$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3127b0a-427a-4adc-97af-3e60a9f083ea.roa File: f3127b0a-427a-4adc-97af-3e60a9f083ea.roa (raw, json) Hash identifier: Ui+Wl8a/xEgjkvg4NnjFl/eqL7rSQy5twYu1MOjqP9M= Subject key identifier: 18:D3:83:39:73:AC:9F:9B:F0:1F:DE:19:0E:91:AD:5B:A2:6A:9E:3D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 087FB0938F6EAF415F90D0D48C0FD6124F74871D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3127b0a-427a-4adc-97af-3e60a9f083ea.roa Signing time: Tue 19 Aug 2025 00:50:16 +0000 ROA not before: Tue 19 Aug 2025 00:50:16 +0000 ROA not after: Tue 23 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.89.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:7f:b0:93:8f:6e:af:41:5f:90:d0:d4:8c:0f:d6:12:4f:74:87:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 19 00:50:16 2025 GMT Not After : Sep 23 23:59:59 2025 GMT Subject: serialNumber=4ed249645b59f9e9f24aa4a1a7971749844b4240c958e8a99c38172cec9e91b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:85:b1:4e:41:59:a3:eb:14:7f:39:89:92: 5a:2e:8e:6e:4a:2c:b3:0e:f6:dc:d7:f2:c4:69:9a: 17:28:b2:66:c3:04:b2:ce:c5:b3:4b:d5:d0:49:8e: af:67:7f:c9:90:ec:a1:27:10:00:dc:a8:0b:45:ff: fc:70:32:f8:1a:8c:f3:15:10:86:74:d5:51:54:fd: 5b:a2:7d:25:4c:2e:b8:50:d5:34:94:4b:28:71:ce: 4c:a8:94:84:6c:fa:a7:0c:03:96:03:93:27:81:c9: a1:3f:84:49:fa:1d:6e:77:84:d7:60:23:47:0d:4f: 48:cc:c7:6d:cb:0d:93:fe:9a:0a:af:5f:2a:25:dd: 81:b4:4d:05:e2:70:af:53:83:80:d1:ab:0d:96:57: b6:4d:01:98:c0:34:ce:3e:1d:51:15:6b:32:1c:93: 16:a5:5c:16:05:96:3d:27:b1:b3:5e:2d:44:ba:f4: 41:60:0a:f1:7d:17:14:54:86:e1:aa:69:67:b8:bc: ef:3f:be:72:e5:4e:06:0d:a3:c5:a2:0b:87:a7:78: b4:9e:1f:d7:a2:e8:4e:42:d8:48:1b:a8:63:cc:f2: c5:4a:7f:06:92:0e:7a:9d:3d:30:6f:eb:54:72:ea: ae:f0:fe:f4:82:df:ea:9d:a6:cd:5e:87:8c:c2:1c: 91:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:D3:83:39:73:AC:9F:9B:F0:1F:DE:19:0E:91:AD:5B:A2:6A:9E:3D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f3127b0a-427a-4adc-97af-3e60a9f083ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.89.160.0/19 Signature Algorithm: sha256WithRSAEncryption 85:e0:d5:06:0b:be:17:8b:33:29:46:74:9d:18:89:4a:9b:a3: 41:c4:96:8f:2f:00:10:fb:bf:95:21:86:ee:0c:b6:dd:8d:e6: 1e:b5:17:10:32:f8:93:da:e1:d2:03:45:13:ae:1f:57:07:7c: d4:52:b0:25:c3:4b:d4:6f:86:89:bf:cd:f7:d2:be:17:37:f3: 37:2f:e3:15:b7:58:a0:39:a6:88:27:88:47:b7:27:13:db:8b: 6c:4c:b4:74:9d:43:35:77:47:5e:ad:6b:d2:85:bd:b4:80:91: c4:f9:48:72:f6:1e:cb:6c:66:af:2f:bb:0d:7b:2a:2c:10:e3: c8:dd:99:b1:50:5d:6d:ca:24:ce:41:3c:bf:9a:55:61:43:19: 7f:eb:62:5e:25:ba:6c:35:83:d9:e1:56:a0:ad:65:e2:b6:94: 27:03:75:05:1e:b6:29:46:45:eb:69:2a:4e:a8:03:26:c7:a9: 7a:79:4d:30:7b:30:d2:a1:e5:8a:90:a6:48:6d:17:bd:9c:95: 1c:d7:4f:5e:14:e4:a3:6a:6f:3d:40:e2:a0:39:75:34:8e:bf: e4:95:d0:77:52:8d:c4:8e:41:96:23:2b:b9:93:53:31:f7:85: 13:a4:9f:b5:36:18:f7:a4:84:6b:89:b1:85:05:45:05:e5:cd: 58:b1:a4:70 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCH+wk49ur0FfkNDUjA/WEk90hx0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE5MDA1MDE2WhcNMjUwOTIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZWQyNDk2NDViNTlmOWU5ZjI0YWE0YTFhNzk3MTc0OTg0 NGI0MjQwYzk1OGU4YTk5YzM4MTcyY2VjOWU5MWIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKI4WxTkFZo+sUfzmJkloujm5KLLMO9tzX8sRpmhcosmbD BLLOxbNL1dBJjq9nf8mQ7KEnEADcqAtF//xwMvgajPMVEIZ01VFU/VuifSVMLrhQ 1TSUSyhxzkyolIRs+qcMA5YDkyeByaE/hEn6HW53hNdgI0cNT0jMx23LDZP+mgqv Xyol3YG0TQXicK9Tg4DRqw2WV7ZNAZjANM4+HVEVazIckxalXBYFlj0nsbNeLUS6 9EFgCvF9FxRUhuGqaWe4vO8/vnLlTgYNo8WiC4eneLSeH9ei6E5C2EgbqGPM8sVK fwaSDnqdPTBv61Ry6q7w/vSC3+qdps1eh4zCHJGXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGNODOXOsn5vwH94ZDpGtW6Jqnj0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2YzMTI3YjBhLTQyN2EtNGFkYy05N2FmLTNlNjBhOWYwODNlYS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAUSWaAwDQYJKoZIhvcNAQELBQADggEBAIXg1QYLvheLMylGdJ0YiUqbo0HE lo8vABD7v5Uhhu4Mtt2N5h61FxAy+JPa4dIDRROuH1cHfNRSsCXDS9Rvhom/zffS vhc38zcv4xW3WKA5pogniEe3JxPbi2xMtHSdQzV3R16ta9KFvbSAkcT5SHL2Hsts Zq8vuw17KiwQ48jdmbFQXW3KJM5BPL+aVWFDGX/rYl4lumw1g9nhVqCtZeK2lCcD dQUetilGRetpKk6oAybHqXp5TTB7MNKh5YqQpkhtF72clRzXT14U5KNqbz1A4qA5 dTSOv+SV0HdSjcSOQZYjK7mTUzH3hROkn7U2GPekhGuJsYUFRQXlzVixpHA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:08:07 2025 by rpki-client