$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/937a003e-33d8-413b-bce6-a1e207376584.roa File: 937a003e-33d8-413b-bce6-a1e207376584.roa (raw, json) Hash identifier: Kn8XNV1kKhtLqLykxXXrCEGnwnWWzWQtlQMw6Yl+n6k= Subject key identifier: E2:6E:ED:3B:84:8A:29:6F:A0:C3:EE:92:F2:89:08:26:06:E3:4D:1C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D43F5E455F95CF9C70C695995000EFE7CA7092B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/937a003e-33d8-413b-bce6-a1e207376584.roa Signing time: Tue 19 Aug 2025 15:11:09 +0000 ROA not before: Tue 19 Aug 2025 15:11:09 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.253.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:43:f5:e4:55:f9:5c:f9:c7:0c:69:59:95:00:0e:fe:7c:a7:09:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:11:09 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=cab79af838c71ac65d3072d85c854fd980735b9c45ad7c9a5a5a0c38caaf1c0b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:93:9f:91:9f:e4:3b:9c:c9:14:2c:e1:a1:05: ba:de:da:ac:fc:04:cc:f6:96:1f:dd:ef:51:ae:26: e2:89:81:e7:03:ac:8a:84:65:73:ef:18:23:0e:39: 3b:3d:0c:4f:8f:7c:79:4f:1e:4c:b0:3b:f9:e0:c7: 39:48:07:ca:c0:90:bf:28:9d:2c:20:6f:ee:d1:2d: c3:95:b8:41:dc:4a:d7:e7:da:05:dd:b7:a4:35:07: 8d:cd:9e:a7:06:f7:ec:de:d0:e4:51:04:6f:33:a7: ef:53:92:b1:23:13:ed:4f:43:05:77:ee:d2:28:99: ee:50:44:5b:a7:3f:43:52:f2:51:b7:33:45:a8:28: 77:c9:c8:16:22:c2:f9:58:6c:95:64:f4:d5:09:91: e0:e0:56:11:17:db:1d:e3:21:48:25:8c:fc:f3:3f: 7f:24:eb:90:62:5c:11:a9:75:5d:57:5b:f0:b1:ee: 63:9b:1c:e9:e9:2c:e6:8a:b6:81:dd:22:e4:ea:24: 68:94:b0:4b:45:fc:b5:96:ed:07:22:5c:46:90:58: 61:53:a0:3e:cd:f4:0e:c7:21:f8:c2:e0:c8:bf:41: d3:2b:dd:a4:86:14:46:91:2f:95:49:e0:30:e3:d7: dd:fe:87:4d:ed:0c:e7:07:13:ac:76:42:7e:14:09: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6E:ED:3B:84:8A:29:6F:A0:C3:EE:92:F2:89:08:26:06:E3:4D:1C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/937a003e-33d8-413b-bce6-a1e207376584.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.253.168.0/22 Signature Algorithm: sha256WithRSAEncryption 91:e3:69:7d:8c:67:6b:c8:51:8b:1c:f7:5c:61:16:af:49:d2: fb:1b:04:b2:1b:c7:8d:9a:8f:5a:ca:b0:30:4a:a2:ad:2a:5e: 51:b7:e5:2d:08:60:a5:0f:c1:77:c7:0f:db:da:2c:46:5f:66: 92:b1:1f:13:7f:6b:eb:4e:ab:48:16:74:b7:09:37:22:ba:55: dd:b5:4e:58:50:e6:74:a1:de:5c:90:33:d3:28:92:37:ba:5f: 67:89:8a:62:c8:8e:df:f7:2f:61:73:c1:52:c7:87:f6:7c:0a: 6a:ee:cb:37:fc:a4:07:ad:6e:68:dd:dc:09:fd:48:21:e1:89: d8:fa:3a:be:4e:8a:0f:aa:5d:81:e9:50:54:07:58:78:19:94: 03:e8:a7:37:6a:25:43:de:6f:f7:52:54:7c:6b:a7:ce:45:ac: 48:48:3a:ca:fb:42:e5:1d:85:13:dc:f3:02:c9:36:17:98:31: 52:f4:29:cd:d4:69:0a:67:23:23:cd:72:90:89:65:09:68:6f: 76:1f:72:3f:5a:d3:70:80:a2:8e:14:cd:58:e8:ca:e5:f5:99: b9:c7:07:ee:e0:da:61:27:16:13:ea:20:e2:2c:c9:e4:03:da: 03:02:c1:84:73:76:9c:f4:77:f3:9c:da:f6:ad:ef:03:cf:1e: 89:c8:8b:b0 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUHUP15FX5XPnHDGlZlQAO/nynCSswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUxMTA5WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjYWI3OWFmODM4YzcxYWM2NWQzMDcyZDg1Yzg1NGZkOTgw NzM1YjljNDVhZDdjOWE1YTVhMGMzOGNhYWYxYzBiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwk5+Rn+Q7nMkULOGhBbre2qz8BMz2lh/d71GuJuKJgecD rIqEZXPvGCMOOTs9DE+PfHlPHkywO/ngxzlIB8rAkL8onSwgb+7RLcOVuEHcStfn 2gXdt6Q1B43NnqcG9+ze0ORRBG8zp+9TkrEjE+1PQwV37tIome5QRFunP0NS8lG3 M0WoKHfJyBYiwvlYbJVk9NUJkeDgVhEX2x3jIUgljPzzP38k65BiXBGpdV1XW/Cx 7mObHOnpLOaKtoHdIuTqJGiUsEtF/LWW7QciXEaQWGFToD7N9A7HIfjC4Mi/QdMr 3aSGFEaRL5VJ4DDj193+h03tDOcHE6x2Qn4UCfsjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4m7tO4SKKW+gw+6S8okIJgbjTRwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkzN2EwMDNlLTMzZDgtNDEzYi1iY2U2LWExZTIwNzM3NjU4NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAID/agwDQYJKoZIhvcNAQELBQADggEBAJHjaX2MZ2vIUYsc91xhFq9J0vsb BLIbx42aj1rKsDBKoq0qXlG35S0IYKUPwXfHD9vaLEZfZpKxHxN/a+tOq0gWdLcJ NyK6Vd21TlhQ5nSh3lyQM9Mokje6X2eJimLIjt/3L2FzwVLHh/Z8Cmruyzf8pAet bmjd3An9SCHhidj6Or5Oig+qXYHpUFQHWHgZlAPopzdqJUPeb/dSVHxrp85FrEhI Osr7QuUdhRPc8wLJNheYMVL0Kc3UaQpnIyPNcpCJZQlob3Yfcj9a03CAoo4UzVjo yuX1mbnHB+7g2mEnFhPqIOIsyeQD2gMCwYRzdpz0d/Oc2vat7wPPHonIi7A= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:56 2025 by rpki-client