$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d359ca9-90af-4b25-ad4b-f59f733b7b32.roa File: 6d359ca9-90af-4b25-ad4b-f59f733b7b32.roa (raw, json) Hash identifier: HuMW9Wv7Gt5KG9bCfjksjpZT/tvM4kuTWZ15KNT0hw8= Subject key identifier: E5:62:EA:30:06:5D:46:9B:F7:A2:87:DB:0E:A5:36:9E:C2:09:D4:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 464836FAE3E17D0BEF7C5AA0EC366779E1CF7408 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d359ca9-90af-4b25-ad4b-f59f733b7b32.roa Signing time: Tue 19 Aug 2025 15:20:08 +0000 ROA not before: Tue 19 Aug 2025 15:20:08 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.221.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:48:36:fa:e3:e1:7d:0b:ef:7c:5a:a0:ec:36:67:79:e1:cf:74:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:20:08 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=2c519689e8a699520b90f8388ca9e0f4ce9b57ad3cbf374db1cc50da3c8c9c9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e4:c7:e8:e8:5f:53:ca:c2:0d:ec:67:3a:79: cb:0c:e2:df:d9:6a:01:09:5d:a7:1f:2a:e1:89:84: bb:b8:f2:fc:0c:1f:93:3a:94:7b:b8:9f:67:19:c8: e0:61:f6:2a:49:ee:8b:72:42:c7:d5:94:39:9d:68: 95:87:ec:1b:6e:d0:b6:20:5d:1d:bc:23:1e:ee:3c: 47:85:aa:ab:23:89:62:24:7d:67:07:a7:b4:ec:f4: 75:af:70:55:35:af:b0:9f:fe:a0:1d:53:47:6e:6d: fe:c5:cc:ba:07:f6:a3:9e:3e:7c:a3:7d:5b:f5:8b: e9:ec:ef:52:ec:be:5c:06:f2:d4:02:9b:e3:e8:88: 5c:b2:bc:92:65:74:c4:a2:04:91:16:77:8e:29:14: 20:68:a5:37:84:41:f4:90:b4:64:36:52:f9:c8:80: b3:90:02:8b:53:cc:b1:48:3b:43:32:34:2a:09:44: 40:65:d6:4d:e6:a9:ba:08:60:22:11:92:4a:48:b5: fe:76:82:00:ab:04:58:e5:a6:bd:00:6e:29:00:30: 4a:0f:2b:72:e3:8e:ff:fc:2b:58:11:27:ac:08:17: d1:3c:3d:37:9e:bc:03:c4:b1:12:e7:f9:56:ed:b1: eb:e6:b6:05:01:19:98:9b:c2:94:c7:b5:12:ce:d1: 9c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:62:EA:30:06:5D:46:9B:F7:A2:87:DB:0E:A5:36:9E:C2:09:D4:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d359ca9-90af-4b25-ad4b-f59f733b7b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.221.151.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:77:67:b0:9f:ab:2d:3c:99:b9:3c:72:ea:d1:9a:03:50:d4: e4:57:91:59:c7:e3:fd:8e:21:24:a5:bf:a3:68:36:06:36:71: 2e:61:b2:2c:51:68:b3:1c:e7:14:96:24:1a:79:8c:78:68:0a: 1d:b3:41:8c:c2:64:60:f7:d8:a4:8f:fa:73:a5:dd:e2:05:68: ec:d1:a3:45:a4:f1:01:4e:ee:dd:6c:f6:5f:ff:7b:45:fb:1b: bc:d4:89:0f:d1:26:82:44:bd:4e:22:7e:56:9a:cb:4a:18:f6: a1:a6:f3:85:3e:07:d7:24:5f:60:34:87:f8:eb:bb:f7:64:8e: 60:ab:97:9f:d1:0d:3e:63:d1:01:9e:1d:1c:88:2d:96:a7:6c: d4:12:85:82:05:f3:13:88:0d:c5:e5:1f:73:10:45:63:f5:1f: a5:2c:f9:74:8a:22:ba:7f:12:cc:8c:5d:87:ff:76:9f:9e:c1: ea:bd:11:99:5c:bc:de:c5:d8:54:fb:53:03:e8:65:eb:d4:fa: 9d:38:38:bd:13:10:cf:63:e8:e1:5c:8c:24:23:33:91:d5:3a: 92:4d:53:a2:67:0e:45:a3:74:97:89:2a:d7:92:06:5b:fe:75: 37:54:26:6b:73:44:55:c7:7e:1b:93:1f:7d:fc:c2:e5:92:47: a8:82:77:a3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURkg2+uPhfQvvfFqg7DZneeHPdAgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUyMDA4WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzUxOTY4OWU4YTY5OTUyMGI5MGY4Mzg4Y2E5ZTBmNGNl OWI1N2FkM2NiZjM3NGRiMWNjNTBkYTNjOGM5YzliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDI5Mfo6F9TysIN7Gc6ecsM4t/ZagEJXacfKuGJhLu48vwM H5M6lHu4n2cZyOBh9ipJ7otyQsfVlDmdaJWH7Btu0LYgXR28Ix7uPEeFqqsjiWIk fWcHp7Ts9HWvcFU1r7Cf/qAdU0dubf7FzLoH9qOePnyjfVv1i+ns71LsvlwG8tQC m+PoiFyyvJJldMSiBJEWd44pFCBopTeEQfSQtGQ2UvnIgLOQAotTzLFIO0MyNCoJ REBl1k3mqboIYCIRkkpItf52ggCrBFjlpr0AbikAMEoPK3Ljjv/8K1gRJ6wIF9E8 PTeevAPEsRLn+VbtsevmtgUBGZibwpTHtRLO0ZyrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5WLqMAZdRpv3oofbDqU2nsIJ1BgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZkMzU5Y2E5LTkwYWYtNGIyNS1hZDRiLWY1OWY3MzNiN2IzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAi3ZcwDQYJKoZIhvcNAQELBQADggEBAGt3Z7Cfqy08mbk8curRmgNQ1ORX kVnH4/2OISSlv6NoNgY2cS5hsixRaLMc5xSWJBp5jHhoCh2zQYzCZGD32KSP+nOl 3eIFaOzRo0Wk8QFO7t1s9l//e0X7G7zUiQ/RJoJEvU4iflaay0oY9qGm84U+B9ck X2A0h/jru/dkjmCrl5/RDT5j0QGeHRyILZanbNQShYIF8xOIDcXlH3MQRWP1H6Us +XSKIrp/EsyMXYf/dp+eweq9EZlcvN7F2FT7UwPoZevU+p04OL0TEM9j6OFcjCQj M5HVOpJNU6JnDkWjdJeJKteSBlv+dTdUJmtzRFXHfhuTH338wuWSR6iCd6M= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:16 2025 by rpki-client