$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/236df78f-a49d-4b06-bc68-474beb091e64.roa File: 236df78f-a49d-4b06-bc68-474beb091e64.roa (raw, json) Hash identifier: ze/+ZWH8TD8kRTtRFeActZBuMJ3iGJmwovYEgJdeh9M= Subject key identifier: 6B:7A:D4:D7:6C:21:DC:B1:BF:6D:BC:42:05:BB:26:C3:31:73:43:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 593F0F773E7C23756BE5F108EF2F51430CB9EB72 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/236df78f-a49d-4b06-bc68-474beb091e64.roa Signing time: Fri 25 Jul 2025 15:11:37 +0000 ROA not before: Fri 25 Jul 2025 15:11:37 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.224.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:3f:0f:77:3e:7c:23:75:6b:e5:f1:08:ef:2f:51:43:0c:b9:eb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 15:11:37 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=5caf804439991d18a65f40cc7df2718108425ab8e6a0071718e78de826adcac2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:a9:4a:b8:a8:68:23:50:9e:ce:bb:b4:ed: 45:68:82:0c:f1:95:95:7f:a8:62:39:99:74:7b:eb: 97:eb:87:17:3f:70:5b:0e:cd:4f:11:48:1f:a8:23: dd:d9:1f:7c:ec:b3:04:d2:d8:69:48:b0:17:48:bd: ad:00:bb:99:72:3a:15:9a:7f:19:89:a3:d8:9c:0d: 16:b2:47:1f:03:47:42:44:6e:f7:f8:61:83:59:79: 08:35:af:6d:6b:cc:bd:80:70:6c:ce:12:49:bd:1a: 6b:08:f0:63:3d:a8:e8:1b:32:e1:f6:5f:61:90:c5: fd:43:2e:04:1d:d2:ec:a9:55:4e:6a:b1:e2:6a:8b: 67:f2:6c:8f:8e:b7:6c:d0:51:e8:2c:bf:90:1f:ee: 87:93:b1:43:ff:20:0f:5a:50:37:01:08:68:ed:ac: 40:3b:bb:76:be:6f:0c:14:58:db:21:f8:93:9a:b8: 4e:5e:0f:80:e0:71:28:5f:7e:d1:a0:a8:22:07:1e: 70:2e:6c:a0:9a:22:3a:43:3d:6f:16:cd:31:3b:79: 9a:b6:39:fe:0e:8f:f3:31:9b:bd:e2:fa:80:72:8b: 64:37:da:76:d1:5d:fd:c8:a8:fe:ac:2c:96:44:39: be:44:1e:2c:6e:a7:8d:64:0c:a7:f5:19:68:b4:f1: 1a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7A:D4:D7:6C:21:DC:B1:BF:6D:BC:42:05:BB:26:C3:31:73:43:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/236df78f-a49d-4b06-bc68-474beb091e64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.224.0.0/12 Signature Algorithm: sha256WithRSAEncryption 23:65:81:82:30:49:f6:b0:35:ba:b1:ac:97:71:2c:d1:02:59: 94:11:bb:1d:1d:fa:a7:33:8b:2e:6d:ca:10:c1:9a:e2:e5:bc: ff:97:2c:b7:9c:02:14:75:3d:d8:e2:e2:ca:8b:3b:ae:f4:a5: 36:b0:0e:98:70:f5:c9:51:2c:d2:5f:07:e7:13:67:61:d7:34: 06:7f:b3:35:6f:df:90:db:dc:82:1a:ef:19:58:39:61:94:2c: 99:fa:48:34:a2:f5:2c:0c:50:93:a2:85:4b:43:f2:46:3f:66: d8:eb:f6:7d:10:84:76:5a:f2:d3:0a:3f:66:4a:21:b5:ff:2f: 82:b7:82:0d:c0:08:ee:c2:10:bd:bb:c3:63:5d:46:00:7b:c6: 75:9f:be:84:af:ee:d4:82:78:8d:ae:90:9f:18:05:79:cb:02: 26:93:24:40:c2:66:03:62:ef:4e:46:37:10:19:b3:e9:12:35: ef:82:2d:2e:a1:fe:6d:b0:e2:5e:c8:81:76:58:bd:d6:a4:89: ad:f1:02:1d:d2:3e:00:38:6f:0b:01:2b:4b:6e:f5:fa:16:92: 99:9d:5a:9d:b2:b6:54:16:24:39:c8:f6:19:e5:6b:87:05:e8: 77:c4:11:1a:50:3d:f0:08:d8:68:5a:9c:3c:bc:e2:7b:11:d9: 6e:1f:b8:45 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWT8Pdz58I3Vr5fEI7y9RQwy563IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTUxMTM3WhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0A1Y2FmODA0NDM5OTkxZDE4YTY1ZjQwY2M3ZGYyNzE4MTA4 NDI1YWI4ZTZhMDA3MTcxOGU3OGRlODI2YWRjYWMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCptalKuKhoI1Cezru07UVoggzxlZV/qGI5mXR765frhxc/ cFsOzU8RSB+oI93ZH3zsswTS2GlIsBdIva0Au5lyOhWafxmJo9icDRayRx8DR0JE bvf4YYNZeQg1r21rzL2AcGzOEkm9GmsI8GM9qOgbMuH2X2GQxf1DLgQd0uypVU5q seJqi2fybI+Ot2zQUegsv5Af7oeTsUP/IA9aUDcBCGjtrEA7u3a+bwwUWNsh+JOa uE5eD4DgcShfftGgqCIHHnAubKCaIjpDPW8WzTE7eZq2Of4Oj/Mxm73i+oByi2Q3 2nbRXf3IqP6sLJZEOb5EHixup41kDKf1GWi08Rp/AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUa3rU12wh3LG/bbxCBbsmwzFzQ1AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzIzNmRmNzhmLWE0OWQtNGIwNi1iYzY4LTQ3NGJlYjA5MWU2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwQD4DANBgkqhkiG9w0BAQsFAAOCAQEAI2WBgjBJ9rA1urGsl3Es0QJZlBG7 HR36pzOLLm3KEMGa4uW8/5cst5wCFHU92OLiyos7rvSlNrAOmHD1yVEs0l8H5xNn Ydc0Bn+zNW/fkNvcghrvGVg5YZQsmfpINKL1LAxQk6KFS0PyRj9m2Ov2fRCEdlry 0wo/Zkohtf8vgreCDcAI7sIQvbvDY11GAHvGdZ++hK/u1IJ4ja6QnxgFecsCJpMk QMJmA2LvTkY3EBmz6RI174ItLqH+bbDiXsiBdli91qSJrfECHdI+ADhvCwErS271 +haSmZ1anbK2VBYkOcj2GeVrhwXod8QRGlA98AjYaFqcPLziexHZbh+4RQ== -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:56 2025 by rpki-client