$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88731b07-6a3d-4828-b906-14545072d47f.roa File: 88731b07-6a3d-4828-b906-14545072d47f.roa (raw, json) Hash identifier: 454PVlb3IYvusjs1mvCIURvsEFACjJv1tvUhV2Zo0fE= Subject key identifier: 08:BE:F3:20:D1:FA:94:DA:31:87:EB:9A:D6:D8:25:52:37:4A:58:85 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B322422CD357A0AAA20D963E1A0EB848D588DEF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88731b07-6a3d-4828-b906-14545072d47f.roa Signing time: Mon 18 Aug 2025 18:08:42 +0000 ROA not before: Mon 18 Aug 2025 18:08:42 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:32:24:22:cd:35:7a:0a:aa:20:d9:63:e1:a0:eb:84:8d:58:8d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 18:08:42 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=fc69bbdaa57a03a6488c2c115599a8b222bb335f765b81e668f8ce6523817248, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:9e:f9:df:4e:02:60:3f:40:01:22:df:c6: 65:de:f7:35:a6:43:9a:26:ed:0b:55:dd:73:6b:86: 4d:45:e0:79:ef:49:7a:92:24:f1:46:5d:61:96:d3: d2:57:79:a0:e1:4e:c0:7f:42:77:7b:cb:a1:12:4f: f6:f1:72:b3:06:9d:d6:45:1e:33:30:a8:47:7f:c6: 02:72:50:47:0f:10:36:dd:80:2b:b5:00:c1:86:db: 2b:3f:96:94:ae:d1:2c:ec:53:eb:23:7a:90:4d:08: 60:24:1a:75:76:de:9c:88:5d:d8:66:27:c9:be:8c: 91:39:cd:3a:13:83:e3:92:c6:ed:09:45:f3:c4:e0: 56:9d:2e:e5:a5:ad:e3:23:06:f0:66:f6:df:75:b4: 85:35:98:bc:d6:73:ec:99:9c:1b:9a:9f:ab:c4:2b: 2b:1e:1b:a7:29:aa:2b:45:4f:46:9c:dd:9a:35:46: 4d:70:ee:68:2b:7a:ac:81:c0:e7:fa:93:fe:94:fb: a7:ba:d6:b8:eb:4d:e1:0f:5f:c5:39:d1:76:49:13: f9:62:50:83:75:bc:a0:3a:9d:66:a2:66:6b:a8:67: de:6f:b9:0b:c6:de:d0:24:03:5a:7b:f1:bb:2e:b1: 6e:d1:03:6f:7e:f9:af:c6:7b:ec:40:1b:3d:48:78: 54:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BE:F3:20:D1:FA:94:DA:31:87:EB:9A:D6:D8:25:52:37:4A:58:85 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/88731b07-6a3d-4828-b906-14545072d47f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.89.0/24 Signature Algorithm: sha256WithRSAEncryption 63:d5:26:d7:0b:3f:69:7a:03:4b:33:35:9d:6f:90:a6:73:c5: 77:d0:6d:86:a7:f6:d7:dd:cb:60:d4:f5:01:01:d1:59:8f:0d: f1:16:fc:0a:2e:90:34:a8:10:c0:ee:b5:68:8d:2b:e2:42:3a: 1c:a5:a4:82:6b:5a:04:9e:66:63:f9:1a:10:71:6d:1e:92:13: 35:9d:cd:ca:ef:3a:f7:6f:fc:ab:2c:98:6c:8e:a4:d2:86:bb: a9:c8:40:c0:bc:a4:50:00:7a:a4:37:e1:c6:d0:9f:a8:ab:77: 1a:a5:66:4b:d6:c4:c3:f5:bc:a0:c3:84:34:15:8a:27:57:32: ec:b3:4b:d0:6e:c0:d5:9d:06:60:39:5c:86:dc:c5:cd:c3:2f: 29:cb:a3:71:07:eb:3e:d6:77:3c:81:88:05:f3:f0:9c:c4:ec: 64:70:c0:24:13:de:c7:c6:2e:e5:a4:0b:8b:7a:3b:1d:7d:b7: bc:f2:0b:35:c8:c7:e4:6b:f7:39:d5:c4:ff:39:c8:f0:52:5d: 16:e2:9b:c0:da:78:d2:7a:29:1b:1d:b4:8c:4e:6b:1a:43:0a: 52:55:e2:74:40:70:ca:4d:a0:f9:ed:c6:7c:97:cc:09:3a:4a: e0:75:72:6a:6d:bd:65:7a:5c:bb:df:7b:f5:52:a4:56:dc:a3: 19:66:ff:ad -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCzIkIs01egqqINlj4aDrhI1Yje8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTgwODQyWhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmYzY5YmJkYWE1N2EwM2E2NDg4YzJjMTE1NTk5YThiMjIy YmIzMzVmNzY1YjgxZTY2OGY4Y2U2NTIzODE3MjQ4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDks575304CYD9AASLfxmXe9zWmQ5om7QtV3XNrhk1F4Hnv SXqSJPFGXWGW09JXeaDhTsB/Qnd7y6EST/bxcrMGndZFHjMwqEd/xgJyUEcPEDbd gCu1AMGG2ys/lpSu0SzsU+sjepBNCGAkGnV23pyIXdhmJ8m+jJE5zToTg+OSxu0J RfPE4FadLuWlreMjBvBm9t91tIU1mLzWc+yZnBuan6vEKyseG6cpqitFT0ac3Zo1 Rk1w7mgreqyBwOf6k/6U+6e61rjrTeEPX8U50XZJE/liUIN1vKA6nWaiZmuoZ95v uQvG3tAkA1p78bsusW7RA29++a/Ge+xAGz1IeFSjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUCL7zINH6lNoxh+ua1tglUjdKWIUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg4NzMxYjA3LTZhM2QtNDgyOC1iOTA2LTE0NTQ1MDcyZDQ3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAlkwDQYJKoZIhvcNAQELBQADggEBAGPVJtcLP2l6A0szNZ1vkKZzxXfQ bYan9tfdy2DU9QEB0VmPDfEW/AoukDSoEMDutWiNK+JCOhylpIJrWgSeZmP5GhBx bR6SEzWdzcrvOvdv/KssmGyOpNKGu6nIQMC8pFAAeqQ34cbQn6irdxqlZkvWxMP1 vKDDhDQViidXMuyzS9BuwNWdBmA5XIbcxc3DLynLo3EH6z7WdzyBiAXz8JzE7GRw wCQT3sfGLuWkC4t6Ox19t7zyCzXIx+Rr9znVxP85yPBSXRbim8DaeNJ6KRsdtIxO axpDClJV4nRAcMpNoPntxnyXzAk6SuB1cmptvWV6XLvfe/VSpFbcoxlm/60= -----END CERTIFICATE-----Generated at Sat Aug 23 10:11:09 2025 by rpki-client