$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41b87226-5945-4d21-8a4a-c06abd581d07.roa File: 41b87226-5945-4d21-8a4a-c06abd581d07.roa (raw, json) Hash identifier: ljCyKocdT8PAdNEy9jwQTBhuvjb9FlMdo4Rdcsp4fIs= Subject key identifier: 9A:F7:46:32:8E:F3:7B:B7:39:78:8B:10:F9:00:35:F1:0E:75:A9:0F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1CCA45B634707EC570B572AF4236F4EF0FDD0FCC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41b87226-5945-4d21-8a4a-c06abd581d07.roa Signing time: Tue 05 Aug 2025 16:11:46 +0000 ROA not before: Tue 05 Aug 2025 16:11:46 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.163.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ca:45:b6:34:70:7e:c5:70:b5:72:af:42:36:f4:ef:0f:dd:0f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 16:11:46 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=18ca48bceae298b780ad9653ead42549c43e414bb6363a0f386b69f1dfd13dab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:77:16:03:42:0d:b4:e0:a0:04:9d:d3:34: fa:16:32:cb:ec:90:d6:6c:cc:dc:be:54:21:14:47: 03:3f:ff:8a:79:98:68:dd:66:9e:5e:c0:91:56:2b: f8:79:a2:7f:90:96:3f:47:57:39:27:bd:a4:fc:f1: 44:db:97:61:6d:bb:54:1c:03:a8:c4:f4:b0:c9:59: 7d:3e:8e:21:b8:54:9c:1f:72:85:b6:51:bc:31:65: 08:e4:03:1e:0d:2e:65:1f:e2:11:f6:d4:6b:e9:f4: de:dd:3c:20:45:6a:8c:05:c5:62:82:12:70:67:0b: 59:05:1c:7d:7f:de:31:79:7f:3b:6f:21:3f:0c:24: 5b:a0:02:ff:b3:6a:25:c5:a6:e9:dc:de:23:b8:ef: 67:cc:86:bd:86:9a:96:6f:54:6c:1a:7c:1a:e5:e4: 6f:67:36:5a:11:b9:75:82:51:e1:01:62:56:17:61: e1:d5:e0:25:ea:60:7e:28:97:4d:da:ca:bf:0e:61: 49:07:c0:6e:9e:0b:3b:56:dd:29:41:cd:af:d4:f6: 2f:72:72:2e:50:e5:c7:7f:06:5d:9e:66:5a:bb:4d: 1b:eb:4d:0f:72:b3:41:d0:9f:ea:8c:36:be:c8:d2: 84:25:65:9f:8b:6f:24:f0:b3:e2:86:2c:fd:4a:e7: 20:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F7:46:32:8E:F3:7B:B7:39:78:8B:10:F9:00:35:F1:0E:75:A9:0F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/41b87226-5945-4d21-8a4a-c06abd581d07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.163.0.0/16 Signature Algorithm: sha256WithRSAEncryption 98:cf:e9:7a:3e:31:4c:3b:37:93:08:33:96:d8:35:13:42:c0: 02:fc:d8:8c:af:b2:9c:bd:86:3c:9b:6d:fe:22:1d:a9:a4:5d: ff:ca:0b:89:fd:f0:63:3d:dd:1b:02:a0:b4:6d:01:85:b8:f8: 93:1c:3a:7e:bb:20:dc:f7:74:14:bd:b5:b1:a9:2c:35:3f:dd: 37:f0:18:b9:2b:16:3f:a8:bd:2d:47:2b:70:b9:2c:e2:69:9e: 24:7f:49:2d:3d:39:5e:8e:72:0f:98:5c:ab:b6:35:cd:96:f8: 8c:08:4d:25:a0:80:11:11:9a:b1:3f:b4:2f:01:24:0c:25:b0: a3:95:ed:b2:ca:22:ba:2e:98:7f:d4:4f:88:49:32:e8:7c:03: 45:57:7b:54:ce:ce:d5:15:3d:5d:62:19:eb:b5:30:7a:7b:47: f9:e7:e1:62:9c:a1:aa:e1:55:ea:32:42:12:68:ac:16:4d:40: 24:35:b1:1a:13:df:93:e8:91:eb:f8:e2:1d:a6:bb:75:f4:9f: cf:2f:d3:f2:23:cb:cd:d8:fc:23:49:ed:9c:f8:c6:41:cd:c8: 72:3e:36:10:95:14:9e:69:69:91:9c:35:6b:08:8e:ab:09:97: 87:a9:20:14:8f:b4:f6:89:9a:2f:ed:84:ab:59:06:87:d1:71: 85:7f:af:a3 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHMpFtjRwfsVwtXKvQjb07w/dD8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTYxMTQ2WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AxOGNhNDhiY2VhZTI5OGI3ODBhZDk2NTNlYWQ0MjU0OWM0 M2U0MTRiYjYzNjNhMGYzODZiNjlmMWRmZDEzZGFiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCnjHcWA0INtOCgBJ3TNPoWMsvskNZszNy+VCEURwM//4p5 mGjdZp5ewJFWK/h5on+Qlj9HVzknvaT88UTbl2Ftu1QcA6jE9LDJWX0+jiG4VJwf coW2UbwxZQjkAx4NLmUf4hH21Gvp9N7dPCBFaowFxWKCEnBnC1kFHH1/3jF5fztv IT8MJFugAv+zaiXFpunc3iO472fMhr2GmpZvVGwafBrl5G9nNloRuXWCUeEBYlYX YeHV4CXqYH4ol03ayr8OYUkHwG6eCztW3SlBza/U9i9yci5Q5cd/Bl2eZlq7TRvr TQ9ys0HQn+qMNr7I0oQlZZ+LbyTws+KGLP1K5yCBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUmvdGMo7ze7c5eIsQ+QA18Q51qQ8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQxYjg3MjI2LTU5NDUtNGQyMS04YTRhLWMwNmFiZDU4MWQwNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASozANBgkqhkiG9w0BAQsFAAOCAQEAmM/pej4xTDs3kwgzltg1E0LAAvzY jK+ynL2GPJtt/iIdqaRd/8oLif3wYz3dGwKgtG0Bhbj4kxw6frsg3Pd0FL21saks NT/dN/AYuSsWP6i9LUcrcLks4mmeJH9JLT05Xo5yD5hcq7Y1zZb4jAhNJaCAERGa sT+0LwEkDCWwo5Xtssoiui6Yf9RPiEky6HwDRVd7VM7O1RU9XWIZ67UwentH+efh YpyhquFV6jJCEmisFk1AJDWxGhPfk+iR6/jiHaa7dfSfzy/T8iPLzdj8I0ntnPjG Qc3Icj42EJUUnmlpkZw1awiOqwmXh6kgFI+09omaL+2Eq1kGh9FxhX+vow== -----END CERTIFICATE-----Generated at Tue Aug 5 21:37:31 2025 by rpki-client