$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e34248a7-28aa-4aba-87a4-d72129e398c3.roa File: e34248a7-28aa-4aba-87a4-d72129e398c3.roa (raw, json) Hash identifier: gunDbuRKuTjKQXSY2Jyg0ZCnsR+MMqpPPOhsGMs7cnY= Subject key identifier: DC:89:49:E6:0B:D7:23:34:1E:2D:4B:89:64:11:A8:9A:5C:D6:0E:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 016DF73DCC7D2B0D49E8AAB46973C5B47CD0907B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e34248a7-28aa-4aba-87a4-d72129e398c3.roa Signing time: Tue 19 Aug 2025 15:10:10 +0000 ROA not before: Tue 19 Aug 2025 15:10:10 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.200.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6d:f7:3d:cc:7d:2b:0d:49:e8:aa:b4:69:73:c5:b4:7c:d0:90:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:10:10 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=efdb7c5548e1466e5ad6e58bf246aa446a37719a6707090d23325f91524efa7e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:93:b3:f0:b0:2f:16:e3:f2:34:23:e2:4c: bf:d1:62:a4:5f:44:62:0b:8b:8a:e3:cc:57:ee:f9: 56:be:ed:97:f3:77:d0:78:2c:e7:55:9b:35:0a:c6: 7f:1a:2b:19:d7:eb:fa:f0:c4:41:b2:3d:c4:76:2b: dd:8d:1d:24:61:fa:cf:86:5f:47:af:ac:e9:f3:1b: 37:b8:08:e7:15:b0:1f:ea:90:55:29:6a:6d:50:b5: ae:89:ca:21:1e:91:ca:6c:32:ff:3d:e2:ef:77:87: 53:c0:05:62:6d:97:8d:62:12:c6:67:e5:f0:c4:c0: fb:83:e5:98:53:9f:11:4e:27:92:93:30:31:f7:c1: f6:55:79:fd:61:34:a3:10:cf:b9:a7:d5:1f:db:2d: 8b:0d:08:97:aa:08:62:b5:c6:7c:5e:10:dc:4e:f9: ed:cc:cf:ae:5d:d9:f1:47:f4:18:f9:4e:bf:70:bb: a5:a5:e9:16:d1:f8:72:05:d6:2f:07:1a:49:89:ff: 8c:56:db:f9:4a:36:d9:20:7a:22:70:77:6b:4e:7e: 5b:27:82:d5:34:e4:d2:b2:45:ee:a0:44:2f:82:5f: 81:e8:75:af:03:0c:eb:44:a0:bb:7d:63:4f:b5:ee: d2:bc:bc:a5:85:f2:c9:36:63:b5:96:3a:cb:96:72: 8d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:89:49:E6:0B:D7:23:34:1E:2D:4B:89:64:11:A8:9A:5C:D6:0E:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e34248a7-28aa-4aba-87a4-d72129e398c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.200.0.0/13 Signature Algorithm: sha256WithRSAEncryption 0f:a1:86:40:fe:f3:20:b0:09:ae:e5:ed:39:16:01:b4:1a:c5: 43:66:29:2f:1b:7d:18:a7:58:67:9e:f4:87:da:18:c4:d8:20: e3:e8:46:f2:dd:07:3b:fa:0d:55:52:1a:39:9e:52:6c:21:9c: 2b:f2:8f:f2:dd:ae:71:70:53:d9:61:fb:e5:60:6a:42:73:83: b2:6c:43:0b:a5:69:2f:a4:9d:16:c9:ab:d9:97:82:10:a1:a6: f4:a6:86:6a:13:21:bf:6a:6f:a3:01:e9:ef:b4:39:c5:b5:50: 14:cd:b9:c9:f6:2f:49:4f:9d:ea:2d:51:b3:81:e3:2f:28:94: 5f:f8:af:16:21:bd:15:21:63:b0:a9:19:de:20:a5:2a:10:45: c6:ae:fc:55:df:71:fd:92:1d:20:b2:83:ad:82:52:57:bc:d6: 77:8f:c6:ab:13:4c:88:52:d8:38:0d:b5:24:4c:24:2c:7a:e2: 13:68:fb:7d:3a:c0:81:ff:e3:86:aa:56:63:a9:fd:c4:b9:16: 55:4b:74:c1:64:49:52:44:f5:48:02:71:34:5a:e4:24:e2:6a: 1c:0c:e1:d2:35:93:d0:8a:13:b3:13:a8:f8:51:c9:23:65:ad: ce:b0:cd:56:93:b9:0f:19:68:8a:d0:7e:eb:9f:45:99:8e:69: 2d:d1:67:cd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUAW33Pcx9Kw1J6Kq0aXPFtHzQkHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUxMDEwWhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmRiN2M1NTQ4ZTE0NjZlNWFkNmU1OGJmMjQ2YWE0NDZh Mzc3MTlhNjcwNzA5MGQyMzMyNWY5MTUyNGVmYTdlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCkmJOz8LAvFuPyNCPiTL/RYqRfRGILi4rjzFfu+Va+7Zfz d9B4LOdVmzUKxn8aKxnX6/rwxEGyPcR2K92NHSRh+s+GX0evrOnzGze4COcVsB/q kFUpam1Qta6JyiEekcpsMv894u93h1PABWJtl41iEsZn5fDEwPuD5ZhTnxFOJ5KT MDH3wfZVef1hNKMQz7mn1R/bLYsNCJeqCGK1xnxeENxO+e3Mz65d2fFH9Bj5Tr9w u6Wl6RbR+HIF1i8HGkmJ/4xW2/lKNtkgeiJwd2tOflsngtU05NKyRe6gRC+CX4Ho da8DDOtEoLt9Y0+17tK8vKWF8sk2Y7WWOsuWco1dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU3IlJ5gvXIzQeLUuJZBGomlzWDrgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzNDI0OGE3LTI4YWEtNGFiYS04N2E0LWQ3MjEyOWUzOThjMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMNyDANBgkqhkiG9w0BAQsFAAOCAQEAD6GGQP7zILAJruXtORYBtBrFQ2Yp Lxt9GKdYZ570h9oYxNgg4+hG8t0HO/oNVVIaOZ5SbCGcK/KP8t2ucXBT2WH75WBq QnODsmxDC6VpL6SdFsmr2ZeCEKGm9KaGahMhv2pvowHp77Q5xbVQFM25yfYvSU+d 6i1Rs4HjLyiUX/ivFiG9FSFjsKkZ3iClKhBFxq78Vd9x/ZIdILKDrYJSV7zWd4/G qxNMiFLYOA21JEwkLHriE2j7fTrAgf/jhqpWY6n9xLkWVUt0wWRJUkT1SAJxNFrk JOJqHAzh0jWT0IoTsxOo+FHJI2WtzrDNVpO5DxloitB+659FmY5pLdFnzQ== -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:35 2025 by rpki-client