$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a19a1247-4a06-49f6-be68-32f4eb4deb91.roa File: a19a1247-4a06-49f6-be68-32f4eb4deb91.roa (raw, json) Hash identifier: mg1Fa7ay0QKc6rEu8KyJBK0d94fZoo8mPyedveAh1NE= Subject key identifier: 9D:AA:28:20:F4:82:07:12:2C:A6:1D:F6:A5:46:43:80:3F:60:D8:57 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2FD7610E25AECA8D542CEA94CA9CFDBD8554E030 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a19a1247-4a06-49f6-be68-32f4eb4deb91.roa Signing time: Tue 03 Jun 2025 00:30:22 +0000 ROA not before: Tue 03 Jun 2025 00:30:22 +0000 ROA not after: Tue 08 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.220.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:d7:61:0e:25:ae:ca:8d:54:2c:ea:94:ca:9c:fd:bd:85:54:e0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 3 00:30:22 2025 GMT Not After : Jul 8 23:59:59 2025 GMT Subject: serialNumber=1a29e932df39e92d3019bee21f254ec43b2a9b86e55e95e3296ce5dce3f5325c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:9b:2e:f2:05:16:40:43:50:c7:bf:97:42: 29:93:cc:15:37:1d:47:12:24:38:d1:87:c5:0c:35: 5c:32:9b:8d:9b:3f:03:3f:a9:d6:9b:f6:11:c5:0c: f6:ee:df:20:e4:de:a6:e1:4a:e3:df:7a:39:b9:7e: 7c:38:c2:4b:fe:70:4c:fe:8f:f9:eb:c5:ff:a2:11: 38:1c:08:e7:6a:4e:bd:02:7f:e2:8f:cc:2a:cc:ec: 23:ad:3c:bf:1d:b4:23:c4:8e:1b:0a:29:2b:77:7f: 29:88:28:31:24:e9:cc:84:36:ff:51:9e:25:d7:6a: 14:b1:7f:02:09:d1:4c:6a:f5:7f:5d:82:3e:77:76: 88:ac:77:29:08:fd:fa:0f:a6:d2:9c:1b:a1:93:3a: d8:65:8f:36:69:aa:d6:40:e8:8b:0f:a7:df:e1:88: 80:c0:dc:f8:2a:08:40:10:49:58:3a:78:14:55:19: 20:e8:dc:9b:8d:6c:0c:e3:5e:81:f9:6f:11:aa:96: f8:7d:0b:f5:d7:93:9c:14:ce:c2:ab:73:44:78:9a: 62:ac:5f:e8:24:a7:45:58:1f:85:fe:03:57:f7:b9: 19:5e:9d:14:52:cf:a8:58:5e:c6:82:b1:38:2d:d9: b7:2a:26:32:92:41:dc:25:6f:fd:1a:ee:a1:85:ff: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AA:28:20:F4:82:07:12:2C:A6:1D:F6:A5:46:43:80:3F:60:D8:57 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a19a1247-4a06-49f6-be68-32f4eb4deb91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.196.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:b0:da:08:8a:af:72:1e:0d:f4:82:41:6d:f8:4a:f1:c0:d3: 35:03:71:a7:11:3c:b5:dd:da:2e:2b:f4:fe:53:1d:2d:dc:38: 0e:f7:22:48:83:2f:54:bd:ad:47:79:2f:4b:27:e6:ab:fd:f7: 15:6a:26:8d:d7:09:bb:84:a8:50:dc:6c:62:5c:c0:c1:e7:34: 41:cd:25:ad:d4:2a:93:f2:f2:01:77:88:bb:c9:05:ee:28:98: 27:78:83:a6:4f:de:a9:f3:e8:dd:0f:1f:8d:fc:a4:91:ce:7d: ed:3c:d1:a5:2e:e4:66:57:61:4e:49:dd:da:45:1e:fa:3d:5e: aa:fd:43:e9:43:86:0d:ca:4a:94:48:ff:11:ac:3d:5b:df:37: ae:0b:a2:e8:c7:0d:7d:31:98:f7:09:32:d7:87:b3:7e:fb:a3: 9f:31:0f:ab:dd:2d:0e:59:44:72:d7:43:67:4d:c6:2e:25:9c: 89:e0:91:94:0e:36:68:c1:c1:d3:1c:08:0b:e8:18:27:6b:7b: 3c:c4:0d:ee:66:64:39:f4:5e:a9:fe:fb:b8:80:b9:9f:f1:90: 3c:3f:30:cb:5b:78:44:78:d1:4c:7f:88:fb:a8:a3:f1:4c:13: 56:8d:87:87:b1:eb:86:90:05:26:74:b3:44:7d:a1:3d:87:58: fd:41:65:9c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL9dhDiWuyo1ULOqUypz9vYVU4DAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjAzMDAzMDIyWhcNMjUwNzA4MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTI5ZTkzMmRmMzllOTJkMzAxOWJlZTIxZjI1NGVjNDNi MmE5Yjg2ZTU1ZTk1ZTMyOTZjZTVkY2UzZjUzMjVjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1t5su8gUWQENQx7+XQimTzBU3HUcSJDjRh8UMNVwym42b PwM/qdab9hHFDPbu3yDk3qbhSuPfejm5fnw4wkv+cEz+j/nrxf+iETgcCOdqTr0C f+KPzCrM7COtPL8dtCPEjhsKKSt3fymIKDEk6cyENv9RniXXahSxfwIJ0Uxq9X9d gj53doisdykI/foPptKcG6GTOthljzZpqtZA6IsPp9/hiIDA3PgqCEAQSVg6eBRV GSDo3JuNbAzjXoH5bxGqlvh9C/XXk5wUzsKrc0R4mmKsX+gkp0VYH4X+A1f3uRle nRRSz6hYXsaCsTgt2bcqJjKSQdwlb/0a7qGF/4EPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUnaooIPSCBxIsph32pUZDgD9g2FcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ExOWExMjQ3LTRhMDYtNDlmNi1iZTY4LTMyZjRlYjRkZWI5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3MQwDQYJKoZIhvcNAQELBQADggEBADqw2giKr3IeDfSCQW34SvHA0zUD cacRPLXd2i4r9P5THS3cOA73IkiDL1S9rUd5L0sn5qv99xVqJo3XCbuEqFDcbGJc wMHnNEHNJa3UKpPy8gF3iLvJBe4omCd4g6ZP3qnz6N0PH438pJHOfe080aUu5GZX YU5J3dpFHvo9Xqr9Q+lDhg3KSpRI/xGsPVvfN64LoujHDX0xmPcJMteHs377o58x D6vdLQ5ZRHLXQ2dNxi4lnIngkZQONmjBwdMcCAvoGCdrezzEDe5mZDn0Xqn++7iA uZ/xkDw/MMtbeER40Ux/iPuoo/FME1aNh4ex64aQBSZ0s0R9oT2HWP1BZZw= -----END CERTIFICATE-----Generated at Sat Jun 14 23:45:02 2025 by rpki-client