$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09f2a28b-bc83-44b1-b088-f2cab4682327.roa File: 09f2a28b-bc83-44b1-b088-f2cab4682327.roa (raw, json) Hash identifier: vRpr6Ex3qe3AZHOpr05f4Y7UewhGjZEjZqW+yxLAQgc= Subject key identifier: 6B:77:50:89:95:98:5F:57:9D:24:C8:42:44:8A:DE:2B:F3:CC:E4:9E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7CA1A9F858174B26058EF781E168CBD0E05E3A0E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09f2a28b-bc83-44b1-b088-f2cab4682327.roa Signing time: Tue 19 Aug 2025 15:00:59 +0000 ROA not before: Tue 19 Aug 2025 15:00:59 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.131.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a1:a9:f8:58:17:4b:26:05:8e:f7:81:e1:68:cb:d0:e0:5e:3a:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:00:59 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=a5834a82f2f682fb18acff2bcb2e0f9a833853e14714ec50a11937107092178b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ae:a8:07:49:98:cc:10:cf:0b:9e:7e:44:be: 90:85:22:88:e8:c9:3a:b4:80:ce:3d:d9:6e:07:bd: 68:a2:23:ad:3f:6e:b2:c5:b5:37:bb:c9:d9:8f:fb: d6:c3:27:7c:f6:d5:dd:87:0b:ac:bd:88:87:83:ac: c7:b0:84:bd:0e:df:60:84:0f:e8:86:d5:c8:c7:5b: 98:7e:22:55:26:34:30:8c:0a:77:22:f9:6e:ed:51: 31:cc:a9:49:fc:9a:2c:45:27:d3:6c:c1:4b:f6:df: 26:d0:5a:73:b3:f2:b3:31:87:88:01:b1:07:a9:2d: 08:7a:1f:61:47:58:e7:8a:22:88:d0:22:7c:93:59: 4c:34:8e:af:df:61:46:20:64:8d:90:9e:26:33:2d: 13:8d:9a:fc:bf:d6:78:16:02:16:48:51:ca:70:c6: b4:7a:41:e8:c8:0d:f1:4f:90:9c:81:de:bc:0f:58: 71:b7:d4:45:c2:bd:5b:2a:64:22:97:f6:12:45:13: 1f:41:80:d5:05:55:fb:4c:6b:78:39:23:38:57:03: 34:a4:85:95:a5:ee:0e:48:68:e0:1d:c0:8f:44:74: eb:fd:68:f7:c0:5c:a9:cf:e3:e2:25:5e:3d:02:77: ef:03:9f:cc:86:a8:60:82:fd:0c:ec:5e:98:e7:64: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:77:50:89:95:98:5F:57:9D:24:C8:42:44:8A:DE:2B:F3:CC:E4:9E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/09f2a28b-bc83-44b1-b088-f2cab4682327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.131.0.0/16 Signature Algorithm: sha256WithRSAEncryption 54:7e:c8:98:bc:fe:62:3a:1e:8a:3a:13:dd:42:f9:34:d5:d8: 27:88:13:55:ff:26:99:6c:91:20:87:5e:8f:17:8e:6e:ce:28: 9d:da:6a:1b:5b:ab:18:8a:80:70:cb:d4:f7:e1:45:02:a6:9c: 61:34:7f:ca:78:b4:ca:24:31:1f:48:96:d1:e8:fc:44:78:e8: fb:d6:41:b7:2e:b9:cf:8e:5d:b6:e5:dd:f8:8f:e9:24:96:4c: 39:ad:ac:0a:51:8e:22:2b:cf:58:f7:f5:04:f1:26:d1:e4:5b: 97:67:d2:cf:c2:d2:57:3a:50:f7:b5:be:cd:95:dd:c2:d4:e0: bd:08:4c:95:7e:b4:d4:3d:77:15:10:61:7a:1e:da:89:26:3d: 9d:5a:b3:24:6c:83:c2:ca:4b:62:12:6b:18:f9:73:58:df:8c: f1:0b:ea:ac:e8:dc:1a:f9:4f:03:6b:c0:0f:40:45:78:b4:da: 46:bc:b5:0d:05:d1:95:a6:ae:42:41:8c:f7:12:da:d2:ad:35: 22:3a:07:5a:47:f4:66:3c:42:8b:ec:71:14:bb:7d:e1:a5:35: b8:82:f7:26:47:85:36:d7:41:db:0f:f7:6d:74:1b:f7:6b:3a: bb:1a:11:99:d2:fa:6a:dd:41:e4:90:84:ca:b3:e8:d8:2a:6f: 3a:5b:c3:35 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUfKGp+FgXSyYFjveB4WjL0OBeOg4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUwMDU5WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTgzNGE4MmYyZjY4MmZiMThhY2ZmMmJjYjJlMGY5YTgz Mzg1M2UxNDcxNGVjNTBhMTE5MzcxMDcwOTIxNzhiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3rqgHSZjMEM8Lnn5EvpCFIojoyTq0gM492W4HvWiiI60/ brLFtTe7ydmP+9bDJ3z21d2HC6y9iIeDrMewhL0O32CED+iG1cjHW5h+IlUmNDCM Cnci+W7tUTHMqUn8mixFJ9NswUv23ybQWnOz8rMxh4gBsQepLQh6H2FHWOeKIojQ InyTWUw0jq/fYUYgZI2QniYzLRONmvy/1ngWAhZIUcpwxrR6QejIDfFPkJyB3rwP WHG31EXCvVsqZCKX9hJFEx9BgNUFVftMa3g5IzhXAzSkhZWl7g5IaOAdwI9EdOv9 aPfAXKnP4+IlXj0Cd+8Dn8yGqGCC/QzsXpjnZPYhAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUa3dQiZWYX1edJMhCRIreK/PM5J4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA5ZjJhMjhiLWJjODMtNDRiMS1iMDg4LWYyY2FiNDY4MjMyNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwADgzANBgkqhkiG9w0BAQsFAAOCAQEAVH7ImLz+YjoeijoT3UL5NNXYJ4gT Vf8mmWyRIIdejxeObs4ondpqG1urGIqAcMvU9+FFAqacYTR/yni0yiQxH0iW0ej8 RHjo+9ZBty65z45dtuXd+I/pJJZMOa2sClGOIivPWPf1BPEm0eRbl2fSz8LSVzpQ 97W+zZXdwtTgvQhMlX601D13FRBheh7aiSY9nVqzJGyDwspLYhJrGPlzWN+M8Qvq rOjcGvlPA2vAD0BFeLTaRry1DQXRlaauQkGM9xLa0q01IjoHWkf0ZjxCi+xxFLt9 4aU1uIL3JkeFNtdB2w/3bXQb92s6uxoRmdL6at1B5JCEyrPo2CpvOlvDNQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:22 2025 by rpki-client