$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75135a1c-9c15-42ee-8ba5-685c0c4e7011.roa File: 75135a1c-9c15-42ee-8ba5-685c0c4e7011.roa (raw, json) Hash identifier: ul25lsJTi7EcCjsfyOaxI8BBd3BtqMxYa3BtrcIDRM0= Subject key identifier: 1E:76:81:B5:AF:6D:27:37:5B:D4:0F:95:23:1D:38:EA:04:E4:12:A9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3EA10026DF3BAA1F3E3D523501F3555737F5AAD2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75135a1c-9c15-42ee-8ba5-685c0c4e7011.roa Signing time: Mon 18 Aug 2025 16:10:04 +0000 ROA not before: Mon 18 Aug 2025 16:10:04 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.181.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a1:00:26:df:3b:aa:1f:3e:3d:52:35:01:f3:55:57:37:f5:aa:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 16:10:04 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=8d2c2bc7672f5f11cc21e38c6473cc3bcbdb61126e60085f756a3d48e52d8f2f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:5c:9e:56:85:ef:96:4b:05:81:23:2a:5d: 23:b2:ad:70:4a:b9:72:94:be:04:62:22:3a:15:e9: 64:d9:80:3e:93:48:bc:f7:ee:74:42:2b:58:cf:cf: 83:4b:65:55:a7:ec:a1:13:55:ec:bc:6f:6f:63:7e: b0:76:73:34:e3:c1:bc:8f:c3:82:3e:d2:43:61:fc: 00:2d:d6:38:96:bb:81:c2:94:85:6e:dd:da:3b:46: 47:90:6b:77:24:66:9e:3d:39:2f:b9:5c:b0:19:ac: 8f:bb:28:1a:60:88:1e:96:4c:62:73:65:61:78:fc: af:79:3c:25:90:a7:8f:b0:7e:63:a0:29:7c:27:d1: 01:ca:55:e8:66:0e:c2:30:7b:f2:bb:33:f8:78:68: f9:b4:6a:a2:0b:76:05:93:8f:b9:c6:22:a5:61:19: 73:60:de:5c:8e:3b:47:df:ce:5c:5e:e9:07:43:68: 7f:e8:1c:35:d7:94:d3:aa:de:70:21:53:c9:a1:e2: 8f:96:1c:a3:91:f9:d6:69:15:9c:de:c3:41:86:66: 45:e7:88:ec:7a:95:17:da:1b:7a:a2:fe:0d:93:16: a1:f2:b5:8e:71:9f:a2:09:18:70:86:46:2e:ab:07: 27:41:bd:fb:bf:df:cb:eb:6d:7f:3c:91:87:54:df: af:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:76:81:B5:AF:6D:27:37:5B:D4:0F:95:23:1D:38:EA:04:E4:12:A9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75135a1c-9c15-42ee-8ba5-685c0c4e7011.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.224.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:46:7a:41:58:19:5a:57:47:32:61:0e:14:51:4b:15:ac:d4: e5:08:5b:14:34:70:c0:90:08:7f:1e:ed:83:63:06:a6:b7:47: 81:48:13:d5:ef:40:0e:91:a7:05:d0:67:06:74:95:d7:4a:8f: 58:2c:6c:75:1c:c2:15:ed:ae:0f:ee:80:8e:35:ac:79:56:d3: 49:0b:3a:12:ca:08:18:4c:84:17:cc:62:d7:a0:cf:71:fc:b4: 13:d6:80:1c:32:55:5b:df:82:d9:d9:0c:53:52:8e:95:eb:4f: 00:aa:55:1e:da:72:7f:02:d9:76:f0:25:d3:2f:e4:6d:ed:d1: 24:9f:e3:3c:9c:e5:0c:ab:0c:8d:e4:b3:8c:05:d5:89:6f:9b: 24:52:37:29:17:55:9e:ea:66:8b:0f:ab:57:f9:2b:45:56:fd: 20:3d:c7:3a:0b:a0:58:b1:b9:d0:0c:2e:43:1d:43:a2:51:e9: cb:bf:8f:cb:fb:7c:f8:df:65:67:48:ef:12:f6:f6:c5:ee:0b: 26:47:6e:26:69:49:2f:71:b6:bf:c2:61:1a:9e:79:73:09:88: 40:da:27:ff:dc:b2:36:79:1e:85:2a:7e:b6:dc:90:08:e5:da: 47:8f:b6:21:74:a4:8a:23:c4:e9:4b:b2:94:dc:7a:3b:85:95: 0a:56:aa:bb -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPqEAJt87qh8+PVI1AfNVVzf1qtIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTYxMDA0WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0A4ZDJjMmJjNzY3MmY1ZjExY2MyMWUzOGM2NDczY2MzYmNi ZGI2MTEyNmU2MDA4NWY3NTZhM2Q0OGU1MmQ4ZjJmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKNFyeVoXvlksFgSMqXSOyrXBKuXKUvgRiIjoV6WTZgD6T SLz37nRCK1jPz4NLZVWn7KETVey8b29jfrB2czTjwbyPw4I+0kNh/AAt1jiWu4HC lIVu3do7RkeQa3ckZp49OS+5XLAZrI+7KBpgiB6WTGJzZWF4/K95PCWQp4+wfmOg KXwn0QHKVehmDsIwe/K7M/h4aPm0aqILdgWTj7nGIqVhGXNg3lyOO0ffzlxe6QdD aH/oHDXXlNOq3nAhU8mh4o+WHKOR+dZpFZzew0GGZkXniOx6lRfaG3qi/g2TFqHy tY5xn6IJGHCGRi6rBydBvfu/38vrbX88kYdU36+rAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUHnaBta9tJzdb1A+VIx046gTkEqkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzc1MTM1YTFjLTljMTUtNDJlZS04YmE1LTY4NWMwYzRlNzAxMS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPteAwDQYJKoZIhvcNAQELBQADggEBAHpGekFYGVpXRzJhDhRRSxWs1OUI WxQ0cMCQCH8e7YNjBqa3R4FIE9XvQA6RpwXQZwZ0lddKj1gsbHUcwhXtrg/ugI41 rHlW00kLOhLKCBhMhBfMYtegz3H8tBPWgBwyVVvfgtnZDFNSjpXrTwCqVR7acn8C 2XbwJdMv5G3t0SSf4zyc5QyrDI3ks4wF1YlvmyRSNykXVZ7qZosPq1f5K0VW/SA9 xzoLoFixudAMLkMdQ6JR6cu/j8v7fPjfZWdI7xL29sXuCyZHbiZpSS9xtr/CYRqe eXMJiEDaJ//csjZ5HoUqfrbckAjl2kePtiF0pIojxOlLspTcejuFlQpWqrs= -----END CERTIFICATE-----Generated at Sat Aug 23 06:44:54 2025 by rpki-client