$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf7ad5b1-afec-4c22-b318-a7027e7ed3a5.roa File: bf7ad5b1-afec-4c22-b318-a7027e7ed3a5.roa (raw, json) Hash identifier: JVlJ2U/JRUarOxz6hqTp1yv30RcRqil2IyJxAHpjBc8= Subject key identifier: 2F:3F:58:6C:67:70:C4:08:49:73:A7:7F:40:6C:14:A8:B6:C7:6F:D6 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 34BFA83708567FD56566FB3A0EC5369105567F67 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf7ad5b1-afec-4c22-b318-a7027e7ed3a5.roa Signing time: Wed 16 Jul 2025 00:20:17 +0000 ROA not before: Wed 16 Jul 2025 00:20:17 +0000 ROA not after: Wed 20 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 13.217.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:bf:a8:37:08:56:7f:d5:65:66:fb:3a:0e:c5:36:91:05:56:7f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 16 00:20:17 2025 GMT Not After : Aug 20 23:59:59 2025 GMT Subject: serialNumber=b873be0a68bdbd219198cd9cc629a8b6ff2b1a449b0d1d245c2b85915f6f72a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:72:c2:e2:83:43:2c:b8:18:e0:6f:55:27:43: e1:7b:54:62:32:a3:f3:7c:e1:4b:11:6d:93:a7:f6: 44:e6:12:07:f5:7c:d3:18:4d:b0:31:6d:6f:34:f2: 80:46:62:74:0f:e5:cf:c4:07:a7:1e:b8:70:61:b7: e6:8e:c4:fb:cc:e4:dd:dc:72:bf:5e:63:c6:a4:47: 26:c0:ee:c5:d1:3c:c1:94:e5:e7:bd:57:3a:51:5b: e2:40:17:f5:5f:b5:f2:2f:83:c2:64:a4:7e:90:0d: 54:a5:59:36:4b:78:9e:9d:2f:73:50:7d:17:43:b5: 5b:be:0d:1a:66:2c:f1:2b:d9:d5:17:3a:2b:a1:fe: 56:ec:de:0c:9a:96:e7:e2:1f:3d:2a:75:dd:b8:d7: 68:bc:cf:72:19:ba:15:19:a8:de:91:33:c5:03:22: 24:44:a0:bf:6e:cf:c0:e2:60:13:d5:5f:54:8e:87: 35:f4:d8:61:cd:e2:2a:4f:6b:3a:79:74:cc:4a:47: b3:c9:f1:a7:1e:60:b5:8e:2d:83:6a:73:b1:7c:6e: a0:d2:92:6e:8f:c7:e6:aa:b4:1e:63:8f:79:30:89: 8a:c4:a7:ca:bd:38:cc:c2:93:52:12:28:af:ab:c5: 7c:89:38:e1:cb:9a:9b:7e:d8:41:9b:22:d3:cf:1e: 17:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3F:58:6C:67:70:C4:08:49:73:A7:7F:40:6C:14:A8:B6:C7:6F:D6 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bf7ad5b1-afec-4c22-b318-a7027e7ed3a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.217.80.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:19:aa:cc:7b:8d:22:bf:14:cd:8d:d0:2d:b1:bf:f9:ef:b7: 0a:b0:31:fb:72:f9:03:b5:4f:9d:ba:c8:2e:02:1f:17:45:3f: 5f:08:c1:00:58:f7:ff:d9:79:d2:f8:94:4b:64:9f:b6:47:06: fe:a7:a1:ee:fc:d6:e6:09:8d:74:2d:05:f2:cb:3d:81:e0:1f: d6:61:ec:7b:b0:b1:d6:03:3f:74:7b:6a:1b:27:ca:fb:07:57: ea:4c:ec:8d:58:c8:be:55:3e:ca:6e:97:1d:6a:16:21:6b:e9: ac:1c:5f:f4:22:76:5d:f8:91:79:1e:87:c8:8f:0e:6a:30:68: b1:9d:fb:f4:4b:b0:10:b7:3d:6b:f4:23:82:69:7f:36:24:6f: 62:b6:e1:94:88:08:f2:33:60:7a:7b:9f:98:f8:e3:d8:9f:23: 62:e9:08:bd:6e:4b:a3:00:a2:3e:45:66:5c:ff:84:47:a7:2d: 5b:41:3d:53:44:68:2a:ac:b4:f3:0c:a9:ae:a1:49:2a:03:8a: b0:26:b5:81:d2:2c:06:61:df:6a:f1:a3:d2:13:38:88:68:f4: 94:08:75:59:e2:fd:5f:a2:74:12:a1:7e:2c:75:6e:cf:62:9b: 03:11:9c:c2:3a:ef:79:5e:95:b8:1f:08:c8:1a:fe:a9:0b:01: 4a:e8:20:94 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNL+oNwhWf9VlZvs6DsU2kQVWf2cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzE2MDAyMDE3WhcNMjUwODIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BiODczYmUwYTY4YmRiZDIxOTE5OGNkOWNjNjI5YThiNmZm MmIxYTQ0OWIwZDFkMjQ1YzJiODU5MTVmNmY3MmE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCwcsLig0MsuBjgb1UnQ+F7VGIyo/N84UsRbZOn9kTmEgf1 fNMYTbAxbW808oBGYnQP5c/EB6ceuHBht+aOxPvM5N3ccr9eY8akRybA7sXRPMGU 5ee9VzpRW+JAF/VftfIvg8JkpH6QDVSlWTZLeJ6dL3NQfRdDtVu+DRpmLPEr2dUX Oiuh/lbs3gyalufiHz0qdd2412i8z3IZuhUZqN6RM8UDIiREoL9uz8DiYBPVX1SO hzX02GHN4ipPazp5dMxKR7PJ8aceYLWOLYNqc7F8bqDSkm6Px+aqtB5jj3kwiYrE p8q9OMzCk1ISKK+rxXyJOOHLmpt+2EGbItPPHhexAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQULz9YbGdwxAhJc6d/QGwUqLbHb9YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2JmN2FkNWIxLWFmZWMtNGMyMi1iMzE4LWE3MDI3ZTdlZDNhNS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAN2VAwDQYJKoZIhvcNAQELBQADggEBABsZqsx7jSK/FM2N0C2xv/nvtwqw Mfty+QO1T526yC4CHxdFP18IwQBY9//ZedL4lEtkn7ZHBv6noe781uYJjXQtBfLL PYHgH9Zh7HuwsdYDP3R7ahsnyvsHV+pM7I1YyL5VPspulx1qFiFr6awcX/Qidl34 kXkeh8iPDmowaLGd+/RLsBC3PWv0I4JpfzYkb2K24ZSICPIzYHp7n5j449ifI2Lp CL1uS6MAoj5FZlz/hEenLVtBPVNEaCqstPMMqa6hSSoDirAmtYHSLAZh32rxo9IT OIho9JQIdVni/V+idBKhfix1bs9imwMRnMI673lelbgfCMga/qkLAUroIJQ= -----END CERTIFICATE-----Generated at Mon Aug 4 14:21:26 2025 by rpki-client