$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa File: 7103788d-660f-45af-bb1a-9f73a3d9bd83.roa (raw, json) Hash identifier: H4++WtHGzLhzs2T0/DQrb97RlWUybLFD9wsNG/TgewQ= Subject key identifier: D1:43:AC:7C:0E:A0:85:A3:51:4E:70:B7:0D:88:49:F3:30:9E:A1:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7D8943FA1D015F77ADAA39E19287255E5B56D6C5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa Signing time: Tue 29 Jul 2025 15:30:12 +0000 ROA not before: Tue 29 Jul 2025 15:30:12 +0000 ROA not after: Tue 02 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:89:43:fa:1d:01:5f:77:ad:aa:39:e1:92:87:25:5e:5b:56:d6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 29 15:30:12 2025 GMT Not After : Sep 2 23:59:59 2025 GMT Subject: serialNumber=5439862c5b1700f7426a66c80688d0c95e2810289ba02ed2b765cc7099010d55, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:bf:e7:4e:6b:33:25:7d:11:67:e5:2c:8c: a4:22:14:02:b7:6b:a4:75:3e:a5:c0:92:8f:aa:66: b6:ce:19:9a:a5:2f:5d:6f:1e:10:10:cc:2a:b5:1d: 79:51:54:ad:14:b4:a8:99:ea:94:46:b9:5d:72:7a: 8b:7a:57:82:72:28:16:e0:1c:dc:49:da:6c:ba:7a: b9:e8:e0:3d:7a:07:74:23:14:95:5d:07:5f:7e:a5: 5b:05:b3:7c:58:6f:2e:81:08:f1:68:7e:09:f6:bb: 65:21:a9:55:62:d5:48:9d:10:e2:32:30:00:ac:42: d7:49:8d:bb:a9:43:2a:0d:d9:9b:5d:7e:19:f9:74: 99:61:fa:3b:d3:fe:71:fd:6c:17:e7:1c:91:f6:3b: d5:8a:d0:31:5b:de:99:e3:d7:a6:df:cc:2e:f3:3a: 2b:19:7f:22:19:5e:55:5b:2a:0f:f7:35:1a:a9:b9: 70:12:49:43:08:10:aa:1a:d7:c6:0a:a7:34:83:3e: c4:81:22:e3:e9:2f:a0:ed:f3:7f:89:b7:56:3a:0e: a5:4a:d5:b6:b9:c0:36:6a:75:ab:9c:5c:95:6e:59: ba:36:fd:93:7e:c4:c3:4d:e5:cb:fa:b1:42:8e:8e: 1f:06:8b:95:f8:26:0d:18:81:73:d9:05:ea:f1:56: e9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:43:AC:7C:0E:A0:85:A3:51:4E:70:B7:0D:88:49:F3:30:9E:A1:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7103788d-660f-45af-bb1a-9f73a3d9bd83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.33.32.0/24 Signature Algorithm: sha256WithRSAEncryption b4:40:df:b6:7c:d8:0b:61:59:24:ef:f5:7d:b9:f5:7f:38:36: 39:06:69:53:8a:7a:d7:5b:32:de:94:40:df:50:e5:1a:83:08: 00:3a:61:ab:89:9c:f1:5a:d9:e1:53:ec:1f:88:fd:97:59:fc: f1:b1:f0:9a:3d:95:02:6a:aa:e4:69:87:5c:d6:de:e5:46:f7: 6b:09:00:fa:9a:ab:22:a4:e2:8b:36:15:a5:04:32:9d:3c:00: 17:9c:2f:fe:33:57:d1:93:f4:e1:37:6e:4c:ef:e8:96:be:39: c5:4a:ad:60:bb:c4:bb:9c:47:5a:fa:8d:8a:84:37:b2:e5:36: 63:ab:fd:21:6d:d1:47:6b:28:8c:2e:17:87:28:ca:85:0b:a9: ff:53:b6:cc:7d:5a:7a:5a:7f:ff:f1:8e:66:b0:1d:33:60:78: ba:aa:80:f7:96:6a:2c:8f:bd:d4:06:f9:de:fd:a1:d0:aa:83: c6:e0:50:b2:2e:2a:b3:19:b8:00:57:66:2b:8f:1f:98:ef:81: bb:74:bc:a0:9a:21:c4:b9:34:77:d2:c0:29:06:13:7c:06:0e: 10:df:d0:5c:e8:bd:a5:e8:ed:ee:e5:53:e9:1f:07:39:d8:4e: bb:3d:cf:cc:29:2b:51:b1:1c:a1:62:d1:e3:8f:da:f6:79:6c: 83:86:58:2a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUfYlD+h0BX3etqjnhkoclXltW1sUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI5MTUzMDEyWhcNMjUwOTAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDM5ODYyYzViMTcwMGY3NDI2YTY2YzgwNjg4ZDBjOTVl MjgxMDI4OWJhMDJlZDJiNzY1Y2M3MDk5MDEwZDU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyPb/nTmszJX0RZ+UsjKQiFAK3a6R1PqXAko+qZrbOGZql L11vHhAQzCq1HXlRVK0UtKiZ6pRGuV1yeot6V4JyKBbgHNxJ2my6erno4D16B3Qj FJVdB19+pVsFs3xYby6BCPFofgn2u2UhqVVi1UidEOIyMACsQtdJjbupQyoN2Ztd fhn5dJlh+jvT/nH9bBfnHJH2O9WK0DFb3pnj16bfzC7zOisZfyIZXlVbKg/3NRqp uXASSUMIEKoa18YKpzSDPsSBIuPpL6Dt83+Jt1Y6DqVK1ba5wDZqdaucXJVuWbo2 /ZN+xMNN5cv6sUKOjh8Gi5X4Jg0YgXPZBerxVunbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU0UOsfA6ghaNRTnC3DYhJ8zCeoTkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzcxMDM3ODhkLTY2MGYtNDVhZi1iYjFhLTlmNzNhM2Q5YmQ4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADISAwDQYJKoZIhvcNAQELBQADggEBALRA37Z82AthWSTv9X259X84NjkG aVOKetdbMt6UQN9Q5RqDCAA6YauJnPFa2eFT7B+I/ZdZ/PGx8Jo9lQJqquRph1zW 3uVG92sJAPqaqyKk4os2FaUEMp08ABecL/4zV9GT9OE3bkzv6Ja+OcVKrWC7xLuc R1r6jYqEN7LlNmOr/SFt0UdrKIwuF4coyoULqf9Ttsx9Wnpaf//xjmawHTNgeLqq gPeWaiyPvdQG+d79odCqg8bgULIuKrMZuABXZiuPH5jvgbt0vKCaIcS5NHfSwCkG E3wGDhDf0FzovaXo7e7lU+kfBznYTrs9z8wpK1GxHKFi0eOP2vZ5bIOGWCo= -----END CERTIFICATE-----Generated at Mon Aug 4 22:27:06 2025 by rpki-client