$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa File: 5a885b28-9bb7-4be5-a945-f90048046452.roa (raw, json) Hash identifier: oZPUklqioLUD4vwqrGWRbL0Rlzl3ZJNXkWvLCbNzk1s= Subject key identifier: 06:D1:6A:B2:7E:B3:51:EB:73:9E:9B:C8:B5:7E:01:68:99:F0:47:46 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2108BE9FE5D71B947EED86190066DB5730E34B09 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa Signing time: Fri 06 Jun 2025 00:31:32 +0000 ROA not before: Fri 06 Jun 2025 00:31:32 +0000 ROA not after: Fri 11 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:08:be:9f:e5:d7:1b:94:7e:ed:86:19:00:66:db:57:30:e3:4b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 6 00:31:32 2025 GMT Not After : Jul 11 23:59:59 2025 GMT Subject: serialNumber=6d7cf45c054d2a5d2648a77f483159e73e2c5fd8297567bf3c14abe49f0d0345, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0e:6d:ad:3e:08:d4:29:86:0e:73:81:d3:8f: 02:a8:64:4a:64:bb:3f:7e:62:e1:ba:60:02:8f:8a: e6:ca:eb:64:95:69:18:c9:da:03:3f:eb:89:d5:27: c4:9c:da:3d:87:ee:a0:84:1f:4f:47:56:3f:ba:ee: 15:3a:64:8a:94:16:ed:83:cc:f0:e9:ee:59:a3:fc: 81:97:46:d7:2e:d0:93:7a:b4:2d:8e:97:96:be:fc: dd:cd:eb:a2:48:37:ff:a3:29:1c:ba:43:80:11:8a: be:18:62:5f:5c:a3:4a:cb:1a:29:d5:fe:77:3e:b5: e3:03:fc:7f:84:8b:53:97:d3:2e:3c:64:f2:7c:9a: 78:87:7a:99:c4:13:d1:7c:6b:53:f6:d6:68:2a:88: 18:bc:dd:22:a3:df:e4:ea:8f:89:cf:85:49:c0:ee: ce:0a:3f:91:99:32:34:0e:30:4a:a6:47:50:55:38: c7:34:8e:3b:ae:14:f6:04:3c:f5:a2:fc:2a:af:eb: 0c:37:59:fc:c0:a7:3e:6c:e3:3b:ae:bd:a0:45:b2: 61:32:35:29:71:d7:1e:dd:7f:6e:a9:5e:dc:30:16: ce:63:b7:b5:cf:67:8e:ff:95:94:11:19:7d:4f:6c: f2:b3:aa:e2:3b:80:56:70:0d:70:c8:04:94:10:89: d7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D1:6A:B2:7E:B3:51:EB:73:9E:9B:C8:B5:7E:01:68:99:F0:47:46 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a885b28-9bb7-4be5-a945-f90048046452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.176.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:78:f8:a6:fe:3a:02:56:86:5c:e2:37:a5:48:32:10:7e:80: 34:25:e7:0a:b5:ab:90:c4:9b:0f:05:1d:75:1d:f8:24:bc:10: 7c:1f:8e:c4:b8:5b:e9:a9:82:fd:b3:bb:ef:ff:c1:06:80:7a: a7:8b:4c:50:6f:3f:7e:86:91:0b:71:2d:8c:21:43:7d:71:7f: 7e:96:11:65:d3:c1:8c:72:6c:be:42:26:75:59:90:07:81:f4: be:b2:a9:05:a6:a6:04:bc:3c:a0:19:73:a0:29:ef:f1:5f:e4: 3e:96:76:b7:1c:25:0e:1e:a2:cd:5a:6c:54:2c:76:7c:50:f8: 80:94:03:9f:7e:07:d2:c6:b5:a7:31:94:e2:f5:bc:ed:c9:63: 97:07:e9:54:3d:cf:c9:fa:80:d1:47:e0:38:3d:1f:ee:78:3c: e9:0b:fb:ed:ce:17:2c:37:28:02:3c:f3:99:77:2c:4d:6d:0a: 0c:9f:e0:2e:52:69:b6:54:f0:c4:a9:31:60:73:21:52:ce:ba: 42:ff:b9:35:67:db:94:2a:ea:5d:b2:fe:f4:17:45:3e:a2:e5: e0:21:7a:05:93:34:13:77:f4:0e:b1:8b:a9:0d:1b:65:a3:c5: 1c:99:a8:ab:42:8e:ed:06:cd:76:b0:06:18:83:c1:92:7c:bc: 3f:9e:18:3b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIQi+n+XXG5R+7YYZAGbbVzDjSwkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjA2MDAzMTMyWhcNMjUwNzExMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZDdjZjQ1YzA1NGQyYTVkMjY0OGE3N2Y0ODMxNTllNzNl MmM1ZmQ4Mjk3NTY3YmYzYzE0YWJlNDlmMGQwMzQ1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCNDm2tPgjUKYYOc4HTjwKoZEpkuz9+YuG6YAKPiubK62SV aRjJ2gM/64nVJ8Sc2j2H7qCEH09HVj+67hU6ZIqUFu2DzPDp7lmj/IGXRtcu0JN6 tC2Ol5a+/N3N66JIN/+jKRy6Q4ARir4YYl9co0rLGinV/nc+teMD/H+Ei1OX0y48 ZPJ8mniHepnEE9F8a1P21mgqiBi83SKj3+Tqj4nPhUnA7s4KP5GZMjQOMEqmR1BV OMc0jjuuFPYEPPWi/Cqv6ww3WfzApz5s4zuuvaBFsmEyNSlx1x7df26pXtwwFs5j t7XPZ47/lZQRGX1PbPKzquI7gFZwDXDIBJQQidejAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUBtFqsn6zUetznpvItX4BaJnwR0YwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzVhODg1YjI4LTliYjctNGJlNS1hOTQ1LWY5MDA0ODA0NjQ1Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3LAwDQYJKoZIhvcNAQELBQADggEBAJt4+Kb+OgJWhlziN6VIMhB+gDQl 5wq1q5DEmw8FHXUd+CS8EHwfjsS4W+mpgv2zu+//wQaAeqeLTFBvP36GkQtxLYwh Q31xf36WEWXTwYxybL5CJnVZkAeB9L6yqQWmpgS8PKAZc6Ap7/Ff5D6WdrccJQ4e os1abFQsdnxQ+ICUA59+B9LGtacxlOL1vO3JY5cH6VQ9z8n6gNFH4Dg9H+54POkL ++3OFyw3KAI885l3LE1tCgyf4C5SabZU8MSpMWBzIVLOukL/uTVn25Qq6l2y/vQX RT6i5eAhegWTNBN39A6xi6kNG2WjxRyZqKtCju0GzXawBhiDwZJ8vD+eGDs= -----END CERTIFICATE-----Generated at Sat Jun 14 23:44:33 2025 by rpki-client