$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b254aa0e-e1db-4e45-9c59-3bfb3b3c6424.roa File: b254aa0e-e1db-4e45-9c59-3bfb3b3c6424.roa (raw, json) Hash identifier: k36ytwQqziXxwkY91wRLccXl2KOHqkXc6kQNu+Wwf/8= Subject key identifier: 01:66:39:12:D9:51:32:5E:C6:91:96:63:44:62:84:65:2E:D7:DA:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 016061FF8FE42ACE0339C933159EC490715E2561 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b254aa0e-e1db-4e45-9c59-3bfb3b3c6424.roa Signing time: Sat 26 Jul 2025 00:51:04 +0000 ROA not before: Sat 26 Jul 2025 00:51:04 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 3.28.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:60:61:ff:8f:e4:2a:ce:03:39:c9:33:15:9e:c4:90:71:5e:25:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 26 00:51:04 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=3e68c513a65e3edc0e416140ba7d0cb129c2eb77044ca29f42a44c1b62eaf46e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:01:cc:06:0b:40:b2:56:c5:8c:63:e8:a3:a6: 06:c1:bb:98:3b:0d:11:2a:dc:da:38:f8:bc:fb:dd: 07:88:19:ca:d3:c7:e6:40:43:0c:81:c3:5c:da:8f: ff:f3:4b:93:cc:c5:43:14:4e:a9:9e:f8:0f:ed:ea: c8:83:9d:91:b2:cd:8d:98:2b:9c:f7:cc:7f:55:9e: 0a:91:6e:c8:8c:01:39:c3:b4:fb:82:17:c7:ed:39: d9:69:f5:c9:5c:db:2a:7f:3b:a6:f1:51:c4:49:a0: 1c:6f:94:fa:2b:b1:eb:b1:b8:46:5c:e0:4d:36:23: 9e:f5:c5:44:95:54:fe:39:85:09:a2:12:b1:28:fc: b1:da:dc:9d:66:1f:ec:ec:e6:ae:41:b1:50:76:91: 01:a6:ff:d3:a9:eb:3f:e3:af:f5:b8:7c:30:b9:8f: 5d:83:36:bc:de:74:e3:20:58:e7:af:51:47:d9:dc: 7c:68:89:39:43:12:16:b2:4b:9b:62:8c:b0:7c:49: 44:21:fc:ae:ac:3a:1c:5e:59:5d:0e:d2:f2:dc:e8: 7c:5a:cd:81:c4:ef:93:35:fd:28:39:ed:04:7b:72: 72:c0:ed:11:73:ba:d0:42:30:48:30:59:c3:47:5b: 31:29:cd:da:0e:16:79:a5:01:c4:23:6b:5a:c1:73: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:66:39:12:D9:51:32:5E:C6:91:96:63:44:62:84:65:2E:D7:DA:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b254aa0e-e1db-4e45-9c59-3bfb3b3c6424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.28.72.0/23 Signature Algorithm: sha256WithRSAEncryption 57:f4:4e:e2:5d:bf:57:ed:af:96:66:0f:f1:f2:91:3a:72:a6: c1:89:d1:d1:b6:30:9c:40:3f:e4:4e:b0:3d:af:50:d7:ff:d4: 33:96:f2:a7:47:04:a9:65:75:d6:b4:a6:03:0c:26:5a:76:55: e6:6e:2e:2c:bd:30:d7:0b:5f:c7:73:19:b6:dd:e9:da:7b:5f: f9:ec:ba:bd:6e:4c:6f:d3:c3:90:43:73:59:0a:45:8f:df:9a: 08:fe:33:1a:f2:2c:95:b8:34:10:60:4d:f6:23:3b:09:77:5a: 87:94:10:7f:b8:37:4f:09:01:36:5f:11:08:cf:21:d4:19:18: cf:2f:d5:f3:1c:03:bf:03:59:2e:9e:a7:28:ca:6e:59:52:c3: b3:82:ff:3b:0e:88:23:82:e5:5e:44:d1:f9:6d:2c:5d:ed:bf: 60:a5:ee:91:3b:8a:bd:bc:e9:e8:fd:e6:5e:84:f8:ff:45:04: 4c:85:57:e9:cc:7c:9a:3e:68:06:e9:d9:ac:02:16:d0:43:e2: b2:40:df:10:cd:21:4c:ba:4b:d4:5d:70:11:10:32:1a:a1:80: 0c:b9:ae:74:c9:e6:8f:2f:a3:98:66:ee:5f:45:d1:78:57:5a: 6b:8a:38:95:27:56:14:22:bb:5b:fb:2f:a9:f7:79:be:96:85: c8:d3:5a:4c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAWBh/4/kKs4DOckzFZ7EkHFeJWEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI2MDA1MTA0WhcNMjUwODMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AzZTY4YzUxM2E2NWUzZWRjMGU0MTYxNDBiYTdkMGNiMTI5 YzJlYjc3MDQ0Y2EyOWY0MmE0NGMxYjYyZWFmNDZlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDsAcwGC0CyVsWMY+ijpgbBu5g7DREq3No4+Lz73QeIGcrT x+ZAQwyBw1zaj//zS5PMxUMUTqme+A/t6siDnZGyzY2YK5z3zH9VngqRbsiMATnD tPuCF8ftOdlp9clc2yp/O6bxUcRJoBxvlPorseuxuEZc4E02I571xUSVVP45hQmi ErEo/LHa3J1mH+zs5q5BsVB2kQGm/9Op6z/jr/W4fDC5j12DNrzedOMgWOevUUfZ 3HxoiTlDEhayS5tijLB8SUQh/K6sOhxeWV0O0vLc6HxazYHE75M1/Sg57QR7cnLA 7RFzutBCMEgwWcNHWzEpzdoOFnmlAcQja1rBc3V9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAWY5EtlRMl7GkZZjRGKEZS7X2qwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2IyNTRhYTBlLWUxZGItNGU0NS05YzU5LTNiZmIzYjNjNjQyNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEDHEgwDQYJKoZIhvcNAQELBQADggEBAFf0TuJdv1ftr5ZmD/HykTpypsGJ 0dG2MJxAP+ROsD2vUNf/1DOW8qdHBKlldda0pgMMJlp2VeZuLiy9MNcLX8dzGbbd 6dp7X/nsur1uTG/Tw5BDc1kKRY/fmgj+MxryLJW4NBBgTfYjOwl3WoeUEH+4N08J ATZfEQjPIdQZGM8v1fMcA78DWS6epyjKbllSw7OC/zsOiCOC5V5E0fltLF3tv2Cl 7pE7ir286ej95l6E+P9FBEyFV+nMfJo+aAbp2awCFtBD4rJA3xDNIUy6S9RdcBEQ MhqhgAy5rnTJ5o8vo5hm7l9F0XhXWmuKOJUnVhQiu1v7L6n3eb6WhcjTWkw= -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:51 2025 by rpki-client