$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff88e27e-75e1-47f9-9fe6-543529716cf1.roa File: ff88e27e-75e1-47f9-9fe6-543529716cf1.roa (raw, json) Hash identifier: OLg4khA8ssWEY54kHLobb8PGVC1csFGEh/mRvSuZdmM= Subject key identifier: 72:9B:92:56:73:6D:BF:45:0F:E9:E1:D5:51:AA:94:42:87:63:29:01 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 47513FFEA95F5B0A83EAD9DB3562954D2466089A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff88e27e-75e1-47f9-9fe6-543529716cf1.roa Signing time: Sat 26 Jul 2025 00:30:11 +0000 ROA not before: Sat 26 Jul 2025 00:30:11 +0000 ROA not after: Sat 30 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:51:3f:fe:a9:5f:5b:0a:83:ea:d9:db:35:62:95:4d:24:66:08:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jul 26 00:30:11 2025 GMT Not After : Aug 30 23:59:59 2025 GMT Subject: serialNumber=4fcec03b3fcf1022c751413a4587981451601c35d2b988b76172324cd9250568, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a3:5f:77:01:2a:e6:a9:09:c8:36:0c:47:50: f2:48:73:f5:94:57:5a:e9:b8:cd:4a:b8:d0:43:e9: 57:bd:6c:67:a9:27:c3:2c:54:f0:55:d0:d2:71:62: ae:de:aa:6d:9e:98:ad:25:25:15:50:ab:4d:a5:e6: 7f:e7:f6:16:02:45:ce:74:86:49:50:93:1b:dc:02: 41:dc:d9:41:35:7a:75:6b:3c:4b:ff:05:7a:7b:84: 46:ee:ae:8f:88:7a:7f:af:f5:d1:4c:55:41:3d:b0: 6a:92:c5:3e:58:a8:92:76:25:6a:6f:1e:94:58:33: 69:18:1b:40:e3:87:99:34:8f:fb:6c:ae:7b:74:b3: 07:4d:e7:bf:da:9e:ea:03:d5:c5:28:20:d3:c1:71: 1d:01:68:02:d0:cc:26:36:d1:87:c1:c3:ae:56:60: cc:6d:26:af:c6:61:ca:32:74:c3:ca:c7:5d:09:ae: 57:38:a7:c5:a3:f1:ce:ca:12:e1:05:bc:ad:88:4a: 1a:2a:81:1a:45:30:cc:58:ba:48:92:21:e2:18:4c: df:a7:c8:bf:c7:e4:86:65:bc:27:01:13:cf:7d:74: 52:88:e3:2c:88:a2:1f:bc:19:56:f3:a2:f6:ec:57: 8c:3e:57:47:f2:75:64:8f:86:34:cf:1c:80:d8:f0: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9B:92:56:73:6D:BF:45:0F:E9:E1:D5:51:AA:94:42:87:63:29:01 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ff88e27e-75e1-47f9-9fe6-543529716cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.221.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:8f:63:9e:52:3c:82:8c:24:59:2a:0b:69:82:1c:9c:8b:91: 9f:ae:11:1f:a0:a8:37:47:4b:cb:cb:6d:79:8d:bc:c7:8e:0a: c5:95:43:ef:90:84:00:3b:59:70:71:d2:d2:ac:20:b0:90:1a: 26:19:c5:1a:1e:00:c2:dd:c6:4a:1f:0e:9b:21:97:9f:a9:0c: 55:9b:bd:b1:b3:1e:de:06:41:26:d7:7d:ba:f8:1e:03:b1:03: 89:55:90:d6:c9:24:f6:28:52:1a:10:56:a2:b6:17:23:e9:eb: 43:d6:91:8f:f6:22:63:c4:19:a7:6a:82:49:32:b4:30:80:9e: ea:1e:90:e9:5e:4b:0f:91:03:74:74:25:0f:a0:b2:c5:4c:cf: af:94:f8:9e:dd:52:cf:93:5e:8b:a1:3f:92:b6:cf:61:8d:3f: a1:cc:4c:c7:62:23:08:c2:a0:9b:1e:07:99:dc:7b:50:4b:5a: fe:dd:4c:c8:d4:dd:62:7b:f4:82:8f:a1:c9:95:3d:22:7d:79: 4d:3d:ac:42:28:d8:b3:88:a3:9d:a8:d0:f4:9d:dd:e4:fa:94: 52:ba:ae:eb:74:e7:7b:01:65:04:a6:ba:e2:ca:ef:75:2d:db: cd:56:3a:04:41:bd:f3:b0:87:ba:84:10:00:53:fd:c2:82:81: 8b:8e:b7:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUR1E//qlfWwqD6tnbNWKVTSRmCJowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNzI2MDAzMDExWhcNMjUwODMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZmNlYzAzYjNmY2YxMDIyYzc1MTQxM2E0NTg3OTgxNDUx NjAxYzM1ZDJiOTg4Yjc2MTcyMzI0Y2Q5MjUwNTY4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0o193ASrmqQnINgxHUPJIc/WUV1rpuM1KuNBD6Ve9bGep J8MsVPBV0NJxYq7eqm2emK0lJRVQq02l5n/n9hYCRc50hklQkxvcAkHc2UE1enVr PEv/BXp7hEburo+Ien+v9dFMVUE9sGqSxT5YqJJ2JWpvHpRYM2kYG0Djh5k0j/ts rnt0swdN57/anuoD1cUoINPBcR0BaALQzCY20YfBw65WYMxtJq/GYcoydMPKx10J rlc4p8Wj8c7KEuEFvK2IShoqgRpFMMxYukiSIeIYTN+nyL/H5IZlvCcBE899dFKI 4yyIoh+8GVbzovbsV4w+V0fydWSPhjTPHIDY8KyrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUcpuSVnNtv0UP6eHVUaqUQodjKQEwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ZmODhlMjdlLTc1ZTEtNDdmOS05ZmU2LTU0MzUyOTcxNmNmMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5t0wDQYJKoZIhvcNAQELBQADggEBAEyPY55SPIKMJFkqC2mCHJyLkZ+u ER+gqDdHS8vLbXmNvMeOCsWVQ++QhAA7WXBx0tKsILCQGiYZxRoeAMLdxkofDpsh l5+pDFWbvbGzHt4GQSbXfbr4HgOxA4lVkNbJJPYoUhoQVqK2FyPp60PWkY/2ImPE GadqgkkytDCAnuoekOleSw+RA3R0JQ+gssVMz6+U+J7dUs+TXouhP5K2z2GNP6HM TMdiIwjCoJseB5nce1BLWv7dTMjU3WJ79IKPocmVPSJ9eU09rEIo2LOIo52o0PSd 3eT6lFK6rut053sBZQSmuuLK73Ut281WOgRBvfOwh7qEEABT/cKCgYuOtw0= -----END CERTIFICATE-----Generated at Tue Aug 5 08:24:02 2025 by rpki-client