$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96a3c178-d217-4ac6-ab8e-43c1be9bec09.roa File: 96a3c178-d217-4ac6-ab8e-43c1be9bec09.roa (raw, json) Hash identifier: /5j5DEP7jU3HOcYbQe87R8vnDtTni4paTk6Xx/B7tsY= Subject key identifier: AD:ED:AC:E2:6D:12:5B:B2:9B:BC:49:A9:D5:3B:A1:F3:72:9A:70:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4168DF00B405CF9B503E43772E7BF914CE6AADEC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96a3c178-d217-4ac6-ab8e-43c1be9bec09.roa Signing time: Mon 21 Jul 2025 16:00:38 +0000 ROA not before: Mon 21 Jul 2025 16:00:38 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:68:df:00:b4:05:cf:9b:50:3e:43:77:2e:7b:f9:14:ce:6a:ad:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 21 16:00:38 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=652c6f0cf61c3161aca393e734e50eb61c1cf24035c36cf620ba9329ebd227a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8e:94:8a:ec:55:af:8d:cb:ff:70:aa:51:14: 9e:ab:c1:99:6f:5a:1d:f4:1f:94:fc:3c:d3:70:b9: 16:54:29:a4:20:ea:dd:f2:bc:fb:32:1e:75:7d:bd: 98:1c:fc:5b:34:e6:11:96:ad:d0:80:06:e0:08:46: 0e:3a:57:e0:99:a6:5d:02:d9:5c:97:bf:b2:18:41: d3:4b:8b:c9:2c:0a:72:a3:0c:db:6c:79:ba:7f:04: 5e:91:cc:46:f2:1c:52:3a:cf:0e:91:3c:4a:65:e2: 44:b9:fc:7d:b8:88:c8:31:ca:d7:eb:0e:51:ba:23: f4:3b:35:38:ea:70:ee:f5:e8:f9:36:52:48:ef:57: 69:c6:01:db:56:54:b9:f8:13:ac:74:09:5d:86:07: ff:9c:44:42:a1:30:7e:3e:21:ad:9c:9a:6d:a0:13: 61:5a:e8:ba:10:d9:50:15:21:45:18:e6:63:43:5b: 91:01:8b:41:a4:51:8d:73:02:23:84:4c:ad:23:7d: cf:65:8a:b8:26:89:af:b1:a0:eb:2c:3d:19:07:dc: c4:b5:a2:20:8b:ac:1e:93:8a:61:de:d2:d4:a5:9a: 31:85:3b:25:45:76:a4:7d:24:2f:32:29:68:37:1b: dd:62:02:2d:1f:70:c6:bd:f1:3b:5c:89:4f:72:22: 76:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:ED:AC:E2:6D:12:5B:B2:9B:BC:49:A9:D5:3B:A1:F3:72:9A:70:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96a3c178-d217-4ac6-ab8e-43c1be9bec09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.105.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:83:3c:eb:e7:2a:cf:97:bd:f9:10:11:ed:e2:a1:b8:84:eb: 4e:7b:c5:7a:52:1e:ca:76:00:ba:6e:17:a0:c9:3a:fd:bc:d7: 3a:6a:51:96:7f:40:30:8e:32:36:fb:20:4e:d9:9e:16:7b:e0: a1:93:6c:d7:81:cb:82:a7:99:1a:a1:0d:ca:e9:d2:c7:93:19: 6a:70:a7:8f:1d:4d:79:6a:5c:34:ed:9f:4b:27:94:f4:29:b0: a6:43:50:e8:16:8b:ca:c9:85:7a:be:a0:8b:3d:68:1b:64:79: 3d:75:dc:f0:5e:5e:1e:06:bf:7b:c8:d5:a2:11:e9:25:1d:5f: 71:74:3a:fa:3f:46:bb:d1:84:6a:44:35:f3:a0:9c:3f:8c:ad: 8b:2c:c7:32:71:83:cc:54:2c:06:ef:b4:16:7b:b7:40:17:c5: ee:c4:e6:19:46:60:65:2c:10:1d:53:d1:5e:7f:8b:42:bf:8a: f4:d4:bc:88:61:d9:94:92:f4:81:49:9c:2d:f6:46:6b:f0:cc: 1d:a1:63:9d:63:24:f3:e1:6a:cf:30:d0:1f:c9:7d:f7:09:0b: 24:f4:05:bf:fe:97:45:cb:2b:07:2c:66:21:b2:29:ed:75:2d: 1a:43:34:8f:19:51:f0:51:ae:fa:ca:05:ae:45:76:3b:f1:82: 8a:bb:48:55 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQWjfALQFz5tQPkN3Lnv5FM5qrewwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzIxMTYwMDM4WhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2NTJjNmYwY2Y2MWMzMTYxYWNhMzkzZTczNGU1MGViNjFj MWNmMjQwMzVjMzZjZjYyMGJhOTMyOWViZDIyN2E2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1jpSK7FWvjcv/cKpRFJ6rwZlvWh30H5T8PNNwuRZUKaQg 6t3yvPsyHnV9vZgc/Fs05hGWrdCABuAIRg46V+CZpl0C2VyXv7IYQdNLi8ksCnKj DNtsebp/BF6RzEbyHFI6zw6RPEpl4kS5/H24iMgxytfrDlG6I/Q7NTjqcO716Pk2 UkjvV2nGAdtWVLn4E6x0CV2GB/+cREKhMH4+Ia2cmm2gE2Fa6LoQ2VAVIUUY5mND W5EBi0GkUY1zAiOETK0jfc9lirgmia+xoOssPRkH3MS1oiCLrB6TimHe0tSlmjGF OyVFdqR9JC8yKWg3G91iAi0fcMa98TtciU9yInZNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUre2s4m0SW7KbvEmp1Tuh83KacBswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk2YTNjMTc4LWQyMTctNGFjNi1hYjhlLTQzYzFiZTliZWMwOS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsWkwDQYJKoZIhvcNAQELBQADggEBAI2DPOvnKs+XvfkQEe3iobiE6057 xXpSHsp2ALpuF6DJOv281zpqUZZ/QDCOMjb7IE7ZnhZ74KGTbNeBy4KnmRqhDcrp 0seTGWpwp48dTXlqXDTtn0snlPQpsKZDUOgWi8rJhXq+oIs9aBtkeT113PBeXh4G v3vI1aIR6SUdX3F0Ovo/RrvRhGpENfOgnD+MrYssxzJxg8xULAbvtBZ7t0AXxe7E 5hlGYGUsEB1T0V5/i0K/ivTUvIhh2ZSS9IFJnC32RmvwzB2hY51jJPPhas8w0B/J ffcJCyT0Bb/+l0XLKwcsZiGyKe11LRpDNI8ZUfBRrvrKBa5Fdjvxgoq7SFU= -----END CERTIFICATE-----Generated at Mon Aug 4 21:34:48 2025 by rpki-client