$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16cb6a0d-3eb4-48e5-b1aa-480a8e8bee47.roa File: 16cb6a0d-3eb4-48e5-b1aa-480a8e8bee47.roa (raw, json) Hash identifier: L2hYodV9wkCASD+SkSs0+LlsHNXrwKFvgAj3Wy8ZIvI= Subject key identifier: 53:55:53:80:A6:98:0D:76:DB:DE:83:1C:80:91:62:FB:50:F2:4B:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5E8DF8124FD3CE9BA47E059574C84CCEFFBE1F60 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16cb6a0d-3eb4-48e5-b1aa-480a8e8bee47.roa Signing time: Mon 16 Jun 2025 16:40:13 +0000 ROA not before: Mon 16 Jun 2025 16:40:13 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.248.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8d:f8:12:4f:d3:ce:9b:a4:7e:05:95:74:c8:4c:ce:ff:be:1f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:40:13 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=ee84a071647ed7f07e3701c2f013453210543330e265ad0c6ba317507d3a0288, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:49:e9:75:21:e3:fa:9f:0d:72:a0:8f:b0: a0:a3:08:4e:a4:3c:59:19:ea:34:c2:f2:2e:bc:84: 49:a5:7b:13:bb:62:8d:76:a3:71:c4:1d:6c:dc:ff: 7c:f6:24:8a:96:5b:db:4f:97:9c:4c:4a:8e:9b:3c: b5:6b:7f:7b:c0:8c:77:9d:e2:fa:19:a5:61:30:dc: dc:c9:b5:8c:2b:d4:9d:2e:cd:60:cf:4c:dc:7b:63: 6d:96:8d:81:9d:b5:85:57:1c:7a:4e:a8:41:7c:f7: 34:29:8f:38:ac:50:cb:9c:f1:d9:d0:e9:cd:18:db: 44:83:71:02:11:e7:b3:0b:dc:fa:50:2b:56:1f:c6: 99:a3:f8:07:b9:78:36:64:f8:9a:11:92:cc:43:17: f9:ff:9b:b6:a9:12:8f:03:2b:3c:99:e0:51:86:1a: 68:4a:db:a5:86:17:24:0a:65:3d:0f:f9:ec:a1:57: 11:b4:ca:12:5a:77:cd:5c:41:ae:38:5b:a5:41:7f: 99:e0:e2:c5:2d:5e:a9:37:73:68:f6:75:a4:57:58: c4:e0:4e:65:63:89:44:3d:e9:96:e5:22:4f:e1:c7: 47:fd:c7:85:f1:91:04:40:30:9c:69:7f:0b:96:09: e0:71:78:d2:11:88:66:0c:90:2d:68:a0:b0:62:35: b5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:55:53:80:A6:98:0D:76:DB:DE:83:1C:80:91:62:FB:50:F2:4B:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16cb6a0d-3eb4-48e5-b1aa-480a8e8bee47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.147.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:5b:8a:83:45:15:a9:b0:a0:5a:7a:71:54:80:be:7e:4b:76: 29:29:6e:03:d2:45:e7:62:a6:4c:44:93:e7:16:8b:48:3f:66: 59:8c:15:07:48:98:06:a2:fc:9e:e7:de:4a:04:d9:a9:ff:2f: 5a:af:f9:ed:9e:27:8c:a6:17:42:c2:41:0c:ce:49:a0:f1:ca: 72:50:8b:f0:f2:fd:2b:79:f5:cd:c4:b0:e1:c5:ab:86:88:92: 2b:70:37:06:6e:f5:82:e4:6a:4b:68:cf:06:67:e4:05:ac:b0: 4a:b7:95:7d:af:78:0d:af:17:39:5c:ce:1e:8a:f9:0b:7e:7c: 1f:dd:bd:71:cf:23:dc:6f:46:ee:39:b2:5f:c9:94:9e:43:21: 29:71:59:54:09:ed:77:3f:95:03:f1:3e:3c:4c:9a:fa:72:97: d9:fa:c4:ef:33:a3:3a:9c:b2:8d:09:93:90:d0:55:05:36:52: c8:c0:ab:03:ea:8f:16:fc:ec:86:18:d6:22:06:13:88:ae:35: 5c:b2:de:89:d6:6b:64:1d:ba:17:46:da:cc:68:7e:52:77:f4: 83:80:1b:89:46:fd:f3:76:b0:00:37:95:e4:27:a2:cd:11:78: 45:49:90:90:f1:bb:cb:89:b7:b6:20:b4:68:0e:79:1d:65:f7: 4d:b2:01:bc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXo34Ek/TzpukfgWVdMhMzv++H2AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTY0MDEzWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BlZTg0YTA3MTY0N2VkN2YwN2UzNzAxYzJmMDEzNDUzMjEw NTQzMzMwZTI2NWFkMGM2YmEzMTc1MDdkM2EwMjg4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCVk0npdSHj+p8NcqCPsKCjCE6kPFkZ6jTC8i68hEmlexO7 Yo12o3HEHWzc/3z2JIqWW9tPl5xMSo6bPLVrf3vAjHed4voZpWEw3NzJtYwr1J0u zWDPTNx7Y22WjYGdtYVXHHpOqEF89zQpjzisUMuc8dnQ6c0Y20SDcQIR57ML3PpQ K1Yfxpmj+Ae5eDZk+JoRksxDF/n/m7apEo8DKzyZ4FGGGmhK26WGFyQKZT0P+eyh VxG0yhJad81cQa44W6VBf5ng4sUtXqk3c2j2daRXWMTgTmVjiUQ96ZblIk/hx0f9 x4XxkQRAMJxpfwuWCeBxeNIRiGYMkC1ooLBiNbU5AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU1VTgKaYDXbb3oMcgJFi+1DyS8owHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2Y2I2YTBkLTNlYjQtNDhlNS1iMWFhLTQ4MGE4ZThiZWU0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP+JMwDQYJKoZIhvcNAQELBQADggEBADtbioNFFamwoFp6cVSAvn5Ldikp bgPSRedipkxEk+cWi0g/ZlmMFQdImAai/J7n3koE2an/L1qv+e2eJ4ymF0LCQQzO SaDxynJQi/Dy/St59c3EsOHFq4aIkitwNwZu9YLkaktozwZn5AWssEq3lX2veA2v Fzlczh6K+Qt+fB/dvXHPI9xvRu45sl/JlJ5DISlxWVQJ7Xc/lQPxPjxMmvpyl9n6 xO8zozqcso0Jk5DQVQU2UsjAqwPqjxb87IYY1iIGE4iuNVyy3onWa2QduhdG2sxo flJ39IOAG4lG/fN2sAA3leQnos0ReEVJkJDxu8uJt7YgtGgOeR1l902yAbw= -----END CERTIFICATE-----Generated at Sun Jun 29 00:23:08 2025 by rpki-client