$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7dc115a4-aebe-4db3-8d02-0960078119fe.roa File: 7dc115a4-aebe-4db3-8d02-0960078119fe.roa (raw, json) Hash identifier: bv/yZ2314dUxufkhgEITYhHqVBnmiStkbw/82EeuaaI= Subject key identifier: EB:0D:4E:9F:CD:EE:A5:9F:31:C7:01:87:1A:CB:E8:89:2C:67:6E:A2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 036D202A478D30CCFB1BDE63C74A6F6E0574E90A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7dc115a4-aebe-4db3-8d02-0960078119fe.roa Signing time: Wed 20 Aug 2025 00:31:06 +0000 ROA not before: Wed 20 Aug 2025 00:31:06 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.230.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6d:20:2a:47:8d:30:cc:fb:1b:de:63:c7:4a:6f:6e:05:74:e9:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:31:06 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=4c26ecc9a4c22acf5ba60de43a80def703a5796237c0df2555fc7922019e81a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:47:2e:d3:0a:3a:cb:07:6b:e2:a1:0a:db: 46:ea:d3:93:47:10:cc:be:cb:ea:58:21:90:f8:41: f6:2c:23:90:10:72:d9:94:e4:d6:67:9e:be:0e:18: 93:98:01:d1:71:38:b6:4a:6b:8d:f6:e4:78:5e:87: e6:1a:a7:b1:43:67:56:71:9f:17:b3:ce:41:1a:43: 44:4f:c5:ca:87:00:cc:e1:55:48:42:cd:dc:e1:25: c8:46:02:78:ff:48:23:ed:98:5a:02:97:98:0e:f1: 16:00:b5:c2:58:3f:4b:77:1b:76:28:f6:18:16:25: 74:11:a6:ab:a1:93:b7:fa:24:67:ff:95:ec:2b:a4: f2:f6:bc:f7:63:94:7e:83:4f:65:90:12:a1:63:c8: 6a:e6:1a:ae:b6:5d:07:c2:7a:07:8c:df:7b:f9:fc: d9:5f:d2:a4:99:63:1a:8b:25:a8:db:22:9c:6f:bb: 70:62:40:1d:65:e7:51:65:48:dc:5f:9f:31:f0:57: 9d:d1:66:3b:73:22:6f:d4:30:bb:e0:27:7c:c0:92: b4:bf:87:36:64:39:75:08:4c:a4:18:66:04:b7:2c: c3:80:46:77:d6:67:68:88:59:b3:4b:5d:25:0a:3f: c5:05:da:05:50:a7:f7:d9:f5:05:e5:6a:92:63:f5: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0D:4E:9F:CD:EE:A5:9F:31:C7:01:87:1A:CB:E8:89:2C:67:6E:A2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7dc115a4-aebe-4db3-8d02-0960078119fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.95.0/24 Signature Algorithm: sha256WithRSAEncryption 06:53:d2:74:ec:20:cc:26:c6:cc:e9:98:15:b2:91:32:6d:cf: 7e:1d:af:7f:d9:ab:76:c7:51:4f:29:f5:fc:eb:f6:70:99:d4: b2:c2:59:d4:32:7e:4d:e4:e8:1c:05:fc:81:c5:7b:d6:fc:dd: 48:a3:b1:f9:39:fc:50:bf:be:c5:04:63:7e:98:7e:f7:c2:b7: b6:f8:67:29:e4:31:98:f4:ae:9e:d3:36:25:de:c4:47:1c:64: b3:a8:b9:6c:6a:8c:f4:7a:14:11:47:1e:04:d6:e1:fd:ac:a1: 4b:08:6a:e6:13:b0:a8:e5:a8:f5:ee:79:7f:f3:30:4d:10:34: cc:1e:ef:d6:43:e0:ce:97:62:9d:d9:16:eb:df:37:bd:ff:d5: cd:f7:76:40:7b:9f:0a:3b:7b:5f:4e:b7:00:8f:d6:47:33:a8: ac:fb:b7:65:6c:8d:af:64:f3:96:c6:e6:f7:a0:78:f6:dc:ea: c6:b9:18:4a:bf:19:44:74:e4:78:41:26:bd:dd:e8:dd:da:0a: cc:c9:b4:ee:4f:20:ad:48:f7:f5:8d:36:c9:cb:4c:24:1a:61: c0:97:26:20:41:94:29:20:79:59:f2:6d:e0:f2:cd:30:aa:7d: 8c:84:31:27:4d:44:48:ef:81:86:f8:3e:f4:9d:66:f1:45:30: 8f:f4:b1:b5 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA20gKkeNMMz7G95jx0pvbgV06QowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIwMDAzMTA2WhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YzI2ZWNjOWE0YzIyYWNmNWJhNjBkZTQzYTgwZGVmNzAz YTU3OTYyMzdjMGRmMjU1NWZjNzkyMjAxOWU4MWE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC/VUcu0wo6ywdr4qEK20bq05NHEMy+y+pYIZD4QfYsI5AQ ctmU5NZnnr4OGJOYAdFxOLZKa4325Hheh+Yap7FDZ1ZxnxezzkEaQ0RPxcqHAMzh VUhCzdzhJchGAnj/SCPtmFoCl5gO8RYAtcJYP0t3G3Yo9hgWJXQRpquhk7f6JGf/ lewrpPL2vPdjlH6DT2WQEqFjyGrmGq62XQfCegeM33v5/Nlf0qSZYxqLJajbIpxv u3BiQB1l51FlSNxfnzHwV53RZjtzIm/UMLvgJ3zAkrS/hzZkOXUITKQYZgS3LMOA RnfWZ2iIWbNLXSUKP8UF2gVQp/fZ9QXlapJj9deXAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU6w1On83upZ8xxwGHGsvoiSxnbqIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdkYzExNWE0LWFlYmUtNGRiMy04ZDAyLTA5NjAwNzgxMTlmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5l8wDQYJKoZIhvcNAQELBQADggEBAAZT0nTsIMwmxszpmBWykTJtz34d r3/Zq3bHUU8p9fzr9nCZ1LLCWdQyfk3k6BwF/IHFe9b83Uijsfk5/FC/vsUEY36Y fvfCt7b4ZynkMZj0rp7TNiXexEccZLOouWxqjPR6FBFHHgTW4f2soUsIauYTsKjl qPXueX/zME0QNMwe79ZD4M6XYp3ZFuvfN73/1c33dkB7nwo7e19OtwCP1kczqKz7 t2Vsja9k85bG5vegePbc6sa5GEq/GUR05HhBJr3d6N3aCszJtO5PIK1I9/WNNsnL TCQaYcCXJiBBlCkgeVnybeDyzTCqfYyEMSdNREjvgYb4PvSdZvFFMI/0sbU= -----END CERTIFICATE-----Generated at Sat Aug 23 08:09:02 2025 by rpki-client