$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2018af1-68c7-4fdf-8f9a-9c763a6039b1.roa File: c2018af1-68c7-4fdf-8f9a-9c763a6039b1.roa (raw, json) Hash identifier: 6vH/Bjx95yxcf/sxUWB+UeVCchjtb84hIHEGNd6Aw5I= Subject key identifier: 44:4A:A8:D5:C4:3E:1D:C4:C8:93:18:E0:B5:DA:79:1B:FD:6E:C2:ED Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A839207A490FAC6FBB9CDDFEA06B0F8FFF2757C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2018af1-68c7-4fdf-8f9a-9c763a6039b1.roa Signing time: Tue 22 Jul 2025 15:10:24 +0000 ROA not before: Tue 22 Jul 2025 15:10:24 +0000 ROA not after: Tue 26 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 13.58.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:83:92:07:a4:90:fa:c6:fb:b9:cd:df:ea:06:b0:f8:ff:f2:75:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 22 15:10:24 2025 GMT Not After : Aug 26 23:59:59 2025 GMT Subject: serialNumber=2d13b47238b78d19900c45cceb833dfb087b901b86cfcc94d17e2898530e334d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:3a:ed:f5:43:a5:31:d3:82:8b:da:7d:75: 7c:09:4b:97:68:9a:06:f6:9d:a2:b9:42:d4:14:09: 78:75:d8:58:8f:04:23:a3:f6:39:37:54:d9:8f:a1: a7:a7:25:75:e7:56:30:86:b5:84:75:80:30:ce:3b: b3:75:d2:67:05:69:b3:7b:2a:75:a9:4b:dc:da:eb: dd:98:89:16:35:c8:db:b5:49:69:d1:cb:3b:f6:22: 1b:99:9e:7f:22:dc:77:c6:02:c8:91:06:7a:27:3b: 94:17:b2:01:12:9a:b1:54:de:21:7f:a0:ca:7e:b7: 3d:a3:a9:30:f6:00:71:aa:2d:41:28:d2:9c:7b:1a: 4a:f0:65:80:f7:19:7d:79:cc:2a:be:1d:2c:7c:f6: f3:cf:ea:97:d3:87:11:3b:cb:81:b9:8a:b3:75:df: 83:0e:2a:be:3b:d7:3e:17:8d:93:77:d5:03:37:30: f1:62:4b:5f:3c:1d:ef:00:2e:28:aa:ad:f6:b5:35: fe:c9:e7:26:79:10:8d:bf:ff:d0:8b:f2:8f:d5:e2: 81:d2:73:c6:16:21:2f:77:b1:b4:fe:60:82:75:28: 7d:a6:12:7c:af:a6:bf:da:cf:4d:e2:3e:c7:1a:a3: e7:f1:b0:8e:76:ad:05:f3:dc:d0:83:e5:52:c8:8e: db:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4A:A8:D5:C4:3E:1D:C4:C8:93:18:E0:B5:DA:79:1B:FD:6E:C2:ED X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c2018af1-68c7-4fdf-8f9a-9c763a6039b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 13.58.0.0/15 Signature Algorithm: sha256WithRSAEncryption 7e:dc:cf:33:73:60:b8:95:4e:dc:d6:7b:df:69:1c:b6:ca:06: aa:16:c5:03:cf:fe:62:32:06:04:40:70:39:23:96:8a:7e:d5: 84:6f:5a:a0:e4:db:df:15:a0:92:2d:49:c9:08:e4:66:a2:d7: 6b:5c:84:1f:2d:ae:27:02:cb:16:73:3b:3b:c9:8d:af:66:e9: 23:6b:ea:20:be:51:0d:29:9a:2c:d0:11:53:a7:19:1e:33:a2: a6:7c:2d:85:ea:b3:e5:40:94:74:c3:25:c6:fc:bc:d5:c9:5a: 9d:d5:ab:c0:48:a6:e0:3e:03:9e:f8:4a:8c:a5:91:bb:d9:c8: b6:37:0a:c9:34:44:b0:b4:ae:ab:64:5d:a5:86:39:29:5d:4a: 49:ec:fc:3e:54:1e:b0:d8:52:fc:2e:3b:63:27:98:0b:02:db: 00:6f:6b:6c:ff:92:bc:d0:ca:89:06:03:b4:5b:74:96:05:2a: ea:66:50:99:1f:c3:29:58:7f:37:de:30:c9:de:df:b9:26:1b: e5:c7:62:d7:bf:c2:05:40:7a:48:75:26:0e:df:b0:0e:9c:6b: 76:ce:b9:38:3b:82:f2:95:46:b5:ca:bb:ea:b7:7a:e6:1b:f0: f8:40:ed:60:db:7f:63:ff:bb:7a:50:db:46:10:b9:92:c6:d2: d5:f8:c5:6e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWoOSB6SQ+sb7uc3f6gaw+P/ydXwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzIyMTUxMDI0WhcNMjUwODI2MjM1OTU5 WjB6MUkwRwYDVQQFE0AyZDEzYjQ3MjM4Yjc4ZDE5OTAwYzQ1Y2NlYjgzM2RmYjA4 N2I5MDFiODZjZmNjOTRkMTdlMjg5ODUzMGUzMzRkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZbTrt9UOlMdOCi9p9dXwJS5domgb2naK5QtQUCXh12FiP BCOj9jk3VNmPoaenJXXnVjCGtYR1gDDOO7N10mcFabN7KnWpS9za692YiRY1yNu1 SWnRyzv2IhuZnn8i3HfGAsiRBnonO5QXsgESmrFU3iF/oMp+tz2jqTD2AHGqLUEo 0px7GkrwZYD3GX15zCq+HSx89vPP6pfThxE7y4G5irN134MOKr471z4XjZN31QM3 MPFiS188He8ALiiqrfa1Nf7J5yZ5EI2//9CL8o/V4oHSc8YWIS93sbT+YIJ1KH2m Enyvpr/az03iPscao+fxsI52rQXz3NCD5VLIjtvpAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUREqo1cQ+HcTIkxjgtdp5G/1uwu0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2MyMDE4YWYxLTY4YzctNGZkZi04ZjlhLTljNzYzYTYwMzliMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwENOjANBgkqhkiG9w0BAQsFAAOCAQEAftzPM3NguJVO3NZ732kctsoGqhbF A8/+YjIGBEBwOSOWin7VhG9aoOTb3xWgki1JyQjkZqLXa1yEHy2uJwLLFnM7O8mN r2bpI2vqIL5RDSmaLNARU6cZHjOipnwtheqz5UCUdMMlxvy81clandWrwEim4D4D nvhKjKWRu9nItjcKyTREsLSuq2RdpYY5KV1KSez8PlQesNhS/C47YyeYCwLbAG9r bP+SvNDKiQYDtFt0lgUq6mZQmR/DKVh/N94wyd7fuSYb5cdi17/CBUB6SHUmDt+w Dpxrds65ODuC8pVGtcq76rd65hvw+EDtYNt/Y/+7elDbRhC5ksbS1fjFbg== -----END CERTIFICATE-----Generated at Mon Aug 4 21:38:35 2025 by rpki-client