$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7da15d33-cbbd-410c-9bf9-e6513ede574d.roa File: 7da15d33-cbbd-410c-9bf9-e6513ede574d.roa (raw, json) Hash identifier: OO3GrfLi4bQ30lN6SUCBJOZqEtIkjJ+G8xEHsn1qA74= Subject key identifier: CF:E8:EF:90:44:62:65:FF:AF:DC:17:88:AA:B8:1A:A7:12:25:9C:EC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 37695BB59BBCEC1FC590D00DE230E9F44E0E60B0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7da15d33-cbbd-410c-9bf9-e6513ede574d.roa Signing time: Mon 01 Sep 2025 17:31:20 +0000 ROA not before: Mon 01 Sep 2025 17:31:20 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.140.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:69:5b:b5:9b:bc:ec:1f:c5:90:d0:0d:e2:30:e9:f4:4e:0e:60:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 1 17:31:20 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=96995effdd84e48bac1f0b79a436130b7876ee71240d6c568ff16ff29217a5a1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6e:5f:39:ad:0a:b9:c6:87:d3:23:6b:2c:14: 2a:b1:d3:9b:fe:2a:e5:36:f4:fa:55:c1:c3:54:73: a0:ae:f7:bc:88:f5:3c:8b:e3:df:e6:50:c9:39:4d: da:81:26:58:49:3d:4f:05:79:3d:44:5f:1e:b9:64: db:fa:9a:bb:4f:04:53:60:e6:97:cb:e5:68:69:6c: 6e:99:9c:38:9b:4e:7e:cd:37:5b:03:03:90:66:1e: 1d:19:fa:16:51:be:0b:40:f6:81:75:13:64:6e:b7: 37:17:b8:6c:73:08:42:df:ee:dd:2e:89:32:d8:2d: c9:e8:02:56:c6:e7:fc:ae:bc:46:f6:ec:da:fe:e6: 4d:ab:25:5c:e0:2e:ef:0c:81:f1:96:9c:26:d9:a6: e9:67:d6:26:71:e6:88:3f:d8:eb:84:e1:65:6e:cb: eb:ae:e1:b5:84:3e:42:44:dc:1d:80:1f:74:4f:c2: da:20:6c:97:04:14:5a:4f:81:e0:b7:e9:5b:bf:30: 9f:a6:98:b9:1a:53:ad:09:a3:e0:7f:f1:4d:b7:6f: 82:a0:1e:6c:48:b3:2c:d1:20:9f:65:4d:41:f0:92: b6:82:dc:9e:70:22:ea:df:a2:e5:3e:22:af:a1:bf: 13:dd:d4:31:bf:3e:13:52:87:f4:6f:65:23:85:7a: 96:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E8:EF:90:44:62:65:FF:AF:DC:17:88:AA:B8:1A:A7:12:25:9C:EC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7da15d33-cbbd-410c-9bf9-e6513ede574d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.140.0.0/16 Signature Algorithm: sha256WithRSAEncryption 78:6f:87:6f:30:c4:d8:fe:bb:b7:15:c6:ca:74:ee:3e:e9:38: c4:11:d9:e5:51:f2:45:b6:81:1a:85:06:07:1b:7e:20:57:c2: ec:46:c2:75:56:d3:cd:1d:c3:6d:13:23:18:3a:70:09:a2:f6: 47:2e:e2:c4:ee:81:cf:14:f2:df:1c:40:66:f0:2b:e9:8d:cb: cf:09:cf:ee:98:7e:79:2b:9e:4b:1c:7a:eb:c0:f3:c2:c1:31: 2e:5a:f8:99:04:52:53:ca:a0:e0:de:c8:78:bf:c8:b7:92:a4: 4b:0d:70:ce:c2:21:06:53:58:96:27:d9:71:a6:4c:26:45:98: 4d:43:e3:a3:b3:5f:1e:f1:64:a6:96:81:54:87:29:35:3c:64: f4:25:92:f6:16:47:8b:04:01:f8:8f:89:ac:a3:44:81:f7:8b: 71:24:12:46:c7:4b:67:e7:c6:61:a5:d2:91:b9:31:eb:a5:fe: d9:a2:aa:00:aa:94:48:3f:f5:34:1c:c7:73:f0:7e:da:4d:a5: ee:7b:0e:1b:9d:81:f2:f5:d1:8e:94:82:10:8c:1f:c0:46:ee: 25:57:12:62:cf:cc:27:25:cf:89:f9:42:43:4a:13:f6:ea:7c: 0f:2a:19:7d:cf:28:1a:d2:f1:74:21:6d:d1:2c:0a:75:2c:b6: cc:3b:b0:3d -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUN2lbtZu87B/FkNAN4jDp9E4OYLAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTAxMTczMTIwWhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5Njk5NWVmZmRkODRlNDhiYWMxZjBiNzlhNDM2MTMwYjc4 NzZlZTcxMjQwZDZjNTY4ZmYxNmZmMjkyMTdhNWExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhbl85rQq5xofTI2ssFCqx05v+KuU29PpVwcNUc6Cu97yI 9TyL49/mUMk5TdqBJlhJPU8FeT1EXx65ZNv6mrtPBFNg5pfL5WhpbG6ZnDibTn7N N1sDA5BmHh0Z+hZRvgtA9oF1E2RutzcXuGxzCELf7t0uiTLYLcnoAlbG5/yuvEb2 7Nr+5k2rJVzgLu8MgfGWnCbZpuln1iZx5og/2OuE4WVuy+uu4bWEPkJE3B2AH3RP wtogbJcEFFpPgeC36Vu/MJ+mmLkaU60Jo+B/8U23b4KgHmxIsyzRIJ9lTUHwkraC 3J5wIurfouU+Iq+hvxPd1DG/PhNSh/RvZSOFepZXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUz+jvkERiZf+v3BeIqrgapxIlnOwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkYTE1ZDMzLWNiYmQtNDEwYy05YmY5LWU2NTEzZWRlNTc0ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCIjDANBgkqhkiG9w0BAQsFAAOCAQEAeG+HbzDE2P67txXGynTuPuk4xBHZ 5VHyRbaBGoUGBxt+IFfC7EbCdVbTzR3DbRMjGDpwCaL2Ry7ixO6BzxTy3xxAZvAr 6Y3LzwnP7ph+eSueSxx668DzwsExLlr4mQRSU8qg4N7IeL/It5KkSw1wzsIhBlNY lifZcaZMJkWYTUPjo7NfHvFkppaBVIcpNTxk9CWS9hZHiwQB+I+JrKNEgfeLcSQS RsdLZ+fGYaXSkbkx66X+2aKqAKqUSD/1NBzHc/B+2k2l7nsOG52B8vXRjpSCEIwf wEbuJVcSYs/MJyXPiflCQ0oT9up8DyoZfc8oGtLxdCFt0SwKdSy2zDuwPQ== -----END CERTIFICATE-----Generated at Tue Sep 16 22:55:05 2025 by rpki-client