$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78bfeba9-7b52-480f-986d-6608da14c76d.roa File: 78bfeba9-7b52-480f-986d-6608da14c76d.roa (raw, json) Hash identifier: FsYWkSXjYul8om1utGqqzsn4aR5/4WQ5av4HONr+bJ8= Subject key identifier: 9E:47:50:70:1D:7A:68:F3:F9:4C:D7:08:40:AD:B2:62:59:26:0E:07 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6DA41ACF9047ED8FA322CA2F1EDE8285FC01F456 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78bfeba9-7b52-480f-986d-6608da14c76d.roa Signing time: Sat 26 Jul 2025 00:30:25 +0000 ROA not before: Sat 26 Jul 2025 00:30:25 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a4:1a:cf:90:47:ed:8f:a3:22:ca:2f:1e:de:82:85:fc:01:f4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 26 00:30:25 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=17eb78aedc0987e053af89a9e3aedc8b8f83d17768c318f56c78de39f8b0f4d2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:29:d9:30:57:0b:36:00:64:e0:c0:f7:e8:ba: 28:a0:83:5e:94:e5:bd:9e:2c:26:11:ba:d9:4e:d1: d3:17:ee:f9:2f:8a:1e:d5:21:ad:3b:16:67:7e:86: 83:58:ec:35:65:bc:78:75:79:59:c7:e5:1b:ad:5a: 73:8d:29:b5:ef:c5:4c:5a:42:a8:3a:16:29:32:3a: 95:91:bb:48:5f:84:e6:cf:77:c9:f6:b2:27:71:bd: be:05:9d:97:8d:1f:9c:9a:6e:17:b8:fb:3a:cb:3d: 05:20:2e:ef:24:ef:9e:b8:7d:4d:de:03:8c:4f:ac: 50:f2:c7:85:42:b2:25:ea:8c:c6:48:ab:41:15:37: 22:55:c6:93:40:ef:80:aa:aa:8b:27:4b:e9:d8:bd: a6:84:aa:3d:20:6f:33:75:9b:9f:0b:08:21:f7:eb: f2:35:40:b7:b3:6a:65:f4:eb:53:d6:f1:45:d4:12: d2:af:af:f5:c1:1a:04:93:d1:f5:5b:bd:09:3d:b0: 95:2a:55:f5:5f:9a:73:ab:82:02:9a:95:f6:ff:df: 95:c4:1c:57:11:35:8a:66:09:ec:bb:a9:83:a7:5b: 6e:db:62:d4:f5:5b:60:1c:fc:e4:19:ed:df:a2:a8: e8:72:23:75:19:60:63:f5:6e:66:75:1e:1c:95:85: 5a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:47:50:70:1D:7A:68:F3:F9:4C:D7:08:40:AD:B2:62:59:26:0E:07 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/78bfeba9-7b52-480f-986d-6608da14c76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.95.0/24 Signature Algorithm: sha256WithRSAEncryption 67:76:fe:c5:75:53:6b:19:29:c7:f5:39:a5:8f:55:d2:74:b3: 52:d7:e3:e3:16:a1:6a:02:a1:dd:ce:f0:ab:24:8d:9f:4c:dd: dd:fc:f0:a7:48:91:bb:9c:a0:f6:e3:7f:57:f3:00:43:86:62: ae:e8:31:b3:45:6f:bd:fb:89:97:76:3e:3f:87:cb:06:ce:71: 66:b4:e3:8f:90:da:ea:e4:75:cf:31:0f:2c:e5:06:cf:ef:30: 7b:3a:fd:9d:1b:70:b8:35:eb:65:72:ac:e2:fd:8d:75:0a:28: d4:36:c9:07:82:9e:3d:08:a3:f1:78:8e:ef:e2:f6:be:1b:88: e7:f3:e4:60:5a:c5:9e:23:e9:fc:c2:58:d3:f4:d4:fc:8f:a7: 61:1e:d3:67:49:1c:4b:4a:54:82:b4:16:b5:ee:6c:89:00:81: e4:ae:89:be:6a:f6:df:ed:2d:02:4a:28:07:2b:57:18:27:af: 1e:aa:21:95:cd:c9:d8:21:e0:36:f9:2d:3c:94:32:b4:06:aa: d1:bc:b4:24:64:1a:10:c3:1e:e7:f6:f1:ac:8c:d9:7b:b6:fc: 57:ad:5f:cc:27:cc:57:89:d9:7a:80:d3:0b:9b:e9:06:97:7e: db:e3:2a:9f:38:3a:7e:fc:2d:5c:3a:ae:d0:80:be:94:67:5d: e3:d1:53:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbaQaz5BH7Y+jIsovHt6ChfwB9FYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI2MDAzMDI1WhcNMjUwODMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxN2ViNzhhZWRjMDk4N2UwNTNhZjg5YTllM2FlZGM4Yjhm ODNkMTc3NjhjMzE4ZjU2Yzc4ZGUzOWY4YjBmNGQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC8KdkwVws2AGTgwPfouiigg16U5b2eLCYRutlO0dMX7vkv ih7VIa07Fmd+hoNY7DVlvHh1eVnH5RutWnONKbXvxUxaQqg6FikyOpWRu0hfhObP d8n2sidxvb4FnZeNH5yabhe4+zrLPQUgLu8k7564fU3eA4xPrFDyx4VCsiXqjMZI q0EVNyJVxpNA74CqqosnS+nYvaaEqj0gbzN1m58LCCH36/I1QLezamX061PW8UXU EtKvr/XBGgST0fVbvQk9sJUqVfVfmnOrggKalfb/35XEHFcRNYpmCey7qYOnW27b YtT1W2Ac/OQZ7d+iqOhyI3UZYGP1bmZ1HhyVhVpBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnkdQcB16aPP5TNcIQK2yYlkmDgcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc4YmZlYmE5LTdiNTItNDgwZi05ODZkLTY2MDhkYTE0Yzc2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5l8wDQYJKoZIhvcNAQELBQADggEBAGd2/sV1U2sZKcf1OaWPVdJ0s1LX 4+MWoWoCod3O8KskjZ9M3d388KdIkbucoPbjf1fzAEOGYq7oMbNFb737iZd2Pj+H ywbOcWa044+Q2urkdc8xDyzlBs/vMHs6/Z0bcLg162VyrOL9jXUKKNQ2yQeCnj0I o/F4ju/i9r4biOfz5GBaxZ4j6fzCWNP01PyPp2Ee02dJHEtKVIK0FrXubIkAgeSu ib5q9t/tLQJKKAcrVxgnrx6qIZXNydgh4Db5LTyUMrQGqtG8tCRkGhDDHuf28ayM 2Xu2/FetX8wnzFeJ2XqA0wub6QaXftvjKp84On78LVw6rtCAvpRnXePRUy0= -----END CERTIFICATE-----Generated at Tue Aug 5 08:24:33 2025 by rpki-client