$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34748e2b-43f1-4d43-b5c8-4fe73f58fa20.roa File: 34748e2b-43f1-4d43-b5c8-4fe73f58fa20.roa (raw, json) Hash identifier: Ae2SwpPczb8VHX05N/1wkuV2D8+vZC3j2A8Q1O6dC/U= Subject key identifier: 01:57:2E:5F:E4:7C:0B:9C:91:00:CC:E4:7F:76:FB:0B:0E:EB:FB:1F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0EBFE21A15A231F838360C6D0660B5E2C78DB982 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34748e2b-43f1-4d43-b5c8-4fe73f58fa20.roa Signing time: Tue 05 Aug 2025 16:01:49 +0000 ROA not before: Tue 05 Aug 2025 16:01:49 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.122.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:bf:e2:1a:15:a2:31:f8:38:36:0c:6d:06:60:b5:e2:c7:8d:b9:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 16:01:49 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=f637e393be622aa23477f041e1be83f152eab3c89b4c0d3598590045f607c28d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:25:2a:01:d0:39:c2:b9:f4:86:72:1f:b7: 52:31:d5:e2:a8:4d:96:0e:51:76:30:80:8b:a3:8b: 00:76:49:4b:80:bd:97:56:4c:1a:46:69:e9:fa:d3: 54:b8:cb:b1:0d:49:42:77:c3:b2:d2:ae:94:4e:e9: f2:f7:b3:c6:7f:12:7a:cb:bb:bf:61:15:b1:80:7e: a2:b6:17:b9:de:95:df:2b:7d:a1:1e:db:9e:98:d8: 02:6f:b4:0c:87:88:77:1c:80:d3:a0:c5:77:14:76: 6d:f1:21:93:e8:5e:af:52:87:86:09:d6:75:b2:cd: e9:5f:ea:81:c8:f5:4f:57:52:70:73:f4:73:32:40: 33:a1:ca:f7:ac:2a:33:ad:e5:5e:51:40:38:0e:49: 92:10:6c:d6:81:93:84:93:f1:c4:88:df:12:88:2d: 72:e9:ee:08:0d:8b:17:44:b8:82:9a:08:f9:eb:34: b3:86:73:21:2c:e7:8a:fc:7e:8f:7b:d5:57:97:02: 37:66:f8:90:1e:bf:f6:77:99:9c:2d:28:a2:0e:7c: e5:f3:4d:40:9d:11:23:5c:5e:9c:49:85:1e:9d:bf: 71:17:66:8e:3a:91:55:80:f7:27:4b:04:c2:69:d8: ac:91:e4:f6:d9:9f:45:9d:b1:c1:91:07:11:66:46: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:57:2E:5F:E4:7C:0B:9C:91:00:CC:E4:7F:76:FB:0B:0E:EB:FB:1F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/34748e2b-43f1-4d43-b5c8-4fe73f58fa20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.122.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:41:19:2b:36:11:c7:ee:42:59:55:a3:05:50:bd:ae:a8:b9: 8e:ab:d6:b1:0f:35:65:98:47:37:be:2b:48:a7:45:10:98:00: b9:1c:ca:4a:f7:71:6c:f0:76:29:4f:c2:bc:3b:a9:22:09:ae: 5c:ae:3b:e8:55:90:44:16:19:c4:59:44:40:a4:67:7a:da:9a: c0:3c:f2:34:eb:75:a4:b6:80:6c:34:58:89:a8:e8:91:98:ad: e7:a1:14:d7:cd:19:77:06:76:28:53:42:c7:ed:1f:9f:3a:d2: 89:50:d9:dd:a3:00:64:44:82:55:7f:87:2c:db:b3:7e:84:86: 5f:4c:cd:af:b7:07:07:68:b5:89:6f:fd:47:e8:c8:0d:86:61: 62:78:20:7e:e4:9e:36:c5:44:25:b6:6e:67:57:d8:8e:04:61: 56:f5:b2:0a:45:90:9e:9e:cb:da:43:81:97:f5:71:d6:df:89: 68:df:4f:21:ed:1e:ea:27:48:db:d6:81:5e:87:5e:19:5b:38: a7:1e:16:43:8c:eb:54:a4:4d:80:2e:16:b3:67:1a:9f:f1:53: f1:14:28:36:2e:0f:f4:b1:29:6d:a0:c7:99:c2:c8:2f:9c:33: 30:ab:88:97:44:0a:c1:a7:de:0c:fd:ba:84:fc:e7:51:90:97: 3a:90:bc:e0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUDr/iGhWiMfg4NgxtBmC14seNuYIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTYwMTQ5WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNjM3ZTM5M2JlNjIyYWEyMzQ3N2YwNDFlMWJlODNmMTUy ZWFiM2M4OWI0YzBkMzU5ODU5MDA0NWY2MDdjMjhkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDArSUqAdA5wrn0hnIft1Ix1eKoTZYOUXYwgIujiwB2SUuA vZdWTBpGaen601S4y7ENSUJ3w7LSrpRO6fL3s8Z/EnrLu79hFbGAfqK2F7neld8r faEe256Y2AJvtAyHiHccgNOgxXcUdm3xIZPoXq9Sh4YJ1nWyzelf6oHI9U9XUnBz 9HMyQDOhyvesKjOt5V5RQDgOSZIQbNaBk4ST8cSI3xKILXLp7ggNixdEuIKaCPnr NLOGcyEs54r8fo971VeXAjdm+JAev/Z3mZwtKKIOfOXzTUCdESNcXpxJhR6dv3EX Zo46kVWA9ydLBMJp2KyR5PbZn0WdscGRBxFmRksxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUAVcuX+R8C5yRAMzkf3b7Cw7r+x8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM0NzQ4ZTJiLTQzZjEtNGQ0My1iNWM4LTRmZTczZjU4ZmEyMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASejANBgkqhkiG9w0BAQsFAAOCAQEAYkEZKzYRx+5CWVWjBVC9rqi5jqvW sQ81ZZhHN74rSKdFEJgAuRzKSvdxbPB2KU/CvDupIgmuXK476FWQRBYZxFlEQKRn etqawDzyNOt1pLaAbDRYiajokZit56EU180ZdwZ2KFNCx+0fnzrSiVDZ3aMAZESC VX+HLNuzfoSGX0zNr7cHB2i1iW/9R+jIDYZhYnggfuSeNsVEJbZuZ1fYjgRhVvWy CkWQnp7L2kOBl/Vx1t+JaN9PIe0e6idI29aBXodeGVs4px4WQ4zrVKRNgC4Ws2ca n/FT8RQoNi4P9LEpbaDHmcLIL5wzMKuIl0QKwafeDP26hPznUZCXOpC84A== -----END CERTIFICATE-----Generated at Wed Aug 20 10:38:14 2025 by rpki-client