$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa File: 16788add-b139-4af8-bd22-fe8b2177c578.roa (raw, json) Hash identifier: KcTQO6GnkE/gYA1waTc9vV/lkwYZt1twGKvbZfaDVcY= Subject key identifier: B1:96:C0:C6:E3:3C:82:E2:D7:9C:CF:3C:46:35:A7:FD:E9:63:3A:FE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1EFC31415DAE2B7FAEBE6ADC2EE4131CC7D6324F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa Signing time: Mon 16 Jun 2025 16:10:18 +0000 ROA not before: Mon 16 Jun 2025 16:10:18 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.137.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fc:31:41:5d:ae:2b:7f:ae:be:6a:dc:2e:e4:13:1c:c7:d6:32:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:10:18 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=5f0ac7930e3b3e9dd988bc4ce4d04cba4f2aa5de28364076d58591a58c3e6208, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f3:8d:a5:b2:91:e5:a8:e5:2d:be:d5:bb:6f: b5:18:65:d5:ae:41:eb:53:51:b8:08:5f:f6:44:1d: 82:21:9a:b5:77:7f:b1:cf:9c:df:d4:10:de:1b:98: 92:92:a6:79:98:78:b8:e5:1d:79:50:67:f5:4d:a9: f0:4c:47:96:b6:cd:c2:b0:70:51:22:fc:03:4b:59: 93:ec:c6:1f:ee:c8:83:7e:98:ad:84:2a:df:92:80: 74:ba:ea:c4:17:58:89:2a:d6:38:a2:59:32:d9:40: 51:41:78:26:3b:a2:b3:1d:7d:9e:7a:2d:d1:4b:4c: 2b:44:61:73:ad:e8:66:d5:1f:7c:38:f2:20:4f:4e: 96:d6:3b:ca:4f:85:b7:6a:5f:e6:b5:9f:dd:95:55: b8:91:57:4b:69:f1:da:d5:2b:5a:3d:f1:4c:e1:bc: 0d:f3:c4:44:98:6d:d5:4a:f6:81:39:eb:58:86:09: ab:ca:7a:32:ab:1b:59:e9:10:10:3c:00:c1:93:cf: 6a:9e:e4:69:df:d2:21:c7:e0:01:ce:47:b6:90:90: 8b:3f:09:04:63:02:48:37:f0:1d:98:4f:5a:4b:b0: 8e:12:ca:b9:ed:4e:c9:26:87:df:06:93:0f:52:dc: 85:78:f2:8a:8e:df:25:3d:02:36:7a:76:b3:df:13: 47:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:96:C0:C6:E3:3C:82:E2:D7:9C:CF:3C:46:35:A7:FD:E9:63:3A:FE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:6e:5e:6c:26:40:3b:0a:c6:28:25:7e:dd:6d:6e:37:ef:0a: 93:be:11:e9:8b:55:aa:8e:10:28:5e:19:50:45:ee:1c:4b:09: 8e:e5:c4:cf:90:c1:2e:6d:2e:b7:d7:15:03:8b:51:ff:bc:da: ba:44:7c:bb:94:01:a7:93:06:72:7f:fe:43:03:2c:2b:4c:3e: d4:ce:f5:fa:14:06:6f:2f:fc:21:f2:c1:68:63:95:0e:35:1f: cc:f8:41:c1:f4:a1:56:1f:9c:c5:c4:1e:03:8b:ae:3e:5a:2d: 36:08:09:35:36:fd:c4:82:2d:b1:14:b4:55:2f:ce:f7:bc:39: 10:2c:63:6d:f6:92:a0:f1:12:d9:59:e9:e6:90:4c:9d:55:51: 1c:0d:44:fa:1e:83:ec:79:22:38:86:3e:95:ff:26:31:32:57: 05:32:9e:6d:45:0f:58:dc:ca:2d:f6:b4:a2:33:dd:78:cc:9d: 7e:cc:60:3d:da:cd:f5:1d:3b:be:30:6d:c0:31:83:98:93:17: 9d:28:e5:9a:c0:03:55:77:57:75:ca:08:54:d1:ba:fa:c6:90: 58:73:5e:b9:52:a8:a1:9c:04:09:5a:bc:ed:3c:c4:13:bb:28: 04:67:a3:8a:a7:c0:7f:4a:8c:25:9d:33:3d:10:28:61:c1:1c: aa:ff:9c:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHvwxQV2uK3+uvmrcLuQTHMfWMk8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYxMDE4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1ZjBhYzc5MzBlM2IzZTlkZDk4OGJjNGNlNGQwNGNiYTRm MmFhNWRlMjgzNjQwNzZkNTg1OTFhNThjM2U2MjA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCR842lspHlqOUtvtW7b7UYZdWuQetTUbgIX/ZEHYIhmrV3 f7HPnN/UEN4bmJKSpnmYeLjlHXlQZ/VNqfBMR5a2zcKwcFEi/ANLWZPsxh/uyIN+ mK2EKt+SgHS66sQXWIkq1jiiWTLZQFFBeCY7orMdfZ56LdFLTCtEYXOt6GbVH3w4 8iBPTpbWO8pPhbdqX+a1n92VVbiRV0tp8drVK1o98UzhvA3zxESYbdVK9oE561iG CavKejKrG1npEBA8AMGTz2qe5Gnf0iHH4AHOR7aQkIs/CQRjAkg38B2YT1pLsI4S yrntTskmh98Gkw9S3IV48oqO3yU9AjZ6drPfE0eBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUsZbAxuM8guLXnM88RjWn/eljOv4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2Nzg4YWRkLWIxMzktNGFmOC1iZDIyLWZlOGIyMTc3YzU3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPiTANBgkqhkiG9w0BAQsFAAOCAQEAdm5ebCZAOwrGKCV+3W1uN+8Kk74R 6YtVqo4QKF4ZUEXuHEsJjuXEz5DBLm0ut9cVA4tR/7zaukR8u5QBp5MGcn/+QwMs K0w+1M71+hQGby/8IfLBaGOVDjUfzPhBwfShVh+cxcQeA4uuPlotNggJNTb9xIIt sRS0VS/O97w5ECxjbfaSoPES2Vnp5pBMnVVRHA1E+h6D7HkiOIY+lf8mMTJXBTKe bUUPWNzKLfa0ojPdeMydfsxgPdrN9R07vjBtwDGDmJMXnSjlmsADVXdXdcoIVNG6 +saQWHNeuVKooZwECVq87TzEE7soBGejiqfAf0qMJZ0zPRAoYcEcqv+c2g== -----END CERTIFICATE-----Generated at Sun Jun 29 03:55:27 2025 by rpki-client