$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a73ade-ce5b-402b-8622-2e6ae991b070.roa File: a0a73ade-ce5b-402b-8622-2e6ae991b070.roa (raw, json) Hash identifier: lhR1/4/DZHWfFbVmoYOTzDzlzKO26p+M2AC8M7srLkY= Subject key identifier: E9:DE:AC:1F:21:A9:F2:2D:C6:CA:BF:84:6B:C9:27:E9:99:A7:2E:0E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3333192AAC746F859BA9EBD3F0C2A5AF3917CBE5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a73ade-ce5b-402b-8622-2e6ae991b070.roa Signing time: Mon 18 Aug 2025 15:50:32 +0000 ROA not before: Mon 18 Aug 2025 15:50:32 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.208.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:33:19:2a:ac:74:6f:85:9b:a9:eb:d3:f0:c2:a5:af:39:17:cb:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 15:50:32 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=081a77a3c9893e4d2eca308a912c4a4334488644e317eaae88fc240dfb1350ff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6f:cb:f7:42:1f:b0:1c:79:71:41:40:fa:dc: ae:02:f4:ca:c1:a2:73:e6:e5:cb:be:d4:39:e1:6a: 66:1b:df:b4:cb:dd:4e:2b:1f:dc:39:92:28:b7:8a: 9f:d6:98:ee:94:12:00:93:dc:44:df:b3:c7:de:73: 2a:cf:fb:1f:ab:e1:c2:19:19:0d:13:74:46:d2:47: 29:4d:ac:06:0a:2c:81:83:2b:ac:6d:dd:ef:1f:db: fb:b8:ac:7b:d6:e0:e5:ab:cb:a5:a3:17:16:1c:b8: 87:80:b3:28:39:12:88:d6:b1:35:bf:02:44:c9:2c: 1a:02:96:d7:d2:81:72:ae:bf:04:52:81:ee:30:8d: c7:8d:13:16:e4:21:70:48:12:44:8c:28:2e:bc:b9: fc:f7:88:48:ba:a7:7e:a6:3b:74:6e:6b:cf:55:6a: 0f:50:4e:0c:c3:43:9a:c3:77:88:2a:e4:a3:02:c9: bb:e9:0a:ca:b6:ca:ee:8c:e6:1a:a3:6f:e8:ed:2a: be:32:fa:82:6d:4e:78:83:0d:d6:5d:85:ad:8c:c2: 9c:53:f8:11:ed:ec:53:1d:55:3b:ca:5d:1e:6e:d6: 16:64:5b:7b:a0:f9:64:4f:4c:51:b9:e7:8f:08:ea: 63:2a:d4:f7:7f:9d:24:2c:f5:e8:ab:73:3d:9a:23: 9f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:DE:AC:1F:21:A9:F2:2D:C6:CA:BF:84:6B:C9:27:E9:99:A7:2E:0E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a0a73ade-ce5b-402b-8622-2e6ae991b070.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.208.32.0/19 Signature Algorithm: sha256WithRSAEncryption 6e:ad:b5:1e:f9:ad:0e:a1:85:6d:16:a5:2a:2a:96:ba:db:a3: e6:00:5e:19:fc:44:03:95:df:97:fd:b7:9b:5a:67:42:a8:3a: 1e:f7:6b:9d:a1:b4:6b:68:e5:2d:01:08:03:d9:13:c5:a0:72: 47:9a:34:26:27:16:ec:25:d2:05:7d:31:86:4f:13:52:38:cc: e8:29:55:ed:d9:bf:ef:97:f5:63:e7:77:21:79:6e:4e:b6:da: 4b:74:d5:c7:9b:96:aa:9c:91:47:3f:a0:e2:d3:cd:f3:00:a1: 94:95:3b:be:ea:b8:d9:36:ee:0e:9e:1c:42:cf:a4:f1:82:71: 1f:e7:f2:85:7f:9d:85:fc:df:4e:0f:fe:bd:f9:1a:8f:7e:c6: 73:98:c5:6e:f0:f7:40:95:ef:73:b4:08:d9:0d:f1:a5:e6:e1: 3c:da:e6:fb:8a:34:d6:c2:2b:b4:dd:d7:0a:3c:47:89:d0:ae: b9:77:e9:53:e7:48:39:66:8c:9c:af:53:2a:b6:cd:c1:36:b9: 94:94:ca:7f:b4:92:b3:fe:73:6c:49:87:10:99:af:89:21:1f: 7a:28:94:55:19:27:c8:04:bf:2a:16:7d:de:73:60:46:e9:98: 46:8c:53:64:11:eb:bc:8a:fa:57:28:33:2b:36:a8:b0:2e:e9: af:e0:12:b4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMzMZKqx0b4WbqevT8MKlrzkXy+UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTU1MDMyWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODFhNzdhM2M5ODkzZTRkMmVjYTMwOGE5MTJjNGE0MzM0 NDg4NjQ0ZTMxN2VhYWU4OGZjMjQwZGZiMTM1MGZmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/b8v3Qh+wHHlxQUD63K4C9MrBonPm5cu+1DnhamYb37TL 3U4rH9w5kii3ip/WmO6UEgCT3ETfs8fecyrP+x+r4cIZGQ0TdEbSRylNrAYKLIGD K6xt3e8f2/u4rHvW4OWry6WjFxYcuIeAsyg5EojWsTW/AkTJLBoCltfSgXKuvwRS ge4wjceNExbkIXBIEkSMKC68ufz3iEi6p36mO3Rua89Vag9QTgzDQ5rDd4gq5KMC ybvpCsq2yu6M5hqjb+jtKr4y+oJtTniDDdZdha2MwpxT+BHt7FMdVTvKXR5u1hZk W3ug+WRPTFG5548I6mMq1Pd/nSQs9eircz2aI5+VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6d6sHyGp8i3Gyr+Ea8kn6ZmnLg4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2EwYTczYWRlLWNlNWItNDAyYi04NjIyLTJlNmFlOTkxYjA3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUN0CAwDQYJKoZIhvcNAQELBQADggEBAG6ttR75rQ6hhW0WpSoqlrrbo+YA Xhn8RAOV35f9t5taZ0KoOh73a52htGto5S0BCAPZE8WgckeaNCYnFuwl0gV9MYZP E1I4zOgpVe3Zv++X9WPndyF5bk622kt01ceblqqckUc/oOLTzfMAoZSVO77quNk2 7g6eHELPpPGCcR/n8oV/nYX8304P/r35Go9+xnOYxW7w90CV73O0CNkN8aXm4Tza 5vuKNNbCK7Td1wo8R4nQrrl36VPnSDlmjJyvUyq2zcE2uZSUyn+0krP+c2xJhxCZ r4khH3oolFUZJ8gEvyoWfd5zYEbpmEaMU2QR67yK+lcoMys2qLAu6a/gErQ= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:40 2025 by rpki-client