$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa File: b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa (raw, json) Hash identifier: ylNy3vwTpst2dWE6deNVbr7WK4QFWetOKQyRzbNGA54= Subject key identifier: C6:DB:3D:E7:2F:44:B2:0D:AA:CD:7B:8C:49:3D:46:65:DC:8E:CD:AE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2CFCE032A1A763EDABD6BAC74C5DA108EF7D6F59 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa Signing time: Fri 11 Jul 2025 15:20:54 +0000 ROA not before: Fri 11 Jul 2025 15:20:54 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.20.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:fc:e0:32:a1:a7:63:ed:ab:d6:ba:c7:4c:5d:a1:08:ef:7d:6f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 15:20:54 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=d52593c220a2557e5ff37f82ca028ca200e7495e30353e475f50364ff4f2ee99, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:15:06:2f:f1:51:b9:74:b2:95:03:78:fd:04: 32:44:f4:80:44:3d:08:a8:b6:2b:93:30:9d:cc:c5: ef:64:d8:81:1b:0f:cb:d2:df:8e:08:2a:1c:3c:f7: 48:a3:e5:cd:59:fd:4e:a2:87:c4:b5:21:fc:fc:c8: 66:45:71:75:4a:16:e2:99:6b:56:d7:2e:94:e9:ba: 96:a3:fd:6a:91:21:3e:d7:cc:6a:ca:a3:c2:0d:16: c3:65:5a:39:61:48:cd:0c:27:85:25:d9:b8:d5:8a: 24:d4:97:37:1c:c8:0b:bf:73:33:35:1c:00:f0:d1: 0b:7d:3e:c6:56:f4:85:c6:ee:1d:4e:f5:b3:10:fa: 6d:d0:16:6f:bb:d2:00:f3:25:a2:9c:b1:d9:e5:34: 35:3f:37:76:dc:93:8b:c5:de:d6:d0:dd:03:3c:46: 9d:db:e1:05:be:ad:7d:be:38:f8:32:34:f7:95:8e: 9a:0f:a9:9b:7d:6a:ae:b9:64:60:4f:69:91:3b:fa: d1:59:7b:3a:c3:db:9c:7d:a0:80:d6:79:52:fd:fc: be:3b:3f:05:82:f4:75:56:5a:ab:75:f1:5e:09:9e: 74:9c:e9:10:fc:ef:78:a0:a3:21:6d:bc:4c:ee:1c: 54:15:f9:68:00:6f:6d:33:0f:fc:bd:84:2b:35:40: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:DB:3D:E7:2F:44:B2:0D:AA:CD:7B:8C:49:3D:46:65:DC:8E:CD:AE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.20.0.0/15 Signature Algorithm: sha256WithRSAEncryption 08:5b:24:bf:51:fb:6f:5b:fb:63:ae:18:6f:17:8c:86:0e:f8: 73:d0:06:3f:96:43:d6:2d:62:88:e8:63:3d:d5:21:f6:9b:0f: e5:9f:96:0b:cd:0c:54:9d:a6:37:f4:6a:89:b1:2e:3a:92:f5: 16:b0:fd:58:48:e7:86:d6:64:47:67:ac:98:19:ac:55:0e:e9: dc:70:9a:39:fb:a6:d4:f7:96:21:e9:34:a9:8c:ae:1c:4c:c1: b1:91:da:79:d2:90:e9:ad:7a:ec:cd:41:41:b9:4b:03:fb:ca: ca:99:6c:e2:d0:6f:c9:0f:1e:0d:e2:24:75:38:5b:1b:c5:7c: fd:21:37:6f:25:52:9d:0c:46:12:21:60:17:2a:62:7a:73:e3: fc:af:2e:e4:ad:83:e8:cc:28:11:49:50:4f:49:d5:84:77:95: df:1b:d3:7a:04:9a:1e:cc:7a:a5:d7:d8:48:65:4d:4e:af:6b: 26:c6:90:25:86:c8:57:66:18:0e:80:da:d2:98:17:90:b7:34: fd:15:ee:bc:a4:c8:92:a0:3f:aa:7a:bc:d6:9a:bd:3e:6e:0c: 14:1f:74:36:af:bc:e3:12:c8:1e:31:02:87:93:0a:2a:2d:77: 74:a1:6d:81:6a:07:e4:57:a4:ba:8b:b8:64:7b:ca:43:1c:69: 1a:7e:bc:42 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIULPzgMqGnY+2r1rrHTF2hCO99b1kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTUyMDU0WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNTI1OTNjMjIwYTI1NTdlNWZmMzdmODJjYTAyOGNhMjAw ZTc0OTVlMzAzNTNlNDc1ZjUwMzY0ZmY0ZjJlZTk5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDBFQYv8VG5dLKVA3j9BDJE9IBEPQiotiuTMJ3Mxe9k2IEb D8vS344IKhw890ij5c1Z/U6ih8S1Ifz8yGZFcXVKFuKZa1bXLpTpupaj/WqRIT7X zGrKo8INFsNlWjlhSM0MJ4Ul2bjViiTUlzccyAu/czM1HADw0Qt9PsZW9IXG7h1O 9bMQ+m3QFm+70gDzJaKcsdnlNDU/N3bck4vF3tbQ3QM8Rp3b4QW+rX2+OPgyNPeV jpoPqZt9aq65ZGBPaZE7+tFZezrD25x9oIDWeVL9/L47PwWC9HVWWqt18V4JnnSc 6RD873igoyFtvEzuHFQV+WgAb20zD/y9hCs1QOkjAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUxts95y9Esg2qzXuMST1GZdyOza4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IwOTViYTIzLTRmOTAtNGZlMi05NDEzLWU3ZDQzOWNlZjlhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwGIFDANBgkqhkiG9w0BAQsFAAOCAQEACFskv1H7b1v7Y64YbxeMhg74c9AG P5ZD1i1iiOhjPdUh9psP5Z+WC80MVJ2mN/RqibEuOpL1FrD9WEjnhtZkR2esmBms VQ7p3HCaOfum1PeWIek0qYyuHEzBsZHaedKQ6a167M1BQblLA/vKypls4tBvyQ8e DeIkdThbG8V8/SE3byVSnQxGEiFgFypienPj/K8u5K2D6MwoEUlQT0nVhHeV3xvT egSaHsx6pdfYSGVNTq9rJsaQJYbIV2YYDoDa0pgXkLc0/RXuvKTIkqA/qnq81pq9 Pm4MFB90Nq+84xLIHjECh5MKKi13dKFtgWoH5Fekuou4ZHvKQxxpGn68Qg== -----END CERTIFICATE-----Generated at Tue Aug 5 16:36:11 2025 by rpki-client