$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df16fb69-45bf-4c20-9b03-cc10b4cc0cf7.roa File: df16fb69-45bf-4c20-9b03-cc10b4cc0cf7.roa (raw, json) Hash identifier: dG2FUl/PUUt7eRJHZjvqU+u14UpDQv/qXWGcpeeoiK0= Subject key identifier: D0:E7:AA:31:6D:C6:38:E1:C5:CE:99:88:28:52:87:C5:1A:95:67:E0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 33381B59DFBB0BEA86F688CE66366D787B13DAC9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df16fb69-45bf-4c20-9b03-cc10b4cc0cf7.roa Signing time: Tue 19 Aug 2025 15:01:37 +0000 ROA not before: Tue 19 Aug 2025 15:01:37 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.250.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:38:1b:59:df:bb:0b:ea:86:f6:88:ce:66:36:6d:78:7b:13:da:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:01:37 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=d0402265a4cb43848e405471ebd764fbeff04250defd1ddffc9b6afa4146ccef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:20:98:35:c8:37:6a:ec:94:43:77:ba:98: 3e:42:29:f9:c7:31:1d:0b:9e:46:5f:02:78:fb:df: e9:90:99:0a:57:46:f3:71:8f:57:49:b2:d7:8f:8c: c3:6a:42:63:b3:0c:78:e0:41:8a:f2:17:08:07:b5: 86:ac:51:a6:3d:0c:d5:69:7c:ea:2b:de:04:18:c4: 69:9b:56:42:75:91:c0:73:bd:c4:d0:87:71:44:69: d4:a0:6c:73:02:a3:4a:44:e9:9d:db:a4:e6:d4:c0: ce:be:57:4a:8c:e6:5d:fb:78:ae:c3:ba:65:5b:d1: eb:f3:7b:04:92:3a:a0:a6:bf:08:97:38:ee:8b:85: a2:fe:a1:70:79:4c:21:e3:d1:f3:b9:28:89:60:8d: 89:b0:d4:5a:59:d0:cf:a1:a7:f9:2d:c5:a5:65:f3: e9:3d:2e:c1:99:18:0f:c9:1c:86:fb:c9:89:80:de: f5:78:bd:30:56:dd:a5:43:ec:f9:0a:97:50:b6:63: 77:87:5e:99:f7:81:f1:49:33:a5:fd:42:8c:a5:23: 32:0e:f4:8e:0c:8d:0f:f9:17:c2:f1:bb:f6:f7:6a: 5b:dd:d9:7f:c7:48:ec:38:65:87:27:da:b7:ad:fa: c6:1e:89:1f:f5:d9:6d:0e:23:e6:cc:80:1d:eb:06: 44:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E7:AA:31:6D:C6:38:E1:C5:CE:99:88:28:52:87:C5:1A:95:67:E0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df16fb69-45bf-4c20-9b03-cc10b4cc0cf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.250.210.0/23 Signature Algorithm: sha256WithRSAEncryption ac:72:e4:a6:3e:f8:be:44:e7:b1:35:d3:bf:35:74:9f:06:0c: 85:ec:5c:db:61:fa:1c:93:50:de:d3:00:59:ab:57:7b:f9:17: ae:9a:b6:ea:87:d7:0a:cd:c1:9e:ff:63:0e:03:65:72:88:07: 1c:4b:87:80:e2:e0:d3:7d:32:1b:27:ca:16:23:3d:56:14:fe: 7c:be:29:85:f6:03:46:ab:84:bb:ef:0c:6a:b5:ed:74:67:87: 97:f4:61:61:6b:8d:91:f5:92:aa:a6:b9:55:02:21:84:29:7d: 95:7b:43:25:8d:f0:fd:0b:06:09:f0:63:53:5e:68:51:b5:b0: 24:d7:e2:be:6d:2c:63:da:58:54:7c:34:04:a8:30:5a:2f:c0: 27:76:4a:0d:d9:9e:b9:61:7c:81:50:18:94:00:b1:b7:81:c3: 2d:bb:b0:03:8d:74:d1:7a:40:64:53:de:da:88:7a:08:4b:a7: ab:ea:0e:60:34:31:af:a2:01:5e:ac:e7:29:e1:b3:73:ba:6b: 79:24:48:62:a4:99:00:c9:ae:d7:f5:67:63:7f:aa:11:a6:04: 35:df:2e:a0:f6:e2:b6:e9:6d:4e:00:81:6d:20:df:78:d3:82: 8a:39:1e:61:bd:7e:d1:97:6a:fc:f5:32:f0:19:38:d0:66:90: b0:4b:83:c3 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMzgbWd+7C+qG9ojOZjZteHsT2skwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUwMTM3WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDQwMjI2NWE0Y2I0Mzg0OGU0MDU0NzFlYmQ3NjRmYmVm ZjA0MjUwZGVmZDFkZGZmYzliNmFmYTQxNDZjY2VmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCg+SCYNcg3auyUQ3e6mD5CKfnHMR0LnkZfAnj73+mQmQpX RvNxj1dJstePjMNqQmOzDHjgQYryFwgHtYasUaY9DNVpfOor3gQYxGmbVkJ1kcBz vcTQh3FEadSgbHMCo0pE6Z3bpObUwM6+V0qM5l37eK7DumVb0evzewSSOqCmvwiX OO6LhaL+oXB5TCHj0fO5KIlgjYmw1FpZ0M+hp/ktxaVl8+k9LsGZGA/JHIb7yYmA 3vV4vTBW3aVD7PkKl1C2Y3eHXpn3gfFJM6X9QoylIzIO9I4MjQ/5F8Lxu/b3alvd 2X/HSOw4ZYcn2ret+sYeiR/12W0OI+bMgB3rBkRPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0OeqMW3GOOHFzpmIKFKHxRqVZ+AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmMTZmYjY5LTQ1YmYtNGMyMC05YjAzLWNjMTBiNGNjMGNmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAED+tIwDQYJKoZIhvcNAQELBQADggEBAKxy5KY++L5E57E10781dJ8GDIXs XNth+hyTUN7TAFmrV3v5F66atuqH1wrNwZ7/Yw4DZXKIBxxLh4Di4NN9MhsnyhYj PVYU/ny+KYX2A0arhLvvDGq17XRnh5f0YWFrjZH1kqqmuVUCIYQpfZV7QyWN8P0L BgnwY1NeaFG1sCTX4r5tLGPaWFR8NASoMFovwCd2Sg3ZnrlhfIFQGJQAsbeBwy27 sAONdNF6QGRT3tqIeghLp6vqDmA0Ma+iAV6s5ynhs3O6a3kkSGKkmQDJrtf1Z2N/ qhGmBDXfLqD24rbpbU4AgW0g33jTgoo5HmG9ftGXavz1MvAZONBmkLBLg8M= -----END CERTIFICATE-----Generated at Wed Aug 20 10:37:32 2025 by rpki-client