$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9142125-5a62-47e0-9551-2d4f79e3efcc.roa File: e9142125-5a62-47e0-9551-2d4f79e3efcc.roa (raw, json) Hash identifier: eFv0eUdZKA4L7jsivxubYfXDDBwvSkTJRYyOCz6JycE= Subject key identifier: E5:EF:29:76:7E:3E:76:38:F9:05:F1:EE:71:B8:EA:6B:2A:D5:91:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51B6342892A33C1F8E546905ED503276F7291CEA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9142125-5a62-47e0-9551-2d4f79e3efcc.roa Signing time: Tue 08 Jul 2025 18:01:34 +0000 ROA not before: Tue 08 Jul 2025 18:01:34 +0000 ROA not after: Tue 12 Aug 2025 23:59:59 +0000 asID: 8987 IP address blocks: 35.71.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 31 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b6:34:28:92:a3:3c:1f:8e:54:69:05:ed:50:32:76:f7:29:1c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 8 18:01:34 2025 GMT Not After : Aug 12 23:59:59 2025 GMT Subject: serialNumber=0080bba0638f21e18eb86c193708538eeacb0a3348d39d4f6d3557690ea37e02, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:40:7e:44:ea:bc:14:26:c3:a4:20:00:2e: 71:86:62:60:20:7c:cf:52:b8:2f:ff:5b:63:0c:4a: b3:5b:3c:6d:14:79:33:8a:a3:12:eb:c5:d7:c4:d4: ad:b6:15:cf:30:67:be:8b:61:6b:3f:f2:a0:cf:e8: f0:37:25:c7:f2:4d:bb:97:99:7c:07:44:ed:cc:72: 80:f3:87:32:83:59:91:8a:7e:00:ee:e6:06:ad:86: c3:e8:17:65:82:2c:c0:46:4f:8a:2e:2a:e9:e2:f7: 5b:3a:53:db:1f:5f:02:12:b3:e8:c5:fc:33:a6:75: cf:04:6f:58:97:2a:66:1c:49:6c:3e:89:41:43:e1: 6a:e3:da:3e:82:e6:c0:83:62:3d:6f:16:75:73:b7: a7:9f:52:64:6f:8a:07:5c:d6:f6:5f:2b:f7:ea:d0: 7b:e4:89:52:24:e3:db:85:27:60:98:f1:88:1d:82: 58:a4:41:a6:ca:e0:3d:05:90:99:5b:35:d6:1c:10: b4:c8:0c:07:6b:1a:d2:04:45:32:a9:c9:70:f2:17: 70:c7:5c:52:ea:6d:d0:0e:63:60:e0:f9:04:6f:39: e7:16:36:a1:49:06:d2:a3:8b:20:78:15:4d:9e:95: 11:2e:1e:e5:58:1d:74:d0:a5:b3:bb:65:81:df:fd: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EF:29:76:7E:3E:76:38:F9:05:F1:EE:71:B8:EA:6B:2A:D5:91:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9142125-5a62-47e0-9551-2d4f79e3efcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.71.115.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:bf:98:30:16:df:07:1a:8c:8a:db:11:49:df:16:99:ab:02: 0a:ee:6c:a9:e1:c2:33:6b:89:26:a7:fe:97:d7:e6:a8:a9:2a: 7d:fd:b4:b4:83:ed:4d:15:41:2c:1f:3b:a5:21:b8:2b:f9:c1: c4:5f:95:5a:54:ae:ba:cf:99:b0:e4:e7:0d:0b:49:3f:f1:cc: c0:a2:07:39:56:c0:7b:98:af:61:ff:46:ff:c3:8f:af:df:c0: e9:d0:1e:b1:57:94:cb:cd:88:f3:86:b9:31:83:51:b0:3d:59: e6:56:05:37:98:08:be:d7:50:a2:eb:fa:94:b2:85:5d:c3:b7: 87:91:ee:6e:82:02:72:f2:16:8c:27:a8:ff:e0:7a:2d:fb:5c: 2d:cb:55:21:e1:86:e8:15:6c:cd:d6:b7:a0:71:14:43:98:e9: 23:6a:91:52:b0:41:5e:30:b1:cf:84:70:61:4e:5e:aa:a5:41: 1c:ef:91:4a:58:1c:3a:67:22:d7:44:80:4c:90:f6:20:46:63: 07:ee:a8:de:67:64:2d:d5:b2:6d:95:68:21:3a:a6:d5:25:33: 05:e5:bb:0b:ac:a7:c2:29:77:44:d4:d8:9c:32:67:61:01:62: a1:c4:20:f9:67:90:21:d8:3e:5c:f9:52:cc:5c:e2:2c:c5:9d: b3:a9:b1:e1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUbY0KJKjPB+OVGkF7VAydvcpHOowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzA4MTgwMTM0WhcNMjUwODEyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwMDgwYmJhMDYzOGYyMWUxOGViODZjMTkzNzA4NTM4ZWVh Y2IwYTMzNDhkMzlkNGY2ZDM1NTc2OTBlYTM3ZTAyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjyUB+ROq8FCbDpCAALnGGYmAgfM9SuC//W2MMSrNbPG0U eTOKoxLrxdfE1K22Fc8wZ76LYWs/8qDP6PA3JcfyTbuXmXwHRO3McoDzhzKDWZGK fgDu5gathsPoF2WCLMBGT4ouKuni91s6U9sfXwISs+jF/DOmdc8Eb1iXKmYcSWw+ iUFD4Wrj2j6C5sCDYj1vFnVzt6efUmRvigdc1vZfK/fq0HvkiVIk49uFJ2CY8Ygd glikQabK4D0FkJlbNdYcELTIDAdrGtIERTKpyXDyF3DHXFLqbdAOY2Dg+QRvOecW NqFJBtKjiyB4FU2elREuHuVYHXTQpbO7ZYHf/Z/XAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU5e8pdn4+djj5BfHucbjqayrVkcUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U5MTQyMTI1LTVhNjItNDdlMC05NTUxLTJkNGY3OWUzZWZjYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjR3MwDQYJKoZIhvcNAQELBQADggEBAA2/mDAW3wcajIrbEUnfFpmrAgru bKnhwjNriSan/pfX5qipKn39tLSD7U0VQSwfO6UhuCv5wcRflVpUrrrPmbDk5w0L ST/xzMCiBzlWwHuYr2H/Rv/Dj6/fwOnQHrFXlMvNiPOGuTGDUbA9WeZWBTeYCL7X UKLr+pSyhV3Dt4eR7m6CAnLyFownqP/gei37XC3LVSHhhugVbM3Wt6BxFEOY6SNq kVKwQV4wsc+EcGFOXqqlQRzvkUpYHDpnItdEgEyQ9iBGYwfuqN5nZC3Vsm2VaCE6 ptUlMwXluwusp8Ipd0TU2JwyZ2EBYqHEIPlnkCHYPlz5Usxc4izFnbOpseE= -----END CERTIFICATE-----Generated at Wed Jul 30 18:34:45 2025 by rpki-client