$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/241eae7e-0941-462a-8aed-38b01820b6a4.roa File: 241eae7e-0941-462a-8aed-38b01820b6a4.roa (raw, json) Hash identifier: 8O+R8YMCOuFqaZCJ7pbRxbBz4sS+EH2cSy6ha1zuyig= Subject key identifier: 90:D3:63:7E:CF:F2:42:23:47:49:87:7C:B1:04:A9:A9:99:BB:7B:0A Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 621DFF29A2EB56CF8143549E3993AE1233908879 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/241eae7e-0941-462a-8aed-38b01820b6a4.roa Signing time: Tue 19 Aug 2025 15:01:35 +0000 ROA not before: Tue 19 Aug 2025 15:01:35 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.251.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:1d:ff:29:a2:eb:56:cf:81:43:54:9e:39:93:ae:12:33:90:88:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:01:35 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=dfa74bb68e5dc5fc86c794009424f13d9fe6dcee9f3ea4fff527d07ebc00d48e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:29:75:e0:ab:ff:e1:c3:5c:22:fc:06:c6: 51:08:1a:be:1d:02:3d:1d:58:c5:3f:c9:00:57:6d: ce:6f:c0:42:39:98:fb:f8:9c:40:c4:4f:88:e5:b9: 33:7b:a3:5c:b6:97:57:2e:36:f2:75:dc:66:09:b1: 49:11:81:5b:a8:a6:f4:a6:4f:be:12:b2:3c:80:96: ed:29:96:51:f9:e9:3b:8b:cc:7b:6d:7b:0b:92:45: da:d8:a2:34:58:a0:44:52:9d:0a:d9:88:11:66:62: 16:a2:7c:df:0c:46:43:1d:c8:8c:99:ab:ec:4c:ec: 95:76:94:27:9e:65:20:db:e9:fb:77:ea:58:fb:c1: 99:27:6e:34:75:fa:45:cf:1e:2d:73:82:0d:23:f4: c2:b3:58:74:d2:42:7a:51:81:58:e4:00:b3:f2:be: 8b:81:00:66:e0:50:98:fb:ca:ef:66:ce:d2:37:34: f1:d4:3c:e3:c2:73:0d:17:b7:12:cb:5f:62:93:1e: 3d:57:23:fb:4a:14:d7:3e:31:10:ed:d7:e3:26:14: 2e:f7:c1:32:9d:df:fc:db:d5:5e:e0:2f:a1:fe:c5: 5b:a0:50:3d:b9:b0:39:ce:43:74:4d:99:ed:ac:33: 53:9b:a1:df:cb:8e:2f:c9:5f:3d:73:b1:89:b6:4b: 06:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D3:63:7E:CF:F2:42:23:47:49:87:7C:B1:04:A9:A9:99:BB:7B:0A X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/241eae7e-0941-462a-8aed-38b01820b6a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.251.216.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:0e:18:74:31:94:45:a9:05:f8:75:59:37:fd:93:6e:44:8d: d0:0d:d9:9a:80:e1:48:33:0b:bf:ae:63:75:e3:08:70:31:2d: 75:70:5c:ad:a4:b3:10:a8:d4:20:05:ea:77:eb:6b:40:7e:ed: 96:c6:31:13:ef:eb:4d:a7:49:ef:a0:38:12:f5:b2:4e:42:36: 22:63:91:a2:0a:69:78:20:e5:51:86:35:c6:5f:46:ca:74:aa: 82:5d:56:c7:68:7a:50:ce:4f:d2:e2:e4:e6:43:06:de:72:eb: 36:4c:19:ef:8c:5e:e0:5e:2a:94:70:bc:10:02:02:dd:73:76: 45:ac:af:b0:b6:28:0f:bc:3a:2a:8d:f5:51:cd:0c:ae:5d:73: bf:0f:50:57:b8:ed:91:1d:ec:45:cd:5d:50:bc:16:7d:10:25: 0e:a8:5f:0a:66:df:19:fa:65:7f:a6:d2:37:b2:60:f6:2c:ed: 5f:fb:88:17:f9:cb:1b:4a:a2:43:9f:bd:d1:54:b6:d6:4d:68: 4c:f6:d4:73:39:d3:c5:4e:de:fe:c7:61:70:17:2a:4e:9e:60: a1:ed:8d:25:c5:68:8d:da:b9:d6:39:79:02:f4:6e:03:71:f4: 01:99:fa:48:bf:97:0e:c4:21:32:18:82:f6:96:c1:5f:b7:e5: f5:61:f0:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYh3/KaLrVs+BQ1SeOZOuEjOQiHkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUwMTM1WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkZmE3NGJiNjhlNWRjNWZjODZjNzk0MDA5NDI0ZjEzZDlm ZTZkY2VlOWYzZWE0ZmZmNTI3ZDA3ZWJjMDBkNDhlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDPSil14Kv/4cNcIvwGxlEIGr4dAj0dWMU/yQBXbc5vwEI5 mPv4nEDET4jluTN7o1y2l1cuNvJ13GYJsUkRgVuopvSmT74SsjyAlu0pllH56TuL zHttewuSRdrYojRYoERSnQrZiBFmYhaifN8MRkMdyIyZq+xM7JV2lCeeZSDb6ft3 6lj7wZknbjR1+kXPHi1zgg0j9MKzWHTSQnpRgVjkALPyvouBAGbgUJj7yu9mztI3 NPHUPOPCcw0XtxLLX2KTHj1XI/tKFNc+MRDt1+MmFC73wTKd3/zb1V7gL6H+xVug UD25sDnOQ3RNme2sM1Obod/Lji/JXz1zsYm2SwbTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkNNjfs/yQiNHSYd8sQSpqZm7ewowHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI0MWVhZTdlLTA5NDEtNDYyYS04YWVkLTM4YjAxODIwYjZhNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAED+9gwDQYJKoZIhvcNAQELBQADggEBAJwOGHQxlEWpBfh1WTf9k25EjdAN 2ZqA4UgzC7+uY3XjCHAxLXVwXK2ksxCo1CAF6nfra0B+7ZbGMRPv602nSe+gOBL1 sk5CNiJjkaIKaXgg5VGGNcZfRsp0qoJdVsdoelDOT9Li5OZDBt5y6zZMGe+MXuBe KpRwvBACAt1zdkWsr7C2KA+8OiqN9VHNDK5dc78PUFe47ZEd7EXNXVC8Fn0QJQ6o Xwpm3xn6ZX+m0jeyYPYs7V/7iBf5yxtKokOfvdFUttZNaEz21HM508VO3v7HYXAX Kk6eYKHtjSXFaI3audY5eQL0bgNx9AGZ+ki/lw7EITIYgvaWwV+35fVh8EA= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:55 2025 by rpki-client