$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3944a2-5f27-42a6-ad08-0f4f1914ba5d.roa File: 7d3944a2-5f27-42a6-ad08-0f4f1914ba5d.roa (raw, json) Hash identifier: 3gxkxfCpVai4U37bRorfInyklhPag0HrURVzF/ptLCM= Subject key identifier: F6:DF:DA:70:16:AC:B6:90:42:84:A9:D3:5C:08:CA:DA:11:84:11:99 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2A5456416447204760878BA3FEDEAF8350E4E115 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3944a2-5f27-42a6-ad08-0f4f1914ba5d.roa Signing time: Mon 04 Aug 2025 18:10:09 +0000 ROA not before: Mon 04 Aug 2025 18:10:09 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.0.0.0/10 maxlen: 10 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:54:56:41:64:47:20:47:60:87:8b:a3:fe:de:af:83:50:e4:e1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 4 18:10:09 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=3c20895bfb3f7a02ab473ce0fca928b67bd7e0dddc36b4fc34ba661d4a5107c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:a8:9a:0c:ee:6c:6b:5a:31:ab:1c:6e:4d: be:2d:67:57:63:99:03:33:6b:bf:a4:60:9b:62:ae: 5a:72:aa:bf:f6:ad:52:94:5b:41:93:9f:36:45:1a: 44:37:e0:27:2e:11:19:ba:ff:f1:69:31:ab:b3:f5: af:f4:5c:b2:1f:d3:c3:ee:20:78:13:2c:06:8b:06: 74:4e:38:39:f6:26:9d:e8:25:c3:2f:d9:6b:f0:f2: 00:d5:f8:1d:80:e4:29:a9:65:f5:01:1a:20:dd:ec: 54:48:60:5a:b3:bf:69:87:95:5b:83:74:4f:a9:a0: d4:43:49:79:8e:aa:66:ae:da:b9:69:14:28:61:20: a7:5e:9e:20:54:a2:23:3e:6d:e7:f2:93:78:4b:eb: 3d:5b:8d:ef:44:37:3c:48:94:47:1e:22:23:6f:1b: f6:34:33:6b:7e:eb:a3:15:3b:71:a3:0b:42:25:d7: e9:fc:14:31:7a:f9:c6:b0:76:ed:8b:3e:dd:c1:54: 45:2c:ef:e1:bf:fb:03:48:4b:9e:7b:c5:d8:25:6d: d0:c6:fa:7a:a6:37:e7:08:25:66:0c:09:18:6b:1c: 00:52:ed:d2:d8:e8:97:a4:63:ca:eb:df:16:e0:c0: 26:4c:77:7b:1d:85:23:c0:59:28:16:d2:30:31:6b: 9e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DF:DA:70:16:AC:B6:90:42:84:A9:D3:5C:08:CA:DA:11:84:11:99 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d3944a2-5f27-42a6-ad08-0f4f1914ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.0.0.0/10 Signature Algorithm: sha256WithRSAEncryption 99:44:9b:e2:9a:37:43:cf:c8:ed:4e:8f:c9:4a:e1:d9:7c:16: fe:e0:8e:bf:b4:74:88:bd:56:70:90:3d:71:e8:f8:e8:93:54: c5:7d:51:3c:22:37:a4:cc:58:ee:b0:a3:fd:b4:53:7f:6a:45: 83:09:73:ae:b9:1d:f2:5e:9b:7f:4e:14:58:72:90:5b:fc:c9: fe:a9:f3:6e:fd:17:98:5d:e8:5a:db:47:56:66:7a:06:cf:f8: ff:fa:31:2c:2b:a7:60:aa:1c:08:ec:e9:0d:8d:7b:64:1f:61: 42:11:31:82:d4:e6:6f:c4:e2:30:fd:62:a8:90:d1:d2:ea:c4: cc:ba:3d:cf:76:7c:24:0a:60:18:51:3c:4d:10:83:99:f5:1b: 02:85:24:b4:04:5f:3d:41:1b:3e:52:86:19:f4:29:ca:9c:05: 5d:b9:73:e7:34:b8:e8:94:97:94:5a:c0:60:13:d1:06:83:43: f7:fc:9b:08:c8:6f:e5:8f:1e:d3:03:9c:bf:95:62:f0:82:65: c5:67:66:3e:8f:85:e8:09:8d:65:37:e2:7b:3e:f2:1b:27:31: 43:39:11:a5:64:b8:c1:26:59:21:17:58:8f:57:a5:2e:89:ee: 67:35:97:00:dc:16:f0:3c:78:58:c1:1b:64:90:55:d5:87:a1: d2:52:f7:15 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUKlRWQWRHIEdgh4uj/t6vg1Dk4RUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA0MTgxMDA5WhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AzYzIwODk1YmZiM2Y3YTAyYWI0NzNjZTBmY2E5MjhiNjdi ZDdlMGRkZGMzNmI0ZmMzNGJhNjYxZDRhNTEwN2M3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCpSaiaDO5sa1oxqxxuTb4tZ1djmQMza7+kYJtirlpyqr/2 rVKUW0GTnzZFGkQ34CcuERm6//FpMauz9a/0XLIf08PuIHgTLAaLBnROODn2Jp3o JcMv2Wvw8gDV+B2A5CmpZfUBGiDd7FRIYFqzv2mHlVuDdE+poNRDSXmOqmau2rlp FChhIKdeniBUoiM+befyk3hL6z1bje9ENzxIlEceIiNvG/Y0M2t+66MVO3GjC0Il 1+n8FDF6+cawdu2LPt3BVEUs7+G/+wNIS557xdglbdDG+nqmN+cIJWYMCRhrHABS 7dLY6JekY8rr3xbgwCZMd3sdhSPAWSgW0jAxa57dAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU9t/acBastpBChKnTXAjK2hGEEZkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkMzk0NGEyLTVmMjctNDJhNi1hZDA4LTBmNGYxOTE0YmE1ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwYDADANBgkqhkiG9w0BAQsFAAOCAQEAmUSb4po3Q8/I7U6PyUrh2XwW/uCO v7R0iL1WcJA9cej46JNUxX1RPCI3pMxY7rCj/bRTf2pFgwlzrrkd8l6bf04UWHKQ W/zJ/qnzbv0XmF3oWttHVmZ6Bs/4//oxLCunYKocCOzpDY17ZB9hQhExgtTmb8Ti MP1iqJDR0urEzLo9z3Z8JApgGFE8TRCDmfUbAoUktARfPUEbPlKGGfQpypwFXblz 5zS46JSXlFrAYBPRBoND9/ybCMhv5Y8e0wOcv5Vi8IJlxWdmPo+F6AmNZTfiez7y GycxQzkRpWS4wSZZIRdYj1elLonuZzWXANwW8Dx4WMEbZJBV1Yeh0lL3FQ== -----END CERTIFICATE-----Generated at Mon Aug 4 21:36:49 2025 by rpki-client