$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ce4b90b-db91-4055-b4fc-a74953c24881.roa File: 2ce4b90b-db91-4055-b4fc-a74953c24881.roa (raw, json) Hash identifier: gIYc2LqTME1hGerRoQQUUZQb3ZLiTnAC2lATeg0trsQ= Subject key identifier: F1:31:F4:B2:EC:FB:68:76:5C:22:A7:B6:EE:0E:A1:C4:66:34:FB:95 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2346EC77F884E73A7F86BAA81D30E6FFFFD23252 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ce4b90b-db91-4055-b4fc-a74953c24881.roa Signing time: Tue 05 Aug 2025 19:37:04 +0000 ROA not before: Tue 05 Aug 2025 19:37:04 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.40.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:46:ec:77:f8:84:e7:3a:7f:86:ba:a8:1d:30:e6:ff:ff:d2:32:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 19:37:04 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=f5d68b46dceefd7f25e655cfb356621916a280c4322a47af30a3f41fa8a193f1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:fc:d0:8c:44:07:fb:bb:15:31:c9:aa:06: 99:a1:de:8d:09:39:3a:4f:c7:e2:ae:98:9f:0f:fa: 89:81:4d:e1:c7:55:36:3f:6f:c0:af:a5:c8:cc:5e: 65:e3:52:51:db:2b:79:50:fb:9e:e0:76:b6:12:c3: fc:e1:2e:e6:37:c0:a9:cb:96:4d:52:04:ee:0b:28: ef:57:37:da:e6:55:29:8f:e4:89:e3:aa:b6:7b:1b: 6b:12:9d:c9:38:06:6c:1b:76:15:a9:f3:ec:85:36: 50:23:5e:e4:ec:5f:67:b9:76:9a:6d:18:a8:cf:8a: d9:fd:67:dc:ca:b8:9d:da:b2:a4:40:0b:45:6f:69: 61:a4:63:45:b4:5b:2d:0c:fd:a1:16:f1:b9:b8:4c: 22:29:93:a3:87:20:5a:d2:0b:9d:07:cd:5e:ce:7c: fa:ea:d6:b3:10:38:95:7f:82:45:99:66:7b:c3:bd: c5:24:c6:c7:80:0b:71:5d:cd:bb:98:55:07:03:c6: a9:19:ae:39:c1:c9:4c:e5:17:67:3c:2a:a4:aa:2b: 07:2b:53:b5:0f:1e:1d:f2:00:ba:af:14:bf:a7:ca: fc:59:10:c1:62:3d:69:ec:98:5d:aa:d8:c8:6a:75: 56:90:3c:d8:fe:a9:d8:2f:9a:44:18:38:bd:e5:99: e2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:31:F4:B2:EC:FB:68:76:5C:22:A7:B6:EE:0E:A1:C4:66:34:FB:95 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2ce4b90b-db91-4055-b4fc-a74953c24881.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.40.0.0/13 Signature Algorithm: sha256WithRSAEncryption 1c:45:ad:61:d2:55:a9:06:e9:c6:18:b0:57:65:72:fe:b8:df: b8:c7:e7:f4:49:b4:3b:84:bc:57:2f:9c:19:ee:c4:c0:f5:db: 14:64:09:73:4b:fe:57:8a:57:91:ae:bc:9f:ff:4a:65:70:f5: e4:07:1f:17:bd:dc:e0:7a:58:0f:eb:87:86:8e:a7:8c:34:e9: 11:38:5d:34:f4:d8:ec:6f:1d:7a:9d:b8:3e:f0:16:47:a3:b2: 79:c1:a0:90:ad:a0:aa:91:74:bf:a3:56:7b:8e:38:34:4d:85: 5e:bb:d3:c2:1c:2a:28:5e:80:69:f9:19:c9:11:38:f7:21:5a: c9:a2:71:2c:59:3b:84:2b:c4:fd:88:8d:ee:34:ed:7a:e9:fb: e2:07:c7:82:84:7e:40:4d:5f:bb:3b:07:52:2b:cc:7d:b0:e6: 93:69:c3:a1:fa:aa:be:e5:7a:ee:64:5f:f6:ac:dc:88:f0:9b: 67:47:84:8c:27:9c:41:a5:f4:98:01:f7:59:4e:bc:4c:bd:dd: 65:88:db:8e:e4:dc:98:57:e1:94:db:ce:ca:a6:0a:fa:18:20: d1:c5:9b:ef:16:4a:12:81:b9:c5:1d:ac:f9:d1:30:f3:92:fd: 17:f9:a2:4a:32:21:95:a5:97:99:58:e9:15:ec:01:56:99:e8: 6a:2b:18:bd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUI0bsd/iE5zp/hrqoHTDm///SMlIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTkzNzA0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNWQ2OGI0NmRjZWVmZDdmMjVlNjU1Y2ZiMzU2NjIxOTE2 YTI4MGM0MzIyYTQ3YWYzMGEzZjQxZmE4YTE5M2YxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCerPzQjEQH+7sVMcmqBpmh3o0JOTpPx+KumJ8P+omBTeHH VTY/b8CvpcjMXmXjUlHbK3lQ+57gdrYSw/zhLuY3wKnLlk1SBO4LKO9XN9rmVSmP 5InjqrZ7G2sSnck4BmwbdhWp8+yFNlAjXuTsX2e5dpptGKjPitn9Z9zKuJ3asqRA C0VvaWGkY0W0Wy0M/aEW8bm4TCIpk6OHIFrSC50HzV7OfPrq1rMQOJV/gkWZZnvD vcUkxseAC3FdzbuYVQcDxqkZrjnByUzlF2c8KqSqKwcrU7UPHh3yALqvFL+nyvxZ EMFiPWnsmF2q2MhqdVaQPNj+qdgvmkQYOL3lmeK1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU8TH0suz7aHZcIqe27g6hxGY0+5UwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjZTRiOTBiLWRiOTEtNDA1NS1iNGZjLWE3NDk1M2MyNDg4MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwMDKDANBgkqhkiG9w0BAQsFAAOCAQEAHEWtYdJVqQbpxhiwV2Vy/rjfuMfn 9Em0O4S8Vy+cGe7EwPXbFGQJc0v+V4pXka68n/9KZXD15AcfF73c4HpYD+uHho6n jDTpEThdNPTY7G8dep24PvAWR6OyecGgkK2gqpF0v6NWe444NE2FXrvTwhwqKF6A afkZyRE49yFayaJxLFk7hCvE/YiN7jTteun74gfHgoR+QE1fuzsHUivMfbDmk2nD ofqqvuV67mRf9qzciPCbZ0eEjCecQaX0mAH3WU68TL3dZYjbjuTcmFfhlNvOyqYK +hgg0cWb7xZKEoG5xR2s+dEw85L9F/miSjIhlaWXmVjpFewBVpnoaisYvQ== -----END CERTIFICATE-----Generated at Thu Aug 7 11:08:00 2025 by rpki-client