$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6439208c-ccf1-40d8-a951-f35955f2aa73.roa File: 6439208c-ccf1-40d8-a951-f35955f2aa73.roa (raw, json) Hash identifier: E1QCTHE2zkg8E/oJb4kH/24Di+zNarqrQG3ePCdl0f4= Subject key identifier: 8D:E7:F4:4C:11:55:AE:DD:5B:96:89:AF:1B:5B:E6:C7:12:45:14:B7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E0802EF0595A11C7D551963C8DECC38394F7A7E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6439208c-ccf1-40d8-a951-f35955f2aa73.roa Signing time: Mon 18 Aug 2025 18:08:43 +0000 ROA not before: Mon 18 Aug 2025 18:08:43 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:08:02:ef:05:95:a1:1c:7d:55:19:63:c8:de:cc:38:39:4f:7a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 18:08:43 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=9a528c3d831b10b451fed50ecdc51cf42486d7956debe8e25042274b1b07d049, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:dd:06:72:f0:2d:fb:05:11:35:fa:3e:c9: 96:23:77:08:fe:4b:79:8b:da:2d:2d:52:e2:02:42: 10:76:ab:63:21:03:78:00:13:b2:ee:6b:7a:4f:19: 85:25:60:ec:78:e3:ec:be:ac:dd:f6:f2:36:4d:82: a8:a6:29:d2:a3:0d:00:16:ef:5c:e1:d7:96:6b:49: 08:d4:99:cc:0b:84:32:f4:b5:e9:e1:b0:73:1a:f4: 8b:92:4c:c9:c2:76:ce:d9:ec:eb:7f:af:46:f5:ba: 59:76:c2:ea:95:bc:32:27:58:54:fb:87:a2:af:e4: b5:ff:d4:0b:17:6b:4e:2c:60:df:46:31:b9:a0:3b: a9:ba:3a:07:ae:5b:3a:70:ac:c1:b9:de:1f:63:7e: 1e:a4:32:42:11:f8:63:8c:12:ec:19:18:37:b6:2a: 96:0e:c1:54:ce:d6:82:8a:e4:30:27:9a:78:6d:a0: 31:65:97:42:4b:92:40:ed:74:cf:25:b4:d2:b4:41: 73:d3:39:4e:e8:b7:7a:8b:87:d0:de:b3:82:52:12: 38:04:93:be:85:49:7b:d4:8a:4b:c2:fe:ed:db:0c: 4b:76:70:4e:d1:f3:32:11:18:94:d1:05:b6:7e:91: 24:30:bc:fa:57:e7:b3:06:30:b6:b9:7d:84:4a:43: b9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E7:F4:4C:11:55:AE:DD:5B:96:89:AF:1B:5B:E6:C7:12:45:14:B7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6439208c-ccf1-40d8-a951-f35955f2aa73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.91.0/24 Signature Algorithm: sha256WithRSAEncryption 21:13:b6:5d:ce:4c:ef:86:e7:2c:e2:78:6f:51:71:51:4f:4c: 11:b4:87:d4:bb:7e:39:38:0e:25:ee:71:03:78:ea:18:82:93: 6d:04:8e:72:c4:28:96:42:82:90:f8:66:34:e4:e0:b5:74:9b: 17:9f:6e:05:d6:12:8c:03:d2:71:25:74:03:15:cf:d1:2c:d8: 63:22:48:fc:53:22:b5:14:ad:c5:b2:02:c5:25:0c:03:63:20: 9d:c5:dd:9b:19:73:62:7f:aa:23:97:e1:0b:35:e2:ab:fb:12: c7:8f:2b:57:ee:16:eb:c9:1b:ce:34:0f:3a:9a:d9:6a:f9:71: 66:44:aa:04:76:68:53:34:ce:ff:99:ec:a0:39:98:ca:d2:fd: 35:37:10:93:71:b0:bd:4e:56:b9:5a:f0:ee:9f:f6:c5:24:9c: 7d:9f:42:1b:1f:9e:ef:a0:f4:58:29:73:21:82:5d:76:7b:0b: f1:3c:93:07:f1:22:cb:64:4e:8f:1c:4e:46:c7:ca:29:65:90: 16:5b:5a:2c:0d:a2:ee:b6:62:41:57:a3:4d:40:ab:e5:58:7c: a0:92:0c:cb:1f:b1:a2:9a:c7:9e:9c:8a:b6:e5:6d:7d:2d:3a: 76:17:2d:6c:2e:ce:55:8b:49:8c:13:4d:20:59:93:b7:a3:41: cd:b4:44:b7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUTggC7wWVoRx9VRljyN7MODlPen4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTgwODQzWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTUyOGMzZDgzMWIxMGI0NTFmZWQ1MGVjZGM1MWNmNDI0 ODZkNzk1NmRlYmU4ZTI1MDQyMjc0YjFiMDdkMDQ5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDXEd0GcvAt+wURNfo+yZYjdwj+S3mL2i0tUuICQhB2q2Mh A3gAE7Lua3pPGYUlYOx44+y+rN328jZNgqimKdKjDQAW71zh15ZrSQjUmcwLhDL0 tenhsHMa9IuSTMnCds7Z7Ot/r0b1ull2wuqVvDInWFT7h6Kv5LX/1AsXa04sYN9G MbmgO6m6OgeuWzpwrMG53h9jfh6kMkIR+GOMEuwZGDe2KpYOwVTO1oKK5DAnmnht oDFll0JLkkDtdM8ltNK0QXPTOU7ot3qLh9Des4JSEjgEk76FSXvUikvC/u3bDEt2 cE7R8zIRGJTRBbZ+kSQwvPpX57MGMLa5fYRKQ7mFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUjef0TBFVrt1blomvG1vmxxJFFLcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0MzkyMDhjLWNjZjEtNDBkOC1hOTUxLWYzNTk1NWYyYWE3My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAlswDQYJKoZIhvcNAQELBQADggEBACETtl3OTO+G5yzieG9RcVFPTBG0 h9S7fjk4DiXucQN46hiCk20EjnLEKJZCgpD4ZjTk4LV0mxefbgXWEowD0nEldAMV z9Es2GMiSPxTIrUUrcWyAsUlDANjIJ3F3ZsZc2J/qiOX4Qs14qv7EsePK1fuFuvJ G840Dzqa2Wr5cWZEqgR2aFM0zv+Z7KA5mMrS/TU3EJNxsL1OVrla8O6f9sUknH2f Qhsfnu+g9FgpcyGCXXZ7C/E8kwfxIstkTo8cTkbHyillkBZbWiwNou62YkFXo01A q+VYfKCSDMsfsaKax56cirblbX0tOnYXLWwuzlWLSYwTTSBZk7ejQc20RLc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:48 2025 by rpki-client