$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6b22840-4aa5-49cd-98ae-decf090ce705.roa File: c6b22840-4aa5-49cd-98ae-decf090ce705.roa (raw, json) Hash identifier: QUZ9RjNYX5TLwZYh+EwbD24YubchDltF9TfDdPXxklM= Subject key identifier: 3D:BB:B7:7E:79:BC:AD:74:BF:6A:0D:AF:B4:A3:6B:7F:63:E4:A9:65 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 28AAFFCBC1DA6C61BDF84970A8B55EB21EF05B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6b22840-4aa5-49cd-98ae-decf090ce705.roa Signing time: Wed 20 Aug 2025 00:51:48 +0000 ROA not before: Wed 20 Aug 2025 00:51:48 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.36.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:aa:ff:cb:c1:da:6c:61:bd:f8:49:70:a8:b5:5e:b2:1e:f0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:51:48 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=03a27a6271733e5145d50e5123a30b7cfcb4abd48903de7489dc4e7920b03a84, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8f:ff:c1:ce:95:aa:3e:81:48:6a:8a:8f:6a: ed:85:f3:64:8b:f0:e5:22:17:80:8c:a3:0d:8e:ce: 16:25:af:60:32:86:32:a8:f6:fc:af:55:3d:f4:f0: 17:50:8b:65:d9:ba:36:5d:90:9d:dc:2a:0d:6f:c1: 65:f9:91:e4:aa:23:f6:97:a7:37:93:ff:cc:c1:8e: 53:68:ca:52:53:08:f5:d0:d0:d5:16:df:ac:d4:02: 0f:b2:fb:78:a2:53:87:7e:ee:81:fd:e9:a6:86:1e: 88:0c:b0:64:c2:da:c5:d3:18:4a:63:45:fe:a4:6e: cb:9a:ea:65:d7:c5:1c:b4:1b:eb:ed:3c:48:a4:62: 81:f9:72:17:5f:90:8a:d2:cc:0b:b0:16:85:73:e2: cb:75:06:8e:97:53:29:8d:41:bd:47:88:55:d9:09: c5:74:6e:5f:9e:35:01:e7:d3:e3:97:7e:42:bd:02: 07:f6:92:7a:c7:d7:d8:48:4d:db:30:ed:d0:80:6c: 2a:ce:2f:78:47:e3:b0:4e:ee:70:56:ca:d3:d5:5a: 0e:9d:3b:51:56:86:30:34:7c:cb:09:f9:00:37:a5: 9c:94:6b:64:d4:02:43:f7:97:9c:93:c3:ea:58:f8: d0:fb:fe:40:2f:93:91:03:a4:74:5b:6b:49:29:39: 3b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BB:B7:7E:79:BC:AD:74:BF:6A:0D:AF:B4:A3:6B:7F:63:E4:A9:65 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c6b22840-4aa5-49cd-98ae-decf090ce705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.36.0.0/14 Signature Algorithm: sha256WithRSAEncryption 34:05:38:a8:f3:75:f3:06:98:15:3b:df:c4:cd:98:74:81:a3: d7:4f:ea:b2:f8:25:8c:9a:27:a6:ef:c4:16:50:d3:e1:7e:f0: bf:dd:4b:ec:c3:22:f3:33:0c:f8:77:fb:d7:9d:47:32:97:91: b0:7c:46:23:78:1a:d1:3b:eb:97:7e:d0:17:bc:4c:37:e2:66: 28:c0:3a:cf:19:12:fe:e8:98:73:fc:a2:21:c4:d4:20:cd:14: 68:65:65:5f:d1:7a:b5:33:6d:af:ab:85:dc:9e:f8:c8:38:c2: 87:f9:97:a8:4c:06:d4:31:c4:8f:d2:ca:48:cc:c1:83:e0:f0: d3:cd:54:fb:c2:7d:25:d0:8d:df:3b:b0:84:c1:b8:e4:e9:ef: 52:49:ea:c7:6a:eb:47:17:a6:7a:dd:b2:b1:1a:18:72:07:f3: 7c:26:a8:80:f0:95:6c:6b:3c:4d:cd:02:4a:95:3f:8c:74:d5: fd:4b:6a:df:0e:ba:ee:ef:f0:c8:da:54:1d:af:11:3e:6d:a3: 46:90:c0:8b:53:db:f5:b8:55:55:fb:c4:c2:29:f1:c7:08:ed: bd:1e:22:e8:07:69:3e:b8:a5:97:5c:3b:0f:48:9e:53:5f:14: 09:a9:d3:67:e2:82:3c:38:cc:91:da:e7:ff:3a:5d:d3:81:b0: 64:a1:f9:64 -----BEGIN CERTIFICATE----- MIIF9jCCBN6gAwIBAgITKKr/y8HabGG9+ElwqLVesh7wWzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA4MjAwMDUxNDhaFw0yNTA5MjQyMzU5NTla MHoxSTBHBgNVBAUTQDAzYTI3YTYyNzE3MzNlNTE0NWQ1MGU1MTIzYTMwYjdjZmNi NGFiZDQ4OTAzZGU3NDg5ZGM0ZTc5MjBiMDNhODQxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANiP/8HOlao+gUhqio9q7YXzZIvw5SIXgIyjDY7OFiWvYDKG Mqj2/K9VPfTwF1CLZdm6Nl2QndwqDW/BZfmR5Koj9penN5P/zMGOU2jKUlMI9dDQ 1RbfrNQCD7L7eKJTh37ugf3ppoYeiAywZMLaxdMYSmNF/qRuy5rqZdfFHLQb6+08 SKRigflyF1+QitLMC7AWhXPiy3UGjpdTKY1BvUeIVdkJxXRuX541AefT45d+Qr0C B/aSesfX2EhN2zDt0IBsKs4veEfjsE7ucFbK09VaDp07UVaGMDR8ywn5ADelnJRr ZNQCQ/eXnJPD6lj40Pv+QC+TkQOkdFtrSSk5O/kCAwEAAaOCArAwggKsMB0GA1Ud DgQWBBQ9u7d+ebytdL9qDa+0o2t/Y+SpZTAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvYzZiMjI4NDAtNGFhNS00OWNkLTk4YWUtZGVjZjA5MGNlNzA1LnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw BQMDAgMkMA0GCSqGSIb3DQEBCwUAA4IBAQA0BTio83XzBpgVO9/EzZh0gaPXT+qy +CWMmiem78QWUNPhfvC/3UvswyLzMwz4d/vXnUcyl5GwfEYjeBrRO+uXftAXvEw3 4mYowDrPGRL+6Jhz/KIhxNQgzRRoZWVf0Xq1M22vq4XcnvjIOMKH+ZeoTAbUMcSP 0spIzMGD4PDTzVT7wn0l0I3fO7CEwbjk6e9SSerHautHF6Z63bKxGhhyB/N8JqiA 8JVsazxNzQJKlT+MdNX9S2rfDrru7/DI2lQdrxE+baNGkMCLU9v1uFVV+8TCKfHH CO29HiLoB2k+uKWXXDsPSJ5TXxQJqdNn4oI8OMyR2uf/Ol3TgbBkoflk -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:10 2025 by rpki-client