$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dee94bfc-1378-44f7-9bb9-c8897c9e090b.roa File: dee94bfc-1378-44f7-9bb9-c8897c9e090b.roa (raw, json) Hash identifier: bxII+WSZ1HeMEgj3msTF32teurcQm4fHLJ6lti19mOs= Subject key identifier: 62:01:9F:53:03:99:C7:B1:57:32:35:F4:A6:CF:BF:45:B7:63:77:84 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6D00E10A5BC3B36572C7161972EEF1FBA9139622 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dee94bfc-1378-44f7-9bb9-c8897c9e090b.roa Signing time: Mon 04 Aug 2025 18:00:20 +0000 ROA not before: Mon 04 Aug 2025 18:00:20 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 3.2.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:00:e1:0a:5b:c3:b3:65:72:c7:16:19:72:ee:f1:fb:a9:13:96:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 4 18:00:20 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=9a6d208e0f8cfa9dea38a624e64503040439633b7f53b8c849b9030d012e127d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:96:f1:f6:9c:3a:5f:e6:0a:c6:ea:0d:43: 37:94:bd:4f:16:e6:dd:56:ea:48:d9:6c:5a:5e:4e: bc:ca:0d:18:a2:13:eb:17:cf:73:42:a1:e9:49:c4: ea:48:12:30:84:d8:c6:be:20:5e:a7:10:f5:3e:ac: fe:75:fa:c7:87:df:2a:0b:c0:c3:40:4e:4e:9f:f9: 2e:5d:78:a2:3b:ab:a0:1b:dc:ea:64:46:ee:e2:3c: 3f:3d:34:4d:70:d6:62:dc:71:ca:4f:11:f8:1f:bf: 9d:fb:f6:ab:d2:8c:10:6f:df:92:fe:a5:de:b9:6b: 7e:05:62:1e:9b:13:07:dc:6d:57:43:47:d3:c6:3e: 19:ec:4e:8a:ae:33:6a:e2:f7:9b:09:9b:e1:4c:27: d1:64:8c:9b:5d:f9:d8:ec:4c:57:c8:64:a8:75:00: 04:f1:37:33:d2:36:15:f3:a7:2d:72:de:18:25:1e: 68:db:ff:0b:95:29:ab:c3:9e:b9:ba:ea:79:e1:42: 3c:57:e5:3a:d3:34:9d:5c:0e:14:13:bf:ca:c3:c7: fa:7e:9b:89:df:2a:1e:41:21:6e:aa:c2:a7:56:9a: 8e:28:8c:04:a7:14:16:65:cc:ed:94:eb:d7:3b:3a: ac:f2:41:57:9a:3c:d2:e5:fd:b7:68:cf:1a:af:c4: 42:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:01:9F:53:03:99:C7:B1:57:32:35:F4:A6:CF:BF:45:B7:63:77:84 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dee94bfc-1378-44f7-9bb9-c8897c9e090b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 3.2.2.0/24 Signature Algorithm: sha256WithRSAEncryption 80:ea:09:f7:f2:bd:75:ca:e6:48:b3:6d:bd:b3:5d:b9:56:ae: 0c:9e:25:2a:e3:28:2d:a8:4a:ed:a4:b8:47:14:b8:03:56:3f: c0:59:f9:54:3d:24:15:61:b1:5b:69:f1:df:e8:93:0c:8e:1d: 21:7b:e0:fa:03:9b:39:fb:9d:78:f1:7f:cb:b8:23:85:a4:3e: 6a:6e:a9:14:52:10:53:64:d1:fa:c9:be:bb:a0:f2:fd:27:10: 90:77:50:7b:fa:1a:05:f3:da:6d:d6:02:9c:f9:f0:25:f6:73: d5:33:bf:1a:f0:df:35:22:bd:86:5e:7f:05:56:3e:c9:bb:7b: 3a:9c:ac:36:e6:9b:0b:a4:ca:23:58:21:e8:b2:d3:67:a1:81: 7a:f8:4f:8b:30:bd:d7:47:db:ae:87:7c:90:80:35:bc:27:4c: ae:2b:dd:ab:6e:86:da:52:df:18:57:cd:ef:41:98:c4:2f:09: 66:9d:63:40:aa:c1:7b:5f:bd:06:bf:4c:14:27:37:d0:6f:bd: 99:30:8b:c7:f4:b6:2e:ae:ff:f3:f5:a7:b4:40:90:8d:6a:d4: 7b:31:61:8b:28:46:e9:df:6a:1b:b2:c2:cb:8d:f9:1b:72:df: d9:98:a6:2b:5d:8a:7e:d9:16:74:a0:bb:a1:61:bf:59:fb:69: 5d:6f:8b:39 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbQDhClvDs2VyxxYZcu7x+6kTliIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA0MTgwMDIwWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A5YTZkMjA4ZTBmOGNmYTlkZWEzOGE2MjRlNjQ1MDMwNDA0 Mzk2MzNiN2Y1M2I4Yzg0OWI5MDMwZDAxMmUxMjdkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCl6Jbx9pw6X+YKxuoNQzeUvU8W5t1W6kjZbFpeTrzKDRii E+sXz3NCoelJxOpIEjCE2Ma+IF6nEPU+rP51+seH3yoLwMNATk6f+S5deKI7q6Ab 3OpkRu7iPD89NE1w1mLcccpPEfgfv5379qvSjBBv35L+pd65a34FYh6bEwfcbVdD R9PGPhnsToquM2ri95sJm+FMJ9FkjJtd+djsTFfIZKh1AATxNzPSNhXzpy1y3hgl Hmjb/wuVKavDnrm66nnhQjxX5TrTNJ1cDhQTv8rDx/p+m4nfKh5BIW6qwqdWmo4o jASnFBZlzO2U69c7OqzyQVeaPNLl/bdozxqvxEI9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYgGfUwOZx7FXMjX0ps+/Rbdjd4QwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlZTk0YmZjLTEzNzgtNDRmNy05YmI5LWM4ODk3YzllMDkwYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAADAgIwDQYJKoZIhvcNAQELBQADggEBAIDqCffyvXXK5kizbb2zXblWrgye JSrjKC2oSu2kuEcUuANWP8BZ+VQ9JBVhsVtp8d/okwyOHSF74PoDmzn7nXjxf8u4 I4WkPmpuqRRSEFNk0frJvrug8v0nEJB3UHv6GgXz2m3WApz58CX2c9Uzvxrw3zUi vYZefwVWPsm7ezqcrDbmmwukyiNYIeiy02ehgXr4T4swvddH266HfJCANbwnTK4r 3atuhtpS3xhXze9BmMQvCWadY0CqwXtfvQa/TBQnN9BvvZkwi8f0ti6u//P1p7RA kI1q1HsxYYsoRunfahuywsuN+Rty39mYpitdin7ZFnSgu6Fhv1n7aV1vizk= -----END CERTIFICATE-----Generated at Sat Aug 23 11:59:36 2025 by rpki-client