$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3accc87d-599a-442a-8bb4-2b9230c736ba.roa File: 3accc87d-599a-442a-8bb4-2b9230c736ba.roa (raw, json) Hash identifier: RHGidEcRlbA6l9MaPCtEtxFYRVb7dJAVc+J5Y/HAXsg= Subject key identifier: 75:DF:B7:AF:6F:5C:20:4E:7B:D7:C8:8B:9C:05:7B:35:10:00:28:58 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4D49EB63D40973A52827F5C31D89D4D0026D7EDB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3accc87d-599a-442a-8bb4-2b9230c736ba.roa Signing time: Tue 29 Jul 2025 00:50:32 +0000 ROA not before: Tue 29 Jul 2025 00:50:32 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.102.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:49:eb:63:d4:09:73:a5:28:27:f5:c3:1d:89:d4:d0:02:6d:7e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 00:50:32 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=d8b3828a867e65d06414ea01c4fde56fcc9b0198d94568f4b578077f8012e3e6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4a:dd:3b:83:9b:83:94:f1:c0:8a:66:56:b0: 66:04:b9:56:57:04:82:dd:3f:71:d2:83:a7:8d:eb: a3:cf:c6:36:a3:c0:ab:e5:35:a2:25:c9:13:a9:82: 44:c0:78:96:71:b8:d2:ea:48:cf:18:65:f9:f0:c2: 90:21:a7:27:4b:3f:05:b2:c5:93:4f:9e:bd:42:f3: 79:49:cd:3e:a2:3c:cc:32:31:76:a0:94:3f:33:35: 44:25:ef:34:9c:cc:5b:3b:db:f9:c7:df:17:d5:f1: 03:0e:fc:1f:64:91:f4:49:88:36:3d:2c:88:6f:e3: a6:5d:93:1a:b2:a0:fa:b0:a1:50:93:2a:47:1d:d5: cc:e1:7d:92:a4:44:fc:ee:ac:a5:fc:f8:da:eb:6e: 88:d7:db:a4:4c:dd:cb:88:ab:5d:26:8c:1a:1f:a7: 9c:b4:57:0d:b8:22:03:fe:51:db:f6:0c:81:77:ec: f6:5f:7e:68:20:51:84:10:4a:26:57:b5:0a:91:0d: 70:8a:63:90:d8:90:ae:70:fb:b9:a5:11:3c:c3:69: 53:91:4a:49:4e:ad:35:f9:31:93:c4:e4:b7:7d:01: 6d:2c:32:a6:24:b4:79:29:32:fe:08:aa:25:9a:48: ce:d0:65:9e:92:fc:fc:bb:44:5e:4c:5e:4c:e0:fc: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DF:B7:AF:6F:5C:20:4E:7B:D7:C8:8B:9C:05:7B:35:10:00:28:58 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3accc87d-599a-442a-8bb4-2b9230c736ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.102.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3d:d1:9a:bd:ac:ca:31:4b:22:6d:ba:e2:84:d6:82:ee:34:77: 41:51:6c:5d:2f:b4:25:1a:98:ab:f9:37:d1:67:f6:31:fc:2b: d7:8e:5f:1e:81:bd:33:66:d4:97:d6:ea:6a:a2:84:eb:c6:7c: 76:c6:2d:1b:2b:a1:95:d8:fe:99:bf:4d:cb:c1:7f:68:0b:44: 16:22:98:c5:4d:c4:71:96:8a:ec:26:11:f3:5a:e9:ae:35:0e: 21:66:25:fa:67:04:b5:4a:38:2c:02:78:ce:79:81:d6:49:c3: b1:ad:47:a3:5f:b9:d8:59:2e:f8:dd:ee:18:94:15:00:7f:ab: 23:7d:b2:e6:84:83:4a:93:f2:4d:4e:47:d6:82:7e:8a:d9:ec: 2b:91:53:82:c2:ed:ff:89:50:f2:e5:54:5c:6d:61:ac:ac:4f: 8d:57:77:d2:73:b6:4b:46:82:82:b8:81:b7:59:e3:46:07:5c: 94:1d:7f:7a:94:8a:51:5b:a6:08:17:1b:c3:a8:e6:ed:2f:05: 5e:ab:65:0d:05:7b:52:99:74:c0:c6:cd:0a:20:7e:6a:4d:de: 56:ce:1f:74:c0:c8:97:84:9a:49:41:8f:d7:d3:85:7c:03:6f: 9c:a8:06:e3:ec:37:df:a1:fa:a0:26:35:fc:b1:0e:35:d1:36: 81:cd:06:fd -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTUnrY9QJc6UoJ/XDHYnU0AJtftswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MDA1MDMyWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BkOGIzODI4YTg2N2U2NWQwNjQxNGVhMDFjNGZkZTU2ZmNj OWIwMTk4ZDk0NTY4ZjRiNTc4MDc3ZjgwMTJlM2U2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBSt07g5uDlPHAimZWsGYEuVZXBILdP3HSg6eN66PPxjaj wKvlNaIlyROpgkTAeJZxuNLqSM8YZfnwwpAhpydLPwWyxZNPnr1C83lJzT6iPMwy MXaglD8zNUQl7zSczFs72/nH3xfV8QMO/B9kkfRJiDY9LIhv46ZdkxqyoPqwoVCT Kkcd1czhfZKkRPzurKX8+NrrbojX26RM3cuIq10mjBofp5y0Vw24IgP+Udv2DIF3 7PZffmggUYQQSiZXtQqRDXCKY5DYkK5w+7mlETzDaVORSklOrTX5MZPE5Ld9AW0s MqYktHkpMv4IqiWaSM7QZZ6S/Py7RF5MXkzg/DsRAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUdd+3r29cIE5718iLnAV7NRAAKFgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNhY2NjODdkLTU5OWEtNDQyYS04YmI0LTJiOTIzMGM3MzZiYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEDZjANBgkqhkiG9w0BAQsFAAOCAQEAPdGavazKMUsibbrihNaC7jR3QVFs XS+0JRqYq/k30Wf2Mfwr145fHoG9M2bUl9bqaqKE68Z8dsYtGyuhldj+mb9Ny8F/ aAtEFiKYxU3EcZaK7CYR81rprjUOIWYl+mcEtUo4LAJ4znmB1knDsa1Ho1+52Fku +N3uGJQVAH+rI32y5oSDSpPyTU5H1oJ+itnsK5FTgsLt/4lQ8uVUXG1hrKxPjVd3 0nO2S0aCgriBt1njRgdclB1/epSKUVumCBcbw6jm7S8FXqtlDQV7Upl0wMbNCiB+ ak3eVs4fdMDIl4SaSUGP19OFfANvnKgG4+w336H6oCY1/LEONdE2gc0G/Q== -----END CERTIFICATE-----Generated at Mon Aug 4 21:41:18 2025 by rpki-client