$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5693c97e-641a-4459-b64e-fccacf1c539a.roa File: 5693c97e-641a-4459-b64e-fccacf1c539a.roa (raw, json) Hash identifier: HgumFPeT/qyOycZIGni02e0JEtsinnULjA7GgW8OJtw= Subject key identifier: 21:84:6F:CF:5A:F3:1E:01:88:D3:5F:09:81:73:5B:E1:06:BD:07:4D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3261AC1AB12A2FB3C2B47289D503B2D3E21BBAC9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5693c97e-641a-4459-b64e-fccacf1c539a.roa Signing time: Fri 25 Jul 2025 15:21:13 +0000 ROA not before: Fri 25 Jul 2025 15:21:13 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 34.250.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:61:ac:1a:b1:2a:2f:b3:c2:b4:72:89:d5:03:b2:d3:e2:1b:ba:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 15:21:13 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=23a11503a83993494e975383ab0a7fded8b698aa85cca1b539de46297d4f4e91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:7b:41:a2:19:42:98:f9:d8:0c:07:9f:e4: 6a:22:6f:3f:1e:49:1b:ac:20:9c:fe:fa:b3:1f:ce: 84:0a:0e:ca:97:32:88:19:bb:d7:83:08:0b:68:a4: 30:00:d7:f8:30:16:4c:09:de:a2:cd:44:ba:30:6f: 79:a7:09:60:1a:47:ce:52:dc:78:81:80:fe:e6:01: 06:ea:0f:c8:ec:de:92:83:ed:92:83:5a:73:09:ca: 19:7e:08:83:d3:58:46:91:4c:ae:b9:37:b2:7e:79: 31:8b:4b:29:4d:ae:3e:93:27:c7:28:1a:69:38:07: 86:f0:69:57:da:57:68:6a:db:51:a5:b8:3e:69:fd: 42:0c:74:f8:ca:38:87:c6:63:96:b3:34:2e:dc:d3: a4:fb:ba:16:89:34:75:40:6d:0d:7b:9f:38:e8:d4: 58:74:2d:0a:7c:74:bf:f4:e6:87:a4:ca:9c:33:32: c5:6f:cc:c7:e1:6f:7d:d8:c9:a7:c5:a6:2f:7d:1c: a7:db:e4:11:1a:1c:2a:c1:dc:24:8f:7e:db:50:85: 28:cb:85:59:9c:88:9f:c2:f0:90:ba:61:b3:eb:aa: 7e:e7:a4:d2:62:d4:c7:64:99:61:66:a9:ec:71:13: c2:65:f3:9b:07:cf:a6:07:3f:0f:82:56:4a:02:f2: 32:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:84:6F:CF:5A:F3:1E:01:88:D3:5F:09:81:73:5B:E1:06:BD:07:4D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5693c97e-641a-4459-b64e-fccacf1c539a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 34.250.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7c:c7:7e:fb:2a:eb:f5:c2:77:55:b1:22:a1:fb:52:ac:9a:9c: 00:78:b3:86:ae:ab:57:dd:14:b1:36:9f:0e:19:07:b0:cd:2c: 43:51:7a:bc:55:4d:ce:96:9a:8b:92:0f:dd:fd:85:5e:d6:b5: 17:21:be:d7:07:b8:a1:7b:63:aa:c8:ec:67:e7:0f:55:c4:b4: 28:27:70:2f:75:21:d9:29:cf:2b:c8:07:65:a2:ce:61:16:44: f6:40:ad:fc:d0:fa:1d:ff:b4:fe:63:eb:9a:b9:71:e1:20:9f: f4:42:d7:79:ee:a9:7d:f3:7c:39:6c:4a:3f:ed:22:72:3a:a0: 4e:af:57:44:e5:6f:9b:dc:29:33:11:f0:b7:4a:2b:e2:54:a0: 96:f7:74:3d:8d:54:65:e9:f1:23:58:4a:95:5c:79:e1:8f:ca: 1e:16:ff:2b:4e:c8:3a:d8:19:83:e5:fd:19:29:87:bb:b6:05: b4:12:a6:7c:c0:db:83:c1:28:98:12:01:c6:f2:77:61:07:d7: 50:80:7d:4c:85:a6:7e:9d:e7:78:b8:4d:60:e1:d4:c0:22:c2: 88:bd:65:ef:11:94:34:88:71:f3:b6:6e:c2:14:bb:01:df:d4: 7c:cf:5a:0d:05:c7:e5:8c:43:05:5a:ad:f2:02:54:43:e5:9d: ea:65:33:76 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUMmGsGrEqL7PCtHKJ1QOy0+IbuskwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTUyMTEzWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyM2ExMTUwM2E4Mzk5MzQ5NGU5NzUzODNhYjBhN2ZkZWQ4 YjY5OGFhODVjY2ExYjUzOWRlNDYyOTdkNGY0ZTkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZlXtBohlCmPnYDAef5Goibz8eSRusIJz++rMfzoQKDsqX MogZu9eDCAtopDAA1/gwFkwJ3qLNRLowb3mnCWAaR85S3HiBgP7mAQbqD8js3pKD 7ZKDWnMJyhl+CIPTWEaRTK65N7J+eTGLSylNrj6TJ8coGmk4B4bwaVfaV2hq21Gl uD5p/UIMdPjKOIfGY5azNC7c06T7uhaJNHVAbQ17nzjo1Fh0LQp8dL/05oekypwz MsVvzMfhb33YyafFpi99HKfb5BEaHCrB3CSPfttQhSjLhVmciJ/C8JC6YbPrqn7n pNJi1MdkmWFmqexxE8Jl85sHz6YHPw+CVkoC8jIDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIYRvz1rzHgGI018JgXNb4Qa9B00wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzU2OTNjOTdlLTY0MWEtNDQ1OS1iNjRlLWZjY2FjZjFjNTM5YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYi+kAwDQYJKoZIhvcNAQELBQADggEBAHzHfvsq6/XCd1WxIqH7UqyanAB4 s4auq1fdFLE2nw4ZB7DNLENRerxVTc6WmouSD939hV7WtRchvtcHuKF7Y6rI7Gfn D1XEtCgncC91IdkpzyvIB2WizmEWRPZArfzQ+h3/tP5j65q5ceEgn/RC13nuqX3z fDlsSj/tInI6oE6vV0Tlb5vcKTMR8LdKK+JUoJb3dD2NVGXp8SNYSpVceeGPyh4W /ytOyDrYGYPl/Rkph7u2BbQSpnzA24PBKJgSAcbyd2EH11CAfUyFpn6d53i4TWDh 1MAiwoi9Ze8RlDSIcfO2bsIUuwHf1HzPWg0Fx+WMQwVarfICVEPlneplM3Y= -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:44 2025 by rpki-client