$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce663c73-3aae-425b-852f-a44e20845223.roa File: ce663c73-3aae-425b-852f-a44e20845223.roa (raw, json) Hash identifier: sC9OmqVceKQAWHvYJ9M1WSCRGhmHf+R906WfNUZvlLc= Subject key identifier: BF:96:92:B5:00:14:5F:11:EB:F7:3C:04:65:33:B7:5F:8D:5E:A1:B6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 35A71C3E20BFA3AD9197BCDB6E64E5E1044796F0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce663c73-3aae-425b-852f-a44e20845223.roa Signing time: Tue 22 Jul 2025 15:00:30 +0000 ROA not before: Tue 22 Jul 2025 15:00:30 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.208.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:a7:1c:3e:20:bf:a3:ad:91:97:bc:db:6e:64:e5:e1:04:47:96:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 22 15:00:30 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=67a876353c34b54ba99da0c5de5558901fc9397a1b7d5e359c5e350fc56aa49b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:ff:8c:aa:95:a5:48:41:d6:ca:fe:15:9f: 84:8f:38:44:99:e7:b6:9f:c1:4b:a2:92:ce:e3:e7: ec:73:9a:a5:2e:08:99:b7:3f:c1:fa:d4:e3:97:6b: a2:b9:a1:b5:3d:fd:0f:52:33:c7:ce:f1:b0:d5:e0: 87:38:43:7f:ef:32:6f:cd:d0:45:9f:da:e7:8c:5a: 46:df:b4:a5:49:f2:d5:d0:85:f8:90:d6:ef:5a:68: be:91:e6:2f:c7:bc:58:50:c0:1e:5d:ef:af:03:87: 23:bf:c0:e2:9f:0d:5b:06:b1:8d:3b:a0:13:fe:2e: 3c:23:8c:d8:17:b6:2e:2c:87:98:fe:2a:2b:75:39: 43:6b:97:e1:c5:c4:01:9f:f0:61:85:0a:ad:5a:b0: f7:0f:26:40:c9:da:b5:dc:e7:a1:92:13:ca:b8:a2: c9:b8:9d:e4:b6:64:14:58:93:41:ea:9b:b9:73:1c: 1f:bf:aa:5d:0b:77:b1:8b:69:8a:c6:ef:11:71:87: 13:db:44:4e:be:f9:f1:60:69:b1:ba:20:da:64:75: ab:91:ba:d1:58:9b:1d:cf:cc:21:53:e1:82:56:dc: 03:0b:18:23:96:f4:6d:95:71:a2:ca:99:fa:6c:da: c6:4b:11:e9:9d:5d:a1:96:f6:03:f0:d9:55:ef:6e: 8a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:96:92:B5:00:14:5F:11:EB:F7:3C:04:65:33:B7:5F:8D:5E:A1:B6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce663c73-3aae-425b-852f-a44e20845223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.208.170.0/23 Signature Algorithm: sha256WithRSAEncryption 39:5c:37:39:45:32:a2:67:f1:86:a7:c0:54:91:6b:5a:9d:e8: 6d:39:f3:73:0c:c8:c2:05:f0:14:07:be:65:d0:be:f6:47:5a: 8e:89:0f:f1:92:ad:ec:80:42:d0:39:9e:a4:6c:21:15:84:40: 12:d7:19:aa:2c:7c:5c:76:f8:29:3e:7d:d4:b8:6c:64:8f:73: 81:f1:68:06:d1:3d:f0:0a:36:0a:bf:ef:ca:65:0a:c5:72:e6: e9:a5:33:78:14:c3:79:da:5d:7c:9c:d1:43:6e:e0:85:f5:a1: 6c:02:ef:7d:2c:ec:bb:6e:6c:7d:97:75:3d:00:e0:a1:d4:70: e6:26:60:19:d7:65:9f:9b:4c:c2:b8:56:6a:4d:1c:91:fd:7d: a2:25:d4:96:36:3b:54:ba:c2:79:0a:ec:f4:19:5f:af:98:e8: b3:8b:a2:45:44:39:34:40:31:cc:7f:3d:e5:63:60:74:41:49: d5:95:2d:46:2e:23:c6:97:04:e1:63:90:7a:1d:ca:7f:4b:61: 15:d6:9d:5d:55:0f:82:81:90:d3:18:75:31:72:10:a0:73:66: e2:53:c6:84:80:0f:35:20:8a:3e:21:66:5b:0d:38:06:fb:dc: 39:61:69:a8:19:b3:93:d3:26:2a:a8:83:f6:b4:1a:2a:ff:4c: 4a:d1:b1:16 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNaccPiC/o62Rl7zbbmTl4QRHlvAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzIyMTUwMDMwWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0A2N2E4NzYzNTNjMzRiNTRiYTk5ZGEwYzVkZTU1NTg5MDFm YzkzOTdhMWI3ZDVlMzU5YzVlMzUwZmM1NmFhNDliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/Bv+MqpWlSEHWyv4Vn4SPOESZ57afwUuiks7j5+xzmqUu CJm3P8H61OOXa6K5obU9/Q9SM8fO8bDV4Ic4Q3/vMm/N0EWf2ueMWkbftKVJ8tXQ hfiQ1u9aaL6R5i/HvFhQwB5d768DhyO/wOKfDVsGsY07oBP+LjwjjNgXti4sh5j+ Kit1OUNrl+HFxAGf8GGFCq1asPcPJkDJ2rXc56GSE8q4osm4neS2ZBRYk0Hqm7lz HB+/ql0Ld7GLaYrG7xFxhxPbRE6++fFgabG6INpkdauRutFYmx3PzCFT4YJW3AML GCOW9G2VcaLKmfps2sZLEemdXaGW9gPw2VXvborzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUv5aStQAUXxHr9zwEZTO3X41eobYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2NlNjYzYzczLTNhYWUtNDI1Yi04NTJmLWE0NGUyMDg0NTIyMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEN0KowDQYJKoZIhvcNAQELBQADggEBADlcNzlFMqJn8YanwFSRa1qd6G05 83MMyMIF8BQHvmXQvvZHWo6JD/GSreyAQtA5nqRsIRWEQBLXGaosfFx2+Ck+fdS4 bGSPc4HxaAbRPfAKNgq/78plCsVy5umlM3gUw3naXXyc0UNu4IX1oWwC730s7Ltu bH2XdT0A4KHUcOYmYBnXZZ+bTMK4VmpNHJH9faIl1JY2O1S6wnkK7PQZX6+Y6LOL okVEOTRAMcx/PeVjYHRBSdWVLUYuI8aXBOFjkHodyn9LYRXWnV1VD4KBkNMYdTFy EKBzZuJTxoSADzUgij4hZlsNOAb73DlhaagZs5PTJiqog/a0Gir/TErRsRY= -----END CERTIFICATE-----Generated at Mon Aug 4 21:43:57 2025 by rpki-client