$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9caad36d-063d-49da-a4a1-c451dbfdba52.roa File: 9caad36d-063d-49da-a4a1-c451dbfdba52.roa (raw, json) Hash identifier: CxpZsXh7l22NKrEOycsd9O63MsQRA64iXuErZFtQsx8= Subject key identifier: 9B:50:24:13:1D:28:1D:D9:1C:C9:24:4B:75:22:27:D2:FE:7F:C6:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 407B62C2CF4CFF69C16AAF05FD174C9B6FE1437B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9caad36d-063d-49da-a4a1-c451dbfdba52.roa Signing time: Fri 11 Jul 2025 16:40:21 +0000 ROA not before: Fri 11 Jul 2025 16:40:21 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.72.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7b:62:c2:cf:4c:ff:69:c1:6a:af:05:fd:17:4c:9b:6f:e1:43:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 16:40:21 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=6b69e2810bcb3b9c6c056803ca42175d61ae6f79d5765914a01a9bdda3225471, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0d:8b:f8:20:d7:b3:73:cb:ef:4b:cc:c5:71: f5:fb:73:07:bf:19:32:6b:ad:0e:e6:7f:ef:2e:0f: b7:fe:6f:43:5d:a9:f5:c7:69:59:c7:67:4f:49:ea: 18:13:05:67:24:a4:71:8e:3b:f4:bc:4c:f5:2e:05: 68:f7:5b:c2:09:99:cf:57:e7:c8:84:5c:a7:c5:08: b7:67:23:20:24:ef:53:90:18:0a:3e:a2:cd:72:0b: 6a:3a:e6:1a:ba:45:98:e5:14:b8:c8:5a:21:e7:9f: 42:e2:e1:8e:a5:fb:8e:59:97:0b:05:fe:60:17:cd: e0:0d:3b:81:8e:5c:89:01:24:50:07:19:2b:0a:dc: 2a:3b:11:c6:cc:4c:cd:1c:05:99:81:2f:9a:19:47: 17:d5:e0:62:3a:cb:f0:70:d7:57:90:a9:5c:8b:8b: 7d:1a:97:60:c0:65:da:7b:d9:b7:20:66:52:3f:53: 07:c6:9b:91:91:fb:8c:5b:24:b2:3d:e6:2d:c3:08: cf:29:91:32:94:c4:1a:75:64:fc:a6:e2:5b:74:15: 76:5e:f8:61:a5:9d:0e:fb:bc:98:bc:45:c6:4a:12: bd:b3:13:31:a1:66:13:8d:86:17:df:57:3d:ac:fd: a0:8e:5b:f5:da:95:de:75:4f:59:ab:19:52:53:5e: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:50:24:13:1D:28:1D:D9:1C:C9:24:4B:75:22:27:D2:FE:7F:C6:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9caad36d-063d-49da-a4a1-c451dbfdba52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.72.0.0/16 Signature Algorithm: sha256WithRSAEncryption 77:c9:45:1e:44:8e:83:80:7a:7d:7b:e8:f5:f1:c3:12:3e:18: 15:84:f2:57:3e:81:a9:e5:12:87:22:b2:20:b6:59:c6:02:93: 11:d1:92:cc:55:32:e2:f4:02:05:a1:e9:c4:f5:d8:55:29:46: 4f:87:3d:bd:62:f2:f4:d9:00:8e:86:55:0d:d4:4d:c8:4f:2b: a4:c4:4d:56:10:18:b1:2f:1b:82:a0:a0:16:8a:00:1a:69:9a: 38:8b:02:a7:8f:1f:39:51:e8:86:82:03:fe:80:e0:f1:6f:22: bd:db:53:61:9c:d2:28:fc:3d:fd:76:74:35:2e:e4:c3:87:10: 92:8e:af:c0:89:51:db:98:6d:c5:60:11:97:f3:ab:97:99:bf: 22:d7:8d:cb:02:43:cd:1e:cb:75:3f:4f:5b:88:94:89:aa:a1: 7d:01:e8:30:4d:20:f8:07:44:49:51:96:79:bc:91:20:09:f9: be:3c:2e:49:df:d5:74:53:5a:c9:65:91:b4:06:33:57:86:8c: 4e:32:29:93:5d:a9:37:ce:3f:15:00:0f:3b:08:f4:23:98:12: 45:34:22:cc:19:b6:26:70:4f:49:93:34:c0:5f:f1:55:21:f1: a9:4d:71:c4:33:d1:7b:63:01:a3:aa:6a:7d:00:2b:a5:b7:aa: 82:62:05:cc -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQHtiws9M/2nBaq8F/RdMm2/hQ3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTY0MDIxWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YjY5ZTI4MTBiY2IzYjljNmMwNTY4MDNjYTQyMTc1ZDYx YWU2Zjc5ZDU3NjU5MTRhMDFhOWJkZGEzMjI1NDcxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCGDYv4INezc8vvS8zFcfX7cwe/GTJrrQ7mf+8uD7f+b0Nd qfXHaVnHZ09J6hgTBWckpHGOO/S8TPUuBWj3W8IJmc9X58iEXKfFCLdnIyAk71OQ GAo+os1yC2o65hq6RZjlFLjIWiHnn0Li4Y6l+45ZlwsF/mAXzeANO4GOXIkBJFAH GSsK3Co7EcbMTM0cBZmBL5oZRxfV4GI6y/Bw11eQqVyLi30al2DAZdp72bcgZlI/ UwfGm5GR+4xbJLI95i3DCM8pkTKUxBp1ZPym4lt0FXZe+GGlnQ77vJi8RcZKEr2z EzGhZhONhhffVz2s/aCOW/Xald51T1mrGVJTXjUbAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUm1AkEx0oHdkcySRLdSIn0v5/xjwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzljYWFkMzZkLTA2M2QtNDlkYS1hNGExLWM0NTFkYmZkYmE1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASSDANBgkqhkiG9w0BAQsFAAOCAQEAd8lFHkSOg4B6fXvo9fHDEj4YFYTy Vz6BqeUShyKyILZZxgKTEdGSzFUy4vQCBaHpxPXYVSlGT4c9vWLy9NkAjoZVDdRN yE8rpMRNVhAYsS8bgqCgFooAGmmaOIsCp48fOVHohoID/oDg8W8ivdtTYZzSKPw9 /XZ0NS7kw4cQko6vwIlR25htxWARl/Orl5m/IteNywJDzR7LdT9PW4iUiaqhfQHo ME0g+AdESVGWebyRIAn5vjwuSd/VdFNayWWRtAYzV4aMTjIpk12pN84/FQAPOwj0 I5gSRTQizBm2JnBPSZM0wF/xVSHxqU1xxDPRe2MBo6pqfQArpbeqgmIFzA== -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:25 2025 by rpki-client