$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c52ac65-2973-4678-85d9-78b87f22a731.roa File: 2c52ac65-2973-4678-85d9-78b87f22a731.roa (raw, json) Hash identifier: 9vCXWbDYR+5hmw0E0eCFmye8Kx42t3Q2ts5w69SQ0Qo= Subject key identifier: 28:C8:56:EB:60:3B:89:39:EE:5D:42:38:5C:18:E6:71:6D:09:15:09 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1634596B86F2778FCA227EFF82C6391BB55AE941 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c52ac65-2973-4678-85d9-78b87f22a731.roa Signing time: Mon 16 Jun 2025 16:30:18 +0000 ROA not before: Mon 16 Jun 2025 16:30:18 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:34:59:6b:86:f2:77:8f:ca:22:7e:ff:82:c6:39:1b:b5:5a:e9:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:30:18 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=2f6e712f9c4f86ac82476378d5d6493e14dba841595d0d983c123134cedb1d9e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0b:0a:72:2e:b3:f7:97:df:46:27:88:dd:92: 87:16:b1:20:05:5b:66:0f:25:a8:28:e6:5d:71:6a: da:6d:0e:0b:e7:a1:c2:f7:f6:01:f5:ea:08:28:51: 5b:d9:e9:94:86:e6:5a:cc:ad:8a:5e:00:73:97:f2: d2:cd:2a:ee:b3:c0:29:2b:d1:4e:7d:19:99:b7:d4: 43:12:e1:53:43:7f:a8:f8:dd:a5:88:c2:42:6e:74: fa:45:ca:33:ac:e6:71:2e:2e:20:fe:6d:b2:cd:fc: f5:db:0d:04:fd:1b:b1:ef:28:ce:19:ac:e1:41:fe: d5:9f:52:d7:93:df:db:0f:95:21:1d:13:9b:e7:55: c3:26:52:5e:d9:59:91:d6:a3:c2:1a:07:fa:28:00: c0:73:4f:a8:67:dc:6e:f9:aa:cc:9b:48:87:ff:62: 42:0f:d2:9f:2f:da:70:dc:5b:a2:c5:da:73:65:f0: 1c:79:9e:20:33:42:cb:b9:ed:44:c2:26:27:ad:bf: bb:1e:79:a0:5e:f0:73:65:c5:7a:f1:ee:28:1e:2d: 55:02:32:e8:04:af:46:51:a4:5b:3a:df:09:74:4f: 69:9e:87:29:42:b1:66:83:07:43:c6:71:db:90:98: 0c:44:07:74:98:b6:c0:23:1f:88:36:52:38:f8:cf: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C8:56:EB:60:3B:89:39:EE:5D:42:38:5C:18:E6:71:6D:09:15:09 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c52ac65-2973-4678-85d9-78b87f22a731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.157.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:0c:68:d3:59:99:04:da:a2:b4:ff:8f:60:9e:9a:6a:7f:3d: 87:c6:ca:93:3f:c8:f0:75:b8:13:7c:b4:94:f8:28:37:8a:fd: 5c:64:f1:f1:47:1b:64:93:79:ad:04:ed:53:e9:4a:eb:73:f3: fc:a4:9d:a2:3c:f4:10:24:af:4a:6b:d4:8c:bf:a2:41:df:cb: 22:b1:73:16:31:b4:38:68:01:a2:f1:3c:4f:e8:ad:cc:de:f7: 21:ed:70:6c:e6:07:d7:e3:6c:dd:27:6f:c2:3d:a8:7e:73:ae: dc:0c:e2:d1:86:b6:28:be:b8:95:b3:58:0c:49:6b:72:2b:6f: 05:bf:18:4e:a0:97:e6:f2:0c:eb:99:70:cf:6f:a7:a4:14:38: 53:6e:9a:8f:15:02:2c:ed:c8:59:b1:43:3b:bd:b1:95:9b:4a: fe:1e:49:58:f7:a2:d2:c3:11:1a:a7:6d:9b:3c:30:6e:1e:ae: a1:62:ce:1e:38:f4:f2:33:60:7f:1f:36:c0:0a:cc:43:00:e1: ac:2b:ef:41:a2:72:86:a3:ec:c8:a7:57:c4:b4:2a:30:9b:64: 9d:2e:a9:5f:84:30:6c:e7:e4:a4:19:91:82:bb:e8:d4:79:bb: 75:dd:cc:98:ce:39:81:c0:6d:70:90:30:de:3e:a8:14:97:e3: 64:89:1b:26 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFjRZa4byd4/KIn7/gsY5G7Va6UEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYzMDE4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZjZlNzEyZjljNGY4NmFjODI0NzYzNzhkNWQ2NDkzZTE0 ZGJhODQxNTk1ZDBkOTgzYzEyMzEzNGNlZGIxZDllMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxCwpyLrP3l99GJ4jdkocWsSAFW2YPJago5l1xatptDgvn ocL39gH16ggoUVvZ6ZSG5lrMrYpeAHOX8tLNKu6zwCkr0U59GZm31EMS4VNDf6j4 3aWIwkJudPpFyjOs5nEuLiD+bbLN/PXbDQT9G7HvKM4ZrOFB/tWfUteT39sPlSEd E5vnVcMmUl7ZWZHWo8IaB/ooAMBzT6hn3G75qsybSIf/YkIP0p8v2nDcW6LF2nNl 8Bx5niAzQsu57UTCJietv7seeaBe8HNlxXrx7igeLVUCMugEr0ZRpFs63wl0T2me hylCsWaDB0PGcduQmAxEB3SYtsAjH4g2Ujj4z72tAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUKMhW62A7iTnuXUI4XBjmcW0JFQkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjNTJhYzY1LTI5NzMtNDY3OC04NWQ5LTc4Yjg3ZjIyYTczMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5p0wDQYJKoZIhvcNAQELBQADggEBAA8MaNNZmQTaorT/j2Cemmp/PYfG ypM/yPB1uBN8tJT4KDeK/Vxk8fFHG2STea0E7VPpSutz8/yknaI89BAkr0pr1Iy/ okHfyyKxcxYxtDhoAaLxPE/orcze9yHtcGzmB9fjbN0nb8I9qH5zrtwM4tGGtii+ uJWzWAxJa3IrbwW/GE6gl+byDOuZcM9vp6QUOFNumo8VAiztyFmxQzu9sZWbSv4e SVj3otLDERqnbZs8MG4erqFizh449PIzYH8fNsAKzEMA4awr70Gicoaj7MinV8S0 KjCbZJ0uqV+EMGzn5KQZkYK76NR5u3XdzJjOOYHAbXCQMN4+qBSX42SJGyY= -----END CERTIFICATE-----Generated at Sun Jun 29 03:44:03 2025 by rpki-client