$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38fbbe7-ee3a-4342-8d17-fb3ddd49e29f.roa File: a38fbbe7-ee3a-4342-8d17-fb3ddd49e29f.roa (raw, json) Hash identifier: Fqmy5+hfJbyhimRycEsdQIPyHKatgSGqeCuwVNHSavw= Subject key identifier: E9:D9:64:CC:A1:E6:96:0D:DE:34:88:E5:E7:63:0F:AF:C3:D2:B2:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A04F2D4BED777B5A1571B07948ED5F5EEA80832 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38fbbe7-ee3a-4342-8d17-fb3ddd49e29f.roa Signing time: Tue 05 Aug 2025 17:21:30 +0000 ROA not before: Tue 05 Aug 2025 17:21:30 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.239.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:04:f2:d4:be:d7:77:b5:a1:57:1b:07:94:8e:d5:f5:ee:a8:08:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 17:21:30 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=1ff6eae08b9edf8da39345caca780f8e14b47ae60ef6aedbb92242df20016784, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:29:47:c6:96:d3:23:16:1e:c8:aa:41:a9: 73:6b:b8:94:c2:02:4a:7f:d5:fb:50:91:ff:c3:8a: d4:40:ab:96:ed:19:9a:d9:15:e5:e4:06:7d:24:04: ca:cf:d5:74:b7:d3:83:3f:eb:b7:dc:6f:0e:5c:8a: 06:d9:71:d6:45:4b:cb:b8:60:b9:37:54:97:04:85: e0:86:45:54:cf:1e:60:4d:02:fa:13:09:36:24:fe: d6:ab:33:fb:71:e3:1f:9a:a3:03:17:9b:72:ac:90: 43:f3:45:51:e7:34:48:f9:6c:ed:53:80:ca:7f:d7: 2f:6e:23:11:1f:24:61:b1:03:74:86:f7:d7:7e:35: 81:7e:ac:13:f3:5c:5c:ce:09:0c:e8:7e:da:53:d0: a0:24:a3:94:3c:79:2d:b0:f8:72:e1:db:10:9e:5c: 81:42:3d:9b:b7:df:6e:5b:93:08:28:0a:52:23:da: 06:77:c0:d9:7a:53:69:1f:e7:5d:4b:5b:78:11:2d: 8d:fa:50:91:ff:bd:7d:41:82:72:8a:4d:49:ff:01: cf:19:31:08:f1:b6:7b:eb:c2:f8:6a:bb:80:c8:24: 10:bf:85:ac:83:6f:46:a4:dd:17:25:6c:4e:20:0b: 15:d8:aa:4a:7a:eb:f3:83:5a:49:56:de:b0:d4:f5: 30:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D9:64:CC:A1:E6:96:0D:DE:34:88:E5:E7:63:0F:AF:C3:D2:B2:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a38fbbe7-ee3a-4342-8d17-fb3ddd49e29f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.239.54.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:b1:57:ec:67:fe:7b:5a:f4:1a:c1:30:e2:af:87:f4:a8:7e: cc:35:85:e2:fe:f3:c0:1f:65:c2:2a:e3:20:bc:8d:da:43:ea: 16:86:ff:c3:a8:e4:62:54:79:fc:8e:33:a5:02:5e:fd:b5:f9: 0d:dc:2f:f0:4f:32:d8:76:3d:bd:62:38:91:bf:0e:c1:e9:f9: 68:48:70:8a:66:4a:a0:2d:7c:62:22:b6:61:84:76:2e:ce:4b: 9c:ce:fd:8e:e4:9b:a0:b1:90:d5:90:4a:15:b2:89:55:ab:81: f2:59:a8:9f:51:2c:68:eb:cb:9f:3f:3c:fd:9d:3a:cd:ed:8f: 20:72:16:7c:25:1a:49:8a:08:2c:07:e2:30:95:4a:ef:38:9e: fa:5b:5a:ca:5c:79:e7:64:a1:43:47:69:fc:1e:dd:8a:00:55: 22:bb:70:2c:5f:25:e6:99:e3:91:87:ac:88:05:d9:8d:d2:bf: bd:be:14:30:bc:66:37:f0:1d:82:7b:e0:7f:a0:8a:95:b2:43: f0:9b:e1:13:08:89:f8:81:01:a3:79:ef:4f:1a:24:b0:aa:f2: 50:f5:fd:c8:6e:73:bb:dc:19:54:79:1b:06:06:a3:a6:d8:cc: 41:5b:bc:c0:1d:ef:52:b1:bc:de:a5:38:2a:52:14:d9:ec:fc: 85:fd:68:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWgTy1L7Xd7WhVxsHlI7V9e6oCDIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTcyMTMwWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxZmY2ZWFlMDhiOWVkZjhkYTM5MzQ1Y2FjYTc4MGY4ZTE0 YjQ3YWU2MGVmNmFlZGJiOTIyNDJkZjIwMDE2Nzg0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxcSlHxpbTIxYeyKpBqXNruJTCAkp/1ftQkf/DitRAq5bt GZrZFeXkBn0kBMrP1XS304M/67fcbw5cigbZcdZFS8u4YLk3VJcEheCGRVTPHmBN AvoTCTYk/tarM/tx4x+aowMXm3KskEPzRVHnNEj5bO1TgMp/1y9uIxEfJGGxA3SG 99d+NYF+rBPzXFzOCQzoftpT0KAko5Q8eS2w+HLh2xCeXIFCPZu3325bkwgoClIj 2gZ3wNl6U2kf511LW3gRLY36UJH/vX1BgnKKTUn/Ac8ZMQjxtnvrwvhqu4DIJBC/ hayDb0ak3RclbE4gCxXYqkp66/ODWklW3rDU9TAVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6dlkzKHmlg3eNIjl52MPr8PSsiwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EzOGZiYmU3LWVlM2EtNDM0Mi04ZDE3LWZiM2RkZDQ5ZTI5Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAE27zYwDQYJKoZIhvcNAQELBQADggEBAIuxV+xn/nta9BrBMOKvh/Sofsw1 heL+88AfZcIq4yC8jdpD6haG/8Oo5GJUefyOM6UCXv21+Q3cL/BPMth2Pb1iOJG/ DsHp+WhIcIpmSqAtfGIitmGEdi7OS5zO/Y7km6CxkNWQShWyiVWrgfJZqJ9RLGjr y58/PP2dOs3tjyByFnwlGkmKCCwH4jCVSu84nvpbWspceedkoUNHafwe3YoAVSK7 cCxfJeaZ45GHrIgF2Y3Sv72+FDC8ZjfwHYJ74H+gipWyQ/Cb4RMIifiBAaN5708a JLCq8lD1/chuc7vcGVR5GwYGo6bYzEFbvMAd71KxvN6lOCpSFNns/IX9aOk= -----END CERTIFICATE-----Generated at Wed Aug 6 05:54:34 2025 by rpki-client