$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d28f05a3-dcbb-4637-9ae9-72ab43653d82.roa File: d28f05a3-dcbb-4637-9ae9-72ab43653d82.roa (raw, json) Hash identifier: Dgp3EyFIc4+gYRnRqc2b6h0M5q8kPp4VwpOztRdeC4E= Subject key identifier: 12:13:DF:FD:9F:FE:51:9B:31:3D:C8:B7:28:5E:9A:94:89:C9:63:78 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 522BFA11DCAF7E054B2F04F33CCB9BBAB5191D07 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d28f05a3-dcbb-4637-9ae9-72ab43653d82.roa Signing time: Mon 16 Jun 2025 16:21:40 +0000 ROA not before: Mon 16 Jun 2025 16:21:40 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.174.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:2b:fa:11:dc:af:7e:05:4b:2f:04:f3:3c:cb:9b:ba:b5:19:1d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:21:40 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=52cb18e388c90f69e04165ca55e329d623788173b991696abf331ead0fb95534, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d9:91:ba:ed:7f:d8:95:9e:90:8b:ae:5b:c5: fd:7d:bd:8c:3f:f8:35:e7:02:38:13:53:3b:a3:be: d8:7e:44:98:d1:f1:46:84:bf:fa:39:58:77:40:7e: cc:50:65:a6:34:6b:f5:a8:56:54:9d:26:fc:01:38: 9f:99:89:77:58:32:b0:d6:bd:3b:a7:ac:5b:74:75: bb:cb:e5:ea:51:a0:55:2b:80:6f:a8:85:b3:1d:3c: 44:04:6d:5c:d5:51:fc:08:cc:b0:00:d4:ba:24:e5: 5f:3a:f3:46:f0:40:e1:21:54:73:c5:2d:12:0a:e5: 83:0f:12:81:28:49:4b:87:22:02:33:a3:3d:6a:b2: 04:29:31:31:4f:d3:b8:bf:48:be:a3:38:23:3f:ae: 7c:6b:8c:8a:3e:6f:70:cb:cb:74:0e:96:11:16:bc: 9b:cf:1e:8d:81:5a:f8:c1:66:59:0b:c5:1b:1d:42: a7:8e:da:ce:87:67:9e:91:83:2b:f9:b2:04:e8:c2: 9f:a1:96:c7:12:cf:8e:9d:8d:58:3a:e1:b5:ae:3b: 0f:3b:d8:82:09:ae:d1:b5:79:8b:4a:78:61:97:7d: 9c:d5:81:be:60:13:6e:13:0c:95:49:64:09:cd:ab: d6:09:0d:a4:0f:e5:3b:4b:28:76:f2:95:24:22:6f: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:DF:FD:9F:FE:51:9B:31:3D:C8:B7:28:5E:9A:94:89:C9:63:78 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d28f05a3-dcbb-4637-9ae9-72ab43653d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.174.0.0/16 Signature Algorithm: sha256WithRSAEncryption a7:d5:4f:98:dc:bc:ce:e7:00:35:25:6a:19:e3:6f:da:88:11: 70:df:57:fe:6e:ef:f1:a8:a4:09:83:46:a8:1d:4b:1b:c2:75: 3f:84:fd:c2:e4:dc:bc:6b:1e:05:34:f7:a4:60:6e:8f:70:1b: 8e:2a:af:bf:f9:19:20:a0:aa:f0:52:d9:65:4c:33:d7:5f:ae: af:87:15:50:77:f8:1f:3d:c8:ac:f6:ee:e4:72:67:37:11:ba: 64:8d:42:14:f5:21:de:40:9d:b1:3b:79:ab:b4:65:20:da:98: c4:58:a3:0c:50:99:ee:c6:00:dc:8c:00:99:da:78:37:98:c3: 1a:28:03:f0:21:bd:63:99:7f:f6:48:fc:e5:c8:39:25:f4:23: d8:36:b8:63:0d:b5:0e:3f:de:80:b6:f5:33:e5:c0:e1:01:d9: 55:21:b8:2e:79:9b:87:7e:a5:83:74:84:60:13:bc:9b:79:9e: b2:b2:94:de:15:85:52:69:30:a7:36:a7:29:6f:2f:8e:07:74: 3d:7d:67:d0:e9:57:28:c2:32:09:0f:a7:94:0b:4c:a7:33:2f: 57:e0:20:ef:2c:fd:74:dc:dc:c1:f7:07:10:b7:68:e5:15:b6: 2b:fa:50:d9:e5:5a:46:5e:e6:01:b6:a8:82:0d:cd:22:24:87: a1:c9:66:26 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUUiv6EdyvfgVLLwTzPMuburUZHQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYyMTQwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0A1MmNiMThlMzg4YzkwZjY5ZTA0MTY1Y2E1NWUzMjlkNjIz Nzg4MTczYjk5MTY5NmFiZjMzMWVhZDBmYjk1NTM0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDh2ZG67X/YlZ6Qi65bxf19vYw/+DXnAjgTUzujvth+RJjR 8UaEv/o5WHdAfsxQZaY0a/WoVlSdJvwBOJ+ZiXdYMrDWvTunrFt0dbvL5epRoFUr gG+ohbMdPEQEbVzVUfwIzLAA1Lok5V8680bwQOEhVHPFLRIK5YMPEoEoSUuHIgIz oz1qsgQpMTFP07i/SL6jOCM/rnxrjIo+b3DLy3QOlhEWvJvPHo2BWvjBZlkLxRsd QqeO2s6HZ56Rgyv5sgTowp+hlscSz46djVg64bWuOw872IIJrtG1eYtKeGGXfZzV gb5gE24TDJVJZAnNq9YJDaQP5TtLKHbylSQib1r9AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUEhPf/Z/+UZsxPci3KF6alInJY3gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2QyOGYwNWEzLWRjYmItNDYzNy05YWU5LTcyYWI0MzY1M2Q4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPrjANBgkqhkiG9w0BAQsFAAOCAQEAp9VPmNy8zucANSVqGeNv2ogRcN9X /m7v8aikCYNGqB1LG8J1P4T9wuTcvGseBTT3pGBuj3Abjiqvv/kZIKCq8FLZZUwz 11+ur4cVUHf4Hz3IrPbu5HJnNxG6ZI1CFPUh3kCdsTt5q7RlINqYxFijDFCZ7sYA 3IwAmdp4N5jDGigD8CG9Y5l/9kj85cg5JfQj2Da4Yw21Dj/egLb1M+XA4QHZVSG4 Lnmbh36lg3SEYBO8m3mesrKU3hWFUmkwpzanKW8vjgd0PX1n0OlXKMIyCQ+nlAtM pzMvV+Ag7yz9dNzcwfcHELdo5RW2K/pQ2eVaRl7mAbaogg3NIiSHoclmJg== -----END CERTIFICATE-----Generated at Sun Jun 29 07:41:57 2025 by rpki-client