$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/490c0d60-9d84-4477-a614-57a8f475ef35.roa File: 490c0d60-9d84-4477-a614-57a8f475ef35.roa (raw, json) Hash identifier: vwGhuIgeJzQUXnUwbGUPNolVNIpeFcBiARbLObSLw24= Subject key identifier: 7E:23:7C:3B:A8:08:1B:49:E6:9A:76:0D:89:45:AF:C4:AC:58:ED:C3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7701F8D6903C3CA1F7CB17FF76CF046BB7C75732 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/490c0d60-9d84-4477-a614-57a8f475ef35.roa Signing time: Tue 19 Aug 2025 15:31:58 +0000 ROA not before: Tue 19 Aug 2025 15:31:58 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.180.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:01:f8:d6:90:3c:3c:a1:f7:cb:17:ff:76:cf:04:6b:b7:c7:57:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:31:58 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=fd31b3e6d093f42c0023de9b69b2acb2168bb85573c1a250cb72bea88f8f27c1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:72:ac:3f:39:88:1c:dc:0b:e3:a4:3c:79:4e: 68:a9:70:a4:5f:76:79:60:70:d9:a0:f3:00:18:54: 63:50:18:8c:a6:88:9e:0e:fd:0d:fa:41:c3:1d:c7: 25:24:2f:fa:13:80:3e:fc:ed:13:db:d9:d5:e9:8a: 70:06:a4:03:96:b7:16:c9:71:11:ff:3f:5a:83:fd: f8:b9:72:3d:34:7d:58:2c:c6:61:ac:e6:14:89:10: 0b:41:93:97:78:5b:e5:bf:50:82:33:1a:a0:36:e6: 8d:ec:ca:29:42:ec:f4:ce:e2:e2:c5:91:0f:91:42: c6:65:f0:19:6b:b4:fb:eb:7a:42:7b:fb:a2:f2:b5: b1:4a:e1:f1:b7:c9:e6:fe:a0:86:f1:ea:db:d0:d5: 58:d7:ce:24:9b:89:fb:db:68:c4:97:dc:7d:45:41: bd:a8:5c:8c:36:10:fe:10:af:2b:b8:eb:86:15:7f: 02:cd:a4:6b:eb:9c:1f:7c:75:1f:85:5a:83:2f:df: b6:b3:8b:fa:91:62:fc:4b:0a:47:56:9e:52:2e:91: 5a:9e:b8:7f:8f:30:72:91:14:46:b7:83:41:a0:45: 9b:c8:08:d2:d6:45:c1:fc:b9:4e:2b:10:9f:14:e9: 42:90:6c:b4:45:1c:e6:8b:6c:ee:ee:44:66:b4:b1: 05:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:23:7C:3B:A8:08:1B:49:E6:9A:76:0D:89:45:AF:C4:AC:58:ED:C3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/490c0d60-9d84-4477-a614-57a8f475ef35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.180.0.0/16 Signature Algorithm: sha256WithRSAEncryption 97:94:0b:87:e7:db:26:55:2d:de:ee:bd:82:2b:01:9c:53:33: 9b:00:dd:e5:76:e6:56:30:34:4c:d4:d9:58:ca:1b:63:a8:ac: ca:f8:66:bb:87:1d:58:ca:89:5e:ec:48:2e:23:1d:6d:71:cc: 28:b6:39:21:32:8b:ce:7f:82:44:35:00:db:d9:ba:90:08:af: ca:05:7f:5b:43:0c:bb:b7:7b:e0:9c:f4:fa:59:6f:23:40:80: bc:9b:34:14:0a:0e:b3:21:3a:7c:c7:e7:b2:c3:4e:50:b9:6c: 0d:1b:7c:e1:54:d7:f1:70:61:f2:9e:a0:bd:05:27:08:ca:5b: 50:e4:c4:79:48:89:5b:e7:91:52:f9:01:db:35:31:94:1a:da: ee:d6:45:33:4a:a9:cb:e8:65:8c:1b:75:0b:81:8c:d0:97:9e: 44:88:e6:cc:f8:12:c7:db:aa:1e:d7:e8:c6:4d:1f:e2:31:6f: db:2c:ee:ea:9c:7d:85:fb:d2:08:70:a7:e3:ce:a7:4d:81:23: 4f:a5:fb:18:49:cf:4f:bd:17:1c:f0:d6:3c:6b:75:cd:a1:55: f7:1d:25:2d:56:2b:03:a8:d0:2a:d5:34:cc:46:54:28:79:a8: b5:6a:b1:2d:88:5c:13:eb:3a:c3:0e:43:08:95:20:6c:68:20: 13:d6:5d:ff -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUdwH41pA8PKH3yxf/ds8Ea7fHVzIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUzMTU4WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BmZDMxYjNlNmQwOTNmNDJjMDAyM2RlOWI2OWIyYWNiMjE2 OGJiODU1NzNjMWEyNTBjYjcyYmVhODhmOGYyN2MxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjcqw/OYgc3AvjpDx5TmipcKRfdnlgcNmg8wAYVGNQGIym iJ4O/Q36QcMdxyUkL/oTgD787RPb2dXpinAGpAOWtxbJcRH/P1qD/fi5cj00fVgs xmGs5hSJEAtBk5d4W+W/UIIzGqA25o3syilC7PTO4uLFkQ+RQsZl8BlrtPvrekJ7 +6LytbFK4fG3yeb+oIbx6tvQ1VjXziSbifvbaMSX3H1FQb2oXIw2EP4Qryu464YV fwLNpGvrnB98dR+FWoMv37azi/qRYvxLCkdWnlIukVqeuH+PMHKRFEa3g0GgRZvI CNLWRcH8uU4rEJ8U6UKQbLRFHOaLbO7uRGa0sQUtAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUfiN8O6gIG0nmmnYNiUWvxKxY7cMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ5MGMwZDYwLTlkODQtNDQ3Ny1hNjE0LTU3YThmNDc1ZWYzNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAjtDANBgkqhkiG9w0BAQsFAAOCAQEAl5QLh+fbJlUt3u69gisBnFMzmwDd 5XbmVjA0TNTZWMobY6isyvhmu4cdWMqJXuxILiMdbXHMKLY5ITKLzn+CRDUA29m6 kAivygV/W0MMu7d74Jz0+llvI0CAvJs0FAoOsyE6fMfnssNOULlsDRt84VTX8XBh 8p6gvQUnCMpbUOTEeUiJW+eRUvkB2zUxlBra7tZFM0qpy+hljBt1C4GM0JeeRIjm zPgSx9uqHtfoxk0f4jFv2yzu6px9hfvSCHCn486nTYEjT6X7GEnPT70XHPDWPGt1 zaFV9x0lLVYrA6jQKtU0zEZUKHmotWqxLYhcE+s6ww5DCJUgbGggE9Zd/w== -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:16 2025 by rpki-client