$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa File: d64498fc-b63a-4ccc-8da8-df5718749032.roa (raw, json) Hash identifier: EzgBTqhEHAuLkotisAZEnCNxQ+NdexAD6lYvht2XWd8= Subject key identifier: 10:C4:E4:99:5E:E4:DE:BB:BB:7D:B5:DF:64:C8:EC:45:3F:8B:18:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5213E81191108EFA55A115D65DCCB304331868C2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa Signing time: Fri 11 Jul 2025 15:41:46 +0000 ROA not before: Fri 11 Jul 2025 15:41:46 +0000 ROA not after: Fri 15 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:13:e8:11:91:10:8e:fa:55:a1:15:d6:5d:cc:b3:04:33:18:68:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 11 15:41:46 2025 GMT Not After : Aug 15 23:59:59 2025 GMT Subject: serialNumber=21a702750f43a2a1bd8cd703e9782310170d82189605d01cdcd7c1683967d225, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:21:80:cd:aa:81:d6:6a:c7:ed:35:03:d7:80: ba:a2:b1:02:3d:75:ab:e8:e5:dd:d4:db:fc:91:3e: 6c:4b:75:9e:ef:70:79:d2:64:69:b7:3d:a2:3f:e2: 53:f8:b7:71:2b:20:c9:6c:6a:bb:2a:37:05:7d:dd: f5:b6:9d:6c:7b:51:cb:ed:1e:3a:8a:2b:74:c0:4a: b2:6b:f1:58:21:4f:49:6a:8b:21:87:8c:54:9a:10: 06:74:f0:e4:61:cd:16:b4:b5:35:44:0e:c7:6e:12: 70:49:7e:dd:90:8e:e8:91:ec:2d:f6:06:48:62:c4: b7:5d:c3:ba:1c:10:af:39:00:f3:5f:d9:ba:83:f5: 27:64:79:d8:95:87:a8:2a:d5:cb:ac:8a:af:52:dc: d2:8e:a5:40:7b:2c:29:d0:82:01:30:5f:38:12:a9: 80:51:07:c1:d1:70:7c:54:e9:40:5e:73:a2:68:c0: 33:8c:43:04:2b:69:4e:6f:d7:f9:3f:b3:51:39:32: b2:61:bc:99:bb:f2:21:d1:aa:7e:23:7e:a7:b1:61: 29:f1:b9:b5:a7:0e:0f:e2:9e:af:d2:a6:c2:64:f3: 2a:b2:74:ed:f5:c2:32:5e:53:c4:91:10:ea:91:6d: d4:55:fe:9d:4b:72:30:34:69:9e:35:d5:42:d4:dd: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C4:E4:99:5E:E4:DE:BB:BB:7D:B5:DF:64:C8:EC:45:3F:8B:18:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d64498fc-b63a-4ccc-8da8-df5718749032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.100.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:c8:61:9b:09:e4:ca:14:7a:3f:98:40:61:f8:44:78:f2:cc: cb:9f:6c:79:d9:cf:af:8e:fa:c9:c9:95:9a:f8:28:6d:e4:79: 67:56:76:d2:fc:b6:55:9e:cc:13:74:b1:f4:e5:7c:31:79:64: 21:1a:cd:51:ac:2d:44:39:28:db:0c:cc:bb:3a:31:ee:9a:84: 83:35:a7:6b:c7:79:e2:1d:7f:d6:12:89:3d:3c:d6:72:64:23: 5c:87:93:46:3f:5e:26:e7:a3:6c:dd:db:8d:00:ae:5b:95:e4: c5:2c:5e:02:b8:b6:41:2b:dc:96:b1:71:50:9f:e6:cf:91:4c: 70:80:07:36:7c:cd:8a:51:cc:e3:bc:82:ca:84:e0:c2:4e:85: 50:21:33:8b:0b:11:d4:d8:aa:70:0b:1e:d5:24:26:59:6f:be: 56:b5:06:88:67:8f:69:f5:4a:90:2c:52:40:cc:d2:02:d5:be: d2:60:db:06:cd:6a:e1:b6:8c:ca:ae:6f:fd:0b:cf:b6:a6:46: 92:81:11:18:ef:5c:73:69:8b:4f:c0:65:05:30:18:e5:c5:79: e1:9c:d4:05:86:f5:d7:93:85:c3:d9:44:da:67:fb:02:88:07: 96:76:25:8a:c5:b7:c2:c8:e1:46:25:5c:95:e2:a5:3d:2e:5a: ce:27:26:ef -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUhPoEZEQjvpVoRXWXcyzBDMYaMIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzExMTU0MTQ2WhcNMjUwODE1MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMWE3MDI3NTBmNDNhMmExYmQ4Y2Q3MDNlOTc4MjMxMDE3 MGQ4MjE4OTYwNWQwMWNkY2Q3YzE2ODM5NjdkMjI1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDGIYDNqoHWasftNQPXgLqisQI9davo5d3U2/yRPmxLdZ7v cHnSZGm3PaI/4lP4t3ErIMlsarsqNwV93fW2nWx7UcvtHjqKK3TASrJr8VghT0lq iyGHjFSaEAZ08ORhzRa0tTVEDsduEnBJft2QjuiR7C32BkhixLddw7ocEK85APNf 2bqD9SdkediVh6gq1cusiq9S3NKOpUB7LCnQggEwXzgSqYBRB8HRcHxU6UBec6Jo wDOMQwQraU5v1/k/s1E5MrJhvJm78iHRqn4jfqexYSnxubWnDg/inq/SpsJk8yqy dO31wjJeU8SREOqRbdRV/p1LcjA0aZ411ULU3fG/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEMTkmV7k3ru7fbXfZMjsRT+LGMQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2NDQ5OGZjLWI2M2EtNGNjYy04ZGE4LWRmNTcxODc0OTAzMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3mQwDQYJKoZIhvcNAQELBQADggEBAE3IYZsJ5MoUej+YQGH4RHjyzMuf bHnZz6+O+snJlZr4KG3keWdWdtL8tlWezBN0sfTlfDF5ZCEazVGsLUQ5KNsMzLs6 Me6ahIM1p2vHeeIdf9YSiT081nJkI1yHk0Y/Xibno2zd240ArluV5MUsXgK4tkEr 3JaxcVCf5s+RTHCABzZ8zYpRzOO8gsqE4MJOhVAhM4sLEdTYqnALHtUkJllvvla1 Bohnj2n1SpAsUkDM0gLVvtJg2wbNauG2jMqub/0Lz7amRpKBERjvXHNpi0/AZQUw GOXFeeGc1AWG9deThcPZRNpn+wKIB5Z2JYrFt8LI4UYlXJXipT0uWs4nJu8= -----END CERTIFICATE-----Generated at Mon Aug 4 21:40:27 2025 by rpki-client