$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1392a881-d849-408e-95ed-edc73e292587.roa File: 1392a881-d849-408e-95ed-edc73e292587.roa (raw, json) Hash identifier: AVR/RbP0hG6GGovxYNW4Ky4/2SDRaB+Z66cqHmg3UdY= Subject key identifier: 64:4E:80:D1:F5:40:0F:E4:CB:9A:33:D0:19:F0:44:08:7E:85:37:53 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 48343D192E88DA2048BDFC2C3B84DD581E21978A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1392a881-d849-408e-95ed-edc73e292587.roa Signing time: Wed 23 Jul 2025 00:40:35 +0000 ROA not before: Wed 23 Jul 2025 00:40:35 +0000 ROA not after: Wed 27 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:34:3d:19:2e:88:da:20:48:bd:fc:2c:3b:84:dd:58:1e:21:97:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 23 00:40:35 2025 GMT Not After : Aug 27 23:59:59 2025 GMT Subject: serialNumber=293d832ff2cf7336d1c7cdc28d3b0e81d4232d28c0da2635d47e3067ba560de5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:fa:1f:87:72:c5:ce:43:45:98:d9:9d:5d: 60:ac:d0:f1:96:99:c9:31:99:39:99:4a:1f:96:02: 26:8a:8e:25:f6:df:73:36:40:af:d5:c8:a9:7d:d5: 0f:7a:01:cb:cf:c1:2f:7b:cb:af:a4:4d:12:92:5e: b8:8d:c2:af:d3:b7:c5:93:33:f8:e5:69:fc:46:1e: c9:54:8a:fc:84:51:b5:92:e5:0d:6c:db:91:b3:4a: 15:69:02:a6:5c:fc:3f:5a:e3:99:da:e0:7b:db:de: a5:80:5e:78:f3:27:58:3d:c7:3f:25:98:5b:4a:5f: a2:a3:68:75:5b:b4:33:48:55:5e:f7:a9:1f:65:5a: 38:e2:65:17:a6:e9:74:bc:68:ec:1f:45:f2:67:04: 02:2f:c2:9d:75:fd:38:ad:e9:a5:da:47:02:a9:67: ee:3f:e7:e1:47:2c:9e:8e:5b:b7:0a:41:18:7f:71: d6:26:4f:cc:77:8d:c4:1b:98:31:fd:6f:f3:0e:b6: 6f:af:8e:07:27:80:1c:7e:ef:dc:80:5a:f0:0a:6c: 51:9e:e2:53:d2:11:3b:bf:3d:07:a9:e7:39:93:63: f2:4a:88:db:a3:aa:0e:a0:f5:46:52:e3:0e:cc:05: 09:d0:83:c1:bf:d4:1e:80:11:da:5d:72:95:d9:78: f8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4E:80:D1:F5:40:0F:E4:CB:9A:33:D0:19:F0:44:08:7E:85:37:53 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1392a881-d849-408e-95ed-edc73e292587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.32.0/21 Signature Algorithm: sha256WithRSAEncryption 27:ba:7d:c2:47:55:70:5e:f7:7a:d0:c1:ca:9d:39:0f:b4:b5: de:4b:ef:f3:d5:b9:ea:92:c5:e5:12:c2:58:0f:ba:38:ea:bd: 16:2b:18:9d:24:77:78:4d:b8:4a:76:a2:bb:4f:13:79:a3:01: b7:94:05:b8:ae:c0:2d:ef:bf:b5:8d:a9:46:16:4d:41:15:ec: 5e:1f:e5:10:fa:8b:37:68:5c:75:b5:2f:9b:7e:dc:f2:98:7e: 4e:23:93:c9:c0:e9:21:32:67:ec:27:5e:ec:07:47:ee:bb:6b: 70:4a:89:7b:25:4f:bd:20:e2:39:ae:da:0e:9b:b9:16:11:53: 5e:98:cb:84:c6:eb:bb:62:81:47:c0:98:e0:64:e9:87:91:94: e5:bb:ef:f3:8c:e9:d7:e9:fd:2f:65:77:ba:a9:41:0c:d3:4f: cf:16:97:d4:ba:40:03:fc:22:60:b2:50:88:d7:22:b4:b4:de: 45:10:47:8b:b0:37:01:e3:42:19:8b:56:8b:08:60:1d:38:d3: 1d:88:8c:4a:6a:07:b4:6f:90:5b:4c:fe:13:5c:f3:53:71:73: 3f:3d:69:bb:44:6e:c9:09:20:26:9c:e0:5a:e0:78:52:08:88: ac:73:c1:9e:91:5a:78:45:47:42:41:f6:64:f6:b0:5b:f3:2e: 31:c1:18:d8 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSDQ9GS6I2iBIvfwsO4TdWB4hl4owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzIzMDA0MDM1WhcNMjUwODI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AyOTNkODMyZmYyY2Y3MzM2ZDFjN2NkYzI4ZDNiMGU4MWQ0 MjMyZDI4YzBkYTI2MzVkNDdlMzA2N2JhNTYwZGU1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCIF/ofh3LFzkNFmNmdXWCs0PGWmckxmTmZSh+WAiaKjiX2 33M2QK/VyKl91Q96AcvPwS97y6+kTRKSXriNwq/Tt8WTM/jlafxGHslUivyEUbWS 5Q1s25GzShVpAqZc/D9a45na4Hvb3qWAXnjzJ1g9xz8lmFtKX6KjaHVbtDNIVV73 qR9lWjjiZRem6XS8aOwfRfJnBAIvwp11/Tit6aXaRwKpZ+4/5+FHLJ6OW7cKQRh/ cdYmT8x3jcQbmDH9b/MOtm+vjgcngBx+79yAWvAKbFGe4lPSETu/PQep5zmTY/JK iNujqg6g9UZS4w7MBQnQg8G/1B6AEdpdcpXZePhJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUZE6A0fVAD+TLmjPQGfBECH6FN1MwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzEzOTJhODgxLWQ4NDktNDA4ZS05NWVkLWVkYzczZTI5MjU4Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPsSAwDQYJKoZIhvcNAQELBQADggEBACe6fcJHVXBe93rQwcqdOQ+0td5L 7/PVueqSxeUSwlgPujjqvRYrGJ0kd3hNuEp2ortPE3mjAbeUBbiuwC3vv7WNqUYW TUEV7F4f5RD6izdoXHW1L5t+3PKYfk4jk8nA6SEyZ+wnXuwHR+67a3BKiXslT70g 4jmu2g6buRYRU16Yy4TG67tigUfAmOBk6YeRlOW77/OM6dfp/S9ld7qpQQzTT88W l9S6QAP8ImCyUIjXIrS03kUQR4uwNwHjQhmLVosIYB040x2IjEpqB7RvkFtM/hNc 81Nxcz89abtEbskJICac4FrgeFIIiKxzwZ6RWnhFR0JB9mT2sFvzLjHBGNg= -----END CERTIFICATE-----Generated at Mon Aug 4 22:17:50 2025 by rpki-client