$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28348dc3-b766-4f11-a6a2-af3f57ea6ce2.roa File: 28348dc3-b766-4f11-a6a2-af3f57ea6ce2.roa (raw, json) Hash identifier: Px79uxSZttuZsCbsgE1DyFRK7kRgEwUQGI6b+wHhgw0= Subject key identifier: 70:4B:B7:FA:43:3E:43:0B:D6:0E:6F:50:9A:9F:A5:83:63:27:2A:7D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 180A0E67A9F5E64389B6291A4AA643B0012F00EB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28348dc3-b766-4f11-a6a2-af3f57ea6ce2.roa Signing time: Tue 19 Aug 2025 15:01:28 +0000 ROA not before: Tue 19 Aug 2025 15:01:28 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.239.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:0a:0e:67:a9:f5:e6:43:89:b6:29:1a:4a:a6:43:b0:01:2f:00:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:01:28 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=f1423abea3af40e41f84784e6f713d18fe3b640714066f3b0d4846636056747d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:96:d7:56:42:e7:38:ab:c2:56:dd:19:12:ad: f2:27:79:21:85:68:b7:d3:ac:e4:83:07:f2:91:9d: 98:45:a8:00:4b:70:9b:c4:a0:7e:fa:00:ac:cc:ff: 00:ba:d6:28:c5:f7:7c:af:7c:03:cf:1c:0e:d5:1d: 8b:b7:96:03:ad:27:fe:db:2d:74:69:7e:87:2d:f2: 68:39:28:bc:97:76:f6:46:7b:c9:ad:2f:f5:79:64: 00:93:72:96:52:18:ab:78:b2:bd:e4:4a:02:43:88: 68:87:71:e7:53:d7:88:cf:e4:88:95:7b:48:f9:86: a7:f9:e0:71:26:c2:63:b5:a3:40:d6:97:cd:9e:f3: ea:f6:79:44:89:15:b6:69:5b:f7:93:9c:f3:94:b8: 95:36:21:a9:94:41:5c:1e:53:e4:c9:da:f9:49:dd: 06:d4:42:e1:be:74:8b:ef:0d:6f:a9:97:15:e7:8e: 95:3e:0a:12:ec:d6:c1:83:31:4a:e6:1e:76:e8:48: 9e:35:92:22:1d:a3:9b:14:79:51:ec:af:1d:7f:64: 07:42:30:bd:27:93:68:ac:a1:cc:39:6a:e3:e7:8b: 71:38:0c:fc:20:f3:c6:80:cf:74:26:e2:70:e1:78: e9:1f:dd:f5:69:c9:09:07:bc:8f:95:02:6f:08:30: 76:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4B:B7:FA:43:3E:43:0B:D6:0E:6F:50:9A:9F:A5:83:63:27:2A:7D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/28348dc3-b766-4f11-a6a2-af3f57ea6ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.239.232.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:21:b3:46:32:f5:11:fc:b3:c7:eb:d8:c8:d7:29:24:da:59: c4:1e:ea:66:f7:cd:aa:41:18:68:10:5b:0e:32:04:65:87:f4: b4:a0:9d:32:0a:80:8a:05:1b:d1:71:d2:d6:3f:7a:f1:80:d4: ff:b5:fd:65:c8:31:73:4d:ff:57:f6:8c:44:2a:a2:66:a5:30: 27:a5:18:9a:07:73:40:33:8a:9f:bb:50:53:5e:de:80:9f:2c: 1f:6a:55:a9:10:61:8f:3d:8c:b0:0f:a8:43:50:31:63:b8:22: 52:df:6c:2b:f4:8a:67:8a:33:cb:ee:a8:fd:f0:50:c8:49:45: be:5c:2c:ad:d5:8d:d9:91:8e:3e:19:2c:b1:34:59:64:f0:24: 90:14:38:33:8f:13:55:90:b1:9a:53:42:a0:a7:fa:e7:fb:6f: 10:8e:50:17:47:c1:17:44:a6:a7:e0:83:c4:f2:43:4b:4d:91: 21:92:41:e1:99:76:87:14:08:2b:f0:6a:17:13:96:fb:70:dc: d6:3d:d8:5a:ea:1e:51:ce:b5:5b:0d:cc:45:da:70:74:20:79: 61:97:c0:95:8f:6f:5d:a0:4e:b3:d5:41:56:6d:ac:db:18:e9: 0b:67:a8:ad:0c:76:fd:d4:ce:4a:a3:5c:4c:57:37:41:d0:9a: c2:ac:13:09 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGAoOZ6n15kOJtikaSqZDsAEvAOswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUwMTI4WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmMTQyM2FiZWEzYWY0MGU0MWY4NDc4NGU2ZjcxM2QxOGZl M2I2NDA3MTQwNjZmM2IwZDQ4NDY2MzYwNTY3NDdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZltdWQuc4q8JW3RkSrfIneSGFaLfTrOSDB/KRnZhFqABL cJvEoH76AKzM/wC61ijF93yvfAPPHA7VHYu3lgOtJ/7bLXRpfoct8mg5KLyXdvZG e8mtL/V5ZACTcpZSGKt4sr3kSgJDiGiHcedT14jP5IiVe0j5hqf54HEmwmO1o0DW l82e8+r2eUSJFbZpW/eTnPOUuJU2IamUQVweU+TJ2vlJ3QbUQuG+dIvvDW+plxXn jpU+ChLs1sGDMUrmHnboSJ41kiIdo5sUeVHsrx1/ZAdCML0nk2isocw5auPni3E4 DPwg88aAz3Qm4nDheOkf3fVpyQkHvI+VAm8IMHZHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcEu3+kM+QwvWDm9Qmp+lg2MnKn0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI4MzQ4ZGMzLWI3NjYtNGYxMS1hNmEyLWFmM2Y1N2VhNmNlMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAD7+gwDQYJKoZIhvcNAQELBQADggEBAFohs0Yy9RH8s8fr2MjXKSTaWcQe 6mb3zapBGGgQWw4yBGWH9LSgnTIKgIoFG9Fx0tY/evGA1P+1/WXIMXNN/1f2jEQq omalMCelGJoHc0Azip+7UFNe3oCfLB9qVakQYY89jLAPqENQMWO4IlLfbCv0imeK M8vuqP3wUMhJRb5cLK3VjdmRjj4ZLLE0WWTwJJAUODOPE1WQsZpTQqCn+uf7bxCO UBdHwRdEpqfgg8TyQ0tNkSGSQeGZdocUCCvwahcTlvtw3NY92FrqHlHOtVsNzEXa cHQgeWGXwJWPb12gTrPVQVZtrNsY6QtnqK0Mdv3UzkqjXExXN0HQmsKsEwk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:37:21 2025 by rpki-client