$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0767a082-6fd3-4cd0-a184-eeaa917b4c0d.roa File: 0767a082-6fd3-4cd0-a184-eeaa917b4c0d.roa (raw, json) Hash identifier: rszRjjGMUzuzZ1qPHmxByQQ4rQZHIsaL+y/9nCTQuDI= Subject key identifier: FE:B9:7C:8E:BA:B3:94:AD:54:FF:99:B8:63:60:15:CF:41:34:E7:60 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 7248F91AFC5D0D5B3D7A3B6A8EC7F5170DAB2B42 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0767a082-6fd3-4cd0-a184-eeaa917b4c0d.roa Signing time: Tue 05 Aug 2025 15:20:12 +0000 ROA not before: Tue 05 Aug 2025 15:20:12 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:48:f9:1a:fc:5d:0d:5b:3d:7a:3b:6a:8e:c7:f5:17:0d:ab:2b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:20:12 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=980ac274418db1557f61ba6be15be62ce52b3d1949e83d4c39505d61a57c1ad3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:86:cd:85:4a:69:f9:1e:23:96:6b:15:f9: 7a:c7:4c:27:7b:43:77:a7:c9:93:02:ed:f7:55:11: 6d:9a:09:41:b1:45:0f:92:ca:02:39:48:c7:5c:1b: 77:45:3f:9e:e8:ea:22:71:c9:80:43:37:ab:4a:36: ef:ff:07:a7:a4:20:a4:73:25:62:fb:27:22:a9:96: f6:3f:24:17:50:7e:2e:d5:92:76:0e:38:b2:37:45: 37:b2:f4:db:01:2b:29:1b:c5:2d:cd:29:0e:de:0a: a2:25:8d:70:58:4f:63:1d:96:a4:55:83:1b:04:d3: c6:c5:5e:98:f7:b6:c7:ba:ae:ff:2d:0f:ad:4e:9b: 79:ec:d2:a0:c8:7e:b4:69:f1:b1:e7:8e:d2:3a:c1: ae:34:36:99:a7:3f:7e:8c:14:3f:c8:84:53:44:11: 30:f5:0a:91:ed:e8:9e:48:d4:6f:8c:73:c7:10:17: dd:82:8b:be:92:7d:ea:b8:f6:50:46:ab:9d:65:4c: 66:13:00:c2:77:94:64:5e:f6:98:40:51:c8:e7:de: 9d:53:a7:c5:01:51:ae:8f:fb:f3:38:84:ec:6f:33: 20:f5:4f:33:68:0b:7d:b8:08:e3:30:6b:ee:95:d4: db:f1:da:63:ca:6a:17:cc:fc:86:7c:c2:81:40:d9: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:7C:8E:BA:B3:94:AD:54:FF:99:B8:63:60:15:CF:41:34:E7:60 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0767a082-6fd3-4cd0-a184-eeaa917b4c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.247.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:23:27:29:f8:7e:4f:a2:03:80:0f:df:d8:48:ce:bf:6b:62: 77:19:4d:11:02:25:34:00:19:2b:18:75:1b:6b:f4:37:03:cd: 1d:e0:33:13:67:e5:f8:4a:2e:bd:33:d0:b0:87:8c:bc:c3:2a: d4:8c:ae:fe:46:88:d2:34:cf:a4:af:bf:52:7e:64:db:31:1d: ce:96:f1:a6:53:e8:91:00:02:c8:da:93:c2:59:01:83:b6:31: 37:d6:92:04:77:cf:02:e7:09:f6:bb:6b:14:91:44:1f:28:05: 7d:1b:03:76:a1:55:69:1c:3e:7d:96:de:82:3f:df:5c:fd:c5: da:e2:5b:49:56:e3:8b:16:e0:9f:ab:59:cb:f9:40:f1:49:c2: b6:d7:da:e6:ea:ff:22:2e:5d:ee:8c:5c:d0:3a:5d:a4:78:3b: fa:98:65:94:ba:2f:32:9b:aa:79:48:2d:a3:52:23:7f:99:e9: ce:6c:e6:10:a2:b2:48:e2:20:07:36:be:4a:b7:5f:78:c4:88: 8d:f5:19:58:4c:3d:71:1c:02:0d:aa:08:b7:9d:bb:63:ed:52: e2:c7:7b:6d:4c:80:ff:60:df:1d:c8:85:a3:86:38:7a:e3:75: 03:06:91:9d:d9:33:15:f8:d8:25:80:e7:11:8a:71:06:9c:ba: 8a:36:df:98 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUckj5GvxdDVs9ejtqjsf1Fw2rK0IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTUyMDEyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A5ODBhYzI3NDQxOGRiMTU1N2Y2MWJhNmJlMTViZTYyY2U1 MmIzZDE5NDllODNkNGMzOTUwNWQ2MWE1N2MxYWQzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZO4bNhUpp+R4jlmsV+XrHTCd7Q3enyZMC7fdVEW2aCUGx RQ+SygI5SMdcG3dFP57o6iJxyYBDN6tKNu//B6ekIKRzJWL7JyKplvY/JBdQfi7V knYOOLI3RTey9NsBKykbxS3NKQ7eCqIljXBYT2MdlqRVgxsE08bFXpj3tse6rv8t D61Om3ns0qDIfrRp8bHnjtI6wa40NpmnP36MFD/IhFNEETD1CpHt6J5I1G+Mc8cQ F92Ci76Sfeq49lBGq51lTGYTAMJ3lGRe9phAUcjn3p1Tp8UBUa6P+/M4hOxvMyD1 TzNoC324COMwa+6V1Nvx2mPKahfM/IZ8woFA2U9/AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU/rl8jrqzlK1U/5m4Y2AVz0E052AwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA3NjdhMDgyLTZmZDMtNGNkMC1hMTg0LWVlYWE5MTdiNGMwZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPtfcwDQYJKoZIhvcNAQELBQADggEBAH8jJyn4fk+iA4AP39hIzr9rYncZ TRECJTQAGSsYdRtr9DcDzR3gMxNn5fhKLr0z0LCHjLzDKtSMrv5GiNI0z6Svv1J+ ZNsxHc6W8aZT6JEAAsjak8JZAYO2MTfWkgR3zwLnCfa7axSRRB8oBX0bA3ahVWkc Pn2W3oI/31z9xdriW0lW44sW4J+rWcv5QPFJwrbX2ubq/yIuXe6MXNA6XaR4O/qY ZZS6LzKbqnlILaNSI3+Z6c5s5hCiskjiIAc2vkq3X3jEiI31GVhMPXEcAg2qCLed u2PtUuLHe21MgP9g3x3IhaOGOHrjdQMGkZ3ZMxX42CWA5xGKcQacuoo235g= -----END CERTIFICATE-----Generated at Wed Aug 20 10:37:21 2025 by rpki-client