$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddbaf70c-6419-4b33-b09f-4b5efe23eb36.roa File: ddbaf70c-6419-4b33-b09f-4b5efe23eb36.roa (raw, json) Hash identifier: ItaHH9aWyzSwUzBxE+vY43uBSGZu/SWTI8ZB2vEtvCM= Subject key identifier: 1D:80:5D:4C:8E:16:16:8E:B6:56:35:38:E5:85:F0:45:66:0D:40:F2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4EAC72EDCD6243672D8FF968A98C2E3C1661C1B2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddbaf70c-6419-4b33-b09f-4b5efe23eb36.roa Signing time: Mon 18 Aug 2025 16:11:12 +0000 ROA not before: Mon 18 Aug 2025 16:11:12 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.254.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ac:72:ed:cd:62:43:67:2d:8f:f9:68:a9:8c:2e:3c:16:61:c1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 16:11:12 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=9613d09a3c1451caeed6c920814a09d59c7b41b90abc5f3df03fa073f79aac9b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:40:65:84:c9:e7:10:56:59:17:9f:09:ad:b6: d3:88:9e:f0:df:26:e2:00:df:ea:ec:1c:ae:fe:1c: a1:13:91:ae:45:21:04:91:23:e8:08:0e:e2:e7:d5: ae:e4:8b:69:69:de:4e:d5:10:0a:c1:03:d0:28:9b: 7a:f9:b5:b5:6b:ed:51:d0:0a:6e:ac:94:94:d9:32: c3:13:71:bc:ea:c2:db:d3:e5:dc:57:49:45:00:b4: e4:d2:14:a1:69:11:42:ad:09:2d:41:34:a3:63:48: 22:9f:81:a6:69:9f:5f:d4:00:89:01:91:11:3b:6a: 4d:a0:5e:5b:db:cd:d7:e4:01:4c:95:5e:5b:47:78: 5f:c0:d5:22:31:42:8b:a4:a4:c6:56:aa:c1:7c:48: 1e:a5:c9:e5:33:54:7b:c8:66:67:78:7d:cb:cb:00: 87:66:2d:b7:81:7e:a2:4f:88:56:59:10:fc:a6:53: 71:17:ef:bb:05:a0:71:d0:34:47:1f:35:fa:ae:66: 50:61:98:a7:06:c2:87:44:0f:12:60:7b:42:c6:a6: 4b:20:2a:c8:4d:c8:82:af:95:ad:51:c6:3a:90:28: 69:c3:91:fe:cb:a5:98:8d:59:c2:19:e4:06:37:e1: f0:45:e4:92:40:16:46:39:b5:a6:c7:50:13:9f:09: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:80:5D:4C:8E:16:16:8E:B6:56:35:38:E5:85:F0:45:66:0D:40:F2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ddbaf70c-6419-4b33-b09f-4b5efe23eb36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.254.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3d:0d:94:10:0b:a2:b7:62:15:e6:ff:22:8b:ab:69:e4:97:ef: ee:b6:59:a4:a5:cb:84:6b:44:f8:8d:70:12:10:4f:ed:3f:ba: 5a:67:1a:29:26:35:f4:c5:bc:82:14:9b:9c:b5:4c:6d:c5:c5: fc:82:72:e4:a9:88:ad:aa:1f:54:b4:47:f1:8b:75:ef:5d:47: bb:31:c8:51:54:c9:69:cf:f6:b0:03:eb:76:35:14:ca:40:d8: a8:6a:d1:ba:b5:d5:19:e7:94:8b:d1:e8:15:e2:39:c0:d2:f4: b4:ef:19:80:16:f7:28:0c:ba:95:aa:13:73:2d:24:fc:97:d2: f7:db:a6:71:21:49:c8:ec:cf:58:c9:1f:e6:99:7d:a7:14:fc: f2:fb:2b:94:8d:f1:0f:30:cd:91:21:b6:2b:17:96:5f:e9:7f: f9:63:2e:85:bd:9b:77:73:71:f1:9f:8f:b2:05:a6:ca:60:5a: dc:c3:c0:c9:00:ef:d9:ab:6e:f9:a8:fd:9d:2f:22:ad:f2:9c: 36:33:b8:87:c2:11:60:e2:f3:99:21:99:cb:d3:dd:9b:13:b6: a8:b1:f1:88:61:e8:d3:61:12:c9:32:be:37:c9:ad:54:c8:58: d3:c3:da:1f:81:f5:86:19:95:71:79:55:15:a2:77:b5:6b:65: 8b:41:de:de -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTqxy7c1iQ2ctj/loqYwuPBZhwbIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTYxMTEyWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5NjEzZDA5YTNjMTQ1MWNhZWVkNmM5MjA4MTRhMDlkNTlj N2I0MWI5MGFiYzVmM2RmMDNmYTA3M2Y3OWFhYzliMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDtQGWEyecQVlkXnwmtttOInvDfJuIA3+rsHK7+HKETka5F IQSRI+gIDuLn1a7ki2lp3k7VEArBA9Aom3r5tbVr7VHQCm6slJTZMsMTcbzqwtvT 5dxXSUUAtOTSFKFpEUKtCS1BNKNjSCKfgaZpn1/UAIkBkRE7ak2gXlvbzdfkAUyV XltHeF/A1SIxQoukpMZWqsF8SB6lyeUzVHvIZmd4fcvLAIdmLbeBfqJPiFZZEPym U3EX77sFoHHQNEcfNfquZlBhmKcGwodEDxJge0LGpksgKshNyIKvla1RxjqQKGnD kf7LpZiNWcIZ5AY34fBF5JJAFkY5tabHUBOfCZhpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUHYBdTI4WFo62VjU45YXwRWYNQPIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RkYmFmNzBjLTY0MTktNGIzMy1iMDlmLTRiNWVmZTIzZWIzNi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwES/jANBgkqhkiG9w0BAQsFAAOCAQEAPQ2UEAuit2IV5v8ii6tp5Jfv7rZZ pKXLhGtE+I1wEhBP7T+6WmcaKSY19MW8ghSbnLVMbcXF/IJy5KmIraofVLRH8Yt1 711HuzHIUVTJac/2sAPrdjUUykDYqGrRurXVGeeUi9HoFeI5wNL0tO8ZgBb3KAy6 laoTcy0k/JfS99umcSFJyOzPWMkf5pl9pxT88vsrlI3xDzDNkSG2KxeWX+l/+WMu hb2bd3Nx8Z+PsgWmymBa3MPAyQDv2atu+aj9nS8irfKcNjO4h8IRYOLzmSGZy9Pd mxO2qLHxiGHo02ESyTK+N8mtVMhY08PaH4H1hhmVcXlVFaJ3tWtli0He3g== -----END CERTIFICATE-----Generated at Wed Aug 20 10:38:00 2025 by rpki-client