$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa File: dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa (raw, json) Hash identifier: /JqRzdNaLHDY0xfc41HNtApd0iji1REMUnqTOmoxdcc= Subject key identifier: 80:96:83:52:96:E3:6E:20:A2:42:D2:E4:86:C7:97:2F:08:37:D8:89 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5049AE18952DB099AD712805A843F04E87A7DEED Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa Signing time: Sat 26 Jul 2025 00:30:14 +0000 ROA not before: Sat 26 Jul 2025 00:30:14 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:49:ae:18:95:2d:b0:99:ad:71:28:05:a8:43:f0:4e:87:a7:de:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 26 00:30:14 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=610531564fe526703958d83559900ec116f984ace97a00b191c678f94b8bb15f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:75:16:a7:7f:f8:52:bd:d3:8c:aa:0e:b0:ed: b5:9f:5f:9c:eb:0a:65:1e:19:07:85:ff:6a:44:89: 85:e4:77:96:02:7a:2e:8a:2f:b7:aa:95:33:7b:61: 30:b7:f5:e2:11:cd:a1:f0:17:08:d3:b2:72:1a:97: c9:a1:33:77:67:73:5a:93:63:c3:0d:2f:53:bb:e2: 82:61:e4:40:35:53:4f:eb:5b:4d:0d:66:79:b2:5b: 9e:3b:91:0a:fb:88:e3:09:ba:32:ca:ec:57:8b:63: 23:9b:2a:b7:23:77:bc:88:03:55:1a:a7:4b:cf:40: 92:2c:43:81:ee:b9:62:94:e9:c0:70:f4:1a:5d:23: 01:32:da:91:45:ac:b0:34:c2:1e:19:94:d6:4a:70: 70:0f:1b:c9:3f:ec:2f:43:df:99:ee:bf:30:a5:7c: 47:5e:ee:63:05:69:97:4c:d8:ad:0a:ec:bc:a1:c2: a5:ba:7d:4a:64:2e:8b:e1:a6:18:ea:12:00:14:1a: da:ec:ed:c3:fb:1a:5b:22:2a:0d:4b:50:6f:9c:ae: 5a:0a:0e:91:52:f1:50:a7:2e:c6:13:c6:33:c9:45: a4:74:fa:1f:5c:79:fd:26:41:b0:47:9b:b7:55:04: 13:0b:60:23:c3:dc:96:64:80:eb:d5:bd:71:b6:65: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:96:83:52:96:E3:6E:20:A2:42:D2:E4:86:C7:97:2F:08:37:D8:89 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dea87b33-05c8-4b3a-9f57-bbf804b286c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.35.0/24 Signature Algorithm: sha256WithRSAEncryption 32:3c:dc:8f:c2:e9:05:40:96:47:20:06:2f:ec:52:e4:d4:07: 8e:b1:60:37:4d:14:82:ee:97:85:61:22:26:81:4b:69:3b:0f: ac:3f:e8:f6:33:ff:2e:07:4c:0f:be:6b:55:62:34:18:f6:3e: e6:0c:88:f6:d2:06:85:37:0c:f6:1f:3e:4e:92:ec:d3:76:df: 49:ba:f8:6d:d2:f7:21:3d:e0:e4:8f:df:3a:d1:73:96:43:73: 93:6b:13:cd:13:e0:a5:cd:b2:e0:b9:42:86:8e:0c:89:75:8e: 8d:c2:94:1e:5d:47:74:75:93:d4:46:19:4d:b6:ba:82:ee:2f: 67:21:64:da:78:41:00:a4:33:a4:e4:ef:f3:1f:39:b7:4e:d8: f7:12:d0:8e:2b:ed:15:db:61:04:b1:4f:42:a2:12:cc:2f:30: 81:e5:9d:ce:17:13:dc:ce:6c:86:0b:7d:33:56:9b:a1:f8:5a: dc:1a:61:a5:ef:8c:4c:82:54:86:67:e6:b9:ed:e5:32:ac:03: 28:db:91:03:cd:a4:9f:de:6e:34:b7:38:1e:fd:76:57:d4:5e: c8:c9:9f:21:fd:f4:35:7c:ba:0d:12:a2:d2:27:52:c1:d8:87: 5c:30:67:63:23:c6:e5:31:91:b1:41:fa:61:d5:13:13:64:30: cd:f2:0b:8e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUEmuGJUtsJmtcSgFqEPwToen3u0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI2MDAzMDE0WhcNMjUwODMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MTA1MzE1NjRmZTUyNjcwMzk1OGQ4MzU1OTkwMGVjMTE2 Zjk4NGFjZTk3YTAwYjE5MWM2NzhmOTRiOGJiMTVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC4dRanf/hSvdOMqg6w7bWfX5zrCmUeGQeF/2pEiYXkd5YC ei6KL7eqlTN7YTC39eIRzaHwFwjTsnIal8mhM3dnc1qTY8MNL1O74oJh5EA1U0/r W00NZnmyW547kQr7iOMJujLK7FeLYyObKrcjd7yIA1Uap0vPQJIsQ4HuuWKU6cBw 9BpdIwEy2pFFrLA0wh4ZlNZKcHAPG8k/7C9D35nuvzClfEde7mMFaZdM2K0K7Lyh wqW6fUpkLovhphjqEgAUGtrs7cP7GlsiKg1LUG+crloKDpFS8VCnLsYTxjPJRaR0 +h9cef0mQbBHm7dVBBMLYCPD3JZkgOvVvXG2ZWu9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgJaDUpbjbiCiQtLkhseXLwg32IkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RlYTg3YjMzLTA1YzgtNGIzYS05ZjU3LWJiZjgwNGIyODZjMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5iMwDQYJKoZIhvcNAQELBQADggEBADI83I/C6QVAlkcgBi/sUuTUB46x YDdNFILul4VhIiaBS2k7D6w/6PYz/y4HTA++a1ViNBj2PuYMiPbSBoU3DPYfPk6S 7NN230m6+G3S9yE94OSP3zrRc5ZDc5NrE80T4KXNsuC5QoaODIl1jo3ClB5dR3R1 k9RGGU22uoLuL2chZNp4QQCkM6Tk7/MfObdO2PcS0I4r7RXbYQSxT0KiEswvMIHl nc4XE9zObIYLfTNWm6H4WtwaYaXvjEyCVIZn5rnt5TKsAyjbkQPNpJ/ebjS3OB79 dlfUXsjJnyH99DV8ug0SotInUsHYh1wwZ2MjxuUxkbFB+mHVExNkMM3yC44= -----END CERTIFICATE-----Generated at Mon Aug 4 21:47:51 2025 by rpki-client