$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cd7c214-348b-41d3-be17-f04cd39b8b68.roa File: 0cd7c214-348b-41d3-be17-f04cd39b8b68.roa (raw, json) Hash identifier: cDcgmrhfuW42jt+KM10hGHoAGGMxUxhQqsQ97QmDEuQ= Subject key identifier: 5B:DF:17:1F:CB:64:71:1C:8D:E1:95:E9:29:02:0E:9E:63:B6:95:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14BD655D133184359121364DBF96486440B3F0FD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cd7c214-348b-41d3-be17-f04cd39b8b68.roa Signing time: Mon 25 Aug 2025 16:11:37 +0000 ROA not before: Mon 25 Aug 2025 16:11:37 +0000 ROA not after: Mon 29 Sep 2025 23:59:59 +0000 asID: 7224 IP address blocks: 3.2.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:bd:65:5d:13:31:84:35:91:21:36:4d:bf:96:48:64:40:b3:f0:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 25 16:11:37 2025 GMT Not After : Sep 29 23:59:59 2025 GMT Subject: serialNumber=b8f0cd40d5eb69a60dfccc1d32b4a7cedec3ab98fd1849d94e3967c0c911de4e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:5f:58:ad:dd:a5:62:4c:a3:1e:29:9c:73: 8a:bb:0c:82:9b:6d:c3:42:2e:66:1b:3a:14:d8:c2: 02:83:2d:c8:58:2d:5d:49:8d:38:e6:22:20:ab:ac: 31:75:26:02:c7:0c:50:88:0d:dc:ac:f2:2a:17:f4: 73:32:1a:81:8b:e6:00:25:d4:c2:6e:c2:b5:28:3a: 0f:59:b3:ce:ed:b1:3c:81:a5:e0:6e:17:07:6f:7d: 5b:8d:aa:02:17:d0:9a:f1:c5:26:ac:23:a5:1a:94: b2:bf:4b:4b:60:31:a5:44:0f:de:7f:2f:0e:8a:31: 78:e1:fd:23:f4:47:6c:f4:90:22:2d:6c:7b:aa:90: 8c:89:43:eb:d7:e0:e3:a1:75:f7:92:f5:59:1d:87: 89:29:8b:b0:75:9d:a0:bf:83:ce:a9:57:d5:66:e2: 94:ed:9b:f9:37:66:44:4c:5f:6d:7e:7e:22:20:70: 01:c3:bc:4f:1a:93:7b:7e:d7:ed:9b:1b:2f:af:41: 77:d1:2a:7a:6c:80:ea:ab:fb:dd:38:9a:25:3a:fd: f4:a8:8a:60:8a:e8:7f:5f:1c:4a:90:b4:18:a9:75: 0a:f9:32:2c:bb:13:92:f8:7f:d3:ba:93:39:c0:2e: 3e:9b:8e:33:dd:1f:ab:33:e1:03:ca:f9:2e:b4:d3: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:17:1F:CB:64:71:1C:8D:E1:95:E9:29:02:0E:9E:63:B6:95:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0cd7c214-348b-41d3-be17-f04cd39b8b68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.19.0/24 Signature Algorithm: sha256WithRSAEncryption 95:90:46:6b:60:f9:35:13:4f:c0:28:ea:3f:5d:83:95:44:f6: fa:e4:50:2f:06:da:ab:2d:36:31:36:7c:6f:c0:b8:09:9b:82: 96:3b:20:d6:4f:06:dc:8c:8f:0f:fd:9a:1c:be:8f:20:bf:bd: 3f:f0:0d:3d:d7:c7:47:48:64:52:17:d9:67:46:2a:bf:a9:84: d8:69:b3:45:09:3e:14:f4:75:37:4e:06:ab:24:09:ea:de:18: 42:b7:0c:49:11:5f:96:ea:14:bc:39:2a:21:59:02:e7:b2:ea: 42:14:fe:76:97:1f:44:d7:c0:91:92:86:05:e3:7a:1a:3e:29: 2c:e6:53:f5:ed:80:b1:09:05:09:0e:a5:6c:a3:18:45:a1:ab: 7d:08:04:19:27:b6:d7:3b:1d:a0:0b:58:da:56:3d:5a:80:2e: ba:8a:5f:3a:8a:af:d9:85:15:f2:11:3c:26:84:ec:22:26:6d: 59:26:b3:74:4b:b3:8a:ae:47:93:84:42:b2:d4:94:82:5f:22: 93:5d:78:39:d2:9d:25:9c:30:c6:82:e0:9f:55:cb:ed:84:10: d0:10:eb:e7:e1:64:62:b0:45:36:b2:ba:da:28:e6:e8:c3:d3: f5:5c:bf:05:8a:3a:f5:e9:d6:6e:ed:55:94:fb:08:31:bc:48: a2:21:92:73 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFL1lXRMxhDWRITZNv5ZIZECz8P0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODI1MTYxMTM3WhcNMjUwOTI5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiOGYwY2Q0MGQ1ZWI2OWE2MGRmY2NjMWQzMmI0YTdjZWRl YzNhYjk4ZmQxODQ5ZDk0ZTM5NjdjMGM5MTFkZTRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/C19Yrd2lYkyjHimcc4q7DIKbbcNCLmYbOhTYwgKDLchY LV1JjTjmIiCrrDF1JgLHDFCIDdys8ioX9HMyGoGL5gAl1MJuwrUoOg9Zs87tsTyB peBuFwdvfVuNqgIX0JrxxSasI6UalLK/S0tgMaVED95/Lw6KMXjh/SP0R2z0kCIt bHuqkIyJQ+vX4OOhdfeS9Vkdh4kpi7B1naC/g86pV9Vm4pTtm/k3ZkRMX21+fiIg cAHDvE8ak3t+1+2bGy+vQXfRKnpsgOqr+904miU6/fSoimCK6H9fHEqQtBipdQr5 Miy7E5L4f9O6kznALj6bjjPdH6sz4QPK+S6000VBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUW98XH8tkcRyN4ZXpKQIOnmO2lUYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzBjZDdjMjE0LTM0OGItNDFkMy1iZTE3LWYwNGNkMzliOGI2OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAhMwDQYJKoZIhvcNAQELBQADggEBAJWQRmtg+TUTT8Ao6j9dg5VE9vrk UC8G2qstNjE2fG/AuAmbgpY7INZPBtyMjw/9mhy+jyC/vT/wDT3Xx0dIZFIX2WdG Kr+phNhps0UJPhT0dTdOBqskCereGEK3DEkRX5bqFLw5KiFZAuey6kIU/naXH0TX wJGShgXjeho+KSzmU/XtgLEJBQkOpWyjGEWhq30IBBknttc7HaALWNpWPVqALrqK XzqKr9mFFfIRPCaE7CImbVkms3RLs4quR5OEQrLUlIJfIpNdeDnSnSWcMMaC4J9V y+2EENAQ6+fhZGKwRTayutoo5ujD0/VcvwWKOvXp1m7tVZT7CDG8SKIhknM= -----END CERTIFICATE-----Generated at Sun Sep 7 16:05:01 2025 by rpki-client