$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e2d2ee1-c27f-4d44-8de0-a559f91781fa.roa File: 6e2d2ee1-c27f-4d44-8de0-a559f91781fa.roa (raw, json) Hash identifier: 2/T6vmNZmj1IpV3LARWdOD7EcbC4bFrpPg/CzaaDgJE= Subject key identifier: 08:3E:D6:21:B2:B3:73:2D:19:9E:D9:DA:B0:E8:86:A9:65:4B:29:63 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33A958DDC92399A225F9E6E276AAA6CF4E7403D6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e2d2ee1-c27f-4d44-8de0-a559f91781fa.roa Signing time: Wed 20 Aug 2025 00:40:24 +0000 ROA not before: Wed 20 Aug 2025 00:40:24 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.23.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a9:58:dd:c9:23:99:a2:25:f9:e6:e2:76:aa:a6:cf:4e:74:03:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:40:24 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=a1016892010f2f0105f61cd312a092873a36467cbc3a84ae9cede83ce2acef2f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:af:be:e8:90:74:f4:db:1f:4a:40:8c:74: 63:e6:8e:6c:6e:69:e6:fd:9c:61:e5:7f:c9:2f:6d: ac:67:7b:5f:d0:7d:f2:9d:99:ae:67:a1:d0:39:a3: 50:c2:c7:26:2a:23:34:4e:30:fb:ca:bc:af:3b:fa: 14:0c:0b:19:c7:84:f3:c2:29:39:cf:9e:7d:ca:f3: 47:25:14:08:bb:ac:15:14:85:90:8b:ac:e0:a4:c7: c9:20:b6:6d:bc:d6:52:91:11:b7:1a:ca:04:8c:61: 04:a8:d6:e4:9a:4e:53:c2:ef:9f:25:ca:67:b9:51: 17:93:cf:05:67:ef:35:6a:c6:a4:98:38:24:c2:ad: 80:e6:a2:c9:04:c6:a9:17:df:0d:a2:2b:5e:02:4f: 49:99:5e:f1:7e:10:f0:93:33:51:e2:e6:c4:34:e8: 6d:22:88:fc:75:38:a9:09:0e:8c:9c:0f:74:e0:f7: b7:5c:bd:40:09:4b:34:8e:2a:99:ff:66:1d:ca:53: f2:91:87:b4:6d:8c:3c:2b:eb:d1:20:3e:4c:1b:48: 30:8f:dc:79:d8:8d:4c:3a:1a:cf:6a:c0:f8:bf:e0: 7f:df:e2:73:2d:d6:46:5c:5c:7b:f1:b3:cb:21:79: a9:84:c4:44:b0:02:74:c6:64:b9:0f:41:bc:15:0e: 10:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3E:D6:21:B2:B3:73:2D:19:9E:D9:DA:B0:E8:86:A9:65:4B:29:63 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6e2d2ee1-c27f-4d44-8de0-a559f91781fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.23.136.0/23 Signature Algorithm: sha256WithRSAEncryption 9b:a3:da:32:d6:8a:70:f3:1e:c5:23:37:35:bd:4f:df:a5:27: 4a:82:f1:e0:98:c7:9b:5f:4d:98:f1:ad:7c:45:67:1c:e1:ed: 0f:86:bf:76:14:8d:7d:eb:2e:62:30:ba:8b:86:69:43:01:10: 41:5d:3a:db:31:04:76:af:14:fa:2a:4f:a3:5b:6c:6b:f0:cc: 2d:28:4e:3f:c3:52:ef:40:c6:62:fe:cb:00:2c:60:47:5d:c4: b4:89:bd:2f:69:35:50:30:5a:35:98:8a:cb:e9:b4:33:73:54: b9:59:88:4c:d4:61:d1:cd:bc:4f:d1:54:05:7c:aa:c7:85:f1: 91:71:c0:19:8a:04:08:cb:b2:ef:d2:cf:8f:c2:aa:77:62:c4: a1:73:6d:71:43:7e:36:bb:e6:99:78:a8:68:4a:c9:a5:e8:77: 95:aa:9b:78:38:5a:f0:fa:5f:f4:01:41:c0:5c:23:9b:be:63: d0:88:8c:11:d0:24:50:1a:19:17:5b:75:eb:1f:a9:cc:c5:5a: 02:fe:1d:88:4f:7b:c6:2c:1c:fb:17:41:54:ae:6d:cf:a6:7a: 15:0b:8e:ab:c9:d1:54:26:5c:80:43:58:be:0a:01:95:d6:1b: 06:25:68:a2:52:d1:c1:b7:65:89:8f:1b:5f:1b:70:a4:51:e6: ea:60:48:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM6lY3ckjmaIl+ebidqqmz050A9YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIwMDA0MDI0WhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BhMTAxNjg5MjAxMGYyZjAxMDVmNjFjZDMxMmEwOTI4NzNh MzY0NjdjYmMzYTg0YWU5Y2VkZTgzY2UyYWNlZjJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC79a++6JB09NsfSkCMdGPmjmxuaeb9nGHlf8kvbaxne1/Q ffKdma5nodA5o1DCxyYqIzROMPvKvK87+hQMCxnHhPPCKTnPnn3K80clFAi7rBUU hZCLrOCkx8kgtm281lKREbcaygSMYQSo1uSaTlPC758lyme5UReTzwVn7zVqxqSY OCTCrYDmoskExqkX3w2iK14CT0mZXvF+EPCTM1Hi5sQ06G0iiPx1OKkJDoycD3Tg 97dcvUAJSzSOKpn/Zh3KU/KRh7RtjDwr69EgPkwbSDCP3HnYjUw6Gs9qwPi/4H/f 4nMt1kZcXHvxs8sheamExESwAnTGZLkPQbwVDhDNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCD7WIbKzcy0ZntnasOiGqWVLKWMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZlMmQyZWUxLWMyN2YtNGQ0NC04ZGUwLWE1NTlmOTE3ODFmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDF4gwDQYJKoZIhvcNAQELBQADggEBAJuj2jLWinDzHsUjNzW9T9+lJ0qC 8eCYx5tfTZjxrXxFZxzh7Q+Gv3YUjX3rLmIwuouGaUMBEEFdOtsxBHavFPoqT6Nb bGvwzC0oTj/DUu9AxmL+ywAsYEddxLSJvS9pNVAwWjWYisvptDNzVLlZiEzUYdHN vE/RVAV8qseF8ZFxwBmKBAjLsu/Sz4/CqndixKFzbXFDfja75pl4qGhKyaXod5Wq m3g4WvD6X/QBQcBcI5u+Y9CIjBHQJFAaGRdbdesfqczFWgL+HYhPe8YsHPsXQVSu bc+mehULjqvJ0VQmXIBDWL4KAZXWGwYlaKJS0cG3ZYmPG18bcKRR5upgSOU= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:08 2025 by rpki-client