$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35538b9d-35d3-4472-86f2-87fecfa357db.roa File: 35538b9d-35d3-4472-86f2-87fecfa357db.roa (raw, json) Hash identifier: h85BaXppvL2lnOrTjDH95ZWrl/NTU9WFM1+pQn7e6yg= Subject key identifier: 4C:41:BD:21:B4:1F:BA:33:8C:7C:F1:73:91:BD:1D:00:14:AE:54:DB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 739B757B25E9075830B8891A545DB023C047CCEB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35538b9d-35d3-4472-86f2-87fecfa357db.roa Signing time: Tue 05 Aug 2025 15:22:11 +0000 ROA not before: Tue 05 Aug 2025 15:22:11 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9b:75:7b:25:e9:07:58:30:b8:89:1a:54:5d:b0:23:c0:47:cc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:22:11 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=bdbb642d3cc8c001b482713cd9788ec6cfd4846f48b853f5f4e8ba7d5782a02d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cd:ca:9e:d8:42:17:6a:5a:4c:bd:9a:00:48: 3d:25:e2:ac:8d:e5:c4:eb:85:1c:f1:04:51:93:55: ce:37:37:38:8c:f6:4d:17:2b:98:2a:61:67:e8:7b: 85:9a:d3:84:68:19:f2:d9:87:05:8d:fb:df:ff:85: 1f:c7:a3:85:b3:8d:e1:e9:8a:0f:b1:51:0e:98:af: 37:91:25:6e:8d:5c:d6:3f:dc:1f:d0:dc:39:d3:f7: 26:5b:ae:5e:ea:57:57:4b:76:00:8b:aa:a4:0c:0e: 57:5e:b4:7c:31:47:97:74:db:fb:72:30:f3:98:a6: 0a:fc:4a:6b:37:4e:ad:24:2a:cf:3f:14:3d:89:ca: 4d:96:e2:1b:06:72:42:e9:a7:4d:2d:c7:3e:f1:d5: 57:b9:37:8c:f2:f6:6f:7b:8f:3b:a2:ee:46:80:1e: b3:93:36:c6:2d:72:ab:f5:39:b3:da:dc:ff:5f:4e: 57:90:1d:e3:14:52:b1:ac:9b:f6:b3:77:e7:3c:f6: 12:1c:e5:4c:43:7e:db:15:a3:74:1d:1e:da:a3:b4: 00:f9:b0:98:28:69:8c:44:4a:69:56:06:6f:14:9b: 13:36:c5:93:05:45:f5:d0:36:ba:94:21:3c:a1:72: 57:23:eb:94:8c:5b:d1:74:9e:31:69:5e:6c:85:51: d8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:41:BD:21:B4:1F:BA:33:8C:7C:F1:73:91:BD:1D:00:14:AE:54:DB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/35538b9d-35d3-4472-86f2-87fecfa357db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.205.0/24 Signature Algorithm: sha256WithRSAEncryption 09:63:e1:a7:84:40:81:16:73:5d:50:49:a8:67:85:83:47:d0: 50:bc:6a:07:4f:9d:49:ba:c4:db:6a:58:97:b3:01:ff:e8:ff: ab:e4:e4:fe:ec:0e:0e:b7:e2:88:88:27:6f:08:e3:1f:3c:bd: 4f:e4:7c:16:b9:ad:d8:14:80:b9:70:54:7a:94:32:e8:3b:e4: 2d:27:e5:52:09:6b:87:c0:b2:89:8b:bb:2f:bd:27:6a:d6:8c: a8:2a:df:93:53:3b:b3:c0:1d:91:b2:c9:d8:53:b1:34:fe:27: b1:53:6f:30:5b:4d:09:60:d5:0f:c6:db:ff:ae:00:62:15:2c: 39:f6:88:eb:7e:bb:f5:05:59:a9:0f:2d:0c:3e:71:0e:e9:35: 22:76:0e:2a:65:7b:3b:24:29:72:6d:6e:44:c2:6a:7a:10:3d: 6f:af:e2:64:2d:f0:80:57:7c:1b:39:2d:11:2a:9e:49:a9:49: 65:c7:7e:dd:d7:e8:f3:c6:88:72:8e:ce:a3:20:c1:9d:e8:f6: e3:65:dd:3e:fd:94:ab:77:4d:b9:77:78:1a:4a:c3:2d:3b:2d: df:3e:c1:93:c2:80:85:da:7f:87:43:ce:1a:ba:df:a3:9d:32: 31:67:fe:37:2b:94:ac:94:2d:08:4f:a6:11:f5:a9:12:a7:72: 3b:bd:6e:9e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUc5t1eyXpB1gwuIkaVF2wI8BHzOswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTUyMjExWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiZGJiNjQyZDNjYzhjMDAxYjQ4MjcxM2NkOTc4OGVjNmNm ZDQ4NDZmNDhiODUzZjVmNGU4YmE3ZDU3ODJhMDJkMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDJzcqe2EIXalpMvZoASD0l4qyN5cTrhRzxBFGTVc43NziM 9k0XK5gqYWfoe4Wa04RoGfLZhwWN+9//hR/Ho4WzjeHpig+xUQ6YrzeRJW6NXNY/ 3B/Q3DnT9yZbrl7qV1dLdgCLqqQMDldetHwxR5d02/tyMPOYpgr8Sms3Tq0kKs8/ FD2Jyk2W4hsGckLpp00txz7x1Ve5N4zy9m97jzui7kaAHrOTNsYtcqv1ObPa3P9f TleQHeMUUrGsm/azd+c89hIc5UxDftsVo3QdHtqjtAD5sJgoaYxESmlWBm8UmxM2 xZMFRfXQNrqUITyhclcj65SMW9F0njFpXmyFUdi7AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUTEG9IbQfujOMfPFzkb0dABSuVNswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM1NTM4YjlkLTM1ZDMtNDQ3Mi04NmYyLTg3ZmVjZmEzNTdkYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5s0wDQYJKoZIhvcNAQELBQADggEBAAlj4aeEQIEWc11QSahnhYNH0FC8 agdPnUm6xNtqWJezAf/o/6vk5P7sDg634oiIJ28I4x88vU/kfBa5rdgUgLlwVHqU Mug75C0n5VIJa4fAsomLuy+9J2rWjKgq35NTO7PAHZGyydhTsTT+J7FTbzBbTQlg 1Q/G2/+uAGIVLDn2iOt+u/UFWakPLQw+cQ7pNSJ2DiplezskKXJtbkTCanoQPW+v 4mQt8IBXfBs5LREqnkmpSWXHft3X6PPGiHKOzqMgwZ3o9uNl3T79lKt3Tbl3eBpK wy07Ld8+wZPCgIXaf4dDzhq636OdMjFn/jcrlKyULQhPphH1qRKncju9bp4= -----END CERTIFICATE-----Generated at Sat Aug 23 08:07:30 2025 by rpki-client