$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9b48f00-914a-4336-b81a-0ab9652dd27a.roa File: c9b48f00-914a-4336-b81a-0ab9652dd27a.roa (raw, json) Hash identifier: k53BwtM53chPEViiv2GJklTDdzm7JgO0ifW9XIS4p3U= Subject key identifier: 1A:ED:97:DF:D3:94:54:94:A1:D1:86:68:6B:DF:EF:1E:F1:83:E6:2C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 282DDD23FD0C5329D1FA7FC6363B2EEE9E31A4E0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9b48f00-914a-4336-b81a-0ab9652dd27a.roa Signing time: Fri 11 Jul 2025 16:51:36 +0000 ROA not before: Fri 11 Jul 2025 16:51:36 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 47.129.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2d:dd:23:fd:0c:53:29:d1:fa:7f:c6:36:3b:2e:ee:9e:31:a4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 16:51:36 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=79d1b28874bbcb118af74245062d86b40d1ddcae679c8d933bb95d0d073dd9fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b9:5f:38:98:b0:42:be:86:74:05:5d:fa:24: c2:a5:8a:a4:d3:a9:99:1a:bf:ba:cc:ef:1f:5f:64: 33:2e:fc:d3:0e:0c:71:26:30:a4:1c:d3:f7:36:b8: 5b:60:1b:40:8c:6a:66:a6:38:83:86:f3:31:c5:94: 21:14:2d:30:2b:c0:7e:9a:2e:16:01:78:f0:31:51: e2:a9:39:63:44:64:33:4e:fd:cf:bc:d0:db:8b:16: bd:c7:a4:64:ca:b4:46:2c:b2:b2:4f:68:3e:10:4a: ea:fc:a8:ec:5d:4a:76:11:da:06:a8:69:64:31:a1: 79:e2:0e:c0:c7:90:46:d2:52:cd:b8:06:13:1a:22: 55:76:40:2c:ec:62:51:81:9e:bd:f8:3d:cd:13:1f: c8:b4:c4:d3:0a:bd:cd:fb:a6:96:94:fa:78:48:1c: 9c:18:c6:0d:3b:70:00:c0:d3:3c:8d:4e:a6:0c:7b: b4:9e:e8:2b:1e:0f:b3:79:f7:8b:12:ea:f1:15:fc: 8f:92:04:41:03:bf:20:da:ef:81:cc:6b:6b:d2:66: 06:b8:40:de:7f:19:7d:a5:28:51:47:04:8c:e4:c1: 5f:6c:cb:96:51:9b:5c:a5:4b:e7:39:ec:e9:bc:5e: cf:e5:6b:d3:41:2f:e2:7b:08:99:41:eb:19:f4:a9: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:ED:97:DF:D3:94:54:94:A1:D1:86:68:6B:DF:EF:1E:F1:83:E6:2C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9b48f00-914a-4336-b81a-0ab9652dd27a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.129.90.0/24 Signature Algorithm: sha256WithRSAEncryption 60:cb:b6:de:37:b4:3f:e5:f6:83:5a:5a:6f:fc:c9:d5:b6:39: 03:42:46:f6:bd:34:2b:df:ac:45:d6:27:d8:da:6b:ac:9b:f1: 6d:43:4c:4c:63:80:94:a5:50:70:70:e4:d1:85:2c:df:2b:b5: 36:d1:f0:3b:2b:50:4d:f1:f6:39:d8:67:fa:f1:8c:59:6d:9f: f2:6b:c3:11:90:65:56:d0:83:4b:5d:b4:3c:12:d9:07:9d:61: aa:ff:18:40:04:99:30:b6:0a:8d:3a:01:80:d6:12:14:ee:32: 49:5b:bd:bd:5b:b4:98:91:4b:2c:75:87:d4:c1:55:ca:8b:b7: 9b:b7:3e:c0:3b:af:17:d8:04:8b:2b:c4:ab:6b:34:40:e1:0b: c6:59:a7:9c:6d:25:ac:81:f6:69:6a:70:43:32:14:64:73:05: 76:34:c9:d8:4b:fe:7a:58:be:f8:2d:71:f1:53:aa:2c:02:2d: 59:80:5d:f1:bd:58:40:eb:ff:a5:8e:70:18:c1:3c:d3:b7:20: 44:13:d3:bc:4d:af:8a:5a:15:ac:47:34:09:83:a4:aa:26:f5: 9f:85:06:c7:fd:ff:ff:31:5d:f2:09:cd:22:03:1d:7e:36:a9: 77:4e:f4:44:03:bb:1a:8a:b0:f8:ef:3e:a3:e1:30:c8:57:d2: dd:23:60:ee -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUKC3dI/0MUynR+n/GNjsu7p4xpOAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTY1MTM2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3OWQxYjI4ODc0YmJjYjExOGFmNzQyNDUwNjJkODZiNDBk MWRkY2FlNjc5YzhkOTMzYmI5NWQwZDA3M2RkOWZhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCguV84mLBCvoZ0BV36JMKliqTTqZkav7rM7x9fZDMu/NMO DHEmMKQc0/c2uFtgG0CMamamOIOG8zHFlCEULTArwH6aLhYBePAxUeKpOWNEZDNO /c+80NuLFr3HpGTKtEYssrJPaD4QSur8qOxdSnYR2gaoaWQxoXniDsDHkEbSUs24 BhMaIlV2QCzsYlGBnr34Pc0TH8i0xNMKvc37ppaU+nhIHJwYxg07cADA0zyNTqYM e7Se6CseD7N594sS6vEV/I+SBEEDvyDa74HMa2vSZga4QN5/GX2lKFFHBIzkwV9s y5ZRm1ylS+c57Om8Xs/la9NBL+J7CJlB6xn0qT4tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGu2X39OUVJSh0YZoa9/vHvGD5iwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M5YjQ4ZjAwLTkxNGEtNDMzNi1iODFhLTBhYjk2NTJkZDI3YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAvgVowDQYJKoZIhvcNAQELBQADggEBAGDLtt43tD/l9oNaWm/8ydW2OQNC Rva9NCvfrEXWJ9jaa6yb8W1DTExjgJSlUHBw5NGFLN8rtTbR8DsrUE3x9jnYZ/rx jFltn/JrwxGQZVbQg0tdtDwS2QedYar/GEAEmTC2Co06AYDWEhTuMklbvb1btJiR Syx1h9TBVcqLt5u3PsA7rxfYBIsrxKtrNEDhC8ZZp5xtJayB9mlqcEMyFGRzBXY0 ydhL/npYvvgtcfFTqiwCLVmAXfG9WEDr/6WOcBjBPNO3IEQT07xNr4paFaxHNAmD pKom9Z+FBsf9//8xXfIJzSIDHX42qXdO9EQDuxqKsPjvPqPhMMhX0t0jYO4= -----END CERTIFICATE-----Generated at Mon Aug 4 21:44:32 2025 by rpki-client