$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca0cf64-ca3a-4328-bd56-afc91d1c2beb.roa File: eca0cf64-ca3a-4328-bd56-afc91d1c2beb.roa (raw, json) Hash identifier: 6FGEQl4g7kQQ1kDfjySZdkRQ+1JUXxEnG2V6LdxGtW8= Subject key identifier: 85:D3:B3:4B:80:87:A3:42:1B:9A:A3:3B:FB:40:42:01:D6:81:D9:6D Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 752DB65F7B1C9B68B95C8707DF97459B0F434B8D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca0cf64-ca3a-4328-bd56-afc91d1c2beb.roa Signing time: Sat 28 Jun 2025 00:50:12 +0000 ROA not before: Sat 28 Jun 2025 00:50:12 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2d:b6:5f:7b:1c:9b:68:b9:5c:87:07:df:97:45:9b:0f:43:4b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 28 00:50:12 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=61ada565df38745d8daccdd6fc5220fbec4c4b30e8db0be811c35b190964b397, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:11:c4:6b:5e:34:71:be:36:75:5e:5f:70: bd:1e:4d:3b:f8:03:fa:50:1a:ef:f0:66:47:24:4f: bc:5c:41:ad:5e:90:e6:8a:ae:af:1d:d6:9e:23:29: f2:ad:ca:50:54:bb:45:87:00:7f:52:da:d1:89:22: 64:b2:d6:cc:cd:79:54:4c:8d:1a:4f:72:77:88:51: be:bd:9d:10:e0:d1:d0:5a:c5:ac:f5:82:9e:71:81: 20:0b:22:45:c0:c8:6e:2c:c7:d5:3b:d8:b3:1f:17: 52:85:8c:fd:4a:b3:26:25:be:40:46:bf:74:9c:31: 70:49:ab:7a:3a:d4:01:78:3d:ad:23:17:ba:7c:24: be:52:ca:aa:9c:32:b6:e1:49:67:e7:f3:b8:21:17: 2a:03:56:8c:b6:7f:ef:c4:55:cb:13:ca:61:cf:c7: 81:1c:2e:ca:ec:0b:28:32:f2:95:5f:10:46:88:9c: 21:00:a7:ab:6c:ee:73:5c:b0:b5:eb:e7:31:8a:8a: b6:c3:2e:50:b0:ae:10:5f:2d:62:1c:bc:04:5e:3b: db:11:ab:55:bc:ad:ce:60:35:3b:0d:4a:45:b8:d3: 0c:61:63:5b:e1:a5:e5:49:0f:ee:cd:8d:ec:9e:24: 4d:21:24:99:10:fa:2b:35:24:7a:1f:51:9c:82:0d: 4e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:B3:4B:80:87:A3:42:1B:9A:A3:3B:FB:40:42:01:D6:81:D9:6D X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca0cf64-ca3a-4328-bd56-afc91d1c2beb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.220.0/23 Signature Algorithm: sha256WithRSAEncryption 92:4d:42:82:4f:6c:ba:2a:7a:32:26:86:51:45:54:14:15:ab: 0a:96:9d:e0:f0:e3:92:f5:e6:ef:16:a1:1a:62:24:52:ad:f5: 5d:1c:ce:ed:2b:44:4b:bb:ba:c7:8a:0f:45:10:29:6d:17:78: 99:1c:89:91:5f:6a:38:0f:13:14:aa:39:4d:2e:61:23:0d:f5: 15:f9:c4:e7:81:f7:8d:db:e2:09:11:e8:8a:f4:a4:22:2d:40: 2a:1c:69:a4:f9:99:f8:38:fc:c0:54:c8:fa:78:77:f9:db:1a: ba:96:6c:43:47:0b:12:e9:40:36:6d:61:16:cb:ba:5c:3c:9d: fb:00:22:26:26:59:7d:3a:4e:ea:25:29:f6:a3:5f:15:14:a2: c5:1b:3a:b1:91:98:ab:d5:38:1c:e0:a9:96:ce:a1:38:ed:60: fe:5a:57:a4:38:e8:d4:78:0d:cf:5c:b7:28:77:6c:e0:f5:be: c5:f1:ac:22:4a:cb:88:91:64:d3:77:b2:ac:da:d0:b1:13:21: 6c:f1:b6:57:e0:01:28:4e:6f:b8:ee:6b:5d:d9:4b:b6:7f:2e: 35:44:0f:92:74:2c:f1:fb:0c:38:51:1d:58:48:30:4d:7b:c7: 1b:97:1f:72:54:95:0e:39:ae:00:88:9a:5b:3f:16:ad:3a:8b: 84:ae:7b:e7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUdS22X3scm2i5XIcH35dFmw9DS40wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI4MDA1MDEyWhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2MWFkYTU2NWRmMzg3NDVkOGRhY2NkZDZmYzUyMjBmYmVj NGM0YjMwZThkYjBiZTgxMWMzNWIxOTA5NjRiMzk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCfrhHEa140cb42dV5fcL0eTTv4A/pQGu/wZkckT7xcQa1e kOaKrq8d1p4jKfKtylBUu0WHAH9S2tGJImSy1szNeVRMjRpPcneIUb69nRDg0dBa xaz1gp5xgSALIkXAyG4sx9U72LMfF1KFjP1KsyYlvkBGv3ScMXBJq3o61AF4Pa0j F7p8JL5SyqqcMrbhSWfn87ghFyoDVoy2f+/EVcsTymHPx4EcLsrsCygy8pVfEEaI nCEAp6ts7nNcsLXr5zGKirbDLlCwrhBfLWIcvAReO9sRq1W8rc5gNTsNSkW40wxh Y1vhpeVJD+7NjeyeJE0hJJkQ+is1JHofUZyCDU7pAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUhdOzS4CHo0IbmqM7+0BCAdaB2W0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2VjYTBjZjY0LWNhM2EtNDMyOC1iZDU2LWFmYzkxZDFjMmJlYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3NwwDQYJKoZIhvcNAQELBQADggEBAJJNQoJPbLoqejImhlFFVBQVqwqW neDw45L15u8WoRpiJFKt9V0czu0rREu7useKD0UQKW0XeJkciZFfajgPExSqOU0u YSMN9RX5xOeB943b4gkR6Ir0pCItQCocaaT5mfg4/MBUyPp4d/nbGrqWbENHCxLp QDZtYRbLulw8nfsAIiYmWX06TuolKfajXxUUosUbOrGRmKvVOBzgqZbOoTjtYP5a V6Q46NR4Dc9ctyh3bOD1vsXxrCJKy4iRZNN3sqza0LETIWzxtlfgAShOb7jua13Z S7Z/LjVED5J0LPH7DDhRHVhIME17xxuXH3JUlQ45rgCImls/Fq06i4Sue+c= -----END CERTIFICATE-----Generated at Sun Jun 29 03:04:09 2025 by rpki-client