$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6073f80-fafc-4e6b-940c-475df5662892.roa File: a6073f80-fafc-4e6b-940c-475df5662892.roa (raw, json) Hash identifier: BKOqVWjOYNGhvp/KLfslzcRrj9dMHBknorwdsxUt0sk= Subject key identifier: 6F:26:42:AA:05:E1:55:BF:95:52:8D:F3:67:16:C3:50:B8:FD:85:0B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 489D07C638F6CB92C8C1E6E0008E1BAC4A288FDA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6073f80-fafc-4e6b-940c-475df5662892.roa Signing time: Fri 25 Jul 2025 15:00:10 +0000 ROA not before: Fri 25 Jul 2025 15:00:10 +0000 ROA not after: Fri 29 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.250.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:9d:07:c6:38:f6:cb:92:c8:c1:e6:e0:00:8e:1b:ac:4a:28:8f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 25 15:00:10 2025 GMT Not After : Aug 29 23:59:59 2025 GMT Subject: serialNumber=2c340cbf34bd6a4b14e332a6a027576af58f04d2f116c29722ba988909d70747, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:68:7d:7e:dd:5a:70:ad:08:4c:e4:e0:cf: d4:1d:05:53:48:a9:c1:52:a3:d4:79:50:91:e3:10: 68:bd:38:47:c2:27:d0:a9:76:c7:b9:7a:7e:a7:fc: 0d:9b:36:dc:53:35:48:d5:c3:7f:48:51:e7:48:f3: 94:4f:ee:5a:21:36:fa:d0:aa:b9:d6:e0:f8:b8:a5: ce:14:23:53:fb:02:f7:e7:95:03:73:22:49:51:47: fb:8d:49:cc:22:d4:e5:9d:9a:13:14:f1:58:8b:57: 37:2d:f4:0d:31:78:a6:21:d1:99:d2:07:7b:7f:84: 55:16:22:7b:eb:cf:5d:47:9a:10:17:b4:ca:56:a4: ca:f9:2a:2a:1f:a2:53:82:cb:20:ae:3d:70:7d:bd: 99:e3:2f:fd:55:2d:c4:18:6f:56:92:25:c8:df:61: f2:5f:8d:8d:e5:c1:1c:89:41:ed:4e:42:f1:09:2f: eb:5a:c8:e3:a9:4e:39:ee:17:45:46:b3:10:5c:6c: f5:86:8d:92:4e:25:86:c6:2c:97:79:04:8c:d9:8c: 1a:9b:80:b3:9f:13:23:e3:84:1d:25:11:77:74:8b: d0:c7:1d:bf:f3:6f:37:ab:2f:5b:7c:20:42:79:32: cd:c3:00:b1:0e:3c:b3:78:fe:da:5b:ca:c5:a9:bb: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:26:42:AA:05:E1:55:BF:95:52:8D:F3:67:16:C3:50:B8:FD:85:0B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a6073f80-fafc-4e6b-940c-475df5662892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.250.0.0/15 Signature Algorithm: sha256WithRSAEncryption 6b:66:45:b1:f4:1a:73:13:84:8d:45:91:a3:92:5b:ac:2a:fc: cb:a2:b5:27:50:ca:c4:06:d9:07:a2:e7:c8:ed:29:ff:50:e2: aa:b0:64:98:1f:90:da:a3:58:e3:08:4b:8d:e5:66:ac:28:62: 8a:05:1e:fb:ba:23:86:ce:b8:63:5c:ab:f4:0a:2c:5b:cf:be: f7:ec:29:e7:9b:7f:56:49:78:fe:37:83:20:31:cc:84:f1:0e: 37:c8:93:a2:9c:c2:95:27:dc:37:03:30:1c:a4:7b:0a:a7:21: 33:c0:78:32:3d:54:cd:be:6e:8c:7e:da:8c:90:24:36:4d:8a: 1a:9f:66:15:c6:4e:05:7c:d1:49:c2:37:aa:42:1e:0e:2d:0a: 65:c6:01:1f:b1:36:98:cc:c0:14:b3:ee:75:61:b5:eb:4c:fb: 60:ce:f5:3c:34:c5:fb:f8:57:f8:24:3c:22:2f:5a:40:4b:8e: fe:da:23:7e:44:58:f8:bc:09:6e:96:b2:ad:e0:07:8c:4c:06: b0:45:5b:dc:bf:22:12:b0:7b:06:c7:57:72:75:63:3d:64:e2: 27:a4:a0:83:20:4c:e3:18:98:49:60:77:a0:94:2e:71:93:be: 95:67:3c:1b:3b:96:0c:85:f7:8d:af:56:61:6c:7f:c6:32:d2: c3:d2:75:44 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUSJ0Hxjj2y5LIwebgAI4brEooj9owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI1MTUwMDEwWhcNMjUwODI5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyYzM0MGNiZjM0YmQ2YTRiMTRlMzMyYTZhMDI3NTc2YWY1 OGYwNGQyZjExNmMyOTcyMmJhOTg4OTA5ZDcwNzQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjn2h9ft1acK0ITOTgz9QdBVNIqcFSo9R5UJHjEGi9OEfC J9Cpdse5en6n/A2bNtxTNUjVw39IUedI85RP7lohNvrQqrnW4Pi4pc4UI1P7Avfn lQNzIklRR/uNScwi1OWdmhMU8ViLVzct9A0xeKYh0ZnSB3t/hFUWInvrz11HmhAX tMpWpMr5KiofolOCyyCuPXB9vZnjL/1VLcQYb1aSJcjfYfJfjY3lwRyJQe1OQvEJ L+tayOOpTjnuF0VGsxBcbPWGjZJOJYbGLJd5BIzZjBqbgLOfEyPjhB0lEXd0i9DH Hb/zbzerL1t8IEJ5Ms3DALEOPLN4/tpbysWpu8VJAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUbyZCqgXhVb+VUo3zZxbDULj9hQswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2E2MDczZjgwLWZhZmMtNGU2Yi05NDBjLTQ3NWRmNTY2Mjg5Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwED+jANBgkqhkiG9w0BAQsFAAOCAQEAa2ZFsfQacxOEjUWRo5JbrCr8y6K1 J1DKxAbZB6LnyO0p/1DiqrBkmB+Q2qNY4whLjeVmrChiigUe+7ojhs64Y1yr9Aos W8++9+wp55t/Vkl4/jeDIDHMhPEON8iTopzClSfcNwMwHKR7CqchM8B4Mj1Uzb5u jH7ajJAkNk2KGp9mFcZOBXzRScI3qkIeDi0KZcYBH7E2mMzAFLPudWG160z7YM71 PDTF+/hX+CQ8Ii9aQEuO/tojfkRY+LwJbpayreAHjEwGsEVb3L8iErB7BsdXcnVj PWTiJ6SggyBM4xiYSWB3oJQucZO+lWc8GzuWDIX3ja9WYWx/xjLSw9J1RA== -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:20 2025 by rpki-client