$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33d80b-180b-4303-9aca-60e5a054d749.roa File: 1f33d80b-180b-4303-9aca-60e5a054d749.roa (raw, json) Hash identifier: NFfFELKc8DoqhwH5/3LAZjdVsSuWqBc6L7e7n/R/T28= Subject key identifier: 88:6E:56:15:6C:F8:21:A4:4F:7D:A0:06:5D:BA:23:17:45:E6:1D:B2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 13E1ECC673E3BF6344F05D246D58F9FCA7B9F2EA Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33d80b-180b-4303-9aca-60e5a054d749.roa Signing time: Tue 05 Aug 2025 15:42:18 +0000 ROA not before: Tue 05 Aug 2025 15:42:18 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:e1:ec:c6:73:e3:bf:63:44:f0:5d:24:6d:58:f9:fc:a7:b9:f2:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:42:18 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=6fe67d7825944e0b1b9fd39d641f240ebe7317582f8a84b4676cfc1d6bac792c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:30:03:f5:63:49:6f:97:c2:71:6b:fb:a5:1d: cc:fb:ca:9c:50:fc:a9:f3:bc:7d:4f:11:22:f0:cc: 27:40:f9:23:c8:08:b0:8e:81:b0:a9:51:13:2e:2c: d8:25:2f:cf:9f:db:e5:8a:41:38:cb:5a:05:da:21: 0d:3c:7a:f3:4a:bb:77:35:4f:a2:d8:aa:15:4c:ea: 36:bd:00:3b:d4:90:14:95:2b:9b:2a:f5:57:1e:83: 17:03:be:df:52:ad:13:f6:28:a4:d5:68:be:95:bd: 0f:0e:c8:a5:3d:88:94:87:83:3d:95:e0:43:d9:bb: 6c:49:86:3b:cf:3d:18:cd:a5:cc:00:39:d5:35:0c: d5:81:23:aa:0c:76:a0:2a:81:94:50:52:eb:2b:c5: f1:a9:ed:6d:27:a3:eb:cc:cb:39:b6:39:b9:30:f6: bb:43:10:54:6a:1e:df:02:4e:a0:3d:1b:e2:a2:a6: df:a1:b1:8c:d9:c6:5f:0a:75:31:18:16:01:88:66: 14:dc:93:03:79:37:70:5f:b7:6b:00:ec:a9:69:69: bd:ea:6b:64:fb:f8:23:bf:a0:e8:db:e2:1f:b9:44: 1a:d2:8e:41:ab:c5:ee:12:ae:1d:0f:da:e1:6f:51: 83:8c:a1:b7:af:ab:92:55:c7:fd:3f:76:74:f2:f7: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6E:56:15:6C:F8:21:A4:4F:7D:A0:06:5D:BA:23:17:45:E6:1D:B2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1f33d80b-180b-4303-9aca-60e5a054d749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.223.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:9b:22:f7:b1:80:ce:c1:d3:eb:67:23:d3:e4:cf:90:c6:eb: 0f:c5:32:00:69:29:99:b4:14:93:5b:87:57:2c:bc:78:75:47: 97:bc:98:9e:cf:03:db:41:ab:6f:c2:46:ea:f9:cd:a0:87:e9: 27:bc:83:06:50:ab:27:10:63:6f:fb:a4:0c:91:4e:b6:00:a0: b9:81:78:e5:12:c7:8e:ff:fd:5b:bf:53:dd:75:8c:94:cc:a7: b2:79:52:9b:b4:fb:cd:b0:a1:78:29:24:cb:00:b5:ca:fc:60: 11:85:47:08:7e:33:89:cc:b6:31:05:11:29:74:55:6a:c4:26: 33:77:f2:8a:3c:06:27:fb:7e:76:89:c4:28:20:5e:e9:06:36: 0a:92:4b:74:3f:16:b2:c9:f3:77:b9:17:e1:f7:4e:b1:09:10: 01:c3:07:93:32:86:64:29:48:77:9e:4f:85:54:25:05:d0:70: 4b:14:06:75:3d:d5:3e:ce:3b:01:8d:e8:27:e0:38:75:36:b5: 73:5d:1d:0b:8c:36:92:f1:ee:f0:be:f1:b1:35:f4:b1:d8:20: 18:72:f1:1e:9a:3c:89:22:de:00:ae:a1:3c:a3:1a:ae:33:f7: 6f:9d:a1:f5:76:dc:c6:d0:59:63:69:8d:3a:60:d4:67:4f:ff: 6b:cd:fc:e5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUE+HsxnPjv2NE8F0kbVj5/Ke58uowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTU0MjE4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZmU2N2Q3ODI1OTQ0ZTBiMWI5ZmQzOWQ2NDFmMjQwZWJl NzMxNzU4MmY4YTg0YjQ2NzZjZmMxZDZiYWM3OTJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiMAP1Y0lvl8Jxa/ulHcz7ypxQ/KnzvH1PESLwzCdA+SPI CLCOgbCpURMuLNglL8+f2+WKQTjLWgXaIQ08evNKu3c1T6LYqhVM6ja9ADvUkBSV K5sq9VcegxcDvt9SrRP2KKTVaL6VvQ8OyKU9iJSHgz2V4EPZu2xJhjvPPRjNpcwA OdU1DNWBI6oMdqAqgZRQUusrxfGp7W0no+vMyzm2Obkw9rtDEFRqHt8CTqA9G+Ki pt+hsYzZxl8KdTEYFgGIZhTckwN5N3Bft2sA7Klpab3qa2T7+CO/oOjb4h+5RBrS jkGrxe4Srh0P2uFvUYOMobevq5JVx/0/dnTy9x+/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUiG5WFWz4IaRPfaAGXbojF0XmHbIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzFmMzNkODBiLTE4MGItNDMwMy05YWNhLTYwZTVhMDU0ZDc0OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3t8wDQYJKoZIhvcNAQELBQADggEBAC2bIvexgM7B0+tnI9Pkz5DG6w/F MgBpKZm0FJNbh1csvHh1R5e8mJ7PA9tBq2/CRur5zaCH6Se8gwZQqycQY2/7pAyR TrYAoLmBeOUSx47//Vu/U911jJTMp7J5Upu0+82woXgpJMsAtcr8YBGFRwh+M4nM tjEFESl0VWrEJjN38oo8Bif7fnaJxCggXukGNgqSS3Q/FrLJ83e5F+H3TrEJEAHD B5MyhmQpSHeeT4VUJQXQcEsUBnU91T7OOwGN6CfgOHU2tXNdHQuMNpLx7vC+8bE1 9LHYIBhy8R6aPIki3gCuoTyjGq4z92+dofV23MbQWWNpjTpg1GdP/2vN/OU= -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:37 2025 by rpki-client