$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a23c9d-11a1-4a7b-99fb-6dd160e4b8ff.roa File: a9a23c9d-11a1-4a7b-99fb-6dd160e4b8ff.roa (raw, json) Hash identifier: bxqSlyL+L56BsSfQQaHYOyI6BBfwJ40a6xalCS8sOA4= Subject key identifier: 0D:B6:B9:5B:B0:10:2E:95:B6:5C:A0:59:BF:F9:3D:CE:2F:A8:44:76 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4FFD0ACDF7CBC805540C1FBED6E0006E58797811 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a23c9d-11a1-4a7b-99fb-6dd160e4b8ff.roa Signing time: Tue 29 Jul 2025 15:01:22 +0000 ROA not before: Tue 29 Jul 2025 15:01:22 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.150.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fd:0a:cd:f7:cb:c8:05:54:0c:1f:be:d6:e0:00:6e:58:79:78:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:01:22 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=8d6f67b25f9963a305350b53b11ec9ea6f96ac841afba60d15f818180e82b07a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:5b:76:e9:d5:1a:98:e4:24:1e:f4:5e:1b: f0:a1:6a:40:21:52:32:e3:f4:2e:f8:30:0d:1e:d3: 4c:bd:b3:c6:28:92:32:00:f7:d4:ab:73:36:e4:6d: 21:04:c6:c9:09:92:84:e3:0e:c9:fc:af:7c:fe:71: b3:5f:9d:17:26:e2:8a:ac:67:81:31:ea:c7:24:7a: 1f:6a:93:5a:72:39:c6:7e:8c:b0:0f:9a:a6:6a:19: 2a:15:b1:07:55:0a:b3:2f:8b:f1:1b:df:75:fd:84: de:22:ac:9b:fb:f3:61:6c:bb:9e:3d:8d:d0:79:43: c0:15:f7:5e:85:65:9c:46:68:7d:62:82:12:d8:25: 1c:b1:69:78:5b:12:03:df:57:f4:49:e0:b8:5b:f2: 04:6f:c7:03:00:84:55:e5:fc:84:a5:e1:37:13:f2: b2:1c:2b:13:5b:02:6d:2c:00:11:7c:9d:c5:7f:37: f6:f1:5c:26:bb:08:bb:71:96:3e:f1:0d:32:1f:15: 6d:73:a7:bc:53:1b:22:64:f5:60:30:37:50:9c:50: 1c:de:e2:3b:d6:92:29:3d:14:ce:09:ff:f5:fd:13: 3f:85:0f:0a:00:98:29:2f:3f:c5:16:60:36:1a:86: 4d:a3:05:a4:24:52:ca:0d:da:de:02:82:c0:02:1b: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B6:B9:5B:B0:10:2E:95:B6:5C:A0:59:BF:F9:3D:CE:2F:A8:44:76 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a23c9d-11a1-4a7b-99fb-6dd160e4b8ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.150.160.0/19 Signature Algorithm: sha256WithRSAEncryption 0c:95:46:fe:45:56:b2:68:7b:e7:ef:08:2e:e2:f6:4e:c4:de: 7b:ec:0e:31:89:e1:29:9c:b5:8d:76:7c:a7:b3:1d:27:0b:94: fc:6a:f9:1a:58:58:56:fb:f3:81:43:74:e3:32:2b:72:65:fa: 72:38:40:8d:ef:f7:52:db:77:72:e9:47:30:db:cd:59:9a:c9: b9:57:e5:79:41:9f:25:98:f4:07:6d:3e:c2:45:b4:35:a2:ce: f5:b4:05:f5:fe:7f:26:fd:98:41:3d:ba:45:db:1d:a0:26:c9: cf:a1:34:8b:57:69:d1:45:fa:2e:05:20:75:4a:c6:88:f2:29: c0:ca:f5:46:33:e9:51:9a:69:36:c2:2a:dc:56:21:64:e8:64: 0b:77:1f:10:14:67:6c:da:f6:31:5c:bf:ff:eb:f8:3c:ba:27: 4c:b0:86:ae:7b:07:cc:90:51:33:44:46:af:0d:20:7d:cf:96: 2a:31:b1:cf:f8:f7:f0:00:2f:47:54:9f:c5:1f:99:6f:45:0c: 73:0d:22:0e:4f:96:21:1b:c8:f2:32:13:c6:b7:c1:c7:36:85: 9a:3b:fe:f3:fd:1c:3e:85:49:a0:90:e5:1e:91:28:3f:b4:b8: c7:2f:c7:df:0c:e3:ee:16:89:64:fe:0d:0b:86:41:24:8d:a3: 17:9a:b4:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUT/0KzffLyAVUDB++1uAAblh5eBEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTUwMTIyWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDZmNjdiMjVmOTk2M2EzMDUzNTBiNTNiMTFlYzllYTZm OTZhYzg0MWFmYmE2MGQxNWY4MTgxODBlODJiMDdhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgtlt26dUamOQkHvReG/ChakAhUjLj9C74MA0e00y9s8Yo kjIA99SrczbkbSEExskJkoTjDsn8r3z+cbNfnRcm4oqsZ4Ex6sckeh9qk1pyOcZ+ jLAPmqZqGSoVsQdVCrMvi/Eb33X9hN4irJv782Fsu549jdB5Q8AV916FZZxGaH1i ghLYJRyxaXhbEgPfV/RJ4Lhb8gRvxwMAhFXl/ISl4TcT8rIcKxNbAm0sABF8ncV/ N/bxXCa7CLtxlj7xDTIfFW1zp7xTGyJk9WAwN1CcUBze4jvWkik9FM4J//X9Ez+F DwoAmCkvP8UWYDYahk2jBaQkUsoN2t4CgsACGzetAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDba5W7AQLpW2XKBZv/k9zi+oRHYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E5YTIzYzlkLTExYTEtNGE3Yi05OWZiLTZkZDE2MGU0YjhmZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAU2lqAwDQYJKoZIhvcNAQELBQADggEBAAyVRv5FVrJoe+fvCC7i9k7E3nvs DjGJ4SmctY12fKezHScLlPxq+RpYWFb784FDdOMyK3Jl+nI4QI3v91Lbd3LpRzDb zVmayblX5XlBnyWY9AdtPsJFtDWizvW0BfX+fyb9mEE9ukXbHaAmyc+hNItXadFF +i4FIHVKxojyKcDK9UYz6VGaaTbCKtxWIWToZAt3HxAUZ2za9jFcv//r+Dy6J0yw hq57B8yQUTNERq8NIH3Plioxsc/49/AAL0dUn8UfmW9FDHMNIg5PliEbyPIyE8a3 wcc2hZo7/vP9HD6FSaCQ5R6RKD+0uMcvx98M4+4WiWT+DQuGQSSNoxeatHY= -----END CERTIFICATE-----Generated at Mon Aug 4 21:29:34 2025 by rpki-client