$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfed3bf-6387-4d83-a1cb-5c0c88476047.roa File: 5bfed3bf-6387-4d83-a1cb-5c0c88476047.roa (raw, json) Hash identifier: NAiSFFA4wqtkCuaXMBmqc1VucWr3h7OuXo9bCBU8jlM= Subject key identifier: 6F:F6:A1:F3:02:B8:A6:D9:7C:C8:18:6E:6D:8B:4A:E9:3B:5B:66:C5 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 72008CA71EADD7B3116AEA9EF60CEFF51921728A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfed3bf-6387-4d83-a1cb-5c0c88476047.roa Signing time: Mon 04 Aug 2025 17:50:11 +0000 ROA not before: Mon 04 Aug 2025 17:50:11 +0000 ROA not after: Mon 08 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:00:8c:a7:1e:ad:d7:b3:11:6a:ea:9e:f6:0c:ef:f5:19:21:72:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 4 17:50:11 2025 GMT Not After : Sep 8 23:59:59 2025 GMT Subject: serialNumber=7b5a215cf89893968f83687fdad8c57a1d83f4f4522fe8c087825ada2ba32a11, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:b6:39:79:64:bb:22:34:9f:1e:79:fa:fe: c3:57:4d:97:c5:91:ca:d6:8b:c6:b8:89:3e:11:03: 7e:be:80:49:e9:c9:a8:19:af:91:ec:fb:d1:43:ac: 7b:98:02:0f:de:a6:fc:7b:6d:1e:ba:b4:70:d9:d9: 74:e1:21:20:cf:58:a6:54:ae:0e:ce:8e:23:57:82: 13:8d:e6:6d:5d:e5:72:ec:a0:10:e0:7c:47:35:af: 00:7c:2d:5f:6f:57:be:01:b6:29:6e:b9:f7:ab:04: 0e:00:2d:5c:4f:9e:85:de:9f:01:85:cf:62:67:5a: 11:b7:a4:db:1c:dd:bb:05:fd:1b:ac:37:6c:10:e1: 6a:1d:1b:b5:04:6f:bb:d0:65:3d:77:42:73:5e:84: 5d:1e:f7:af:31:58:70:08:64:b7:b5:5b:91:7d:70: a3:28:2e:bc:a1:cd:f2:ee:d0:83:aa:77:5a:8b:00: c8:7e:7d:8c:a3:f8:79:67:45:cd:16:32:53:c6:c0: 5d:ce:30:24:92:12:af:97:fe:f9:ef:bd:8c:29:94: 30:92:eb:cf:22:a7:2d:4e:4a:fd:fc:a7:2b:34:0f: 27:7e:74:cb:ce:57:38:ec:a9:2e:5a:97:a4:d0:75: 90:51:f5:9e:fa:0e:3c:dd:85:25:89:82:2d:80:c1: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F6:A1:F3:02:B8:A6:D9:7C:C8:18:6E:6D:8B:4A:E9:3B:5B:66:C5 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bfed3bf-6387-4d83-a1cb-5c0c88476047.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.0.0/16 Signature Algorithm: sha256WithRSAEncryption 07:a9:3c:c1:c7:60:50:5a:e2:00:35:aa:2e:65:99:5a:e3:e2: 89:b3:5b:67:38:1b:ae:5d:70:8b:1f:d3:1c:16:cb:a2:29:89: 3f:75:11:ef:ac:58:26:ac:53:10:77:93:55:7d:fa:99:95:db: 97:c3:dd:d3:a5:e0:b3:37:8a:00:6d:9a:4d:e6:1f:3b:df:21: 5e:eb:df:bd:17:3b:8f:76:a1:70:a3:01:58:3f:04:f7:04:d7: 75:48:c0:60:86:a4:ca:c9:07:9a:a0:b1:b1:68:50:b0:0b:7c: c0:05:22:96:a6:20:14:e5:f8:b4:14:dd:da:b9:93:09:3d:6b: 25:8b:a6:52:a7:41:87:bf:bb:2c:1d:02:fd:cf:4d:13:6b:5e: 89:2b:0f:f0:08:bd:92:b5:fa:3e:35:a9:ba:6d:c8:1a:3c:9f: 99:b0:ea:df:2e:73:ea:54:c7:7a:22:21:10:ab:76:7f:76:26: f2:98:87:d6:8e:38:15:ea:98:84:76:ee:4e:8d:f5:a8:d0:15: b8:db:e8:ee:2b:a9:25:a0:e6:23:60:9d:d1:39:35:9b:8d:0d: a4:ef:39:b3:eb:87:e3:47:fd:af:15:b9:26:59:b4:29:54:bc: 15:39:c7:dd:ff:d2:c6:13:51:55:0c:9f:f4:1f:03:c1:0b:e2: 69:41:ca:29 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUcgCMpx6t17MRauqe9gzv9RkhcoowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA0MTc1MDExWhcNMjUwOTA4MjM1OTU5 WjB6MUkwRwYDVQQFE0A3YjVhMjE1Y2Y4OTg5Mzk2OGY4MzY4N2ZkYWQ4YzU3YTFk ODNmNGY0NTIyZmU4YzA4NzgyNWFkYTJiYTMyYTExMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCptrY5eWS7IjSfHnn6/sNXTZfFkcrWi8a4iT4RA36+gEnp yagZr5Hs+9FDrHuYAg/epvx7bR66tHDZ2XThISDPWKZUrg7OjiNXghON5m1d5XLs oBDgfEc1rwB8LV9vV74BtiluuferBA4ALVxPnoXenwGFz2JnWhG3pNsc3bsF/Rus N2wQ4WodG7UEb7vQZT13QnNehF0e968xWHAIZLe1W5F9cKMoLryhzfLu0IOqd1qL AMh+fYyj+HlnRc0WMlPGwF3OMCSSEq+X/vnvvYwplDCS688ipy1OSv38pys0Dyd+ dMvOVzjsqS5al6TQdZBR9Z76DjzdhSWJgi2AwROdAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUb/ah8wK4ptl8yBhubYtK6TtbZsUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzViZmVkM2JmLTYzODctNGQ4My1hMWNiLTVjMGM4ODQ3NjA0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP3DANBgkqhkiG9w0BAQsFAAOCAQEAB6k8wcdgUFriADWqLmWZWuPiibNb Zzgbrl1wix/THBbLoimJP3UR76xYJqxTEHeTVX36mZXbl8Pd06XgszeKAG2aTeYf O98hXuvfvRc7j3ahcKMBWD8E9wTXdUjAYIakyskHmqCxsWhQsAt8wAUilqYgFOX4 tBTd2rmTCT1rJYumUqdBh7+7LB0C/c9NE2teiSsP8Ai9krX6PjWpum3IGjyfmbDq 3y5z6lTHeiIhEKt2f3Ym8piH1o44FeqYhHbuTo31qNAVuNvo7iupJaDmI2Cd0Tk1 m40NpO85s+uH40f9rxW5Jlm0KVS8FTnH3f/SxhNRVQyf9B8DwQviaUHKKQ== -----END CERTIFICATE-----Generated at Tue Aug 5 16:40:33 2025 by rpki-client