$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39bc5415-22bb-4c0c-981c-f399db1cc778.roa File: 39bc5415-22bb-4c0c-981c-f399db1cc778.roa (raw, json) Hash identifier: imwCJgDBNKua9UL2zFwxJJ1UQ+dGzYHcneXRlnBXoYE= Subject key identifier: 0C:B1:F1:B0:9B:1E:DB:41:BC:2A:17:FC:55:6F:9A:58:98:ED:0B:02 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3429279A3F884D2965719E7152F60D715F7482EE Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39bc5415-22bb-4c0c-981c-f399db1cc778.roa Signing time: Mon 16 Jun 2025 16:40:11 +0000 ROA not before: Mon 16 Jun 2025 16:40:11 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:29:27:9a:3f:88:4d:29:65:71:9e:71:52:f6:0d:71:5f:74:82:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:40:11 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=a232405d59c25959eee056a8a90bc1468ac931b2faa48dffdd948d330a03658c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:ca:d8:4b:7a:2b:c7:01:ba:81:0e:a1:06: e0:81:e2:a7:76:94:00:e3:20:ae:2d:9b:4c:d4:55: f0:c4:96:fb:56:3e:ff:3e:d8:c1:f2:e9:61:e3:5a: 10:b5:64:09:f7:fb:b3:2d:53:ee:60:7a:04:b3:4b: c7:a4:a9:4f:47:74:cb:fc:43:8c:ae:39:37:25:46: 91:7f:54:72:1b:9e:fa:9e:0a:90:f3:0d:ce:9a:be: e0:1f:fa:eb:a2:fa:3a:97:cd:39:93:cd:56:5a:47: fe:f9:d4:7a:81:5d:bd:09:d2:98:3a:40:2e:f1:0f: e6:eb:56:d3:da:86:31:ce:3e:5b:ff:83:49:0e:7e: 99:04:63:19:02:bf:f3:e2:49:3a:7d:a3:a7:a0:ea: be:ae:ad:ca:19:32:c4:14:ef:80:7d:6a:b1:77:11: 92:27:ee:3d:f3:57:a2:f2:1c:12:69:f3:80:40:31: 7c:46:df:31:8d:9b:32:1e:75:09:6f:6b:d2:ee:29: 05:6c:79:c1:d9:d2:93:4a:4b:60:84:39:1d:cd:b6: a6:b6:a6:9d:eb:3b:cd:55:90:b9:c0:72:68:6f:42: 3a:85:de:2a:1a:bc:a7:2c:8f:76:c0:9b:cf:01:80: bb:41:2b:6d:49:fd:63:77:0c:5a:f3:2c:49:03:5f: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B1:F1:B0:9B:1E:DB:41:BC:2A:17:FC:55:6F:9A:58:98:ED:0B:02 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/39bc5415-22bb-4c0c-981c-f399db1cc778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.80.0/20 Signature Algorithm: sha256WithRSAEncryption 7c:c0:f1:a0:bb:43:c5:01:29:41:3d:a9:ad:ec:95:88:bb:fe: ef:b2:f7:51:bc:91:43:92:e1:08:04:eb:0f:25:87:b1:7a:89: 44:7d:75:e7:86:cc:7f:0f:ad:72:40:92:d1:ad:5b:9d:0d:d8: 96:a0:c4:d3:f3:f8:28:93:80:ca:4e:e5:70:64:88:82:21:29: f6:78:a7:07:7c:c6:04:82:63:40:69:dc:2f:ea:fc:04:cd:78: 02:f1:4b:04:a4:9b:3c:e7:f9:da:7a:fb:d5:e9:98:f4:d7:b1: 13:51:18:ac:38:29:a6:a6:4a:66:d5:2d:de:50:7a:54:fb:e1: f9:e8:be:df:b5:74:23:e7:f2:87:c1:43:1f:b2:b3:66:ed:f1: f6:89:8e:c1:02:69:3e:6f:7a:17:e8:5b:02:e6:07:21:64:1e: 88:7c:aa:f1:3b:f1:30:b6:4d:4a:f7:41:f4:e4:7e:46:4b:d5: f7:9a:68:36:67:93:17:6f:16:23:17:cf:51:63:3c:02:9f:35: 84:25:23:36:b6:cc:8b:d7:aa:49:56:8d:d7:77:36:4b:81:fd: 27:7d:16:8a:8b:93:70:1d:f9:ea:bb:f0:57:bf:78:b0:27:92: 1d:34:5a:ac:14:83:05:6a:9a:2f:13:44:2c:b5:11:1c:de:34: ce:d2:64:40 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNCknmj+ITSllcZ5xUvYNcV90gu4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTY0MDExWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhMjMyNDA1ZDU5YzI1OTU5ZWVlMDU2YThhOTBiYzE0Njhh YzkzMWIyZmFhNDhkZmZkZDk0OGQzMzBhMDM2NThjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLgsrYS3orxwG6gQ6hBuCB4qd2lADjIK4tm0zUVfDElvtW Pv8+2MHy6WHjWhC1ZAn3+7MtU+5gegSzS8ekqU9HdMv8Q4yuOTclRpF/VHIbnvqe CpDzDc6avuAf+uui+jqXzTmTzVZaR/751HqBXb0J0pg6QC7xD+brVtPahjHOPlv/ g0kOfpkEYxkCv/PiSTp9o6eg6r6urcoZMsQU74B9arF3EZIn7j3zV6LyHBJp84BA MXxG3zGNmzIedQlva9LuKQVsecHZ0pNKS2CEOR3Ntqa2pp3rO81VkLnAcmhvQjqF 3ioavKcsj3bAm88BgLtBK21J/WN3DFrzLEkDX+AdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUDLHxsJse20G8Khf8VW+aWJjtCwIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM5YmM1NDE1LTIyYmItNGMwYy05ODFjLWYzOTlkYjFjYzc3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQP3FAwDQYJKoZIhvcNAQELBQADggEBAHzA8aC7Q8UBKUE9qa3slYi7/u+y 91G8kUOS4QgE6w8lh7F6iUR9deeGzH8PrXJAktGtW50N2JagxNPz+CiTgMpO5XBk iIIhKfZ4pwd8xgSCY0Bp3C/q/ATNeALxSwSkmzzn+dp6+9XpmPTXsRNRGKw4Kaam SmbVLd5QelT74fnovt+1dCPn8ofBQx+ys2bt8faJjsECaT5vehfoWwLmByFkHoh8 qvE78TC2TUr3QfTkfkZL1feaaDZnkxdvFiMXz1FjPAKfNYQlIza2zIvXqklWjdd3 NkuB/Sd9FoqLk3Ad+eq78Fe/eLAnkh00WqwUgwVqmi8TRCy1ERzeNM7SZEA= -----END CERTIFICATE-----Generated at Sun Jun 29 03:27:07 2025 by rpki-client