$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bbf7c51-bac1-4f25-b8e4-6139f106c700.roa File: 4bbf7c51-bac1-4f25-b8e4-6139f106c700.roa (raw, json) Hash identifier: SF0d8iHnC3YKR2lU5xCFeVT+m35Ihd7KK20LHmZPeMc= Subject key identifier: 3E:F0:84:0E:82:13:F1:DA:CD:1A:1C:62:34:82:AB:D8:27:6C:A5:8D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 502B5D3FCEE990B9E56D203B7D2E3947AD587F35 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bbf7c51-bac1-4f25-b8e4-6139f106c700.roa Signing time: Tue 19 Aug 2025 15:01:41 +0000 ROA not before: Tue 19 Aug 2025 15:01:41 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.218.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:2b:5d:3f:ce:e9:90:b9:e5:6d:20:3b:7d:2e:39:47:ad:58:7f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:01:41 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=a625d3436e847c09bc4b1592c7317db85b78a8ec598a14c45048ca4de9def171, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b5:da:68:49:45:42:e7:21:d5:b4:f2:23:fb: 0a:b8:ec:29:55:f9:c1:5d:2d:9f:82:b7:80:f0:92: d7:3a:9f:49:95:e6:4f:49:31:8c:7d:e4:bb:f4:c8: 39:68:7b:1e:c7:ee:01:73:ba:ed:24:5f:b1:f0:e6: 9b:0d:b6:cb:d2:e6:3b:84:97:3f:38:89:75:50:91: bc:b7:0b:26:9a:82:10:46:43:48:bb:11:2d:5e:22: b6:05:23:f9:aa:8a:93:a4:23:ae:33:eb:49:5f:62: 23:4d:74:60:43:ff:1f:3b:6d:d3:af:5d:00:8b:cb: 9a:04:d0:bb:a7:b6:d0:83:d9:15:ed:ca:cf:5f:80: 8c:e2:c2:ca:f2:c2:ee:c1:3a:fe:07:1e:fe:17:bc: 04:9d:31:f6:cc:ad:ca:48:3e:b8:a1:62:9f:3b:18: 3d:44:7e:80:9a:69:5d:5b:38:c6:51:30:82:22:a1: 73:a6:3c:1e:85:3d:34:b9:55:36:8d:8e:23:65:e1: 3c:69:17:1f:aa:98:a8:2d:10:cb:0b:3d:05:1d:84: 99:85:81:4d:d1:68:ab:dc:66:6e:58:e5:05:3e:66: 16:c1:40:ce:43:5d:97:fb:99:7d:b2:10:79:2c:39: c6:22:8c:ca:b3:65:8d:62:d2:a9:2d:ca:89:11:de: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F0:84:0E:82:13:F1:DA:CD:1A:1C:62:34:82:AB:D8:27:6C:A5:8D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4bbf7c51-bac1-4f25-b8e4-6139f106c700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.218.180.0/22 Signature Algorithm: sha256WithRSAEncryption 36:4b:8b:45:18:6b:2e:2c:02:d6:1e:fa:34:de:89:c1:e9:e1: 73:02:83:52:27:27:38:f2:ab:4f:19:e3:b1:a4:56:d9:3c:48: 7d:43:62:32:aa:01:8a:dd:cb:fe:3a:a4:9d:f2:cd:da:87:8d: ba:69:50:98:5b:b4:59:a7:5d:ec:4b:37:f1:0b:26:c1:e3:22: 72:0c:d5:6c:69:91:98:6d:99:d7:54:dc:1f:64:13:89:05:2d: 98:50:07:ea:41:c4:f7:b3:81:ba:2e:cc:c6:17:be:0a:6e:e0: 25:70:f9:e2:8c:e7:76:6b:fc:a2:b5:b8:ff:0d:19:5c:b1:88: 58:98:ed:7e:45:67:b4:4a:7f:74:64:f3:63:05:43:62:4b:ce: 76:ef:81:a7:8d:48:04:be:21:c5:65:f8:a1:f4:93:22:65:e3: 89:31:e8:39:de:2b:6c:f6:fe:31:7c:3a:21:8e:ef:fb:0a:a1: 4d:e9:ca:e4:bf:54:59:49:80:8a:e3:35:a4:96:64:db:d4:ca: 98:f4:aa:ae:c0:85:7d:0a:b8:af:67:95:a7:0d:13:fa:bf:89: fc:7c:3c:04:00:d1:d9:3b:e7:90:a2:85:64:be:6b:11:1c:07: 6e:e9:31:ee:a6:b6:13:27:5f:e2:ee:85:95:3f:2e:35:74:64: 97:42:9f:f2 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUCtdP87pkLnlbSA7fS45R61YfzUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUwMTQxWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNjI1ZDM0MzZlODQ3YzA5YmM0YjE1OTJjNzMxN2RiODVi NzhhOGVjNTk4YTE0YzQ1MDQ4Y2E0ZGU5ZGVmMTcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDwtdpoSUVC5yHVtPIj+wq47ClV+cFdLZ+Ct4Dwktc6n0mV 5k9JMYx95Lv0yDloex7H7gFzuu0kX7Hw5psNtsvS5juElz84iXVQkby3CyaaghBG Q0i7ES1eIrYFI/mqipOkI64z60lfYiNNdGBD/x87bdOvXQCLy5oE0LunttCD2RXt ys9fgIziwsrywu7BOv4HHv4XvASdMfbMrcpIPrihYp87GD1EfoCaaV1bOMZRMIIi oXOmPB6FPTS5VTaNjiNl4TxpFx+qmKgtEMsLPQUdhJmFgU3RaKvcZm5Y5QU+ZhbB QM5DXZf7mX2yEHksOcYijMqzZY1i0qktyokR3oolAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUPvCEDoIT8drNGhxiNIKr2CdspY0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRiYmY3YzUxLWJhYzEtNGYyNS1iOGU0LTYxMzlmMTA2YzcwMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAID2rQwDQYJKoZIhvcNAQELBQADggEBADZLi0UYay4sAtYe+jTeicHp4XMC g1InJzjyq08Z47GkVtk8SH1DYjKqAYrdy/46pJ3yzdqHjbppUJhbtFmnXexLN/EL JsHjInIM1WxpkZhtmddU3B9kE4kFLZhQB+pBxPezgbouzMYXvgpu4CVw+eKM53Zr /KK1uP8NGVyxiFiY7X5FZ7RKf3Rk82MFQ2JLznbvgaeNSAS+IcVl+KH0kyJl44kx 6DneK2z2/jF8OiGO7/sKoU3pyuS/VFlJgIrjNaSWZNvUypj0qq7AhX0KuK9nlacN E/q/ifx8PAQA0dk755CihWS+axEcB27pMe6mthMnX+LuhZU/LjV0ZJdCn/I= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:49 2025 by rpki-client