$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9d61c66-d165-4d1c-8c04-174e1fa3a1e3.roa File: e9d61c66-d165-4d1c-8c04-174e1fa3a1e3.roa (raw, json) Hash identifier: wlLQHkChswFtZ3HrE+0RHmPU7SPbSUNPVx35ul4hw40= Subject key identifier: FA:6C:88:97:0F:19:FA:77:B1:10:CA:BC:1E:D9:85:EB:05:E2:6C:71 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 470C89D8F85E3F2DC794D7DAF65142EE79300488 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9d61c66-d165-4d1c-8c04-174e1fa3a1e3.roa Signing time: Fri 11 Jul 2025 15:11:01 +0000 ROA not before: Fri 11 Jul 2025 15:11:01 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.19.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:0c:89:d8:f8:5e:3f:2d:c7:94:d7:da:f6:51:42:ee:79:30:04:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 15:11:01 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=41de896cf3dfea70db4c3db072ef197dc69c1aa751be1c37db2365101f716415, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1d:96:27:11:2b:a6:c8:d5:39:e5:bc:b8:e8: 5e:92:25:b3:ce:bb:f0:9a:90:48:2f:8d:6c:60:b3: af:65:db:f9:47:6f:7e:8f:42:9f:1d:38:e7:1e:e7: dc:78:ab:0b:70:71:b0:f3:44:84:ec:58:11:e0:98: 78:75:14:ba:4f:4b:76:67:5f:d6:a8:aa:37:bc:ee: 33:3d:19:55:f7:f8:69:78:39:86:10:f0:d8:02:56: ae:aa:ff:71:35:3d:2e:ce:87:d7:7f:3c:a1:fd:a7: 9a:fd:df:ae:b7:b0:be:72:63:6d:72:4a:22:e6:70: ef:33:9b:d2:12:39:72:2f:32:12:0c:13:67:14:56: 7d:4c:22:0f:ac:62:f6:e6:06:46:1a:56:bb:09:6d: 9c:da:66:b6:db:38:3d:2a:d0:fb:58:68:9f:ab:10: 44:52:54:54:d3:e2:3b:4b:19:12:be:8a:53:2c:d4: 56:4c:f3:cc:5b:ff:5e:a3:7a:98:b0:62:18:99:8e: 0a:88:a0:46:11:2d:2c:d4:df:e3:53:0d:66:2e:89: 0b:9b:d6:8e:93:1f:3b:32:10:91:0b:9e:91:09:d0: dd:f2:11:31:1f:00:3b:de:bf:f4:02:d7:29:55:0b: 0f:7d:92:cb:3d:bb:a8:00:01:08:72:fb:94:d9:01: cb:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:6C:88:97:0F:19:FA:77:B1:10:CA:BC:1E:D9:85:EB:05:E2:6C:71 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9d61c66-d165-4d1c-8c04-174e1fa3a1e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.19.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:86:12:5f:d8:88:dd:bb:22:5c:44:96:28:34:3f:9c:0e:c9: 01:15:e0:07:ae:3c:ce:ac:10:e3:3c:fe:93:07:4e:99:34:ef: 34:69:fb:81:3b:c0:9b:d9:77:f1:9b:9b:04:24:00:56:ab:8c: de:95:ee:47:16:24:54:03:33:15:e7:df:40:fb:b9:b2:e5:3c: c8:d7:70:8d:64:31:f7:e5:48:66:4e:cc:77:d7:7d:a4:f5:9b: ab:e4:d1:fb:f9:5c:71:63:4b:fa:70:dc:f0:b3:6b:ef:e7:35: d6:19:95:7b:71:e5:76:88:43:82:4d:b2:60:e4:da:c3:b4:9c: 3d:64:9c:b3:f4:aa:20:56:14:a7:6b:5b:66:18:c3:90:77:83: 3e:b3:5c:f3:a6:f6:22:2b:57:fe:8d:98:bf:d2:cd:ee:5f:a4: 94:45:31:3f:6f:0b:97:b9:cf:ca:1f:6a:53:fd:a4:67:a2:2f: 09:fa:b8:1b:72:44:b5:2f:88:fa:09:8f:a7:26:fc:74:b1:b2: f2:b4:f0:4f:b0:0a:d0:88:84:a9:e3:67:e3:76:90:d7:54:a3: 9c:6f:12:3f:bd:6a:fd:88:e3:ca:aa:6f:59:7b:57:58:13:60: 89:5b:ed:77:e8:15:81:f3:0e:7b:8a:e6:ad:59:32:57:46:a1: 2b:64:f6:f0 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIURwyJ2PhePy3HlNfa9lFC7nkwBIgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTUxMTAxWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MWRlODk2Y2YzZGZlYTcwZGI0YzNkYjA3MmVmMTk3ZGM2 OWMxYWE3NTFiZTFjMzdkYjIzNjUxMDFmNzE2NDE1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJHZYnESumyNU55by46F6SJbPOu/CakEgvjWxgs69l2/lH b36PQp8dOOce59x4qwtwcbDzRITsWBHgmHh1FLpPS3ZnX9aoqje87jM9GVX3+Gl4 OYYQ8NgCVq6q/3E1PS7Oh9d/PKH9p5r93663sL5yY21ySiLmcO8zm9ISOXIvMhIM E2cUVn1MIg+sYvbmBkYaVrsJbZzaZrbbOD0q0PtYaJ+rEERSVFTT4jtLGRK+ilMs 1FZM88xb/16jepiwYhiZjgqIoEYRLSzU3+NTDWYuiQub1o6THzsyEJELnpEJ0N3y ETEfADvev/QC1ylVCw99kss9u6gAAQhy+5TZActlAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU+myIlw8Z+nexEMq8HtmF6wXibHEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U5ZDYxYzY2LWQxNjUtNGQxYy04YzA0LTE3NGUxZmEzYTFlMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCIEzANBgkqhkiG9w0BAQsFAAOCAQEAaIYSX9iI3bsiXESWKDQ/nA7JARXg B648zqwQ4zz+kwdOmTTvNGn7gTvAm9l38ZubBCQAVquM3pXuRxYkVAMzFeffQPu5 suU8yNdwjWQx9+VIZk7Md9d9pPWbq+TR+/lccWNL+nDc8LNr7+c11hmVe3HldohD gk2yYOTaw7ScPWScs/SqIFYUp2tbZhjDkHeDPrNc86b2IitX/o2Yv9LN7l+klEUx P28Ll7nPyh9qU/2kZ6IvCfq4G3JEtS+I+gmPpyb8dLGy8rTwT7AK0IiEqeNn43aQ 11SjnG8SP71q/YjjyqpvWXtXWBNgiVvtd+gVgfMOe4rmrVkyV0ahK2T28A== -----END CERTIFICATE-----Generated at Mon Aug 4 21:35:48 2025 by rpki-client