$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfb7d903-48b2-448d-bc38-ff4c62ca0378.roa File: dfb7d903-48b2-448d-bc38-ff4c62ca0378.roa (raw, json) Hash identifier: 6FAk+n+IdVV7Wu5bUZIzD0W7k6qBVdgYaYUBgIJGq2Y= Subject key identifier: 28:0E:B1:BF:CC:3C:A6:73:04:E5:F2:08:72:03:8D:8D:80:23:0E:0E Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3C4F1A997C385EAD4950D5370C875F680CBB091E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfb7d903-48b2-448d-bc38-ff4c62ca0378.roa Signing time: Tue 05 Aug 2025 16:31:02 +0000 ROA not before: Tue 05 Aug 2025 16:31:02 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 144.207.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:4f:1a:99:7c:38:5e:ad:49:50:d5:37:0c:87:5f:68:0c:bb:09:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 16:31:02 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=3fd94516e25a9a934a42869aaa6f243811c22fe40be078098dc664f7792f42e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:f0:50:a6:d3:f3:32:37:8a:fb:6e:c3:97: 30:c7:b6:e5:7a:9f:2b:93:e6:b1:dd:be:0f:e1:b1: d0:81:29:71:7d:08:aa:8e:b8:d8:59:62:e4:8f:f4: fb:87:e8:9d:a9:89:c3:de:b5:95:0f:92:02:18:26: 25:db:5d:a1:32:cf:9f:fc:45:d8:86:db:38:65:d8: ed:62:e9:77:fc:e2:00:8d:13:ce:42:8b:d3:46:de: cc:ec:5b:7d:1d:a2:9f:bb:87:73:61:26:31:9b:b1: cc:37:a0:53:df:ea:7a:3a:f6:46:c9:83:ba:49:7b: fe:44:76:0b:4b:18:ee:cb:90:b3:e3:8d:a7:fc:50: 3a:f1:b6:ae:82:3c:7e:ff:4f:ce:15:97:5f:86:06: e5:0f:85:51:27:59:cf:b5:b5:c3:17:e3:9a:f2:c0: e6:48:80:2d:71:f3:c0:02:76:98:04:81:84:19:b0: d6:97:68:03:bb:61:4e:7d:fa:a6:33:d5:3c:fc:40: 2e:b6:f2:3c:32:54:80:72:30:63:80:f0:fc:96:1c: 4c:df:f5:ad:7f:6d:fd:87:38:e7:06:6e:4c:d3:90: 1c:d3:a3:40:ee:f3:7a:c3:47:3d:6a:3a:4e:0d:70: a7:1b:f5:ee:f9:48:2e:96:f3:a0:2d:b3:63:12:3a: 58:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:B1:BF:CC:3C:A6:73:04:E5:F2:08:72:03:8D:8D:80:23:0E:0E X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dfb7d903-48b2-448d-bc38-ff4c62ca0378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.207.0.0/16 Signature Algorithm: sha256WithRSAEncryption 04:75:c5:a5:2e:e1:34:0a:89:8a:9b:f2:dc:1a:b0:ec:29:ab: c5:a4:ad:4c:86:ae:2e:dd:c5:8e:36:be:c1:da:2f:3c:e3:c6: d7:79:16:89:26:fd:45:c7:52:4c:83:d1:81:ee:7d:c0:f3:b0: 8f:c8:d4:ec:cf:48:9e:ea:ea:30:b6:14:02:d1:3e:37:ea:17: 37:ac:f1:bc:1b:5d:41:dc:28:f9:f4:f6:8d:f7:6b:94:dd:40: f0:f4:f7:c6:26:1a:2b:fb:92:76:16:09:f3:7b:f5:50:09:0d: 7c:f1:9d:c4:c8:ec:4c:bc:85:87:6c:b2:ae:49:e2:d8:d0:d7: 0e:f7:01:67:ee:6e:b0:30:10:41:94:95:b7:cc:a9:1f:cd:81: 5d:5b:2c:16:f6:5d:35:a8:e8:9c:cb:38:63:f4:08:54:25:5d: 30:57:83:dc:9d:99:64:6e:40:7d:e6:7c:fe:3c:40:df:fb:69: bf:a7:d5:78:07:62:bc:70:ad:35:ad:c1:af:6d:d0:e3:90:af: 0b:43:14:55:14:54:c5:d7:94:02:27:fb:4a:2b:30:d7:39:19: 23:43:3c:e9:2b:44:19:98:b3:a7:c2:34:2e:27:d5:77:5b:0f: 97:62:08:71:05:52:3b:56:62:3e:d4:9f:5d:53:23:1a:2d:3c: 06:81:a2:df -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUPE8amXw4Xq1JUNU3DIdfaAy7CR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTYzMTAyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AzZmQ5NDUxNmUyNWE5YTkzNGE0Mjg2OWFhYTZmMjQzODEx YzIyZmU0MGJlMDc4MDk4ZGM2NjRmNzc5MmY0MmU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSB/BQptPzMjeK+27DlzDHtuV6nyuT5rHdvg/hsdCBKXF9 CKqOuNhZYuSP9PuH6J2picPetZUPkgIYJiXbXaEyz5/8RdiG2zhl2O1i6Xf84gCN E85Ci9NG3szsW30dop+7h3NhJjGbscw3oFPf6no69kbJg7pJe/5EdgtLGO7LkLPj jaf8UDrxtq6CPH7/T84Vl1+GBuUPhVEnWc+1tcMX45rywOZIgC1x88ACdpgEgYQZ sNaXaAO7YU59+qYz1Tz8QC628jwyVIByMGOA8PyWHEzf9a1/bf2HOOcGbkzTkBzT o0Du83rDRz1qOk4NcKcb9e75SC6W86Ats2MSOljXAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUKA6xv8w8pnME5fIIcgONjYAjDg4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmYjdkOTAzLTQ4YjItNDQ4ZC1iYzM4LWZmNGM2MmNhMDM3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCQzzANBgkqhkiG9w0BAQsFAAOCAQEABHXFpS7hNAqJipvy3Bqw7CmrxaSt TIauLt3Fjja+wdovPOPG13kWiSb9RcdSTIPRge59wPOwj8jU7M9InurqMLYUAtE+ N+oXN6zxvBtdQdwo+fT2jfdrlN1A8PT3xiYaK/uSdhYJ83v1UAkNfPGdxMjsTLyF h2yyrkni2NDXDvcBZ+5usDAQQZSVt8ypH82BXVssFvZdNajonMs4Y/QIVCVdMFeD 3J2ZZG5AfeZ8/jxA3/tpv6fVeAdivHCtNa3Br23Q45CvC0MUVRRUxdeUAif7Sisw 1zkZI0M86StEGZizp8I0LifVd1sPl2IIcQVSO1ZiPtSfXVMjGi08BoGi3w== -----END CERTIFICATE-----Generated at Wed Aug 20 10:38:03 2025 by rpki-client