$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f39a778-a199-49af-acad-05c4da7a5f39.roa File: 6f39a778-a199-49af-acad-05c4da7a5f39.roa (raw, json) Hash identifier: hnk5z6DU9tnMdpIYu/TQCIXWrqCpbIw7mon/IVlRjvE= Subject key identifier: 81:80:15:00:4A:BB:E0:A3:CD:6E:4A:F1:33:5A:99:21:61:3D:D0:DD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5D1E21D15D6F832877FEA586192EA6ADD2469A1B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f39a778-a199-49af-acad-05c4da7a5f39.roa Signing time: Tue 19 Aug 2025 00:51:43 +0000 ROA not before: Tue 19 Aug 2025 00:51:43 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.89.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:1e:21:d1:5d:6f:83:28:77:fe:a5:86:19:2e:a6:ad:d2:46:9a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 00:51:43 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=68ce59dc86496271b4c50d673c489c4339199b24da904d0a13b98f2a3fe2d8d6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2f:a6:fe:af:ee:95:1e:19:57:bf:21:da:f1: 62:98:0a:d0:d0:8e:98:5f:1b:48:bf:9d:e8:e5:29: ba:30:f2:fc:ca:2c:35:78:05:ac:9d:63:e4:3b:7f: 72:62:d3:2b:0a:ef:39:07:3d:34:09:82:bc:a7:89: 8f:62:e1:c8:b8:a9:69:7c:c7:3c:3c:f2:67:0c:f6: f4:d2:9e:32:b4:4b:08:6b:2f:fa:49:18:29:dd:75: df:ad:c9:09:27:f8:93:bf:cc:fe:aa:c4:22:a8:02: 61:e9:b9:b9:06:7f:b6:c5:38:66:5d:db:65:6b:b7: fe:30:89:23:55:aa:24:05:b6:f2:ae:3b:10:20:74: ef:3f:2b:9a:d3:3a:31:95:4d:ae:ef:e7:81:d3:fe: 90:c7:0c:15:8b:7e:74:c4:a3:36:8f:eb:31:30:b4: 32:ec:84:f3:5d:60:89:a3:7a:9f:ba:b0:b4:c0:e3: 8a:98:f0:60:bb:05:42:e8:94:ee:36:1f:79:79:fb: f5:09:da:d6:24:e4:e4:47:fd:30:76:63:6b:f6:12: 79:98:7e:3a:20:78:47:1b:8a:8b:b3:96:ea:c0:f6: 32:25:56:6f:0e:40:e9:44:7e:34:11:88:f8:0f:88: 41:7a:0d:ea:ec:9d:66:d7:35:7e:8d:3e:4a:74:21: 7b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:80:15:00:4A:BB:E0:A3:CD:6E:4A:F1:33:5A:99:21:61:3D:D0:DD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6f39a778-a199-49af-acad-05c4da7a5f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.89.128.0/19 Signature Algorithm: sha256WithRSAEncryption a6:6c:5b:27:c4:ae:64:ee:2f:c0:af:25:62:ed:b4:63:81:4c: f8:25:b0:54:19:ad:e7:aa:c6:07:13:da:96:9c:78:65:5a:29: b3:66:a2:24:07:cb:1b:01:33:b9:a4:1c:e9:1f:a0:f4:66:cd: 35:9b:eb:66:53:e5:dd:31:e1:cb:78:02:b7:e6:ab:64:4b:b9: 84:64:8e:59:f0:d6:f9:77:db:32:fe:80:6f:f0:61:73:a9:12: d1:52:e6:29:17:15:b9:a3:2a:2b:7d:f6:3b:e7:ff:68:81:d6: 6a:6d:a7:f4:89:68:00:a6:76:a0:8e:87:d9:42:c2:a7:1c:8f: 7c:33:56:c3:a6:4e:04:f4:f5:8b:68:69:3e:24:a2:ab:a9:ad: 55:fc:c2:41:4c:36:02:e1:2a:ea:a4:e9:71:94:96:cb:34:e6: e6:d6:47:ea:dc:84:22:d4:fd:16:38:f4:c5:75:d4:c1:bb:42: 32:15:45:7d:9c:ad:b3:06:0e:3e:5a:52:77:fd:2d:f2:4f:03: bd:cf:b1:a4:10:bb:3a:45:7a:e3:43:9b:7c:f5:ce:0f:3a:b1: 3f:76:37:a0:e3:c0:68:06:6a:52:80:ff:29:b9:24:62:e7:dd: 14:6d:e6:be:47:e1:aa:b4:54:65:46:71:6f:4e:0d:e1:67:9c: 8e:ae:34:5a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXR4h0V1vgyh3/qWGGS6mrdJGmhswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MDA1MTQzWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2OGNlNTlkYzg2NDk2MjcxYjRjNTBkNjczYzQ4OWM0MzM5 MTk5YjI0ZGE5MDRkMGExM2I5OGYyYTNmZTJkOGQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxL6b+r+6VHhlXvyHa8WKYCtDQjphfG0i/nejlKbow8vzK LDV4BaydY+Q7f3Ji0ysK7zkHPTQJgryniY9i4ci4qWl8xzw88mcM9vTSnjK0Swhr L/pJGCnddd+tyQkn+JO/zP6qxCKoAmHpubkGf7bFOGZd22Vrt/4wiSNVqiQFtvKu OxAgdO8/K5rTOjGVTa7v54HT/pDHDBWLfnTEozaP6zEwtDLshPNdYImjep+6sLTA 44qY8GC7BULolO42H3l5+/UJ2tYk5ORH/TB2Y2v2EnmYfjogeEcbiouzlurA9jIl Vm8OQOlEfjQRiPgPiEF6DersnWbXNX6NPkp0IXudAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgYAVAEq74KPNbkrxM1qZIWE90N0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZmMzlhNzc4LWExOTktNDlhZi1hY2FkLTA1YzRkYTdhNWYzOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSWYAwDQYJKoZIhvcNAQELBQADggEBAKZsWyfErmTuL8CvJWLttGOBTPgl sFQZreeqxgcT2paceGVaKbNmoiQHyxsBM7mkHOkfoPRmzTWb62ZT5d0x4ct4Arfm q2RLuYRkjlnw1vl32zL+gG/wYXOpEtFS5ikXFbmjKit99jvn/2iB1mptp/SJaACm dqCOh9lCwqccj3wzVsOmTgT09YtoaT4koquprVX8wkFMNgLhKuqk6XGUlss05ubW R+rchCLU/RY49MV11MG7QjIVRX2crbMGDj5aUnf9LfJPA73PsaQQuzpFeuNDm3z1 zg86sT92N6DjwGgGalKA/ym5JGLn3RRt5r5H4aq0VGVGcW9ODeFnnI6uNFo= -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:39 2025 by rpki-client