$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/426ff599-5c8a-4d7f-b458-0b87fe28628f.roa File: 426ff599-5c8a-4d7f-b458-0b87fe28628f.roa (raw, json) Hash identifier: YwQugbAX6DORDNJrGRZ868rr8hmEkrmwceky6n9Eg6o= Subject key identifier: 11:5A:99:3F:50:23:A5:35:18:99:D5:B4:CC:78:8A:A0:A5:C6:12:27 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7BB9BE4D2B304D9D839C553BCFF355C594685784 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/426ff599-5c8a-4d7f-b458-0b87fe28628f.roa Signing time: Fri 11 Jul 2025 15:21:08 +0000 ROA not before: Fri 11 Jul 2025 15:21:08 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.179.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:b9:be:4d:2b:30:4d:9d:83:9c:55:3b:cf:f3:55:c5:94:68:57:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 15:21:08 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=43ae0a23c5890142a9e7463bdb89d37c4bf285e2341ee77ae6f7e85e89d431bc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:31:4b:c0:45:ba:c1:54:5a:f2:75:8b:38: 58:a1:e1:09:6f:70:c3:61:74:05:ed:4f:9d:fe:93: 01:82:6f:e5:14:4d:a8:6c:c0:9a:f4:8b:d5:db:7b: a9:3e:8d:92:44:27:5a:9b:db:19:47:b5:43:d7:12: 2a:ca:a5:e3:e9:0a:93:46:39:87:24:d5:57:d6:98: fe:35:d1:c6:0d:26:f7:bb:b2:a2:96:ab:b3:72:ff: 6a:d2:c7:30:7e:9a:68:11:4c:c4:7f:f4:be:21:06: cd:5b:7f:1f:f7:27:7f:6e:b6:9a:d3:d6:e8:67:c8: 8b:8c:92:98:b6:93:82:d1:85:4d:18:95:62:c7:4c: 75:8d:ac:cf:77:9d:c2:d7:3b:99:2d:ed:6d:9e:20: 53:f0:5f:e6:57:56:36:28:ec:20:9e:2e:87:96:b3: c1:e9:92:8d:1a:9b:d4:dc:0a:2b:af:ab:d9:4f:3a: 4e:e8:04:65:fb:2d:ff:c7:99:09:42:21:be:1e:99: 03:c5:d4:bc:38:ff:4f:b9:8f:6f:97:09:b6:ba:2a: 9a:83:95:f3:8f:ff:11:0a:4c:40:57:82:77:89:87: 92:05:05:a9:0d:a4:46:af:e0:9d:6f:4a:1a:09:04: 63:c8:42:7e:b2:77:2d:b1:d1:00:8a:25:d4:52:18: c2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:5A:99:3F:50:23:A5:35:18:99:D5:B4:CC:78:8A:A0:A5:C6:12:27 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/426ff599-5c8a-4d7f-b458-0b87fe28628f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.179.0.0/16 Signature Algorithm: sha256WithRSAEncryption 2b:55:3b:56:37:3e:86:ed:d6:1c:4e:e6:1e:eb:00:b9:f2:4f: cc:f8:88:61:95:58:1c:cc:26:c0:29:37:91:6a:ad:86:13:67: 27:a6:ed:b7:50:97:77:4e:a9:76:e7:eb:4a:8d:03:61:ae:4f: a5:b6:e5:8b:52:7e:61:20:bc:a7:a1:60:77:65:78:3a:c4:15: 62:3f:6c:57:7f:ac:af:a8:35:5b:d5:ad:27:dd:2f:65:07:ca: 66:7a:d4:8a:44:a0:6c:c3:61:ac:c2:8e:cd:dd:94:b0:f1:85: 2a:7e:ed:6c:76:52:06:d5:00:5f:05:4e:27:b3:14:65:42:0d: c7:46:cf:ea:26:80:1f:02:92:e8:29:be:1e:ba:78:82:dd:c7: 3f:d0:ed:7e:c9:7b:12:b2:0f:b0:8f:c4:4f:0f:52:8e:b6:3b: 6c:3b:ad:b4:7e:4c:7d:27:37:23:6d:3b:45:9d:55:19:9a:eb: cb:05:1f:de:c9:ae:01:26:a1:80:fc:9a:ba:a3:78:11:49:85: 6a:03:eb:89:2f:54:aa:b4:0c:95:06:21:a6:76:69:ce:7d:ec: 0a:c5:56:f4:be:e3:89:97:f7:28:ce:f4:b6:33:82:79:df:d7: fc:0b:30:5d:55:55:3b:36:b1:07:fc:82:63:d7:dc:b0:59:4d: 2c:ee:26:7e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUe7m+TSswTZ2DnFU7z/NVxZRoV4QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTUyMTA4WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0M2FlMGEyM2M1ODkwMTQyYTllNzQ2M2JkYjg5ZDM3YzRi ZjI4NWUyMzQxZWU3N2FlNmY3ZTg1ZTg5ZDQzMWJjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClNjFLwEW6wVRa8nWLOFih4QlvcMNhdAXtT53+kwGCb+UU TahswJr0i9Xbe6k+jZJEJ1qb2xlHtUPXEirKpePpCpNGOYck1VfWmP410cYNJve7 sqKWq7Ny/2rSxzB+mmgRTMR/9L4hBs1bfx/3J39utprT1uhnyIuMkpi2k4LRhU0Y lWLHTHWNrM93ncLXO5kt7W2eIFPwX+ZXVjYo7CCeLoeWs8Hpko0am9TcCiuvq9lP Ok7oBGX7Lf/HmQlCIb4emQPF1Lw4/0+5j2+XCba6KpqDlfOP/xEKTEBXgneJh5IF BakNpEav4J1vShoJBGPIQn6ydy2x0QCKJdRSGMIFAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEVqZP1AjpTUYmdW0zHiKoKXGEicwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQyNmZmNTk5LTVjOGEtNGQ3Zi1iNDU4LTBiODdmZTI4NjI4Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPszANBgkqhkiG9w0BAQsFAAOCAQEAK1U7Vjc+hu3WHE7mHusAufJPzPiI YZVYHMwmwCk3kWqthhNnJ6btt1CXd06pdufrSo0DYa5Ppbbli1J+YSC8p6Fgd2V4 OsQVYj9sV3+sr6g1W9WtJ90vZQfKZnrUikSgbMNhrMKOzd2UsPGFKn7tbHZSBtUA XwVOJ7MUZUINx0bP6iaAHwKS6Cm+Hrp4gt3HP9Dtfsl7ErIPsI/ETw9SjrY7bDut tH5MfSc3I207RZ1VGZrrywUf3smuASahgPyauqN4EUmFagPriS9UqrQMlQYhpnZp zn3sCsVW9L7jiZf3KM70tjOCed/X/AswXVVVOzaxB/yCY9fcsFlNLO4mfg== -----END CERTIFICATE-----Generated at Mon Aug 4 21:49:15 2025 by rpki-client