$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0432ce01-fba5-4e29-871a-8e47fe7eb490.roa File: 0432ce01-fba5-4e29-871a-8e47fe7eb490.roa (raw, json) Hash identifier: 6qRDMv2laUJT81V38DZFNpSL5kf/R0ch7/5XhJHGgaE= Subject key identifier: 29:42:1F:40:11:8D:0D:C9:D5:14:7C:D3:2E:96:D3:EB:7A:7A:B1:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0B364B3DE836E9335342CB2FF07E5A139AE8A878 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0432ce01-fba5-4e29-871a-8e47fe7eb490.roa Signing time: Tue 05 Aug 2025 15:31:53 +0000 ROA not before: Tue 05 Aug 2025 15:31:53 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 7224 IP address blocks: 15.248.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:36:4b:3d:e8:36:e9:33:53:42:cb:2f:f0:7e:5a:13:9a:e8:a8:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:31:53 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=214c9cb30e1ae09c17f7190eae17e70ec057ae4c31be2c7b8cee2ea9f82ee2d2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cc:91:8d:5c:a5:03:72:38:27:67:08:92:ff: 33:f7:f8:c5:d5:a8:2f:93:8e:94:ff:c6:1f:7c:7e: 5c:09:f5:85:5e:d3:96:bf:a5:49:54:fe:3e:57:1d: f2:2f:94:d6:e3:7e:59:6e:13:58:da:be:fd:86:4b: 1d:db:e9:a3:67:5f:e3:45:f5:88:36:f7:5d:10:d4: 25:18:61:a4:23:a3:3d:db:af:31:a0:91:d9:34:b6: ac:09:3b:03:cf:87:e7:c2:61:e3:0b:fe:eb:e7:64: 59:28:55:94:bb:a6:33:e4:80:79:33:3b:04:93:58: 33:38:00:6c:49:54:95:b6:8c:73:8c:57:12:67:7a: 90:48:c8:a1:3b:9c:3d:37:7b:ed:1c:78:b7:23:b6: 5e:3b:e7:fe:1c:8b:fb:b8:ea:38:5b:d4:34:9e:d5: c5:4b:83:a8:ac:ee:89:7e:a4:4a:4a:20:df:d9:f0: 43:0c:29:c2:f4:c1:e4:57:0e:28:af:6b:cc:fa:e3: d8:0b:ed:14:dc:0a:c6:01:04:89:9b:72:40:b6:00: cb:39:58:92:a5:26:29:2d:5e:52:24:46:46:31:6c: 4c:d0:a5:78:23:12:ff:d0:ae:68:b2:4d:9c:7c:ac: 8d:36:b7:66:0b:62:42:2a:4e:f6:71:b6:43:e2:98: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:42:1F:40:11:8D:0D:C9:D5:14:7C:D3:2E:96:D3:EB:7A:7A:B1:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0432ce01-fba5-4e29-871a-8e47fe7eb490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.72.0/22 Signature Algorithm: sha256WithRSAEncryption 55:4c:2f:42:42:41:05:00:0a:5b:4a:30:f1:61:89:9a:5e:d3: d5:01:f4:0f:09:e3:41:ed:57:c9:95:59:50:e4:38:ea:62:a3: 45:d6:36:ec:c4:b9:34:8b:c7:4e:26:ca:4e:4d:2d:51:ed:44: ab:30:bb:1a:c5:e2:bb:c7:3e:42:06:74:3b:23:10:17:59:67: 75:2b:5c:ad:8d:66:94:99:a1:24:80:ab:ca:49:31:5b:a2:b2: 30:61:47:80:1e:6c:b9:eb:46:c6:94:68:30:54:7b:85:43:65: d6:cc:99:73:78:b6:4a:21:3f:84:13:19:ae:4c:c3:30:46:12: 2e:96:7c:3d:22:34:f7:2c:13:43:1d:aa:81:90:03:d5:25:bd: ce:a3:cf:01:de:3a:2b:5b:89:1b:03:26:51:21:39:ab:bf:2d: 0d:68:66:5f:2c:8e:ef:66:d6:94:d5:4a:52:a3:f2:ae:b7:28: ea:92:95:c3:e2:db:48:30:ca:20:7e:32:b7:a5:3c:22:07:2c: 3a:07:bb:27:ca:0f:20:62:a4:68:35:2e:bc:de:57:44:72:f1: 0b:0b:42:a0:46:15:3f:c7:65:34:69:33:66:ec:f0:71:b0:a5: b4:e7:be:9b:7c:58:61:78:d6:34:8a:89:f1:77:51:70:cf:a6: 46:7e:65:0d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCzZLPeg26TNTQssv8H5aE5roqHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTUzMTUzWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMTRjOWNiMzBlMWFlMDljMTdmNzE5MGVhZTE3ZTcwZWMw NTdhZTRjMzFiZTJjN2I4Y2VlMmVhOWY4MmVlMmQyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxzJGNXKUDcjgnZwiS/zP3+MXVqC+TjpT/xh98flwJ9YVe 05a/pUlU/j5XHfIvlNbjflluE1javv2GSx3b6aNnX+NF9Yg2910Q1CUYYaQjoz3b rzGgkdk0tqwJOwPPh+fCYeML/uvnZFkoVZS7pjPkgHkzOwSTWDM4AGxJVJW2jHOM VxJnepBIyKE7nD03e+0ceLcjtl475/4ci/u46jhb1DSe1cVLg6is7ol+pEpKIN/Z 8EMMKcL0weRXDiiva8z649gL7RTcCsYBBImbckC2AMs5WJKlJiktXlIkRkYxbEzQ pXgjEv/QrmiyTZx8rI02t2YLYkIqTvZxtkPimD1VAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKUIfQBGNDcnVFHzTLpbT63p6sXAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0MzJjZTAxLWZiYTUtNGUyOS04NzFhLThlNDdmZTdlYjQ5MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP+EgwDQYJKoZIhvcNAQELBQADggEBAFVML0JCQQUACltKMPFhiZpe09UB 9A8J40HtV8mVWVDkOOpio0XWNuzEuTSLx04myk5NLVHtRKswuxrF4rvHPkIGdDsj EBdZZ3UrXK2NZpSZoSSAq8pJMVuisjBhR4AebLnrRsaUaDBUe4VDZdbMmXN4tkoh P4QTGa5MwzBGEi6WfD0iNPcsE0MdqoGQA9Ulvc6jzwHeOitbiRsDJlEhOau/LQ1o Zl8sju9m1pTVSlKj8q63KOqSlcPi20gwyiB+MrelPCIHLDoHuyfKDyBipGg1Lrze V0Ry8QsLQqBGFT/HZTRpM2bs8HGwpbTnvpt8WGF41jSKifF3UXDPpkZ+ZQ0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:36:27 2025 by rpki-client