$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e388e204-58ea-48b1-84fd-54964688d4b4.roa File: e388e204-58ea-48b1-84fd-54964688d4b4.roa (raw, json) Hash identifier: Gd5ONI1cf1sCX/aCbbrnXZV2Mfb0rXW+IoPXxmVtFdc= Subject key identifier: 02:23:50:26:2C:FB:A2:8F:08:86:65:B4:EA:65:1E:B0:0A:1B:65:0D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0114287E78F05F995EF905604DFDD6BCB9A06EF8 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e388e204-58ea-48b1-84fd-54964688d4b4.roa Signing time: Sat 28 Jun 2025 00:50:25 +0000 ROA not before: Sat 28 Jun 2025 00:50:25 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:14:28:7e:78:f0:5f:99:5e:f9:05:60:4d:fd:d6:bc:b9:a0:6e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 28 00:50:25 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=2b3dc8e5ec3b86d63d6eca6b91bc9bfe8dcde214e5611a64911f47316f8ea718, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:60:eb:95:62:8c:d9:72:df:9e:e9:9f:a6:e0: 3e:e9:13:15:35:d1:2e:ac:0c:b6:2e:05:8b:55:83: f6:1f:28:0a:70:7d:94:aa:7b:44:0b:f8:35:d3:91: 87:93:fb:dc:7a:bf:87:08:0a:1c:27:b3:86:3a:79: 5f:63:3e:11:94:bf:31:89:82:98:17:ac:e4:63:38: 05:e8:a7:e4:2d:cd:a5:3b:0c:05:37:75:23:30:ed: 75:71:b9:fe:c2:74:5d:c1:34:b9:b2:db:46:29:58: 51:bd:4b:c1:b5:3e:5a:0b:47:66:51:c4:2b:78:70: e2:0b:99:95:37:1c:87:fe:74:b4:31:b3:e0:be:1d: f0:58:6f:8e:f7:45:12:6a:8f:a3:58:06:35:3b:10: e4:03:51:a4:32:d3:f7:64:38:b3:42:88:85:28:55: ce:f0:a6:03:f8:e5:c3:ee:33:aa:92:bb:35:94:b1: e4:cf:08:b2:3b:4d:78:47:76:ee:d5:1e:61:c1:41: 6f:ec:f2:ac:6c:50:af:f1:4a:13:57:07:40:8f:1b: 55:06:dc:2e:63:64:ed:01:f5:86:f1:14:bd:2e:ef: 3c:c4:a5:99:0a:e0:07:1a:f2:d2:d3:21:78:88:49: 5b:9a:b0:2e:ad:f7:56:86:b9:1c:38:9f:c6:f3:9d: cb:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:23:50:26:2C:FB:A2:8F:08:86:65:B4:EA:65:1E:B0:0A:1B:65:0D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e388e204-58ea-48b1-84fd-54964688d4b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.228.0/22 Signature Algorithm: sha256WithRSAEncryption 51:38:17:46:cd:3d:2c:79:53:e3:2c:de:59:29:4d:31:07:2a: 7f:67:37:9a:8a:79:cc:53:ee:92:c9:09:82:c2:d2:e1:d0:84: 58:54:e3:e7:cb:48:ce:64:0c:2b:14:8d:40:8c:3b:a0:68:c7: 22:4c:3a:fe:05:52:e1:c9:9a:3d:c9:ba:b0:72:7b:6d:e1:1a: ec:84:1f:78:a8:98:e8:41:c0:f4:89:23:cd:bd:9c:f6:92:64: 52:be:c6:1f:dc:d5:23:43:e4:14:8a:7d:11:d0:a9:dd:d3:52: 3f:86:17:b7:45:ff:8a:55:d8:94:53:93:32:d7:73:39:56:c8: 78:59:8e:b3:95:34:1a:4f:b3:16:ec:6e:4e:16:4e:f9:9f:ad: 0a:7f:1b:24:43:6c:d2:ea:dc:83:43:3c:d9:18:96:84:7b:56: 2b:89:0b:37:c6:a7:c7:21:cc:8c:ca:93:7a:88:7b:8b:d2:98: 9d:96:45:a4:3b:d6:93:10:0f:08:0d:8e:a0:31:e0:e4:dc:b9: f2:12:c5:fb:08:50:e5:d3:04:cf:e2:17:bb:eb:35:00:99:e9: 63:07:4f:10:e5:dd:13:6d:fd:7d:e4:d4:70:e0:73:f8:58:e6: 28:57:2c:42:7c:af:eb:23:69:d7:f8:e1:c3:33:05:13:ec:6d: 0b:60:a1:bf -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUARQofnjwX5le+QVgTf3WvLmgbvgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI4MDA1MDI1WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyYjNkYzhlNWVjM2I4NmQ2M2Q2ZWNhNmI5MWJjOWJmZThk Y2RlMjE0ZTU2MTFhNjQ5MTFmNDczMTZmOGVhNzE4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgYOuVYozZct+e6Z+m4D7pExU10S6sDLYuBYtVg/YfKApw fZSqe0QL+DXTkYeT+9x6v4cIChwns4Y6eV9jPhGUvzGJgpgXrORjOAXop+QtzaU7 DAU3dSMw7XVxuf7CdF3BNLmy20YpWFG9S8G1PloLR2ZRxCt4cOILmZU3HIf+dLQx s+C+HfBYb473RRJqj6NYBjU7EOQDUaQy0/dkOLNCiIUoVc7wpgP45cPuM6qSuzWU seTPCLI7TXhHdu7VHmHBQW/s8qxsUK/xShNXB0CPG1UG3C5jZO0B9YbxFL0u7zzE pZkK4Aca8tLTIXiISVuasC6t91aGuRw4n8bzncvxAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUAiNQJiz7oo8IhmW06mUesAobZQ0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UzODhlMjA0LTU4ZWEtNDhiMS04NGZkLTU0OTY0Njg4ZDRiNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIP3OQwDQYJKoZIhvcNAQELBQADggEBAFE4F0bNPSx5U+Ms3lkpTTEHKn9n N5qKecxT7pLJCYLC0uHQhFhU4+fLSM5kDCsUjUCMO6BoxyJMOv4FUuHJmj3JurBy e23hGuyEH3iomOhBwPSJI829nPaSZFK+xh/c1SND5BSKfRHQqd3TUj+GF7dF/4pV 2JRTkzLXczlWyHhZjrOVNBpPsxbsbk4WTvmfrQp/GyRDbNLq3INDPNkYloR7ViuJ CzfGp8chzIzKk3qIe4vSmJ2WRaQ71pMQDwgNjqAx4OTcufISxfsIUOXTBM/iF7vr NQCZ6WMHTxDl3RNt/X3k1HDgc/hY5ihXLEJ8r+sjadf44cMzBRPsbQtgob8= -----END CERTIFICATE-----Generated at Sun Jun 29 03:07:03 2025 by rpki-client