$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17a06528-9304-45aa-a4b2-c1d160d55ad0.roa File: 17a06528-9304-45aa-a4b2-c1d160d55ad0.roa (raw, json) Hash identifier: 9Q5BkGX9RvZg4xa+mOpeXGSEneLZilIe2gChzuQ0UOs= Subject key identifier: 64:7B:2C:C8:9D:76:6E:CD:01:1A:01:A5:BC:CD:7E:C9:BA:71:4F:8F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B95D5443C71EE546F1EDC3824DC99CD7F5CD768 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17a06528-9304-45aa-a4b2-c1d160d55ad0.roa Signing time: Tue 19 Aug 2025 15:31:57 +0000 ROA not before: Tue 19 Aug 2025 15:31:57 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.176.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:95:d5:44:3c:71:ee:54:6f:1e:dc:38:24:dc:99:cd:7f:5c:d7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:31:57 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=7186747b2067a3ce79c2ed8b8d9a12441725ccd177532e2b001f7beb939fa24b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:6a:69:a2:1a:ec:f1:61:c5:a6:ce:95:75: ab:89:66:7a:41:a3:22:54:f2:5d:e4:c6:c0:60:9a: b0:a1:b0:e9:f9:a6:aa:e9:2b:9b:38:be:af:77:4b: 1b:31:54:01:64:a7:bb:b9:91:4d:b7:d8:7d:cb:e4: f0:d5:89:e9:ae:57:2e:84:1c:73:61:ef:f6:a5:52: 2a:a3:d4:4d:45:32:49:16:22:4e:ae:ee:01:d3:45: b2:d9:1a:38:87:17:a9:0b:b4:99:a8:9c:3c:39:bf: 66:e1:b3:ef:b4:f9:91:ff:ea:42:28:3b:94:12:ea: df:56:88:de:76:1f:39:33:3d:4d:41:a5:d1:99:50: a9:07:d6:c1:1c:17:65:b5:f3:89:4a:e4:46:84:d8: 99:81:a5:28:18:fe:43:ef:44:e0:99:87:6b:60:d7: da:7e:92:30:86:46:bf:5f:14:62:c1:fb:1a:5a:3b: cf:5d:8a:15:e4:6b:95:91:eb:f3:9a:7d:2d:cb:e0: b0:3c:d6:94:20:92:e1:17:7b:74:04:fb:4a:12:f7: d5:a0:dd:01:18:8e:f1:ef:2c:ae:5d:ad:0c:3b:b4: f1:84:53:b5:fc:34:5a:e0:33:1c:e7:7f:3b:bd:37: 73:af:23:dd:f3:db:f1:fe:11:ca:03:e2:ab:03:b4: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7B:2C:C8:9D:76:6E:CD:01:1A:01:A5:BC:CD:7E:C9:BA:71:4F:8F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17a06528-9304-45aa-a4b2-c1d160d55ad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.176.0.0/13 Signature Algorithm: sha256WithRSAEncryption 8b:03:5a:74:dc:9d:16:65:4e:a4:9d:7a:83:94:3a:d1:80:56: 5b:92:a9:1d:67:e1:c8:bf:b0:75:27:c1:10:bd:98:b2:d6:7a: b4:e4:47:02:8a:39:d8:de:bb:fd:40:aa:76:f4:88:6e:0a:58: 07:5b:bb:54:25:02:c7:d6:12:e1:79:74:4d:19:80:c7:cc:81: 35:04:1f:f8:70:0e:74:7f:3f:37:32:ce:34:09:23:8d:22:7e: 1a:60:bf:1e:a5:8f:19:cf:29:38:b2:75:dc:3b:62:ca:34:44: 2f:f6:a9:82:c3:84:59:d3:d8:d7:4b:f8:04:67:84:c8:2e:7a: fc:9a:c3:ce:4e:3e:c1:2a:e7:f6:09:7d:6c:bd:b7:55:01:bc: ea:4e:f3:a4:ad:a7:ca:86:2c:cf:52:1a:3f:d6:a8:fd:e0:1c: e3:92:21:ee:5f:8b:e3:71:e0:5a:f7:62:c2:58:86:30:59:39: 26:28:cf:de:4c:ef:30:43:ab:13:05:9b:0d:da:33:4d:d3:e9: ce:50:b1:24:ec:f7:97:11:a9:e5:f8:4e:92:df:3f:15:30:d4: b3:e7:8f:ab:9a:8b:43:3d:30:66:d4:2a:6f:3c:71:60:29:9d: da:3b:89:9a:87:b6:f5:8c:a7:25:8f:4f:f1:1c:71:f8:af:c6: 56:5e:e9:db -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUS5XVRDxx7lRvHtw4JNyZzX9c12gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUzMTU3WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3MTg2NzQ3YjIwNjdhM2NlNzljMmVkOGI4ZDlhMTI0NDE3 MjVjY2QxNzc1MzJlMmIwMDFmN2JlYjkzOWZhMjRiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXRmppohrs8WHFps6VdauJZnpBoyJU8l3kxsBgmrChsOn5 pqrpK5s4vq93SxsxVAFkp7u5kU232H3L5PDViemuVy6EHHNh7/alUiqj1E1FMkkW Ik6u7gHTRbLZGjiHF6kLtJmonDw5v2bhs++0+ZH/6kIoO5QS6t9WiN52HzkzPU1B pdGZUKkH1sEcF2W184lK5EaE2JmBpSgY/kPvROCZh2tg19p+kjCGRr9fFGLB+xpa O89dihXka5WR6/OafS3L4LA81pQgkuEXe3QE+0oS99Wg3QEYjvHvLK5drQw7tPGE U7X8NFrgMxznfzu9N3OvI93z2/H+EcoD4qsDtF3zAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUZHssyJ12bs0BGgGlvM1+ybpxT48wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE3YTA2NTI4LTkzMDQtNDVhYS1hNGIyLWMxZDE2MGQ1NWFkMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMjsDANBgkqhkiG9w0BAQsFAAOCAQEAiwNadNydFmVOpJ16g5Q60YBWW5Kp HWfhyL+wdSfBEL2YstZ6tORHAoo52N67/UCqdvSIbgpYB1u7VCUCx9YS4Xl0TRmA x8yBNQQf+HAOdH8/NzLONAkjjSJ+GmC/HqWPGc8pOLJ13DtiyjREL/apgsOEWdPY 10v4BGeEyC56/JrDzk4+wSrn9gl9bL23VQG86k7zpK2nyoYsz1IaP9ao/eAc45Ih 7l+L43HgWvdiwliGMFk5JijP3kzvMEOrEwWbDdozTdPpzlCxJOz3lxGp5fhOkt8/ FTDUs+ePq5qLQz0wZtQqbzxxYCmd2juJmoe29YynJY9P8Rxx+K/GVl7p2w== -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:09 2025 by rpki-client