$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb0d9dbf-1f15-4b21-9008-9cfdb255855f.roa File: fb0d9dbf-1f15-4b21-9008-9cfdb255855f.roa (raw, json) Hash identifier: T7l40q5Sl8DCB3YzZ5457yO/UTVvhSbqbifvh/KrV6c= Subject key identifier: 19:20:DE:D0:10:A9:50:44:B1:9D:34:59:A1:53:68:93:FD:CD:F4:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2621E092E3FEC718B1AB71B7903DE6EFCE44C6DB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb0d9dbf-1f15-4b21-9008-9cfdb255855f.roa Signing time: Mon 04 Aug 2025 17:40:40 +0000 ROA not before: Mon 04 Aug 2025 17:40:40 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 136.3.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:21:e0:92:e3:fe:c7:18:b1:ab:71:b7:90:3d:e6:ef:ce:44:c6:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 4 17:40:40 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=533fe447377fcfe7dfa84c271aad255d0347c4c2d1da696f36016bffc8861d67, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c8:74:e2:46:bd:cf:6a:6a:d8:37:22:6e:9a: 3f:27:20:4b:59:2c:02:4d:11:93:2d:12:c7:45:44: 9e:fa:88:09:6f:11:bd:0f:f3:16:8f:88:b9:dc:78: e9:59:3a:49:8b:07:05:0e:8c:9b:eb:0f:4e:33:82: 22:d2:08:52:66:48:29:92:ef:f2:ed:01:87:dc:8e: 0c:60:dc:40:d0:8e:e3:ac:9d:2c:98:fb:db:f3:df: f5:c2:09:41:43:49:1d:6b:2d:b2:93:75:ba:a0:df: d8:90:6c:58:c3:50:23:30:a8:93:5e:b0:12:15:ac: 22:b7:46:fc:d0:af:16:e2:49:a2:b1:85:63:11:e6: 57:d2:52:bd:d7:2e:d7:7f:99:99:df:d2:96:ba:27: c2:19:52:e6:ac:40:be:b4:41:ad:c2:e4:9a:a7:1a: 71:90:ab:81:f0:4b:d1:5d:29:c0:af:c0:6b:72:bd: 63:7e:bb:fc:7a:8f:95:1a:ab:8b:d0:6c:8d:38:1b: c6:73:f0:4e:39:8b:e0:7a:d7:6e:08:89:52:7f:12: e5:d4:1e:c6:dc:58:1c:c2:f9:55:40:0b:6c:9f:97: 28:29:6d:8f:03:36:92:91:0c:e1:a0:19:f8:bf:ef: 24:2d:4e:b7:7b:87:f5:af:b7:73:ec:03:7d:5f:29: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:20:DE:D0:10:A9:50:44:B1:9D:34:59:A1:53:68:93:FD:CD:F4:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb0d9dbf-1f15-4b21-9008-9cfdb255855f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 136.3.0.0/16 Signature Algorithm: sha256WithRSAEncryption 62:3e:c0:d7:21:4c:1c:3b:55:f0:f3:37:03:29:fa:5c:64:1e: bc:27:f9:49:4d:b7:a5:59:dc:de:70:cd:00:54:50:47:a7:81: 5d:55:8b:8b:69:77:97:cb:7a:e1:93:7e:b9:f4:57:a5:5b:0e: fb:21:03:82:fa:24:f3:89:a2:bc:f5:59:44:30:96:80:1a:d2: e5:84:12:59:a9:b0:be:04:57:5b:79:3b:49:72:95:bb:18:1e: c5:c9:16:ad:f5:29:63:75:80:18:dc:18:ad:85:c0:bf:f3:0e: 8b:7d:47:8e:94:59:a7:f6:ff:5c:57:95:cc:b8:59:88:21:65: 7a:b1:74:27:b2:77:3f:b1:2a:23:f2:46:30:91:fc:b6:1c:c2: 1f:74:3f:e8:ce:15:fe:65:84:9a:4d:c6:fb:c3:0c:4a:ec:8b: f7:24:d7:bf:5a:44:03:9a:23:87:da:82:ef:57:7c:f4:65:09: 09:d3:74:eb:81:b0:d0:b8:f9:ae:eb:74:05:45:ab:9c:cc:a9: d4:ef:74:65:d2:9d:23:df:c8:75:04:d0:d8:b3:e2:4b:c3:22: 80:72:32:e4:e1:32:eb:11:28:a5:f1:28:e7:61:b1:92:e5:1e: 6a:d7:98:6d:0b:6d:ef:fb:8b:1c:a9:57:e7:cc:e8:74:f0:25: 64:1f:ef:22 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUJiHgkuP+xxixq3G3kD3m785ExtswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA0MTc0MDQwWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A1MzNmZTQ0NzM3N2ZjZmU3ZGZhODRjMjcxYWFkMjU1ZDAz NDdjNGMyZDFkYTY5NmYzNjAxNmJmZmM4ODYxZDY3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDhyHTiRr3PamrYNyJumj8nIEtZLAJNEZMtEsdFRJ76iAlv Eb0P8xaPiLnceOlZOkmLBwUOjJvrD04zgiLSCFJmSCmS7/LtAYfcjgxg3EDQjuOs nSyY+9vz3/XCCUFDSR1rLbKTdbqg39iQbFjDUCMwqJNesBIVrCK3RvzQrxbiSaKx hWMR5lfSUr3XLtd/mZnf0pa6J8IZUuasQL60Qa3C5JqnGnGQq4HwS9FdKcCvwGty vWN+u/x6j5Uaq4vQbI04G8Zz8E45i+B6124IiVJ/EuXUHsbcWBzC+VVAC2yflygp bY8DNpKRDOGgGfi/7yQtTrd7h/Wvt3PsA31fKcVFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGSDe0BCpUESxnTRZoVNok/3N9GcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZiMGQ5ZGJmLTFmMTUtNGIyMS05MDA4LTljZmRiMjU1ODU1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCIAzANBgkqhkiG9w0BAQsFAAOCAQEAYj7A1yFMHDtV8PM3Ayn6XGQevCf5 SU23pVnc3nDNAFRQR6eBXVWLi2l3l8t64ZN+ufRXpVsO+yEDgvok84mivPVZRDCW gBrS5YQSWamwvgRXW3k7SXKVuxgexckWrfUpY3WAGNwYrYXAv/MOi31HjpRZp/b/ XFeVzLhZiCFlerF0J7J3P7EqI/JGMJH8thzCH3Q/6M4V/mWEmk3G+8MMSuyL9yTX v1pEA5ojh9qC71d89GUJCdN064Gw0Lj5rut0BUWrnMyp1O90ZdKdI9/IdQTQ2LPi S8MigHIy5OEy6xEopfEo52GxkuUeateYbQtt7/uLHKlX58zodPAlZB/vIg== -----END CERTIFICATE-----Generated at Mon Aug 4 21:41:32 2025 by rpki-client