$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/538fe09f-33dc-4586-9523-b530760023f2.roa File: 538fe09f-33dc-4586-9523-b530760023f2.roa (raw, json) Hash identifier: jR5jDI2qhk/QuHgFVDZthnw/M+1A7tgX+XQ9UNv1BXQ= Subject key identifier: 68:26:B7:00:A4:1C:66:C4:AC:0D:4B:85:A7:FE:A5:A2:B2:53:06:79 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D70FDAF9742F4D91A63720127C74085376F56D7 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/538fe09f-33dc-4586-9523-b530760023f2.roa Signing time: Tue 29 Jul 2025 16:30:09 +0000 ROA not before: Tue 29 Jul 2025 16:30:09 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.116.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:70:fd:af:97:42:f4:d9:1a:63:72:01:27:c7:40:85:37:6f:56:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 16:30:09 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=a78319a09ffc26f7d21489b8b6eca2e1a640851dc11cfdb79094f36ea2a28b9c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:75:65:cc:e8:4d:d9:03:ee:45:77:9f:3d:1d: 8d:d6:3d:fd:b2:58:51:fa:10:73:62:9a:e9:68:ed: 17:ed:87:b6:75:94:a2:89:c4:be:fe:8c:ef:18:e9: 61:be:4b:23:e1:a7:f3:fd:f7:6b:d6:82:f9:eb:8b: f5:23:24:e3:fc:bc:c0:9b:6c:e1:00:0c:cd:f6:04: a2:38:52:53:88:1d:5f:4a:39:1a:7c:65:95:c5:65: ae:89:0a:06:36:0f:f6:74:22:b3:22:87:b2:6d:47: eb:8c:ee:75:fc:d8:6e:7e:49:6f:ee:70:0a:c0:1d: 8e:8a:48:c0:54:74:d5:dc:8a:74:54:cc:7c:28:ba: d1:02:3b:19:5f:47:2d:d4:7e:16:9a:e5:4e:49:3b: 5c:57:31:f6:1e:da:4e:d5:cd:e2:44:ec:84:7e:37: a5:d1:db:cc:6d:fd:bc:43:e9:61:12:45:b0:b6:9b: be:42:a7:af:7b:c7:45:6a:2d:3b:de:72:89:76:f1: 71:a7:2e:d6:59:60:49:29:84:fc:b3:05:7f:95:4b: 12:10:7e:fb:d8:50:3c:c2:c5:20:c7:56:11:4d:8d: 7d:6b:4c:f7:24:de:6a:ba:e3:1e:39:98:31:51:48: ea:b9:49:04:9a:13:fb:c5:14:e6:96:d8:62:dd:43: d9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:26:B7:00:A4:1C:66:C4:AC:0D:4B:85:A7:FE:A5:A2:B2:53:06:79 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/538fe09f-33dc-4586-9523-b530760023f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.116.0.0/14 Signature Algorithm: sha256WithRSAEncryption 89:ce:43:19:0d:f2:72:91:4b:85:16:51:d5:ae:96:22:72:0f: 7d:eb:be:80:49:b1:58:9b:37:25:1e:5f:09:4c:5c:e0:59:71: 03:de:2b:96:d4:01:67:b0:f0:50:57:e7:78:8a:62:95:6c:13: 26:51:86:36:b0:50:85:1f:9b:a8:66:56:c6:d4:71:dd:16:fa: dc:c1:e1:5d:4a:14:73:d5:af:08:54:3b:47:89:fb:dc:d6:80: dd:ec:60:80:ee:86:33:1d:87:15:66:e1:cb:a4:c8:bb:e9:aa: cf:e1:49:91:3b:ef:4f:1b:d7:ad:e1:49:fa:55:47:f7:25:09: 23:04:5a:82:20:f8:4a:81:bb:c2:7e:4a:fd:44:2f:3b:a0:e4: 77:88:b7:8a:0d:24:76:5d:56:b5:8e:4b:ae:9a:a7:f3:e4:1c: 6c:9b:2c:53:66:81:08:08:59:5f:41:19:e4:5c:7b:e3:cc:4c: 23:dd:56:59:50:f5:6c:85:df:9a:5f:0c:ff:76:45:b4:f0:4f: 35:8a:76:4e:f8:ae:04:e1:f5:6a:c4:08:3a:70:fa:00:28:23: 04:29:0a:76:9a:ce:60:bd:51:a8:30:72:62:d9:51:b3:47:ac: f4:c7:56:74:c9:a0:19:f1:bb:3d:89:5f:76:5b:07:4c:e0:e9: ae:c8:43:16 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbXD9r5dC9NkaY3IBJ8dAhTdvVtcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTYzMDA5WhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzgzMTlhMDlmZmMyNmY3ZDIxNDg5YjhiNmVjYTJlMWE2 NDA4NTFkYzExY2ZkYjc5MDk0ZjM2ZWEyYTI4YjljMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMdWXM6E3ZA+5Fd589HY3WPf2yWFH6EHNimulo7Rfth7Z1 lKKJxL7+jO8Y6WG+SyPhp/P992vWgvnri/UjJOP8vMCbbOEADM32BKI4UlOIHV9K ORp8ZZXFZa6JCgY2D/Z0IrMih7JtR+uM7nX82G5+SW/ucArAHY6KSMBUdNXcinRU zHwoutECOxlfRy3Ufhaa5U5JO1xXMfYe2k7VzeJE7IR+N6XR28xt/bxD6WESRbC2 m75Cp697x0VqLTvecol28XGnLtZZYEkphPyzBX+VSxIQfvvYUDzCxSDHVhFNjX1r TPck3mq64x45mDFRSOq5SQSaE/vFFOaW2GLdQ9lpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaCa3AKQcZsSsDUuFp/6lorJTBnkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzUzOGZlMDlmLTMzZGMtNDU4Ni05NTIzLWI1MzA3NjAwMjNmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwISdDANBgkqhkiG9w0BAQsFAAOCAQEAic5DGQ3ycpFLhRZR1a6WInIPfeu+ gEmxWJs3JR5fCUxc4FlxA94rltQBZ7DwUFfneIpilWwTJlGGNrBQhR+bqGZWxtRx 3Rb63MHhXUoUc9WvCFQ7R4n73NaA3exggO6GMx2HFWbhy6TIu+mqz+FJkTvvTxvX reFJ+lVH9yUJIwRagiD4SoG7wn5K/UQvO6Dkd4i3ig0kdl1WtY5Lrpqn8+QcbJss U2aBCAhZX0EZ5Fx748xMI91WWVD1bIXfml8M/3ZFtPBPNYp2TviuBOH1asQIOnD6 ACgjBCkKdprOYL1RqDByYtlRs0es9MdWdMmgGfG7PYlfdlsHTODprshDFg== -----END CERTIFICATE-----Generated at Wed Aug 6 00:50:29 2025 by rpki-client