4:6f:f3:e2:30:6a:68:b0:59:00:fb:64:3f:4a:8b:74:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 22 15:00:39 2025 GMT Not After : Sep 26 23:59:59 2025 GMT Subject: serialNumber=fb87e9caf794d91f32833bd406418b33935338c48daeb797dd5b97dc0243e9ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:d7:f3:5d:33:26:c5:47:be:64:9f:73:fb: 0d:48:b5:4a:29:8a:99:72:8d:9f:62:54:ea:f3:e7: 80:ac:92:6b:2a:56:02:e4:eb:16:fc:86:d5:ae:46: be:83:33:6e:cd:4d:7f:bd:a6:81:c1:77:31:15:93: 89:52:fe:e8:41:46:50:95:d3:81:64:b3:f8:f8:11: 8b:7e:bb:3e:a6:1a:47:bc:a0:6e:11:b4:2a:13:c1: 43:d9:56:46:8b:38:3d:08:04:24:b9:86:7a:b9:e4: a0:5c:9f:f2:34:3e:67:86:23:ab:ed:7c:79:1d:e0: 57:fe:db:47:16:9b:69:67:65:70:2f:bb:1e:45:58: 8c:3c:23:88:8b:71:8b:6f:b6:7c:53:55:f7:cb:35: bf:c5:c7:a9:19:34:12:fd:2b:b7:33:90:41:dc:4d: 17:ad:0d:da:3c:fb:22:a4:62:be:a3:3c:f3:b9:ce: c2:fd:7f:14:1e:fa:d6:c0:c8:b6:08:12:26:3e:79: 18:a8:23:2b:1c:07:39:2f:17:45:38:74:df:cb:9e: 67:11:79:76:36:4b:20:32:16:ca:0f:14:58:73:95: 2a:99:65:d2:bc:dd:4f:21:65:55:b2:6f:fe:46:19: a9:82:14:d0:31:44:26:ab:36:c0:02:c0:bd:20:3f: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D2:92:AA:A0:9B:A3:56:B8:C1:46:E6:FB:A5:E8:B8:F5:BD:2F:00 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c23cc3c2-e83d-490c-955a-29d56b95286e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.156.0.0/24 Signature Algorithm: sha256WithRSAEncryption 39:9d:1e:12:a4:41:9d:9c:6b:10:83:01:55:99:05:53:51:32: 3e:57:b0:6c:7d:29:fe:ed:3e:ac:2b:86:fc:14:d4:7c:84:d4: ce:6d:cc:16:0a:93:05:16:07:83:80:86:fa:5e:cd:c0:76:d9: 70:cb:cd:c2:f5:22:ca:a5:fd:56:6d:66:09:8b:83:3f:2b:27: 68:c5:30:81:82:97:98:72:95:eb:74:ce:93:d1:11:a7:a4:85: 90:94:5b:f3:44:5a:9b:51:8a:44:88:a3:48:d4:e1:3d:3e:d6: 75:5b:10:5e:c0:94:5e:84:2a:e5:16:29:5c:35:f1:ab:6e:b8: b4:26:a3:fb:12:f9:e7:63:98:7c:97:da:cc:b2:d6:3b:53:10: c9:f6:3d:48:ee:8c:3e:12:9f:af:88:ba:ac:60:c3:82:96:eb: 0b:c1:4f:8e:78:c3:c0:4d:7d:28:3f:3e:95:d1:88:0c:22:fb: 1e:93:ce:7a:a7:b7:94:4d:47:f8:43:42:bd:92:82:2d:7c:a1: f2:dd:f4:23:a8:ce:74:b1:b7:e7:55:61:53:df:fa:b9:c3:6c: a3:dc:0c:77:a6:67:90:96:bd:79:0c:a0:38:28:7c:00:a8:18: c3:72:da:f6:c9:b1:b3:e5:75:41:0f:8f:13:5f:b2:9a:33:3a: b4:20:34:0a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEM0NxG/z4jBqaLBZAPtkP0qLdHQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIyMTUwMDM5WhcNMjUwOTI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmYjg3ZTljYWY3OTRkOTFmMzI4MzNiZDQwNjQxOGIzMzkz NTMzOGM0OGRhZWI3OTdkZDViOTdkYzAyNDNlOWJhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7KtfzXTMmxUe+ZJ9z+w1ItUopiplyjZ9iVOrz54Cskmsq VgLk6xb8htWuRr6DM27NTX+9poHBdzEVk4lS/uhBRlCV04Fks/j4EYt+uz6mGke8 oG4RtCoTwUPZVkaLOD0IBCS5hnq55KBcn/I0PmeGI6vtfHkd4Ff+20cWm2lnZXAv ux5FWIw8I4iLcYtvtnxTVffLNb/Fx6kZNBL9K7czkEHcTRetDdo8+yKkYr6jPPO5 zsL9fxQe+tbAyLYIEiY+eRioIyscBzkvF0U4dN/LnmcReXY2SyAyFsoPFFhzlSqZ ZdK83U8hZVWyb/5GGamCFNAxRCarNsACwL0gPz3PAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDdKSqqCbo1a4wUbm+6XouPW9LwAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyM2NjM2MyLWU4M2QtNDkwYy05NTVhLTI5ZDU2Yjk1Mjg2ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA2nAAwDQYJKoZIhvcNAQELBQADggEBADmdHhKkQZ2caxCDAVWZBVNRMj5X sGx9Kf7tPqwrhvwU1HyE1M5tzBYKkwUWB4OAhvpezcB22XDLzcL1Isql/VZtZgmL gz8rJ2jFMIGCl5hylet0zpPREaekhZCUW/NEWptRikSIo0jU4T0+1nVbEF7AlF6E KuUWKVw18atuuLQmo/sS+edjmHyX2syy1jtTEMn2PUjujD4Sn6+Iuqxgw4KW6wvB T454w8BNfSg/PpXRiAwi+x6Tznqnt5RNR/hDQr2Sgi18ofLd9COoznSxt+dVYVPf +rnDbKPcDHemZ5CWvXkMoDgofACoGMNy2vbJsbPldUEPjxNfspozOrQgNAo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:04:48 2025 by rpki-client