$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa File: 9a48cca5-101e-49e1-b644-98c35eb681fa.roa (raw, json) Hash identifier: /5xTq9bY0lb4TO15sp8nD7lDvpD+W4xY4hrlRI6yf0g= Subject key identifier: 0A:8B:4C:C5:28:8B:7E:5F:22:F0:69:33:A0:2E:88:06:93:60:FE:F4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 21DC458A42B6462D7D22BC1BCD3197044B7AEE87 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa Signing time: Mon 30 Jun 2025 16:10:25 +0000 ROA not before: Mon 30 Jun 2025 16:10:25 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 18.88.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:dc:45:8a:42:b6:46:2d:7d:22:bc:1b:cd:31:97:04:4b:7a:ee:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 16:10:25 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=524011e1982cff7b916d24ef012360945e6857438e37dadc9cf70d29e92e6f31, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:ef:c9:fb:cb:6d:8b:d1:05:6d:1d:fd:46: 3e:00:c5:7b:13:c1:3c:34:dd:62:3a:eb:b4:c0:72: 7d:12:bf:f0:a0:0d:c7:7c:1d:ef:32:95:16:af:7e: 84:76:4c:ab:b1:b4:39:09:fb:8e:7f:9d:e0:12:4d: 08:d5:9a:b2:e7:2b:62:ed:2e:d0:76:1c:4d:11:1e: a0:a9:4e:44:22:df:22:75:31:6d:82:a9:8e:a7:01: 48:3c:ae:78:8d:2c:24:2d:93:52:03:e5:74:ab:2d: 08:a3:07:84:c3:75:08:cc:35:0b:a5:67:b9:38:cb: 2d:11:a3:10:86:0f:a1:8f:ab:82:66:19:b5:f6:7c: 37:97:42:55:a7:46:1a:b5:1a:32:92:a5:df:af:32: c0:26:83:e5:a3:6e:5d:87:ba:f9:db:c9:f2:2e:2a: 0e:dc:b2:d8:57:1d:2b:bf:4c:d9:41:d8:9e:be:e0: 8d:60:eb:c9:17:db:31:09:b2:16:59:3c:06:28:17: 33:a3:0b:90:68:ba:28:81:a1:99:2d:91:fc:04:d6: 10:2a:00:fe:03:62:35:9d:e1:07:a1:50:12:d8:5c: 1d:21:58:09:98:71:76:6e:ab:d0:1b:53:cd:69:87: 59:66:48:d9:ce:93:ad:a4:1a:e3:a6:18:0d:00:3d: 5c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:8B:4C:C5:28:8B:7E:5F:22:F0:69:33:A0:2E:88:06:93:60:FE:F4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9a48cca5-101e-49e1-b644-98c35eb681fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.88.0.0/19 Signature Algorithm: sha256WithRSAEncryption 15:1b:61:4b:ae:1a:bf:f6:5a:00:8e:a5:d0:e0:d9:be:29:2a: fb:e2:44:ad:db:50:8e:f8:a6:43:c0:d6:86:39:7e:a1:81:6d: ac:81:6d:4f:11:f1:cb:89:b1:7d:3e:fc:b2:5f:4b:b2:92:e9: af:f7:f0:c7:90:b9:2f:a8:25:2a:6e:00:e2:b1:53:85:ff:ff: a5:bc:48:09:a7:a1:25:7f:22:d4:82:aa:cf:15:67:38:95:ac: 16:e6:d8:e7:6f:82:eb:4f:18:64:f9:e6:a0:36:ad:1a:17:2d: ee:71:42:15:c6:0c:84:90:a7:11:67:9f:8b:2a:a0:e4:11:1b: f2:29:ef:4d:47:70:da:3d:b8:b8:97:0e:12:36:c0:03:8d:42: ed:d0:bf:3c:27:71:d2:aa:6a:6b:75:63:d3:b3:cf:dd:99:57: 58:da:dc:b1:d8:f4:b8:c6:a4:99:97:6a:85:2d:af:ec:e9:39: 89:cd:4c:a4:6e:2b:9d:4d:5a:77:e3:1b:c9:0c:24:d5:2c:0d: 9b:ae:b2:0c:3b:26:59:07:1a:77:ab:85:20:84:b9:f0:7e:e4: 0f:78:a4:de:74:cf:8c:26:80:23:4a:26:ce:dd:da:ef:c9:c9: c5:9e:08:83:c3:f4:21:1a:be:57:23:97:ed:3a:ad:fe:13:18: 92:77:36:ec -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIdxFikK2Ri19IrwbzTGXBEt67ocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTYxMDI1WhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MjQwMTFlMTk4MmNmZjdiOTE2ZDI0ZWYwMTIzNjA5NDVl Njg1NzQzOGUzN2RhZGM5Y2Y3MGQyOWU5MmU2ZjMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpKO/J+8tti9EFbR39Rj4AxXsTwTw03WI667TAcn0Sv/Cg Dcd8He8ylRavfoR2TKuxtDkJ+45/neASTQjVmrLnK2LtLtB2HE0RHqCpTkQi3yJ1 MW2CqY6nAUg8rniNLCQtk1ID5XSrLQijB4TDdQjMNQulZ7k4yy0RoxCGD6GPq4Jm GbX2fDeXQlWnRhq1GjKSpd+vMsAmg+Wjbl2HuvnbyfIuKg7csthXHSu/TNlB2J6+ 4I1g68kX2zEJshZZPAYoFzOjC5BouiiBoZktkfwE1hAqAP4DYjWd4QehUBLYXB0h WAmYcXZuq9AbU81ph1lmSNnOk62kGuOmGA0APVzdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCotMxSiLfl8i8GkzoC6IBpNg/vQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzlhNDhjY2E1LTEwMWUtNDllMS1iNjQ0LTk4YzM1ZWI2ODFmYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSWAAwDQYJKoZIhvcNAQELBQADggEBABUbYUuuGr/2WgCOpdDg2b4pKvvi RK3bUI74pkPA1oY5fqGBbayBbU8R8cuJsX0+/LJfS7KS6a/38MeQuS+oJSpuAOKx U4X//6W8SAmnoSV/ItSCqs8VZziVrBbm2OdvgutPGGT55qA2rRoXLe5xQhXGDISQ pxFnn4sqoOQRG/Ip701HcNo9uLiXDhI2wAONQu3QvzwncdKqamt1Y9Ozz92ZV1ja 3LHY9LjGpJmXaoUtr+zpOYnNTKRuK51NWnfjG8kMJNUsDZuusgw7JlkHGnerhSCE ufB+5A94pN50z4wmgCNKJs7d2u/JycWeCIPD9CEavlcjl+06rf4TGJJ3Nuw= -----END CERTIFICATE-----Generated at Tue Jul 1 06:55:25 2025 by rpki-client