$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8c8b998-0d14-4dbd-ad01-acfb1876f95e.roa File: e8c8b998-0d14-4dbd-ad01-acfb1876f95e.roa (raw, json) Hash identifier: FNL4Nee6CiZ9JcTQxvRlykSWuRroHhO5yLJDVeBkXvo= Subject key identifier: A5:D5:E1:1E:8A:79:C0:6E:0D:63:89:FC:BB:55:5D:48:FC:C1:70:EF Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3CDD6232263DD01F303F2A73141AEA871DB6DC73 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8c8b998-0d14-4dbd-ad01-acfb1876f95e.roa Signing time: Wed 20 Aug 2025 00:41:39 +0000 ROA not before: Wed 20 Aug 2025 00:41:39 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:dd:62:32:26:3d:d0:1f:30:3f:2a:73:14:1a:ea:87:1d:b6:dc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:41:39 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=90457fb1b3ca2f3a6beffc0b182e20d27bb42aec613e18f96b51e39f8bf9eff6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:29:22:a0:0a:50:64:71:ae:4f:53:1f:57:6b: f4:b2:80:ef:be:a2:2d:d1:2b:57:6e:29:3e:b9:d7: f9:f5:ce:67:5c:cd:7d:3b:3f:7b:ef:a6:01:25:42: 4b:3a:2e:dd:c1:a9:a8:b9:44:70:27:2c:04:80:56: 9f:cf:54:ae:87:bc:85:0d:c8:b6:8a:9e:82:ca:65: e8:3a:2b:ca:8b:e5:8d:63:c3:91:64:0c:c4:f2:f8: 83:68:66:a5:99:88:dc:92:43:e2:6a:33:7d:f2:48: 92:74:3e:00:e3:50:71:44:46:ce:65:41:c6:33:81: 34:b6:f3:40:fd:38:1f:9d:cf:65:f4:07:65:27:5c: bc:83:82:88:01:46:ea:bf:00:d3:df:02:57:d4:d5: 6a:3a:40:4e:55:34:37:93:27:02:e1:08:21:bb:f2: f0:c1:fe:5a:89:f3:b8:b4:cf:67:12:3e:24:d5:ab: 84:99:f7:61:b0:8e:67:0b:d5:4b:03:ff:13:71:fd: 80:20:07:be:10:36:83:b9:b1:70:15:5f:97:78:bb: d7:57:59:a8:a2:4f:d3:20:b9:97:50:00:9e:1c:56: 2b:5a:fe:c8:af:68:9d:53:b6:a7:c4:ce:88:7a:c6: 11:50:13:c5:ba:13:df:89:7f:eb:06:78:40:ef:91: da:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D5:E1:1E:8A:79:C0:6E:0D:63:89:FC:BB:55:5D:48:FC:C1:70:EF X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8c8b998-0d14-4dbd-ad01-acfb1876f95e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.87.0/24 Signature Algorithm: sha256WithRSAEncryption 01:60:ee:a2:a3:57:95:0b:f5:a1:be:cc:2b:37:3f:2e:1e:99: 0b:a5:91:ed:63:9b:54:55:10:83:c2:3f:8d:6c:ef:bb:99:8c: b9:57:69:ad:67:ca:0c:de:e7:11:94:6f:b4:bb:40:dc:ba:e3: 6b:08:28:32:b5:11:f1:84:d2:83:a6:46:da:0a:27:18:7f:3f: a2:9d:8b:df:c8:0d:51:bb:a0:25:a6:ef:df:8b:b5:a9:e1:d4: 1b:9f:c8:13:a0:d2:23:be:f3:63:fb:5b:14:ed:ed:a6:91:84: 65:95:e4:a9:12:91:d9:0d:b0:d2:37:86:9d:59:59:37:d8:98: df:93:97:ef:6e:2e:08:70:1b:66:b3:52:9d:b4:41:ad:6d:bf: 7a:a9:88:30:7a:ae:12:86:37:32:4b:52:9a:8d:f7:8f:d8:79: 0e:5e:75:fd:6d:08:15:68:82:37:e5:81:74:31:0e:89:ea:61: 54:28:bd:88:ff:b7:c3:af:ec:5f:31:99:4b:66:8b:21:d5:2e: 31:ce:2c:f6:82:04:80:a2:b1:f6:71:91:00:46:a7:a5:f1:b0: f1:8e:92:0e:35:29:f1:9e:e5:ed:c8:a7:be:a6:b6:e1:53:c9: 03:0d:55:36:79:0e:b4:1e:9e:4e:f6:d6:d6:6e:b1:ff:66:ff: 82:ec:e6:93 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUPN1iMiY90B8wPypzFBrqhx223HMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIwMDA0MTM5WhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MDQ1N2ZiMWIzY2EyZjNhNmJlZmZjMGIxODJlMjBkMjdi YjQyYWVjNjEzZTE4Zjk2YjUxZTM5ZjhiZjllZmY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQKSKgClBkca5PUx9Xa/SygO++oi3RK1duKT651/n1zmdc zX07P3vvpgElQks6Lt3Bqai5RHAnLASAVp/PVK6HvIUNyLaKnoLKZeg6K8qL5Y1j w5FkDMTy+INoZqWZiNySQ+JqM33ySJJ0PgDjUHFERs5lQcYzgTS280D9OB+dz2X0 B2UnXLyDgogBRuq/ANPfAlfU1Wo6QE5VNDeTJwLhCCG78vDB/lqJ87i0z2cSPiTV q4SZ92GwjmcL1UsD/xNx/YAgB74QNoO5sXAVX5d4u9dXWaiiT9MguZdQAJ4cVita /sivaJ1TtqfEzoh6xhFQE8W6E9+Jf+sGeEDvkdrnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpdXhHop5wG4NY4n8u1VdSPzBcO8wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2U4YzhiOTk4LTBkMTQtNGRiZC1hZDAxLWFjZmIxODc2Zjk1ZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3lcwDQYJKoZIhvcNAQELBQADggEBAAFg7qKjV5UL9aG+zCs3Py4emQul ke1jm1RVEIPCP41s77uZjLlXaa1nygze5xGUb7S7QNy642sIKDK1EfGE0oOmRtoK Jxh/P6Kdi9/IDVG7oCWm79+Ltanh1BufyBOg0iO+82P7WxTt7aaRhGWV5KkSkdkN sNI3hp1ZWTfYmN+Tl+9uLghwG2azUp20Qa1tv3qpiDB6rhKGNzJLUpqN94/YeQ5e df1tCBVogjflgXQxDonqYVQovYj/t8Ov7F8xmUtmiyHVLjHOLPaCBICisfZxkQBG p6XxsPGOkg41KfGe5e3Ip76mtuFTyQMNVTZ5DrQenk721tZusf9m/4Ls5pM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:04:59 2025 by rpki-client