$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c62d6ada-5b76-4cf4-a70d-afd4f3e9f448.roa File: c62d6ada-5b76-4cf4-a70d-afd4f3e9f448.roa (raw, json) Hash identifier: iNUfV8HpR3X+CpO0F5fL8zYq7kXPpBuTL2RapRD1s3s= Subject key identifier: 82:F2:94:C2:BF:EF:61:1F:6E:F9:85:E8:73:BB:CA:8E:6F:0C:FC:6C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 64E7A63FD9F2C890573AAA83163CFEB905C08C1A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c62d6ada-5b76-4cf4-a70d-afd4f3e9f448.roa Signing time: Mon 16 Jun 2025 14:51:58 +0000 ROA not before: Mon 16 Jun 2025 14:51:58 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.248.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e7:a6:3f:d9:f2:c8:90:57:3a:aa:83:16:3c:fe:b9:05:c0:8c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 14:51:58 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=16457fffce3cec85e049eb44825922d8e85c8ec52dba59bc86890c7e76cbd191, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:e4:ad:37:3a:60:c0:c4:2a:79:45:71:d3: 4a:96:4c:79:aa:be:f8:73:d2:51:bc:78:b3:46:e6: 18:58:41:24:63:9f:7d:4e:0c:ae:a9:e4:c1:47:05: 73:05:c7:f9:c0:f3:15:b7:d1:15:8f:3a:c1:ec:8f: e7:f5:cf:d9:31:27:5f:db:bf:eb:64:33:20:42:4c: 68:48:f5:03:b1:b7:43:dc:96:62:22:f7:3c:5b:fe: 06:db:b4:2a:a5:b6:66:3e:8f:38:27:f0:de:71:8e: 68:77:fc:3e:30:e7:1b:d2:b7:52:61:60:b6:2b:7c: 7a:04:87:6d:38:72:e0:d8:bc:b8:02:c3:03:63:4e: d9:32:ab:c0:c9:e7:f9:b0:d2:23:2b:ed:be:c8:b9: 2c:ad:c7:d8:94:c3:54:4d:24:7b:da:9c:98:d2:b8: e3:80:47:02:78:66:30:4d:18:5f:b6:ab:8d:d7:50: 4c:c4:6c:ef:80:a8:57:d4:bb:c5:ca:15:41:07:9d: 40:2e:97:48:9b:af:e1:e7:fc:84:37:75:21:1c:d8: 09:91:f0:af:6d:db:60:4c:39:68:bf:f8:93:f7:3b: e4:60:e3:31:8e:6a:8f:74:0e:b7:b2:cb:86:75:0c: e9:c0:fa:bd:93:29:be:cd:5c:2a:a9:17:c1:08:78: 54:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F2:94:C2:BF:EF:61:1F:6E:F9:85:E8:73:BB:CA:8E:6F:0C:FC:6C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c62d6ada-5b76-4cf4-a70d-afd4f3e9f448.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.160.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:19:e5:7f:21:3c:b4:ca:e5:8c:be:f8:97:af:a8:41:cf:2f: 27:94:7d:4f:86:22:18:17:3f:df:63:4b:c1:0b:72:db:34:d1: 0a:d2:09:0f:e5:b4:d4:d9:98:7b:ce:a5:ec:65:f9:72:98:c4: 82:c7:95:fa:3a:a0:5a:9c:f7:29:fa:fc:48:6a:19:70:14:2d: 6d:09:4d:f2:9e:cb:d2:a4:93:32:df:d8:40:06:1d:4e:43:0e: fa:c2:d9:39:64:9c:82:5f:bc:63:98:a8:8e:c5:9e:9f:84:07: c3:97:65:7a:f7:46:b6:84:98:47:59:03:56:05:ec:a5:60:b3: cc:9f:d2:03:9c:d1:ad:66:e7:47:16:75:92:4d:ec:4f:95:40: 01:8b:06:ce:50:97:42:78:85:7a:04:66:57:5a:ed:9d:15:57: 52:83:55:83:63:4d:32:22:c4:c5:c9:da:18:41:f6:80:b1:b2: 3b:f5:d4:36:33:21:da:77:39:90:4c:ac:a6:10:73:24:6b:8f: e5:59:95:dd:f8:4d:f6:04:e0:03:f5:2a:37:e0:c6:2d:bd:84: 3b:e9:43:b4:37:ab:f4:4a:de:bd:64:58:0b:66:0a:29:2b:2c: b7:86:4d:e5:99:11:14:2b:d5:d7:c0:9e:be:e0:f9:82:60:d7: 39:4a:df:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZOemP9nyyJBXOqqDFjz+uQXAjBowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTQ1MTU4WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNjQ1N2ZmZmNlM2NlYzg1ZTA0OWViNDQ4MjU5MjJkOGU4 NWM4ZWM1MmRiYTU5YmM4Njg5MGM3ZTc2Y2JkMTkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDLROStNzpgwMQqeUVx00qWTHmqvvhz0lG8eLNG5hhYQSRj n31ODK6p5MFHBXMFx/nA8xW30RWPOsHsj+f1z9kxJ1/bv+tkMyBCTGhI9QOxt0Pc lmIi9zxb/gbbtCqltmY+jzgn8N5xjmh3/D4w5xvSt1JhYLYrfHoEh204cuDYvLgC wwNjTtkyq8DJ5/mw0iMr7b7IuSytx9iUw1RNJHvanJjSuOOARwJ4ZjBNGF+2q43X UEzEbO+AqFfUu8XKFUEHnUAul0ibr+Hn/IQ3dSEc2AmR8K9t22BMOWi/+JP3O+Rg 4zGOao90Dreyy4Z1DOnA+r2TKb7NXCqpF8EIeFSLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUgvKUwr/vYR9u+YXoc7vKjm8M/GwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M2MmQ2YWRhLTViNzYtNGNmNC1hNzBkLWFmZDRmM2U5ZjQ0OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP+KAwDQYJKoZIhvcNAQELBQADggEBABsZ5X8hPLTK5Yy++JevqEHPLyeU fU+GIhgXP99jS8ELcts00QrSCQ/ltNTZmHvOpexl+XKYxILHlfo6oFqc9yn6/Ehq GXAULW0JTfKey9KkkzLf2EAGHU5DDvrC2TlknIJfvGOYqI7Fnp+EB8OXZXr3RraE mEdZA1YF7KVgs8yf0gOc0a1m50cWdZJN7E+VQAGLBs5Ql0J4hXoEZlda7Z0VV1KD VYNjTTIixMXJ2hhB9oCxsjv11DYzIdp3OZBMrKYQcyRrj+VZld34TfYE4AP1Kjfg xi29hDvpQ7Q3q/RK3r1kWAtmCikrLLeGTeWZERQr1dfAnr7g+YJg1zlK31M= -----END CERTIFICATE-----Generated at Sun Jun 29 05:02:45 2025 by rpki-client