$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aba2278a-7087-471b-9302-c79f72c88b5a.roa File: aba2278a-7087-471b-9302-c79f72c88b5a.roa (raw, json) Hash identifier: +FSnqSTmsmb7TztnYrdOXbspV5W8SOWMsyjk4bB2E4o= Subject key identifier: D3:DA:6E:72:14:14:62:24:9A:57:F0:9E:54:DE:CB:9A:F8:17:CE:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 41AA50CD5378A95CCCE53F835DFEB1EBDADC7B1D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aba2278a-7087-471b-9302-c79f72c88b5a.roa Signing time: Sat 19 Jul 2025 00:50:20 +0000 ROA not before: Sat 19 Jul 2025 00:50:20 +0000 ROA not after: Sat 23 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.221.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:aa:50:cd:53:78:a9:5c:cc:e5:3f:83:5d:fe:b1:eb:da:dc:7b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 19 00:50:20 2025 GMT Not After : Aug 23 23:59:59 2025 GMT Subject: serialNumber=39b2d3b973812b791831a6ef536aaf91883b8adf5d9ab3eb6742ba3c1b5c63dd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:0a:04:7a:29:13:bf:f3:04:94:a6:c8:08: 17:3e:fa:37:be:f9:4c:52:0c:86:66:ee:db:cc:a7: 4e:59:ca:cc:bf:2a:43:e4:de:12:df:73:73:06:06: 18:5b:ad:9c:ca:ac:1a:4e:1f:59:84:71:8b:bf:2a: c1:86:2d:d7:66:01:20:5c:03:f5:f3:8c:c5:85:a4: a4:ba:b2:8f:c9:50:36:ab:4a:ff:a6:72:b4:13:1d: 26:08:5a:e4:1a:d1:99:ac:9c:4b:e5:90:77:02:02: 63:3a:0f:3e:e5:0d:dc:4f:f8:2d:8e:90:4a:af:56: 8c:b1:75:57:de:57:39:01:5a:70:9c:2d:82:a2:66: 2f:99:15:6a:ab:f7:7d:a0:1e:e8:f4:8a:e2:4a:ec: f9:fb:65:32:97:a7:27:9e:5d:6f:00:e4:36:06:05: 99:1e:c3:90:d4:19:fb:a1:a6:27:f1:98:66:79:c8: e3:19:7c:8e:5e:d5:fc:c4:71:e0:b8:cc:14:4d:cf: e8:12:e3:80:46:b0:47:33:97:32:da:f7:0b:78:e9: b8:3d:90:92:bc:25:0b:e2:58:e8:da:e6:0c:c9:79: 9a:24:34:82:f7:f6:b4:0d:2d:1c:f9:f6:40:0c:d7: e7:36:ee:4a:22:c5:a3:7c:23:b0:ca:e4:06:a5:b2: 14:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DA:6E:72:14:14:62:24:9A:57:F0:9E:54:DE:CB:9A:F8:17:CE:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aba2278a-7087-471b-9302-c79f72c88b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.221.176.0/20 Signature Algorithm: sha256WithRSAEncryption 86:c4:5d:a0:d9:1d:3d:a2:81:e4:83:11:85:cb:b3:04:39:4a: 4d:df:e5:a4:bb:4a:d6:da:cb:89:d7:99:3a:2e:bd:1d:07:a3: 47:9a:ff:d7:a9:a6:cc:26:0b:38:48:2e:af:9c:22:46:c6:e1: fd:ef:6f:9e:03:66:33:a4:71:c5:42:0d:5e:ba:af:d5:94:47: 0c:db:b9:57:90:93:88:eb:9c:f4:e2:88:aa:e6:7a:73:82:78: 99:8f:a9:3b:e7:c1:8b:e9:ce:6d:c0:dd:68:98:33:98:13:d7: 0a:32:51:11:98:31:d0:be:a1:fe:99:75:0b:63:56:ed:fb:63: 31:40:56:c0:d6:94:31:b0:03:d4:ab:bc:ab:b0:ff:92:7a:ec: 82:c4:74:93:76:73:7f:f8:f4:f0:91:aa:fb:81:0f:89:81:5a: f5:a8:1b:ac:85:e3:a2:f7:7f:e4:da:f5:f5:57:83:22:b6:3b: 34:62:65:aa:72:94:81:f6:5d:f5:49:d5:9c:bf:75:25:a7:19: d4:81:e6:12:e2:1f:e4:7a:fd:f7:76:8f:5b:3a:f5:52:ff:30: b9:66:f5:5b:87:42:36:d1:b4:bf:26:a7:f1:71:d5:ac:6f:54: 81:d5:bc:3f:e7:b2:dc:74:c1:e4:a9:99:4f:55:35:27:70:a5: 36:c3:fe:7c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUQapQzVN4qVzM5T+DXf6x69rcex0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzE5MDA1MDIwWhcNMjUwODIzMjM1OTU5 WjB6MUkwRwYDVQQFE0AzOWIyZDNiOTczODEyYjc5MTgzMWE2ZWY1MzZhYWY5MTg4 M2I4YWRmNWQ5YWIzZWI2NzQyYmEzYzFiNWM2M2RkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDZ4woEeikTv/MElKbICBc++je++UxSDIZm7tvMp05Zysy/ KkPk3hLfc3MGBhhbrZzKrBpOH1mEcYu/KsGGLddmASBcA/XzjMWFpKS6so/JUDar Sv+mcrQTHSYIWuQa0ZmsnEvlkHcCAmM6Dz7lDdxP+C2OkEqvVoyxdVfeVzkBWnCc LYKiZi+ZFWqr932gHuj0iuJK7Pn7ZTKXpyeeXW8A5DYGBZkew5DUGfuhpifxmGZ5 yOMZfI5e1fzEceC4zBRNz+gS44BGsEczlzLa9wt46bg9kJK8JQviWOja5gzJeZok NIL39rQNLRz59kAM1+c27koixaN8I7DK5AalshTrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU09puchQUYiSaV/CeVN7LmvgXzgkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FiYTIyNzhhLTcwODctNDcxYi05MzAyLWM3OWY3MmM4OGI1YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQP3bAwDQYJKoZIhvcNAQELBQADggEBAIbEXaDZHT2igeSDEYXLswQ5Sk3f 5aS7Stbay4nXmTouvR0Ho0ea/9eppswmCzhILq+cIkbG4f3vb54DZjOkccVCDV66 r9WURwzbuVeQk4jrnPTiiKrmenOCeJmPqTvnwYvpzm3A3WiYM5gT1woyURGYMdC+ of6ZdQtjVu37YzFAVsDWlDGwA9SrvKuw/5J67ILEdJN2c3/49PCRqvuBD4mBWvWo G6yF46L3f+Ta9fVXgyK2OzRiZapylIH2XfVJ1Zy/dSWnGdSB5hLiH+R6/fd2j1s6 9VL/MLlm9VuHQjbRtL8mp/Fx1axvVIHVvD/nstx0weSpmU9VNSdwpTbD/nw= -----END CERTIFICATE-----Generated at Mon Aug 4 14:14:08 2025 by rpki-client