$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/838ca71a-3a02-4d64-8bc8-8186149ea0fb.roa File: 838ca71a-3a02-4d64-8bc8-8186149ea0fb.roa (raw, json) Hash identifier: f8eNEnPJmgdhfH2AwaMz+ve/RjsxfUtG31evO6moZ9U= Subject key identifier: 9A:00:93:DA:89:73:8F:1C:AC:2A:A4:5E:04:BB:8A:E2:28:E1:27:98 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7FEEA129C1A7A23C9D8A2AC09A1C8E601B8C0BDB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/838ca71a-3a02-4d64-8bc8-8186149ea0fb.roa Signing time: Tue 22 Jul 2025 15:10:21 +0000 ROA not before: Tue 22 Jul 2025 15:10:21 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.56.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ee:a1:29:c1:a7:a2:3c:9d:8a:2a:c0:9a:1c:8e:60:1b:8c:0b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 22 15:10:21 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=f0cebcae63845498402d9171c6e7462bfb015b8be3808734edfaba657fb5c2de, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0a:28:6a:84:80:12:12:d8:9e:bf:08:01:1b: f8:4a:c1:93:9a:b4:17:d1:9d:c3:1c:af:33:18:07: ed:ae:68:24:a6:d5:1e:94:04:8b:98:54:60:c0:85: 80:c3:3b:bd:7c:a2:d5:f2:27:e7:13:04:5d:36:cf: 96:a3:e7:c9:55:b4:31:a8:38:d8:7a:2b:cf:2a:d4: e6:c3:99:3d:64:21:3a:45:04:5e:63:c9:d5:60:b3: d0:27:06:5e:f7:bf:cf:9d:4d:62:d9:25:fd:c8:ad: b3:03:91:49:7b:53:93:b5:2b:57:c0:2d:fc:03:a0: 59:a8:29:9a:fc:c7:cd:e2:0b:de:37:1b:fa:20:3f: d0:41:d4:99:2d:57:b2:22:1d:2a:03:74:e7:26:8b: 2b:8c:50:c9:ee:66:89:8a:5a:d2:ad:f7:fb:90:79: 25:5b:52:06:2c:cc:af:b3:cc:6d:a8:0d:00:fd:bf: 48:ff:47:f2:cf:14:d3:31:77:d3:6f:a7:e1:f4:35: 93:2a:6c:fe:52:5b:a8:d8:94:36:ae:3f:1c:17:0d: d1:f4:48:3f:11:5f:dd:5f:1f:9e:a6:ee:45:9a:37: c7:23:44:17:e8:b8:d3:d9:5a:0d:53:1b:be:52:2f: cb:f1:f1:ee:c9:70:f6:62:e8:e3:4c:b3:84:25:e0: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:00:93:DA:89:73:8F:1C:AC:2A:A4:5E:04:BB:8A:E2:28:E1:27:98 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/838ca71a-3a02-4d64-8bc8-8186149ea0fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.56.64.0/18 Signature Algorithm: sha256WithRSAEncryption 8d:bc:14:1e:fb:f1:16:31:73:18:bd:6f:91:50:71:f6:f4:3d: d9:74:93:89:92:a6:da:2e:d2:23:65:1c:26:10:81:6d:84:56: 87:cb:0c:81:c6:11:24:dd:db:46:7a:af:cc:3e:e6:80:3b:c6: d1:9f:46:f9:a1:59:50:c5:3d:ed:50:fd:a1:f9:47:7d:99:0a: b9:24:e1:24:4b:7f:75:dd:15:39:0a:27:a8:86:89:3a:35:c5: 87:73:48:ec:6a:8f:a8:7d:14:25:29:f6:70:19:8f:1c:87:d6: 63:86:0c:96:df:34:72:99:d6:61:62:da:65:b4:ca:4f:2a:e2: 3a:17:b3:6f:b5:a6:2d:68:83:1f:14:a1:8b:d2:6e:a5:a0:09: 0d:6f:52:c3:fe:a9:97:c3:b7:86:07:be:5e:55:87:80:0c:98: 73:9a:eb:8e:46:c3:3f:af:2b:4e:f8:fb:c2:49:54:77:d3:da: 28:24:d7:d2:fe:c4:77:ab:5d:b4:bb:1e:5a:5a:9f:51:d9:27: e6:ab:a8:95:9a:fc:c0:54:90:ed:8c:a2:8f:2d:e7:c7:a7:af: aa:8e:2d:a4:ec:1e:4c:c1:c6:fd:5f:91:3b:fd:d3:79:4f:ea: 6f:5b:ba:c6:f3:91:56:8d:b3:38:d7:8f:82:20:7f:9b:04:fd: 49:bc:4d:36 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf+6hKcGnojydiirAmhyOYBuMC9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzIyMTUxMDIxWhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0BmMGNlYmNhZTYzODQ1NDk4NDAyZDkxNzFjNmU3NDYyYmZi MDE1YjhiZTM4MDg3MzRlZGZhYmE2NTdmYjVjMmRlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZCihqhIASEtievwgBG/hKwZOatBfRncMcrzMYB+2uaCSm 1R6UBIuYVGDAhYDDO718otXyJ+cTBF02z5aj58lVtDGoONh6K88q1ObDmT1kITpF BF5jydVgs9AnBl73v8+dTWLZJf3IrbMDkUl7U5O1K1fALfwDoFmoKZr8x83iC943 G/ogP9BB1JktV7IiHSoDdOcmiyuMUMnuZomKWtKt9/uQeSVbUgYszK+zzG2oDQD9 v0j/R/LPFNMxd9Nvp+H0NZMqbP5SW6jYlDauPxwXDdH0SD8RX91fH56m7kWaN8cj RBfouNPZWg1TG75SL8vx8e7JcPZi6ONMs4Ql4LS1AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmgCT2olzjxysKqReBLuK4ijhJ5gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgzOGNhNzFhLTNhMDItNGQ2NC04YmM4LTgxODYxNDllYTBmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYNOEAwDQYJKoZIhvcNAQELBQADggEBAI28FB778RYxcxi9b5FQcfb0Pdl0 k4mSptou0iNlHCYQgW2EVofLDIHGESTd20Z6r8w+5oA7xtGfRvmhWVDFPe1Q/aH5 R32ZCrkk4SRLf3XdFTkKJ6iGiTo1xYdzSOxqj6h9FCUp9nAZjxyH1mOGDJbfNHKZ 1mFi2mW0yk8q4joXs2+1pi1ogx8UoYvSbqWgCQ1vUsP+qZfDt4YHvl5Vh4AMmHOa 645Gwz+vK074+8JJVHfT2igk19L+xHerXbS7Hlpan1HZJ+arqJWa/MBUkO2Moo8t 58enr6qOLaTsHkzBxv1fkTv903lP6m9busbzkVaNszjXj4Igf5sE/Um8TTY= -----END CERTIFICATE-----Generated at Mon Aug 4 21:42:36 2025 by rpki-client