$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56cb610-5318-4421-bf2c-91c25f4affed.roa File: b56cb610-5318-4421-bf2c-91c25f4affed.roa (raw, json) Hash identifier: +Yxi4GKU62pDj7FY4X32zxLELexFv6ynspowpf9ARog= Subject key identifier: 35:B6:42:89:C7:95:40:DB:BD:89:41:2D:68:5A:0B:22:92:40:BA:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14CFE5B4EE3799E923360E5215A2608984556A86 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56cb610-5318-4421-bf2c-91c25f4affed.roa Signing time: Tue 29 Jul 2025 16:41:45 +0000 ROA not before: Tue 29 Jul 2025 16:41:45 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 54.228.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:cf:e5:b4:ee:37:99:e9:23:36:0e:52:15:a2:60:89:84:55:6a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 16:41:45 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=6e1f79a1b96943861712acb620604a4ac96904e08c522469b280a47c80921a41, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f3:35:12:6d:c0:31:1e:be:96:4a:95:be:c8: 48:cc:e2:28:09:ec:32:25:01:9e:ba:6a:b5:6b:4c: ee:b9:35:d4:60:31:cd:48:99:3e:8c:1e:6f:38:53: 61:52:ed:33:4f:9f:39:1d:94:9d:43:56:1d:3e:87: d0:dc:02:b4:f1:21:ac:94:3e:00:19:41:e8:77:7a: b0:e7:dd:80:5c:1f:c3:21:72:8e:1e:0f:a1:62:06: 84:20:1e:db:e8:96:e9:d4:95:d2:f7:c9:d9:9d:b4: bb:20:24:fb:34:70:c9:45:e6:04:04:18:02:3e:ae: 65:25:0b:4e:43:4d:d9:a1:f7:c8:0f:88:0e:cc:34: b3:a4:63:f2:66:bb:9f:e7:8a:8f:ed:4f:ed:b9:6b: 25:f3:6f:f9:6c:69:91:48:8a:6a:09:af:76:a7:2f: 6f:0f:63:30:41:f9:41:7d:2f:91:46:15:4e:be:54: b1:ed:ad:9a:a1:0d:a4:5d:bb:49:a6:56:9a:81:12: 2c:e0:3f:40:5d:0a:41:a6:87:03:11:a5:0b:39:4b: 7e:3e:2a:8b:46:21:c4:a6:6f:d0:f1:1b:f5:7e:49: 8a:c4:00:ba:2c:03:84:ab:af:c0:49:b1:54:ed:cb: 67:c7:b5:d6:75:c6:8f:c3:ad:49:25:41:63:bb:a0: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B6:42:89:C7:95:40:DB:BD:89:41:2D:68:5A:0B:22:92:40:BA:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56cb610-5318-4421-bf2c-91c25f4affed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 54.228.176.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:96:dd:76:b4:b4:00:16:91:fd:f0:6d:79:fe:a7:8d:b3:ad: 8b:b5:d6:19:d0:6b:35:07:1a:be:e8:a3:64:07:95:40:3c:34: 75:53:0b:20:9c:eb:92:ea:1d:cd:09:96:19:b1:22:1f:cb:78: 7b:b4:23:34:6e:1c:17:a4:48:42:b1:32:75:18:39:73:af:fe: 4d:1f:2b:41:1e:dd:17:01:f0:c3:82:84:48:8e:4a:4c:cf:7e: b5:91:79:51:f0:85:e1:a2:69:8c:8e:17:86:55:70:fc:22:cb: b5:6f:3a:ce:54:68:73:89:3b:f9:26:b4:96:1d:5e:6c:f0:0d: ac:b7:d9:ba:cf:0f:d5:f4:4f:c6:06:28:d0:2a:a7:97:eb:9e: d0:7b:a3:66:e6:ee:99:27:5d:6d:d3:92:9c:8d:a4:a4:10:62: 7e:55:d8:f1:5d:43:e3:14:cb:96:f6:53:b9:fd:51:c1:fe:63: 18:99:fd:a3:34:54:64:78:90:ca:aa:ad:e7:0c:c0:4a:89:24: ad:df:58:38:fc:7c:e1:93:78:1d:f6:9f:b5:4c:2a:63:b4:da: fe:a8:1e:ae:34:6a:95:ce:3e:67:5f:00:48:16:b5:f3:e8:a5: f2:a9:26:65:63:00:a3:14:09:9b:11:7e:8d:82:45:64:82:84: e3:f6:79:f1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFM/ltO43mekjNg5SFaJgiYRVaoYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTY0MTQ1WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZTFmNzlhMWI5Njk0Mzg2MTcxMmFjYjYyMDYwNGE0YWM5 NjkwNGUwOGM1MjI0NjliMjgwYTQ3YzgwOTIxYTQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDE8zUSbcAxHr6WSpW+yEjM4igJ7DIlAZ66arVrTO65NdRg Mc1ImT6MHm84U2FS7TNPnzkdlJ1DVh0+h9DcArTxIayUPgAZQeh3erDn3YBcH8Mh co4eD6FiBoQgHtvolunUldL3ydmdtLsgJPs0cMlF5gQEGAI+rmUlC05DTdmh98gP iA7MNLOkY/Jmu5/nio/tT+25ayXzb/lsaZFIimoJr3anL28PYzBB+UF9L5FGFU6+ VLHtrZqhDaRdu0mmVpqBEizgP0BdCkGmhwMRpQs5S34+KotGIcSmb9DxG/V+SYrE ALosA4Srr8BJsVTty2fHtdZ1xo/DrUklQWO7oLgNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNbZCiceVQNu9iUEtaFoLIpJAulcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I1NmNiNjEwLTUzMTgtNDQyMS1iZjJjLTkxYzI1ZjRhZmZlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAI25LAwDQYJKoZIhvcNAQELBQADggEBAJ2W3Xa0tAAWkf3wbXn+p42zrYu1 1hnQazUHGr7oo2QHlUA8NHVTCyCc65LqHc0JlhmxIh/LeHu0IzRuHBekSEKxMnUY OXOv/k0fK0Ee3RcB8MOChEiOSkzPfrWReVHwheGiaYyOF4ZVcPwiy7VvOs5UaHOJ O/kmtJYdXmzwDay32brPD9X0T8YGKNAqp5frntB7o2bm7pknXW3TkpyNpKQQYn5V 2PFdQ+MUy5b2U7n9UcH+YxiZ/aM0VGR4kMqqrecMwEqJJK3fWDj8fOGTeB32n7VM KmO02v6oHq40apXOPmdfAEgWtfPopfKpJmVjAKMUCZsRfo2CRWSChOP2efE= -----END CERTIFICATE-----Generated at Mon Aug 4 21:37:08 2025 by rpki-client