$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/157641a6-8754-41d5-bf64-1f6bab286b0f.roa File: 157641a6-8754-41d5-bf64-1f6bab286b0f.roa (raw, json) Hash identifier: mjb+Xo033ResSw87MoqIJmTAuoqrLjKpO+vHsd2txm0= Subject key identifier: 18:4D:1F:6E:1B:78:76:54:95:04:1D:61:A0:03:65:DF:46:27:E0:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 43FA8CEFC0D36EDD63E3A465E1E1B5B337EFB943 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/157641a6-8754-41d5-bf64-1f6bab286b0f.roa Signing time: Tue 05 Aug 2025 15:21:57 +0000 ROA not before: Tue 05 Aug 2025 15:21:57 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.210.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fa:8c:ef:c0:d3:6e:dd:63:e3:a4:65:e1:e1:b5:b3:37:ef:b9:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:21:57 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=02bdf3bcf361f55c583a69a807eb1387745008a60e6b6b62b7cd5728cfab8732, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:f7:4d:76:ea:c8:7c:5d:b0:d4:e3:9d:43: 77:7f:45:8e:8d:5a:9b:4d:54:cf:53:4e:07:56:ba: 6b:3d:60:3e:94:3d:ae:4e:c0:0c:73:91:a6:1a:d8: 12:e7:78:04:9d:d5:23:1a:2a:7e:86:f9:9a:34:b2: ed:4a:c4:bf:3d:0e:c4:90:f4:8c:c6:5c:ee:c7:83: f8:bc:f2:40:56:47:fa:c7:de:fc:9f:68:8d:17:0e: 82:4a:c1:eb:c3:3d:04:8f:8e:46:b5:75:6b:2f:80: 55:73:dd:ae:a8:46:06:aa:74:13:82:db:cb:1f:da: f3:80:f8:1b:8a:d5:61:50:77:ad:ee:64:95:a3:14: 30:40:7b:78:55:cd:96:bb:97:d7:3b:7f:7d:11:ab: de:4a:34:4c:6e:ea:90:3a:ed:2b:20:13:06:62:39: 54:4f:50:c8:c7:44:e5:10:66:4c:b5:26:88:a0:57: b8:08:c5:60:82:d3:99:38:d7:bd:96:05:56:88:30: 88:0c:83:61:53:d6:a9:5f:60:c7:40:2a:88:33:9a: 0e:6d:77:2a:b2:10:69:0f:93:41:b7:7b:8f:87:7f: 07:96:48:ca:cc:d8:04:92:2b:1d:a5:0c:9a:d9:dd: 59:c6:4c:9e:44:7a:fa:2a:4b:62:6d:31:ce:a9:8e: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4D:1F:6E:1B:78:76:54:95:04:1D:61:A0:03:65:DF:46:27:E0:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/157641a6-8754-41d5-bf64-1f6bab286b0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.210.0.0/16 Signature Algorithm: sha256WithRSAEncryption 4f:ea:07:ae:e9:52:b2:34:0f:94:d7:f2:22:67:6b:ef:91:46: df:af:5b:13:89:00:e9:26:c4:d5:34:fc:e6:9a:81:8b:ae:2b: 35:96:9a:de:ba:6f:d7:4a:da:76:3f:d0:59:fd:b3:20:3a:2d: 99:0e:ed:8a:bb:d8:72:6b:38:5e:6a:8e:88:25:ab:ab:e0:b3: d8:73:76:0f:ed:1f:d6:0d:ad:03:b7:64:ab:89:9f:3c:59:bd: 44:3c:fa:e0:a0:4f:05:8e:3d:e8:38:66:ca:fa:07:67:74:d1: 60:44:ef:cf:df:71:ef:fc:c5:2c:22:04:3f:8e:d1:59:4f:89: 37:be:80:d6:08:4c:a9:be:87:52:8c:12:7d:c2:e5:af:14:ac: 56:59:80:81:99:38:22:87:82:4c:0a:33:2b:61:1c:65:11:d9: 68:a3:74:ce:e2:82:6c:31:fa:6b:38:28:89:1e:c8:58:e8:93: f0:37:c9:66:ee:2b:d0:46:ed:35:ea:0f:98:05:e0:52:c0:b7: e2:f3:96:f0:e4:e5:29:52:ef:bf:10:bc:19:ad:13:e1:13:3b: bd:83:77:24:55:34:a2:27:d6:ec:88:37:91:f7:25:23:e4:99: 72:64:69:a4:2c:51:ce:85:bb:2a:a1:b4:97:9e:03:2a:ee:f8: 16:a7:c7:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUQ/qM78DTbt1j46Rl4eG1szfvuUMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTUyMTU3WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AwMmJkZjNiY2YzNjFmNTVjNTgzYTY5YTgwN2ViMTM4Nzc0 NTAwOGE2MGU2YjZiNjJiN2NkNTcyOGNmYWI4NzMyMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCic/dNdurIfF2w1OOdQ3d/RY6NWptNVM9TTgdWums9YD6U Pa5OwAxzkaYa2BLneASd1SMaKn6G+Zo0su1KxL89DsSQ9IzGXO7Hg/i88kBWR/rH 3vyfaI0XDoJKwevDPQSPjka1dWsvgFVz3a6oRgaqdBOC28sf2vOA+BuK1WFQd63u ZJWjFDBAe3hVzZa7l9c7f30Rq95KNExu6pA67SsgEwZiOVRPUMjHROUQZky1Joig V7gIxWCC05k4172WBVaIMIgMg2FT1qlfYMdAKogzmg5tdyqyEGkPk0G3e4+HfweW SMrM2ASSKx2lDJrZ3VnGTJ5EevoqS2JtMc6pjp7vAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUGE0fbht4dlSVBB1hoANl30Yn4MQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE1NzY0MWE2LTg3NTQtNDFkNS1iZjY0LTFmNmJhYjI4NmIwZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP0jANBgkqhkiG9w0BAQsFAAOCAQEAT+oHrulSsjQPlNfyImdr75FG369b E4kA6SbE1TT85pqBi64rNZaa3rpv10radj/QWf2zIDotmQ7tirvYcms4XmqOiCWr q+Cz2HN2D+0f1g2tA7dkq4mfPFm9RDz64KBPBY496DhmyvoHZ3TRYETvz99x7/zF LCIEP47RWU+JN76A1ghMqb6HUowSfcLlrxSsVlmAgZk4IoeCTAozK2EcZRHZaKN0 zuKCbDH6azgoiR7IWOiT8DfJZu4r0EbtNeoPmAXgUsC34vOW8OTlKVLvvxC8Ga0T 4RM7vYN3JFU0oifW7Ig3kfclI+SZcmRppCxRzoW7KqG0l54DKu74FqfHSw== -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:37 2025 by rpki-client