$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa File: ac4b4084-36eb-4ac1-b740-50f184325fd8.roa (raw, json) Hash identifier: 5lGmeJO3fMVLZ3yWehzx6NqT+n6x4uefjTCYQ+vr3KU= Subject key identifier: 68:0B:A1:F7:6F:98:00:38:21:05:66:50:C0:20:9C:F3:46:AA:82:E4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7A0E84C0C4616BC30C289C886628514F5E6D113A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa Signing time: Fri 11 Jul 2025 16:40:28 +0000 ROA not before: Fri 11 Jul 2025 16:40:28 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.90.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:0e:84:c0:c4:61:6b:c3:0c:28:9c:88:66:28:51:4f:5e:6d:11:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 16:40:28 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=f4f20a0b336093096fa1130bc4ca4a93309e273a6aeb69d9301b81d1c737c77c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ba:ac:4d:c7:17:de:fc:07:fb:b5:f8:7f:d8: 82:02:55:84:93:10:32:f2:d2:a8:d4:6e:ad:82:ae: 3d:a4:66:63:1d:21:3b:9f:47:52:b6:35:e2:80:8b: bf:5c:2f:c2:87:67:25:8f:f5:fc:f9:93:94:34:de: 54:78:85:be:2c:4b:b8:e1:ae:79:90:bc:a6:36:47: 99:fc:d6:19:4b:05:e1:8c:1d:ce:4e:da:ca:8e:e3: 36:b8:38:e6:3f:84:6a:62:4f:7c:05:00:83:02:b8: 99:aa:2d:7c:15:7e:01:39:72:c6:3d:ea:26:64:6c: 9f:ae:c3:42:12:be:c6:0e:e6:90:ba:fb:4a:76:fa: a8:d0:80:d6:1d:76:87:b6:17:62:6e:bb:e3:65:d2: e4:16:d2:42:7f:3f:87:45:5f:b0:d9:8e:c7:54:d4: 96:f4:de:62:e2:89:a9:08:66:5d:45:46:12:18:d8: d4:ae:b3:2d:a6:d8:2c:0c:77:1b:39:c6:20:69:0e: ae:6b:2d:3e:3b:88:71:7f:41:ad:db:5d:f0:78:ce: 28:71:9b:f5:21:7c:46:ad:df:ca:33:c7:dd:8a:2c: 51:3e:c1:a2:ac:d0:e8:da:be:ab:92:cc:a6:f0:7a: 2b:4c:aa:43:ff:9a:99:82:f1:ae:83:3b:c8:4a:a5: d6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0B:A1:F7:6F:98:00:38:21:05:66:50:C0:20:9C:F3:46:AA:82:E4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ac4b4084-36eb-4ac1-b740-50f184325fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.90.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6a:98:3c:f6:49:1c:a2:9e:ca:fd:0c:62:b6:b2:30:aa:01:6a: dc:33:c5:cb:44:7d:b2:56:da:0a:fe:36:c1:58:07:84:5c:40: af:92:4e:0c:3e:a3:5c:d0:a7:7b:c3:39:3f:e1:7c:8a:3d:2d: c9:80:8d:77:d1:e7:c6:be:c1:b1:3b:63:93:88:24:c3:82:b4: 27:9c:b3:34:67:d1:bb:07:c3:02:99:c9:0c:6c:27:c4:ff:91: 1d:dc:55:f9:fa:12:99:f5:49:1a:a2:13:7b:94:65:95:23:39: 29:42:ef:40:30:3b:d1:ed:da:8a:09:09:f2:79:a8:47:d9:84: e5:71:9e:ac:b1:67:e3:9a:c4:3e:44:5f:cc:d4:cf:28:56:d1: a9:e8:66:f9:4d:95:7c:bd:ec:d7:45:6b:fd:aa:5f:8b:dd:97: 89:e2:87:bf:59:ba:4e:d9:42:d6:a5:5b:14:a1:88:62:78:3c: 90:92:8b:12:6d:b2:a1:46:f1:b4:a0:fb:7c:cc:c7:a0:2c:0d: 4d:0b:45:85:12:6c:20:ce:49:1d:dd:e3:06:58:1c:1d:09:bc: 1d:56:8e:d5:fd:b0:62:e4:6d:c8:19:5d:55:66:aa:db:cf:6f: 65:93:98:9f:ca:4d:38:a5:25:75:57:31:58:d1:36:c5:8a:ca: 67:55:cd:12 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUeg6EwMRha8MMKJyIZihRT15tETowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTY0MDI4WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BmNGYyMGEwYjMzNjA5MzA5NmZhMTEzMGJjNGNhNGE5MzMw OWUyNzNhNmFlYjY5ZDkzMDFiODFkMWM3MzdjNzdjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCMuqxNxxfe/Af7tfh/2IICVYSTEDLy0qjUbq2Crj2kZmMd ITufR1K2NeKAi79cL8KHZyWP9fz5k5Q03lR4hb4sS7jhrnmQvKY2R5n81hlLBeGM Hc5O2sqO4za4OOY/hGpiT3wFAIMCuJmqLXwVfgE5csY96iZkbJ+uw0ISvsYO5pC6 +0p2+qjQgNYddoe2F2Juu+Nl0uQW0kJ/P4dFX7DZjsdU1Jb03mLiiakIZl1FRhIY 2NSusy2m2CwMdxs5xiBpDq5rLT47iHF/Qa3bXfB4zihxm/UhfEat38ozx92KLFE+ waKs0OjavquSzKbweitMqkP/mpmC8a6DO8hKpdYBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUaAuh92+YADghBWZQwCCc80aqguQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FjNGI0MDg0LTM2ZWItNGFjMS1iNzQwLTUwZjE4NDMyNWZkOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwASWjANBgkqhkiG9w0BAQsFAAOCAQEAapg89kkcop7K/QxitrIwqgFq3DPF y0R9slbaCv42wVgHhFxAr5JODD6jXNCne8M5P+F8ij0tyYCNd9Hnxr7BsTtjk4gk w4K0J5yzNGfRuwfDApnJDGwnxP+RHdxV+foSmfVJGqITe5RllSM5KULvQDA70e3a igkJ8nmoR9mE5XGerLFn45rEPkRfzNTPKFbRqehm+U2VfL3s10Vr/apfi92XieKH v1m6TtlC1qVbFKGIYng8kJKLEm2yoUbxtKD7fMzHoCwNTQtFhRJsIM5JHd3jBlgc HQm8HVaO1f2wYuRtyBldVWaq289vZZOYn8pNOKUldVcxWNE2xYrKZ1XNEg== -----END CERTIFICATE-----Generated at Tue Aug 5 08:19:38 2025 by rpki-client