$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b13f9f88-73ce-433b-a49b-33fd8c2fc202.roa File: b13f9f88-73ce-433b-a49b-33fd8c2fc202.roa (raw, json) Hash identifier: Orf/MD2jKfbSms+NbE3ntsjs8P1QK7TxherGAEa4LVQ= Subject key identifier: 80:46:DB:68:19:90:2B:22:D9:2B:4F:04:71:6F:FD:B7:B8:4A:3D:7F Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 552CDBAA7B0D9FAAD835CC8FAACF2131C31A5A24 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b13f9f88-73ce-433b-a49b-33fd8c2fc202.roa Signing time: Mon 04 Aug 2025 18:00:23 +0000 ROA not before: Mon 04 Aug 2025 18:00:23 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.4.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:2c:db:aa:7b:0d:9f:aa:d8:35:cc:8f:aa:cf:21:31:c3:1a:5a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 4 18:00:23 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=ec52740de56ad9d9a38c14782bb256397b4eff664fd724b1bf23f470de16b407, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ff:68:70:a9:29:a1:1c:ee:53:aa:80:44:7e: bb:5f:ef:ef:28:83:ba:37:bd:c8:29:05:d6:77:8d: 17:e3:f7:12:40:f5:b8:4a:88:d7:98:d5:66:74:ea: 33:43:41:c9:78:bc:c1:c2:88:68:95:7f:de:97:3d: 63:e6:a5:f7:35:fc:87:60:f0:e9:c0:fd:f5:53:65: 41:14:a1:f3:e2:13:24:4b:30:db:79:38:08:37:50: 38:9d:fb:aa:f8:61:cb:37:61:0e:a0:2e:c9:7d:d0: 18:bb:cf:f9:e3:46:44:50:b1:90:07:70:80:c6:10: ee:87:a6:37:e2:a9:09:6e:be:57:a3:46:3e:87:b8: 2e:fd:25:56:b7:1c:88:8b:f0:5a:57:3e:62:af:a6: 10:e3:4e:5e:7a:37:14:a2:f6:f4:fe:7d:13:35:e9: 96:59:19:70:c9:5b:23:16:3c:13:ef:10:11:c9:d4: 07:5a:fa:d4:1a:0c:58:08:e0:d8:9e:65:d1:d2:70: c4:64:f0:46:21:ab:62:be:9e:6e:22:30:b2:18:0a: 62:5d:cb:11:4a:8d:95:9d:d5:7f:e7:0f:9c:b7:4e: 25:8b:4e:51:d7:3c:12:5f:9c:53:a9:b5:6a:15:a5: 27:9b:63:39:46:9a:dd:d6:d7:bd:83:0c:06:4a:f6: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:46:DB:68:19:90:2B:22:D9:2B:4F:04:71:6F:FD:B7:B8:4A:3D:7F X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b13f9f88-73ce-433b-a49b-33fd8c2fc202.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.4.0.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:c0:dc:75:b1:b3:ca:a1:8d:5f:79:23:84:92:5b:0d:b8:a2: 0d:4c:8c:48:36:1d:e3:3e:de:40:d3:7a:de:fa:2e:4e:55:25: 39:51:51:42:61:78:50:17:06:db:69:e7:ed:b6:28:e5:22:35: 4c:b8:52:db:31:97:e5:46:55:98:dd:1d:11:8f:d6:25:cf:1b: 4d:ee:e7:cd:d7:d6:c3:24:fc:78:89:07:3d:ce:08:be:86:2b: ec:d6:f9:bb:e1:d6:ca:06:7e:97:ec:84:2e:5b:00:d1:8a:8b: f0:5f:7e:c2:06:c7:88:38:57:17:1a:18:7b:9b:fe:73:c2:52: 42:1e:f5:78:19:5b:fe:2c:08:d2:f0:8c:ab:50:31:ea:e1:5b: 0c:25:93:76:00:78:f8:9c:01:fa:9f:2a:44:df:24:b5:96:84: 5b:e9:ca:d9:ad:bf:f6:57:03:83:8f:48:35:14:95:82:8a:5e: bf:ee:37:63:8e:a6:85:9e:07:ac:9d:56:63:1f:ec:f7:06:3c: 0c:a3:f1:aa:82:28:79:23:10:bf:50:1c:e8:0a:57:b4:a1:b2: 16:e3:e4:39:1e:be:8d:14:c0:66:b4:2f:e8:a6:ae:de:d9:e0: 83:67:f0:2a:a2:b2:1a:27:d3:24:4b:1e:c9:89:9c:d4:3b:95: ab:6a:f1:8b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUVSzbqnsNn6rYNcyPqs8hMcMaWiQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA0MTgwMDIzWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0BlYzUyNzQwZGU1NmFkOWQ5YTM4YzE0NzgyYmIyNTYzOTdi NGVmZjY2NGZkNzI0YjFiZjIzZjQ3MGRlMTZiNDA3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6/2hwqSmhHO5TqoBEfrtf7+8og7o3vcgpBdZ3jRfj9xJA 9bhKiNeY1WZ06jNDQcl4vMHCiGiVf96XPWPmpfc1/Idg8OnA/fVTZUEUofPiEyRL MNt5OAg3UDid+6r4Ycs3YQ6gLsl90Bi7z/njRkRQsZAHcIDGEO6HpjfiqQluvlej Rj6HuC79JVa3HIiL8FpXPmKvphDjTl56NxSi9vT+fRM16ZZZGXDJWyMWPBPvEBHJ 1Ada+tQaDFgI4NieZdHScMRk8EYhq2K+nm4iMLIYCmJdyxFKjZWd1X/nD5y3TiWL TlHXPBJfnFOptWoVpSebYzlGmt3W172DDAZK9mxLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgEbbaBmQKyLZK08EcW/9t7hKPX8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IxM2Y5Zjg4LTczY2UtNDMzYi1hNDliLTMzZmQ4YzJmYzIwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADBAAwDQYJKoZIhvcNAQELBQADggEBAG7A3HWxs8qhjV95I4SSWw24og1M jEg2HeM+3kDTet76Lk5VJTlRUUJheFAXBttp5+22KOUiNUy4Utsxl+VGVZjdHRGP 1iXPG03u583X1sMk/HiJBz3OCL6GK+zW+bvh1soGfpfshC5bANGKi/BffsIGx4g4 VxcaGHub/nPCUkIe9XgZW/4sCNLwjKtQMerhWwwlk3YAePicAfqfKkTfJLWWhFvp ytmtv/ZXA4OPSDUUlYKKXr/uN2OOpoWeB6ydVmMf7PcGPAyj8aqCKHkjEL9QHOgK V7Shshbj5Dkevo0UwGa0L+imrt7Z4INn8Cqishon0yRLHsmJnNQ7latq8Ys= -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:37 2025 by rpki-client