$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7be9a2d8-e562-4d01-a36b-092a5d5fff67.roa File: 7be9a2d8-e562-4d01-a36b-092a5d5fff67.roa (raw, json) Hash identifier: nBqBiaRqgBKupzLmWVMtIwjD7CfwHXxUB+Mn8lVVrds= Subject key identifier: C5:14:E2:D8:80:DA:53:CF:AA:2F:93:F3:C1:EC:54:C3:08:48:1B:BA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 74ED4887D20F5FB530FCE77A1385DCC545AB539F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7be9a2d8-e562-4d01-a36b-092a5d5fff67.roa Signing time: Tue 19 Aug 2025 15:01:26 +0000 ROA not before: Tue 19 Aug 2025 15:01:26 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.239.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ed:48:87:d2:0f:5f:b5:30:fc:e7:7a:13:85:dc:c5:45:ab:53:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 15:01:26 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=2a587df83f0a7e6b9b9e6f40b2cc83a02bd2b0f7410e3ea63d69c1934cefe8bb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:04:88:0e:47:08:c9:bf:2f:08:c1:97:c0: e0:47:f3:7b:3f:5b:e7:2d:b5:29:3d:e8:d3:da:f5: 72:cc:88:8a:d4:94:3d:85:35:77:3a:5f:eb:61:d1: f7:89:d3:39:5d:5e:4e:14:2c:d0:61:72:85:7f:43: aa:63:3d:ed:1f:21:32:17:33:9a:f6:d9:e1:51:63: e1:65:94:3d:b3:de:3b:02:3d:54:9e:d1:f4:2e:f1: 9d:58:1a:e1:80:16:97:37:41:d7:a0:35:72:29:ec: 12:9b:17:31:60:29:62:fd:c0:a7:6c:73:58:d5:3f: 28:83:47:e7:1d:4b:a0:ef:e1:2b:fe:5f:08:83:14: f3:ad:4d:a7:85:30:17:40:37:3e:3b:56:b6:c1:5c: cd:2a:ed:2a:b7:f4:a5:9f:80:3f:68:7c:1c:69:56: c6:63:2a:e2:4d:00:19:ef:a3:0b:b5:2f:71:74:b6: 67:da:e8:d2:2f:af:dc:39:4c:7e:0c:a8:db:c6:8b: 74:c7:d2:29:4f:1e:9e:67:f3:c9:66:78:1b:4b:8d: d5:68:d5:6d:b2:34:25:43:72:f8:f5:fe:92:cb:6e: f1:22:4d:93:97:f7:c4:f4:8f:65:f9:45:05:bf:6d: 73:10:2b:3f:80:a2:c1:1e:2c:05:32:2c:bc:7e:98: 66:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:14:E2:D8:80:DA:53:CF:AA:2F:93:F3:C1:EC:54:C3:08:48:1B:BA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7be9a2d8-e562-4d01-a36b-092a5d5fff67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.239.232.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:c5:18:13:dc:77:1d:17:d2:6f:0c:e7:55:8d:53:cb:a1:06: f9:05:1f:e1:d4:f4:3e:8f:d7:81:e0:aa:f8:10:7c:82:c7:a6: 48:24:76:23:35:51:0a:de:2e:be:fa:ac:d5:f3:dd:21:b8:67: 56:9f:5c:c0:92:9c:b4:a3:a3:4a:68:c4:af:8b:14:2b:ac:78: 1f:af:f4:72:0d:81:3e:8a:c9:d5:68:74:f0:38:da:8f:b7:89: b2:5c:3c:15:e3:c6:33:2f:98:b6:e5:03:ad:bc:51:c0:e6:4d: d4:fb:e7:f1:48:65:52:e5:c5:53:58:19:46:f5:89:c4:ee:df: fd:e4:61:17:99:bf:ee:a3:c1:96:b8:8a:e3:55:0b:d5:d4:9b: fd:b6:0f:5b:23:69:bb:2f:aa:82:19:c1:7a:64:94:b9:7e:e3: e0:72:a9:21:77:d3:b6:3f:d9:74:a7:04:85:e1:f2:18:fe:72: 98:47:70:be:89:f5:11:6c:09:fd:50:04:62:13:d2:f7:06:c5: 67:4a:66:2c:ec:66:ee:25:a8:06:b3:84:96:c8:3c:7c:32:0b: 9e:25:ba:0b:77:d7:f8:d1:b1:e6:ef:1d:37:e9:c7:cf:18:50: eb:6d:a1:78:75:36:ef:04:88:26:fc:07:7a:0f:96:fd:8a:1c: 43:f5:50:f8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdO1Ih9IPX7Uw/Od6E4XcxUWrU58wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MTUwMTI2WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYTU4N2RmODNmMGE3ZTZiOWI5ZTZmNDBiMmNjODNhMDJi ZDJiMGY3NDEwZTNlYTYzZDY5YzE5MzRjZWZlOGJiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCuRgSIDkcIyb8vCMGXwOBH83s/W+cttSk96NPa9XLMiIrU lD2FNXc6X+th0feJ0zldXk4ULNBhcoV/Q6pjPe0fITIXM5r22eFRY+FllD2z3jsC PVSe0fQu8Z1YGuGAFpc3QdegNXIp7BKbFzFgKWL9wKdsc1jVPyiDR+cdS6Dv4Sv+ XwiDFPOtTaeFMBdANz47VrbBXM0q7Sq39KWfgD9ofBxpVsZjKuJNABnvowu1L3F0 tmfa6NIvr9w5TH4MqNvGi3TH0ilPHp5n88lmeBtLjdVo1W2yNCVDcvj1/pLLbvEi TZOX98T0j2X5RQW/bXMQKz+AosEeLAUyLLx+mGb7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUxRTi2IDaU8+qL5PzwexUwwhIG7owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiZTlhMmQ4LWU1NjItNGQwMS1hMzZiLTA5MmE1ZDVmZmY2Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAD7+gwDQYJKoZIhvcNAQELBQADggEBAB3FGBPcdx0X0m8M51WNU8uhBvkF H+HU9D6P14HgqvgQfILHpkgkdiM1UQreLr76rNXz3SG4Z1afXMCSnLSjo0poxK+L FCuseB+v9HINgT6KydVodPA42o+3ibJcPBXjxjMvmLblA628UcDmTdT75/FIZVLl xVNYGUb1icTu3/3kYReZv+6jwZa4iuNVC9XUm/22D1sjabsvqoIZwXpklLl+4+By qSF307Y/2XSnBIXh8hj+cphHcL6J9RFsCf1QBGIT0vcGxWdKZizsZu4lqAazhJbI PHwyC54lugt31/jRsebvHTfpx88YUOttoXh1Nu8EiCb8B3oPlv2KHEP1UPg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:00:42 2025 by rpki-client