$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44cc193c-f496-451b-abe3-1e07047c6e9c.roa File: 44cc193c-f496-451b-abe3-1e07047c6e9c.roa (raw, json) Hash identifier: d1JoQQE2Ve8mlPifepIJYYn24sxR9SSYOqASgJAn0ak= Subject key identifier: 2E:E2:F1:57:52:3F:85:72:E6:4C:F2:84:08:2F:A5:59:50:6A:A9:A0 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7DE81D30CBFE52D3042C1084FD05CB6F7CD6F406 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44cc193c-f496-451b-abe3-1e07047c6e9c.roa Signing time: Fri 11 Jul 2025 16:50:13 +0000 ROA not before: Fri 11 Jul 2025 16:50:13 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.2.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e8:1d:30:cb:fe:52:d3:04:2c:10:84:fd:05:cb:6f:7c:d6:f4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 16:50:13 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=8ca68c8342696606e0acb456e775713a36b89cc3d6cdce4a46bda9b3ed55f9a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:f8:1f:7a:83:f4:2f:dc:f3:9f:50:d4:17: 3d:2c:4a:62:ed:ae:ba:16:5c:63:90:e1:5a:d0:91: f2:57:67:07:07:8b:11:98:92:4f:7e:42:4b:70:53: f2:89:7b:7d:af:88:3f:f2:bd:da:b9:41:ee:56:3c: 07:ce:f4:63:85:02:9d:17:8e:80:54:39:db:c2:3c: cc:52:a0:40:33:98:f1:e8:89:ab:cc:4b:ba:22:04: 89:d6:d4:ef:6c:2d:d2:ee:8d:ce:5b:af:b6:24:0d: 78:b0:25:00:e7:4d:af:69:9c:c6:ba:02:d8:88:a3: 96:1c:73:18:1c:ac:5d:79:ba:25:b6:a3:ff:7a:d1: a7:07:b5:19:bf:3c:d9:96:e2:69:73:78:5f:fd:89: 40:0a:11:c4:06:80:c0:70:f4:0f:6c:61:dc:b0:e4: 22:2a:6d:a3:e6:af:7d:c3:44:40:ad:9f:9b:ef:26: fe:bd:cb:e2:1f:4c:a7:6e:dc:3b:35:1f:73:f1:64: 45:c3:a6:75:a8:57:18:91:6a:97:8a:4d:23:4b:bd: f6:82:9b:e4:93:0a:c4:4e:4d:69:8a:23:97:84:e8: fb:94:c9:6a:ed:3b:48:0b:e6:71:2a:66:60:85:93: 46:6d:21:56:7b:00:5b:13:9c:c5:ba:b6:3f:35:aa: 50:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E2:F1:57:52:3F:85:72:E6:4C:F2:84:08:2F:A5:59:50:6A:A9:A0 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44cc193c-f496-451b-abe3-1e07047c6e9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.58.0/24 Signature Algorithm: sha256WithRSAEncryption 75:f8:d5:1c:28:5e:a0:a9:87:0a:80:cb:49:d8:f3:f9:26:0d: 28:bc:98:33:1c:a0:47:11:6e:46:5b:ee:48:17:df:46:6a:17: ac:40:c1:09:03:94:73:19:80:90:8b:e1:43:eb:5b:91:c7:01: 03:b3:3d:13:d7:7c:dc:8f:40:0f:13:65:bf:3f:84:9d:cd:da: 4e:2d:23:ba:a4:dd:8e:06:21:e9:5c:9a:18:26:a3:d7:86:4c: 79:57:13:ac:5c:7a:3a:8b:51:09:8f:37:68:3f:f3:30:18:75: d5:5f:91:bc:15:ee:ce:a2:55:62:45:0c:2f:14:dc:d8:78:5e: 1e:ba:d1:b5:70:7c:1a:74:d9:cc:61:9a:85:b3:fb:c8:54:a5: fd:0a:b1:dc:52:22:ed:89:96:93:3f:ce:5b:f0:59:ae:ce:c2: da:ef:1c:fa:94:27:6d:bb:02:01:85:e3:5f:1e:fd:59:29:00: 92:90:81:9d:d7:ab:d7:fe:ac:24:66:3d:f2:a8:2d:fb:a0:f6: bd:7a:ca:0f:93:d5:60:64:7a:69:51:56:6c:d4:13:e7:42:cc: 43:90:ca:26:fb:25:70:5a:7e:1b:16:d1:23:31:ff:02:31:5e: 6a:75:9d:d8:0d:03:f7:2b:c8:1e:a5:96:61:be:e4:8a:95:d7: 1a:d3:3b:44 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfegdMMv+UtMELBCE/QXLb3zW9AYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTY1MDEzWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A4Y2E2OGM4MzQyNjk2NjA2ZTBhY2I0NTZlNzc1NzEzYTM2 Yjg5Y2MzZDZjZGNlNGE0NmJkYTliM2VkNTVmOWEyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCrrPgfeoP0L9zzn1DUFz0sSmLtrroWXGOQ4VrQkfJXZwcH ixGYkk9+QktwU/KJe32viD/yvdq5Qe5WPAfO9GOFAp0XjoBUOdvCPMxSoEAzmPHo iavMS7oiBInW1O9sLdLujc5br7YkDXiwJQDnTa9pnMa6AtiIo5YccxgcrF15uiW2 o/960acHtRm/PNmW4mlzeF/9iUAKEcQGgMBw9A9sYdyw5CIqbaPmr33DRECtn5vv Jv69y+IfTKdu3Ds1H3PxZEXDpnWoVxiRapeKTSNLvfaCm+STCsROTWmKI5eE6PuU yWrtO0gL5nEqZmCFk0ZtIVZ7AFsTnMW6tj81qlCjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULuLxV1I/hXLmTPKECC+lWVBqqaAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ0Y2MxOTNjLWY0OTYtNDUxYi1hYmUzLTFlMDcwNDdjNmU5Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAjowDQYJKoZIhvcNAQELBQADggEBAHX41RwoXqCphwqAy0nY8/kmDSi8 mDMcoEcRbkZb7kgX30ZqF6xAwQkDlHMZgJCL4UPrW5HHAQOzPRPXfNyPQA8TZb8/ hJ3N2k4tI7qk3Y4GIelcmhgmo9eGTHlXE6xcejqLUQmPN2g/8zAYddVfkbwV7s6i VWJFDC8U3Nh4Xh660bVwfBp02cxhmoWz+8hUpf0KsdxSIu2JlpM/zlvwWa7Owtrv HPqUJ227AgGF418e/VkpAJKQgZ3Xq9f+rCRmPfKoLfug9r16yg+T1WBkemlRVmzU E+dCzEOQyib7JXBafhsW0SMx/wIxXmp1ndgNA/cryB6llmG+5IqV1xrTO0Q= -----END CERTIFICATE-----Generated at Mon Aug 4 21:32:27 2025 by rpki-client