$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39bc5415-22bb-4c0c-981c-f399db1cc778.roa File: 39bc5415-22bb-4c0c-981c-f399db1cc778.roa (raw, json) Hash identifier: 9IrxeUe7QSEN8ly9HO1RMJ9BsKOq1oUM+avZVqcIGYs= Subject key identifier: EB:18:D5:59:71:97:7D:F3:E0:30:32:5B:F5:2F:93:42:78:1C:99:B2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 339020FEE1E09F79A9E09E9D88ED2B2E789E2787 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39bc5415-22bb-4c0c-981c-f399db1cc778.roa Signing time: Fri 11 Jul 2025 16:11:41 +0000 ROA not before: Fri 11 Jul 2025 16:11:41 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:90:20:fe:e1:e0:9f:79:a9:e0:9e:9d:88:ed:2b:2e:78:9e:27:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 16:11:41 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=7ef767b1abb45d281e4311c60375ed7828e1693188385b3ccc2810ac0ca5de64, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:1f:88:7d:fc:16:25:ae:0b:4d:19:e9:85: af:e7:49:d4:22:d5:1d:f5:4d:b2:d5:8b:5e:06:16: 56:1e:5d:80:1f:1f:24:3e:cf:33:75:4e:1f:9c:a3: 6b:a6:ff:ac:3e:c5:c3:af:e0:54:7e:1d:99:a1:ea: 8e:1a:31:91:02:e5:44:9d:16:1f:97:a7:d0:36:e0: 0d:12:f2:8d:2f:f8:ae:6c:e1:7f:96:58:3c:6c:51: 65:c8:cd:6e:90:8d:e0:7d:99:0c:d5:e3:7f:97:b5: d5:49:85:21:ce:53:49:5b:bf:e6:3b:5a:4f:44:c3: 29:82:89:67:dc:30:ba:6a:15:cf:08:2e:d3:14:5b: 39:ed:53:60:37:96:20:9c:70:5a:7f:3e:ba:c2:6a: 62:86:d5:b5:d1:f4:de:f1:91:c1:56:0e:e2:7b:81: b0:db:37:0c:57:cb:95:cf:5f:89:52:a6:75:ad:34: cc:06:fb:60:1a:2f:29:20:4f:81:33:d1:7b:71:97: 07:88:92:a2:3e:42:cb:2c:67:da:10:02:37:64:e4: 12:8f:fb:65:fb:4b:2e:9f:46:2b:7c:96:18:95:30: ca:7e:d5:27:d7:8c:e2:5f:4b:f6:0e:5d:95:45:63: 0d:df:1f:0d:35:1d:f2:72:aa:85:c6:5b:8d:9b:4d: 58:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:18:D5:59:71:97:7D:F3:E0:30:32:5B:F5:2F:93:42:78:1C:99:B2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39bc5415-22bb-4c0c-981c-f399db1cc778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.80.0/20 Signature Algorithm: sha256WithRSAEncryption 2d:66:e1:ae:57:31:7e:72:9c:96:7a:73:3e:5c:ad:d0:02:ba: 23:84:f7:e3:1c:c6:81:aa:6e:b1:14:79:fb:4f:33:86:ac:96: c5:88:cd:38:06:b4:e2:f8:a5:0e:d4:22:b4:7d:03:b2:44:b2: 8f:12:1a:22:31:a2:96:58:96:a4:a3:8f:b1:db:e5:4a:60:61: 04:b0:3b:cf:0e:9a:e5:ad:29:29:5c:fd:88:0a:dc:ac:9b:8d: d9:87:01:24:4c:55:5f:4a:91:e1:63:f7:50:ee:f6:57:0e:d5: 24:0a:50:a4:be:b2:70:25:85:41:ac:3f:56:81:3a:31:1c:a8: fa:06:3f:73:aa:e8:d2:2d:f2:2d:40:78:5f:b0:a5:00:07:9f: c7:55:50:16:fc:4e:54:e4:6e:64:4e:f5:07:0b:27:ce:6a:cf: b0:2b:29:cb:ed:7e:a5:5d:2d:ea:a5:4e:ae:e9:26:e7:86:43: a1:0c:0f:5e:9f:71:38:13:28:59:22:97:46:07:85:ed:3c:da: cb:44:14:c8:0c:5f:25:f6:15:c9:49:35:cb:cb:03:19:61:16: 70:ce:2f:b1:ea:1a:41:b7:f6:57:a0:cd:01:aa:06:ef:60:e1: 51:4e:45:60:67:5e:f2:31:23:e4:5d:20:ac:d4:bb:52:b7:ae: 5b:9f:29:a4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUM5Ag/uHgn3mp4J6diO0rLnieJ4cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTYxMTQxWhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A3ZWY3NjdiMWFiYjQ1ZDI4MWU0MzExYzYwMzc1ZWQ3ODI4 ZTE2OTMxODgzODViM2NjYzI4MTBhYzBjYTVkZTY0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRUB+IffwWJa4LTRnpha/nSdQi1R31TbLVi14GFlYeXYAf HyQ+zzN1Th+co2um/6w+xcOv4FR+HZmh6o4aMZEC5USdFh+Xp9A24A0S8o0v+K5s 4X+WWDxsUWXIzW6QjeB9mQzV43+XtdVJhSHOU0lbv+Y7Wk9EwymCiWfcMLpqFc8I LtMUWzntU2A3liCccFp/PrrCamKG1bXR9N7xkcFWDuJ7gbDbNwxXy5XPX4lSpnWt NMwG+2AaLykgT4Ez0XtxlweIkqI+QsssZ9oQAjdk5BKP+2X7Sy6fRit8lhiVMMp+ 1SfXjOJfS/YOXZVFYw3fHw01HfJyqoXGW42bTVjZAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6xjVWXGXffPgMDJb9S+TQngcmbIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5YmM1NDE1LTIyYmItNGMwYy05ODFjLWYzOTlkYjFjYzc3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQP3FAwDQYJKoZIhvcNAQELBQADggEBAC1m4a5XMX5ynJZ6cz5crdACuiOE 9+McxoGqbrEUeftPM4aslsWIzTgGtOL4pQ7UIrR9A7JEso8SGiIxopZYlqSjj7Hb 5UpgYQSwO88OmuWtKSlc/YgK3KybjdmHASRMVV9KkeFj91Du9lcO1SQKUKS+snAl hUGsP1aBOjEcqPoGP3Oq6NIt8i1AeF+wpQAHn8dVUBb8TlTkbmRO9QcLJ85qz7Ar KcvtfqVdLeqlTq7pJueGQ6EMD16fcTgTKFkil0YHhe082stEFMgMXyX2FclJNcvL AxlhFnDOL7HqGkG39legzQGqBu9g4VFORWBnXvIxI+RdIKzUu1K3rlufKaQ= -----END CERTIFICATE-----Generated at Mon Aug 4 21:48:16 2025 by rpki-client