$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7e7a4ad-e4e6-407b-9302-aaafdf987953.roa File: c7e7a4ad-e4e6-407b-9302-aaafdf987953.roa (raw, json) Hash identifier: 9pvhYbr90g3ZpH3SoXI0GC8ncxYcFZK8+hjU2EbdUkU= Subject key identifier: B2:85:4C:57:BF:7E:46:82:A4:8F:39:77:BC:4F:D4:E4:57:AB:EF:91 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3E2695A6527BBE20DEB1AE229E2FA8AEC5040520 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7e7a4ad-e4e6-407b-9302-aaafdf987953.roa Signing time: Mon 16 Jun 2025 16:40:59 +0000 ROA not before: Mon 16 Jun 2025 16:40:59 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.253.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:26:95:a6:52:7b:be:20:de:b1:ae:22:9e:2f:a8:ae:c5:04:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:40:59 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=d054bc39d3ca966b02079f2967a1f33caf494a6a70ad25ba3de9509859a0c692, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:aa:dd:10:d2:89:00:a0:f4:aa:03:9e:fe: f9:94:d8:87:91:9d:c3:19:82:3c:67:fb:d6:be:19: 08:26:d8:f8:35:36:df:dc:9d:87:36:b4:1c:93:a3: e4:79:45:0b:5a:d4:4c:28:37:67:a1:02:39:3f:ce: 4d:11:2d:26:60:cb:27:9d:c7:28:fa:dd:9e:5a:0f: d6:e7:05:67:bb:2e:a6:b9:a9:c9:44:92:ea:d2:03: 79:26:fb:fa:af:b0:45:3e:86:f5:44:dc:63:ec:cc: e6:bb:45:04:4d:68:d2:41:f6:ec:a6:83:13:62:39: 8d:23:ae:d5:6f:76:4f:5b:2b:b8:e9:b0:6d:23:3c: 34:fd:4f:d9:e7:a5:02:98:db:a7:09:d6:e7:59:d5: eb:51:97:28:da:5f:56:a1:61:f5:80:59:8d:bb:e1: b0:0f:9c:1a:69:d0:33:1e:e9:c3:8f:95:9e:15:c2: 6a:39:4a:b7:52:1f:ef:7c:45:c8:a0:80:eb:79:d6: c6:5b:6f:a3:37:59:54:ac:9a:f3:8c:d8:56:ea:ab: f7:a8:64:78:71:63:42:f9:42:c0:f5:2c:b1:a7:86: 64:f3:0e:09:d1:d8:8d:ee:57:20:cf:96:3e:f0:ff: 96:7a:31:e6:94:b4:5c:51:54:98:94:bf:21:dd:1b: 27:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:85:4C:57:BF:7E:46:82:A4:8F:39:77:BC:4F:D4:E4:57:AB:EF:91 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c7e7a4ad-e4e6-407b-9302-aaafdf987953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.253.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0c:f0:20:bf:16:56:60:5d:6c:d5:9f:16:1f:1a:7a:42:51:1d: b0:a4:c8:6f:fb:0d:99:3b:ce:84:c2:98:b3:b2:dc:df:a8:9a: 41:1c:f6:d6:8e:dd:48:3e:3f:94:f4:ad:9d:1f:77:12:1c:6d: 88:4f:10:96:1f:01:c9:8d:d0:51:58:e5:74:a8:8b:c6:46:34: f0:b8:f5:6d:83:3d:ce:93:6b:59:a7:88:d4:60:cb:0e:36:1b: c5:a0:d1:f3:62:9a:f0:d7:e0:13:1b:34:c8:68:7f:3c:f8:55: 9c:08:82:b1:28:a0:7d:79:4f:de:9d:93:81:71:36:a8:98:e8: e1:71:4c:61:3b:c2:b2:e1:a5:8a:7e:19:59:cb:a4:55:2c:56: c0:a3:c8:5d:b6:fb:93:76:a8:cd:98:2d:ab:bb:ca:ac:2a:ef: 38:3a:b8:5c:47:23:7f:f8:99:5f:0a:0c:f3:cd:1f:bc:c4:18: 44:bd:c8:c7:64:e1:54:b0:21:03:6d:da:a0:44:21:14:ac:6d: 98:4d:1d:35:bf:31:79:dc:62:69:cc:fb:7f:48:69:b0:11:1a: 46:d9:16:98:05:03:e8:f9:45:73:8e:39:09:29:bf:8f:5c:5f: 3f:0c:1d:31:b1:33:74:f3:a8:cc:7c:58:16:0b:fa:35:fa:b1: 12:85:60:dd -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPiaVplJ7viDesa4ini+orsUEBSAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTY0MDU5WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BkMDU0YmMzOWQzY2E5NjZiMDIwNzlmMjk2N2ExZjMzY2Fm NDk0YTZhNzBhZDI1YmEzZGU5NTA5ODU5YTBjNjkyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCtDqrdENKJAKD0qgOe/vmU2IeRncMZgjxn+9a+GQgm2Pg1 Nt/cnYc2tByTo+R5RQta1EwoN2ehAjk/zk0RLSZgyyedxyj63Z5aD9bnBWe7Lqa5 qclEkurSA3km+/qvsEU+hvVE3GPszOa7RQRNaNJB9uymgxNiOY0jrtVvdk9bK7jp sG0jPDT9T9nnpQKY26cJ1udZ1etRlyjaX1ahYfWAWY274bAPnBpp0DMe6cOPlZ4V wmo5SrdSH+98RciggOt51sZbb6M3WVSsmvOM2Fbqq/eoZHhxY0L5QsD1LLGnhmTz DgnR2I3uVyDPlj7w/5Z6MeaUtFxRVJiUvyHdGydLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsoVMV79+RoKkjzl3vE/U5Fer75EwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2M3ZTdhNGFkLWU0ZTYtNDA3Yi05MzAyLWFhYWZkZjk4Nzk1My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcP/YAwDQYJKoZIhvcNAQELBQADggEBAAzwIL8WVmBdbNWfFh8aekJRHbCk yG/7DZk7zoTCmLOy3N+omkEc9taO3Ug+P5T0rZ0fdxIcbYhPEJYfAcmN0FFY5XSo i8ZGNPC49W2DPc6Ta1mniNRgyw42G8Wg0fNimvDX4BMbNMhofzz4VZwIgrEooH15 T96dk4FxNqiY6OFxTGE7wrLhpYp+GVnLpFUsVsCjyF22+5N2qM2YLau7yqwq7zg6 uFxHI3/4mV8KDPPNH7zEGES9yMdk4VSwIQNt2qBEIRSsbZhNHTW/MXncYmnM+39I abARGkbZFpgFA+j5RXOOOQkpv49cXz8MHTGxM3TzqMx8WBYL+jX6sRKFYN0= -----END CERTIFICATE-----Generated at Sun Jun 29 03:12:55 2025 by rpki-client