$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25b05f93-809c-4019-867c-2ca414c30ff7.roa File: 25b05f93-809c-4019-867c-2ca414c30ff7.roa (raw, json) Hash identifier: S7B2SeySDPHk1oS4PyTdwysbO5UNoOlJlstIlfBPFNE= Subject key identifier: 35:94:D4:F1:35:73:87:B3:C0:FA:3F:EC:94:C9:60:20:4E:8C:6C:1B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 51E5DB5B73A49F009DB6CAD9083E0074D21FEFC2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25b05f93-809c-4019-867c-2ca414c30ff7.roa Signing time: Wed 20 Aug 2025 00:30:57 +0000 ROA not before: Wed 20 Aug 2025 00:30:57 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:e5:db:5b:73:a4:9f:00:9d:b6:ca:d9:08:3e:00:74:d2:1f:ef:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:30:57 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=25a79ba67befd0cbe3a62e87b5e09d15267d0b35969fcd32f65c2c3a0adc2e08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:52:c2:90:b2:22:e2:89:61:49:3f:7f:3c: b9:88:af:78:32:cd:16:ef:99:33:85:2c:95:2a:a2: a6:66:76:e8:77:51:27:f0:9a:ab:fe:1e:99:99:eb: 1c:77:d5:8d:00:18:16:07:a7:2b:62:b0:fd:2d:74: ac:94:53:da:fc:04:1b:43:29:81:53:38:74:9b:4e: 40:8b:05:c2:24:61:e6:10:86:fd:4e:7e:57:ba:95: e7:91:68:fc:d9:e9:8e:27:a3:7f:23:dd:61:40:fa: 20:12:ce:f5:9e:53:bf:d6:2f:3b:99:da:7e:cd:8d: 28:c1:5d:38:12:74:5a:40:d4:99:82:3a:3f:91:30: 49:30:dc:20:81:f9:8b:79:46:63:91:35:2c:47:b5: c9:3b:1b:3f:95:fe:29:70:95:17:01:e8:8c:ac:8f: bf:85:d1:c2:6d:ef:d8:fe:76:8b:59:1c:9e:f0:9c: 47:14:fb:97:ca:5e:db:73:3a:bd:b3:84:0c:83:84: 4d:a4:0a:86:cf:bb:11:e3:43:d1:9e:e7:b6:9a:7f: f3:5f:fc:49:12:37:41:57:a2:21:62:78:a7:fa:94: 2e:bf:c9:9f:35:56:75:bb:53:e0:36:a9:0f:b9:68: 80:e1:4f:af:29:e0:e9:cc:17:95:7c:09:47:c8:ef: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:94:D4:F1:35:73:87:B3:C0:FA:3F:EC:94:C9:60:20:4E:8C:6C:1B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25b05f93-809c-4019-867c-2ca414c30ff7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.137.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:7e:ec:23:d1:0b:9e:ec:3b:6d:0b:b1:b6:0a:0b:ed:b2:fb: c2:00:2a:0b:42:64:21:d7:bf:10:af:cd:38:b0:36:80:2c:e7: 9c:86:e6:47:49:26:09:4d:9c:4f:45:d0:40:cc:57:12:90:62: ca:3f:52:e4:d6:e1:31:12:63:a1:9a:70:e1:44:2c:e1:31:b7: 8e:91:28:5f:e9:35:2e:5f:4e:e8:87:3c:c7:cf:ad:63:3c:08: 92:b1:29:20:c5:d2:d2:ef:b7:0f:7a:c3:8e:71:d1:46:9b:b3: 05:56:c6:56:1d:9d:53:84:84:d4:bb:54:64:5e:ca:e1:d1:19: 14:d0:5a:fe:01:f4:c7:9b:07:92:ff:65:b6:d1:13:2b:aa:3b: d7:81:c6:84:ac:e0:37:b0:88:09:be:73:ef:27:86:bc:3b:e9: 49:3b:31:89:7a:56:7b:f1:a7:3e:2e:e4:83:0b:95:39:1d:18: a2:05:c6:fb:06:bd:b9:b4:0f:29:55:cf:0a:d4:f5:b1:2c:14: 53:a9:b3:67:b5:10:02:a1:79:1b:7c:d1:64:de:e4:10:4a:f6: 33:e9:21:1c:56:7a:c9:d6:be:bd:d3:22:82:a2:64:d8:81:a7: 76:9c:b0:bd:91:74:49:8f:7a:66:28:36:d5:e8:0a:e5:2e:15: 53:33:c4:42 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUUeXbW3OknwCdtsrZCD4AdNIf78IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIwMDAzMDU3WhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0AyNWE3OWJhNjdiZWZkMGNiZTNhNjJlODdiNWUwOWQxNTI2 N2QwYjM1OTY5ZmNkMzJmNjVjMmMzYTBhZGMyZTA4MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCYGVLCkLIi4olhST9/PLmIr3gyzRbvmTOFLJUqoqZmduh3 USfwmqv+HpmZ6xx31Y0AGBYHpytisP0tdKyUU9r8BBtDKYFTOHSbTkCLBcIkYeYQ hv1Ofle6leeRaPzZ6Y4no38j3WFA+iASzvWeU7/WLzuZ2n7NjSjBXTgSdFpA1JmC Oj+RMEkw3CCB+Yt5RmORNSxHtck7Gz+V/ilwlRcB6Iysj7+F0cJt79j+dotZHJ7w nEcU+5fKXttzOr2zhAyDhE2kCobPuxHjQ9Ge57aaf/Nf/EkSN0FXoiFieKf6lC6/ yZ81VnW7U+A2qQ+5aIDhT68p4OnMF5V8CUfI78OjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUNZTU8TVzh7PA+j/slMlgIE6MbBswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1YjA1ZjkzLTgwOWMtNDAxOS04NjdjLTJjYTQxNGMzMGZmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5okwDQYJKoZIhvcNAQELBQADggEBAAx+7CPRC57sO20LsbYKC+2y+8IA KgtCZCHXvxCvzTiwNoAs55yG5kdJJglNnE9F0EDMVxKQYso/UuTW4TESY6GacOFE LOExt46RKF/pNS5fTuiHPMfPrWM8CJKxKSDF0tLvtw96w45x0UabswVWxlYdnVOE hNS7VGReyuHRGRTQWv4B9MebB5L/ZbbREyuqO9eBxoSs4DewiAm+c+8nhrw76Uk7 MYl6Vnvxpz4u5IMLlTkdGKIFxvsGvbm0DylVzwrU9bEsFFOps2e1EAKheRt80WTe 5BBK9jPpIRxWesnWvr3TIoKiZNiBp3acsL2RdEmPemYoNtXoCuUuFVMzxEI= -----END CERTIFICATE-----Generated at Wed Aug 20 10:38:15 2025 by rpki-client