$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bb93a97-3700-4e03-912e-ebac4339b0fc.roa File: 7bb93a97-3700-4e03-912e-ebac4339b0fc.roa (raw, json) Hash identifier: qL7+Bmw90xSLjgAJD3Ho5cV3JJs8oABGyMn+hatqupY= Subject key identifier: E9:FE:9E:E4:9F:47:93:DB:5D:44:10:0E:A2:66:48:AF:2D:3E:62:E3 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 201EA2F48946D8F5B58CDA0EFEEB56E7C29A4E59 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bb93a97-3700-4e03-912e-ebac4339b0fc.roa Signing time: Sat 19 Jul 2025 00:51:11 +0000 ROA not before: Sat 19 Jul 2025 00:51:11 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:1e:a2:f4:89:46:d8:f5:b5:8c:da:0e:fe:eb:56:e7:c2:9a:4e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 19 00:51:11 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=77eb7ff1a84defaa5500286b149275287cf1b3607476578c9105e40275cb9023, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:f6:83:ff:2c:fb:4f:2a:19:92:d2:e5:79: 7b:7a:55:88:e3:3b:63:17:1d:44:46:00:0c:57:50: cd:d0:55:07:11:6b:5a:ae:d6:2e:11:63:25:a6:e7: 2e:da:0c:ea:03:f1:81:52:6d:93:9a:f5:2d:c2:dc: df:4c:cb:0e:07:e3:eb:0b:51:96:07:0d:bd:15:3b: 5a:08:d1:19:1a:f0:47:fc:0f:da:62:7a:26:73:06: 66:c3:a2:1f:23:94:3d:0a:c2:04:ea:a9:22:c2:0d: 67:18:48:e9:45:8f:d9:89:a3:01:ef:3f:3d:07:83: 89:80:69:4a:29:8d:44:6e:da:78:f7:a8:04:75:e5: 60:47:e4:11:b0:55:43:ba:fe:b8:55:bd:cb:91:5f: 5f:e0:6c:c4:89:94:1b:92:4f:3d:1b:15:6c:ff:48: fd:08:8b:f9:80:32:40:ca:14:91:0d:1f:db:eb:4e: a7:34:49:95:de:22:76:3f:79:89:16:c9:44:c5:03: 5b:0f:87:e7:fa:1e:1e:b5:c3:e0:5c:f4:63:57:fd: dd:8e:d5:ee:e6:52:00:af:90:70:2e:49:5a:8c:6a: 2c:1c:bc:1f:0a:80:82:12:41:04:06:11:ac:09:82: 8b:91:07:43:1d:52:9a:26:2a:5a:da:cf:72:f2:64: e9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FE:9E:E4:9F:47:93:DB:5D:44:10:0E:A2:66:48:AF:2D:3E:62:E3 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7bb93a97-3700-4e03-912e-ebac4339b0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.32.0/24 Signature Algorithm: sha256WithRSAEncryption ab:58:72:63:3c:ae:fc:55:e2:ea:71:37:f6:b5:79:fd:25:2d: 2f:aa:ca:90:ec:7e:41:5a:a3:b4:48:a7:b8:af:fb:52:c1:3f: af:3d:6a:57:1f:f7:ec:dd:1e:a5:0e:9d:61:66:70:49:9e:1c: bd:df:8e:39:73:11:9e:81:a0:bd:14:51:8c:03:d5:f3:1e:c7: 4f:02:9c:cd:cf:b2:50:74:97:b1:f1:3c:05:07:79:56:10:2e: 68:3f:d4:80:b0:31:1f:8e:ee:a7:20:34:c8:1a:81:33:08:19: 23:af:cf:56:77:a0:88:78:e2:cf:2d:56:5f:3c:15:b8:fe:de: 96:65:73:bc:a3:0e:4f:41:17:88:d7:9b:0a:f5:e8:80:64:04: 06:c7:63:5c:1a:14:7b:60:46:92:99:97:a5:6c:0b:73:f8:6b: 0f:06:ed:dc:71:92:a0:c0:03:ee:27:40:64:b9:ed:64:69:7c: 4f:19:c2:06:7f:89:eb:b7:93:1c:8e:f5:1a:88:0b:9f:53:c8: e2:7e:c3:87:1c:3b:d3:97:fa:55:ae:6b:ba:68:49:c5:38:fa: ee:44:ea:da:d2:40:cd:66:e5:bb:32:de:af:d1:1c:5a:c6:15: 5f:1c:1a:73:ea:0a:36:ae:af:1f:be:ef:f9:e5:1b:21:96:35: 53:8f:a6:ab -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIB6i9IlG2PW1jNoO/utW58KaTlkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzE5MDA1MTExWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3N2ViN2ZmMWE4NGRlZmFhNTUwMDI4NmIxNDkyNzUyODdj ZjFiMzYwNzQ3NjU3OGM5MTA1ZTQwMjc1Y2I5MDIzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxFvaD/yz7TyoZktLleXt6VYjjO2MXHURGAAxXUM3QVQcR a1qu1i4RYyWm5y7aDOoD8YFSbZOa9S3C3N9Myw4H4+sLUZYHDb0VO1oI0Rka8Ef8 D9pieiZzBmbDoh8jlD0KwgTqqSLCDWcYSOlFj9mJowHvPz0Hg4mAaUopjURu2nj3 qAR15WBH5BGwVUO6/rhVvcuRX1/gbMSJlBuSTz0bFWz/SP0Ii/mAMkDKFJENH9vr Tqc0SZXeInY/eYkWyUTFA1sPh+f6Hh61w+Bc9GNX/d2O1e7mUgCvkHAuSVqMaiwc vB8KgIISQQQGEawJgouRB0MdUpomKlraz3LyZOmVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6f6e5J9Hk9tdRBAOomZIry0+YuMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiYjkzYTk3LTM3MDAtNGUwMy05MTJlLWViYWM0MzM5YjBmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3iAwDQYJKoZIhvcNAQELBQADggEBAKtYcmM8rvxV4upxN/a1ef0lLS+q ypDsfkFao7RIp7iv+1LBP689alcf9+zdHqUOnWFmcEmeHL3fjjlzEZ6BoL0UUYwD 1fMex08CnM3PslB0l7HxPAUHeVYQLmg/1ICwMR+O7qcgNMgagTMIGSOvz1Z3oIh4 4s8tVl88Fbj+3pZlc7yjDk9BF4jXmwr16IBkBAbHY1waFHtgRpKZl6VsC3P4aw8G 7dxxkqDAA+4nQGS57WRpfE8ZwgZ/ieu3kxyO9RqIC59TyOJ+w4ccO9OX+lWua7po ScU4+u5E6trSQM1m5bsy3q/RHFrGFV8cGnPqCjaurx++7/nlGyGWNVOPpqs= -----END CERTIFICATE-----Generated at Tue Aug 5 20:16:48 2025 by rpki-client