$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/887e6f05-380d-4beb-b202-c0aef709d3c2.roa File: 887e6f05-380d-4beb-b202-c0aef709d3c2.roa (raw, json) Hash identifier: h0wl2E2EiXCK0v4hXN/92I4GFSmoslCWoR/ih4kiTJ4= Subject key identifier: A5:43:26:24:B7:BD:3F:D8:2F:B6:E5:EC:B0:17:27:07:FF:96:8D:F9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 224C28FE4D822B878BA81D0995DB61D626237A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/887e6f05-380d-4beb-b202-c0aef709d3c2.roa Signing time: Mon 30 Jun 2025 16:31:12 +0000 ROA not before: Mon 30 Jun 2025 16:31:12 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 35.168.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4c:28:fe:4d:82:2b:87:8b:a8:1d:09:95:db:61:d6:26:23:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:31:12 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=deb1ef3481ec2c55b49f542b8e0f5a0ae31a067a21440757ff4c68887752899b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4f:3f:7f:a7:6b:6b:38:f0:c6:e2:00:8d:4e: 27:eb:37:ff:e6:dc:ad:c5:2f:5b:49:16:48:fe:a5: c8:4d:e6:2f:2e:d9:2a:fd:80:a6:0a:2b:a0:bf:45: 69:c4:b8:aa:92:42:71:e0:59:e1:08:f1:04:4d:ca: 20:7d:d0:b7:c0:4d:46:ce:4e:0f:3c:55:35:03:a4: c0:09:6c:b0:f8:18:b5:82:8c:e9:0b:cd:17:d8:89: 48:43:25:26:b3:11:cc:d4:bb:bd:07:b8:65:df:34: 8c:35:74:1a:ab:3c:f6:cf:19:ef:82:8a:fd:16:45: 74:68:f2:7d:8b:de:f7:4a:46:91:f8:f4:a9:1f:3d: d9:b5:df:82:a5:a3:c1:d4:dc:7c:03:cf:29:7f:8e: 24:91:1b:d4:c7:18:e8:78:cd:4b:6c:c0:45:8e:54: f7:3a:35:22:ed:0b:5d:a0:29:c9:8a:06:94:42:de: 58:3f:c5:61:2b:74:22:c6:50:fb:c3:ab:31:a8:6e: 8d:0b:1c:e8:62:e0:40:bc:12:dd:95:95:c4:3d:a5: b8:f6:88:4b:cc:f8:ea:2a:11:cf:0f:45:07:db:4a: 53:58:97:06:46:ee:d8:4a:e8:b9:58:bc:23:9b:48: 68:7d:bd:70:58:26:34:50:4d:7e:b1:f2:6e:9a:3c: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:43:26:24:B7:BD:3F:D8:2F:B6:E5:EC:B0:17:27:07:FF:96:8D:F9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/887e6f05-380d-4beb-b202-c0aef709d3c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.168.0.0/13 Signature Algorithm: sha256WithRSAEncryption 39:25:db:a7:be:16:b9:27:78:ea:f3:ff:73:36:a7:00:64:7e: ed:e5:ea:5e:6c:f1:a4:7c:f5:61:3f:fb:3b:fa:50:50:24:a4: e3:f0:75:10:8b:02:b7:a3:67:3b:a2:f9:e6:61:4e:59:77:66: 37:fb:9f:b7:20:0d:43:e0:59:52:4b:90:30:99:21:8f:fa:eb: 27:02:62:9b:ad:c4:87:4d:be:b5:9e:27:8b:6f:86:fe:98:08: 0e:be:a8:76:df:03:61:db:04:69:ee:90:0c:06:55:60:3e:4c: fe:b0:27:6e:e2:17:d3:b8:e4:f9:f1:c1:8f:94:e0:97:44:5f: c8:81:9a:07:1f:54:68:24:fa:96:c9:a7:97:81:f9:2f:db:78: 4b:84:65:db:72:f7:05:31:85:7f:cc:61:44:7f:d7:f4:e4:50: ae:63:fc:22:1b:7e:9c:69:56:c9:0e:c1:bf:46:df:65:43:85: 6c:20:f4:de:03:49:41:ea:76:2c:25:37:ed:54:62:11:f2:d1: f7:6b:3b:b9:85:8f:9f:44:27:30:f1:76:15:7c:a1:e1:22:74: 8e:30:5e:31:0a:b0:ae:c8:d0:59:64:4c:ba:1e:4c:0f:f7:5c: 68:26:27:b7:5a:d9:00:82:df:84:a7:64:37:07:c7:64:75:25: a7:87:3e:a6 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITIkwo/k2CK4eLqB0Jldth1iYjejANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA2MzAxNjMxMTJaFw0yNTA4MDQyMzU5NTla MHoxSTBHBgNVBAUTQGRlYjFlZjM0ODFlYzJjNTViNDlmNTQyYjhlMGY1YTBhZTMx YTA2N2EyMTQ0MDc1N2ZmNGM2ODg4Nzc1Mjg5OWIxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAPhPP3+na2s48MbiAI1OJ+s3/+bcrcUvW0kWSP6lyE3mLy7Z Kv2ApgoroL9FacS4qpJCceBZ4QjxBE3KIH3Qt8BNRs5ODzxVNQOkwAlssPgYtYKM 6QvNF9iJSEMlJrMRzNS7vQe4Zd80jDV0Gqs89s8Z74KK/RZFdGjyfYve90pGkfj0 qR892bXfgqWjwdTcfAPPKX+OJJEb1McY6HjNS2zARY5U9zo1Iu0LXaApyYoGlELe WD/FYSt0IsZQ+8OrMahujQsc6GLgQLwS3ZWVxD2luPaIS8z46ioRzw9FB9tKU1iX Bkbu2ErouVi8I5tIaH29cFgmNFBNfrHybpo8IxcCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBSlQyYkt70/2C+25eywFycH/5aN+TAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvODg3ZTZmMDUtMzgwZC00YmViLWIyMDItYzBhZWY3MDlkM2MyLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAyOoMA0GCSqGSIb3DQEBCwUAA4IBAQA5Jdunvha5J3jq8/9zNqcAZH7t5epe bPGkfPVhP/s7+lBQJKTj8HUQiwK3o2c7ovnmYU5Zd2Y3+5+3IA1D4FlSS5AwmSGP +usnAmKbrcSHTb61nieLb4b+mAgOvqh23wNh2wRp7pAMBlVgPkz+sCdu4hfTuOT5 8cGPlOCXRF/IgZoHH1RoJPqWyaeXgfkv23hLhGXbcvcFMYV/zGFEf9f05FCuY/wi G36caVbJDsG/Rt9lQ4VsIPTeA0lB6nYsJTftVGIR8tH3azu5hY+fRCcw8XYVfKHh InSOMF4xCrCuyNBZZEy6HkwP91xoJie3WtkAgt+Ep2Q3B8dkdSWnhz6m -----END CERTIFICATE-----Generated at Mon Jun 30 23:14:11 2025 by rpki-client