$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3f23d3-f769-4c01-87bb-32e4f659936d.roa File: 2c3f23d3-f769-4c01-87bb-32e4f659936d.roa (raw, json) Hash identifier: YxBhpQFgxnEVJjE0+DarpkkM6HvCtZjae5Z6QduG6ng= Subject key identifier: 53:76:07:53:27:A1:A7:05:7A:C1:F9:84:F3:FA:6F:D2:D4:DF:25:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0F3C207FE53AB9F861CEEBB24F70F0B9BDD75CA4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3f23d3-f769-4c01-87bb-32e4f659936d.roa Signing time: Mon 18 Aug 2025 16:11:07 +0000 ROA not before: Mon 18 Aug 2025 16:11:07 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3c:20:7f:e5:3a:b9:f8:61:ce:eb:b2:4f:70:f0:b9:bd:d7:5c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 16:11:07 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=b4f712d8fac648e62a81c9b85aa17404cfbdf2320838bf19a92bdf83bac2dee3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:79:b3:81:97:a1:84:e8:96:21:62:ec:6e:eb: 2a:c4:04:e6:87:f9:5f:c0:41:36:0b:41:b4:ec:21: 6a:e5:a4:fa:5f:48:28:60:0d:07:ca:25:65:68:4c: 7a:de:fa:14:25:b3:6a:6f:f9:1a:4b:14:45:64:26: fa:30:23:09:dd:7b:2b:ab:a3:64:a2:25:e9:f8:7e: 44:70:e9:99:27:8a:c9:c8:c3:a4:b3:cc:c7:81:1a: 0f:d6:68:82:ac:7e:aa:da:6a:f7:dd:0d:a0:60:f4: b6:c0:91:2d:f4:d4:5e:57:64:68:6f:45:8a:e2:ff: 80:54:a3:14:cf:7d:8a:e2:3f:44:86:09:23:3c:e2: 1e:27:88:23:27:98:1f:06:ce:ee:b1:81:5b:f5:3e: fa:f0:4e:ba:00:5b:99:61:71:e9:bf:8e:c5:5e:46: b2:72:c5:e8:1e:3b:8d:ef:12:c5:32:61:ad:cf:4d: 1a:62:88:c1:c6:05:4e:2d:d3:29:01:3a:de:06:45: d2:48:6b:15:32:cc:36:23:6c:26:c5:f6:c0:84:70: fd:c6:d5:35:d6:f4:fd:aa:20:61:4b:18:18:45:48: 15:e0:67:99:9f:47:bd:15:6f:42:2b:78:cd:60:7f: c3:38:6c:8c:ed:99:b8:f2:65:52:05:34:f3:82:a2: 1c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:76:07:53:27:A1:A7:05:7A:C1:F9:84:F3:FA:6F:D2:D4:DF:25:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c3f23d3-f769-4c01-87bb-32e4f659936d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.24.0/21 Signature Algorithm: sha256WithRSAEncryption 59:dc:e7:15:42:c9:60:a7:2c:34:93:18:a6:8d:c7:e6:f0:0e: e0:37:0f:04:96:ae:b7:c3:b2:b9:32:b5:ce:d3:5c:1f:59:c2: e1:30:18:da:5d:06:d4:f0:e9:84:0e:02:62:05:3c:4a:76:a1: a3:41:05:85:92:0b:db:08:a5:a9:24:ca:a2:8d:a6:dc:90:e9: 57:3f:8a:c6:f2:0e:b7:6f:da:22:ea:03:08:7b:13:de:58:28: 85:c6:a6:bf:bd:ee:11:4c:fc:0e:46:00:c7:38:fb:3a:aa:98: c8:12:57:30:33:b9:11:e2:98:f3:a1:26:43:a3:e7:c4:a9:23: e5:10:54:5c:af:37:c2:aa:72:8c:d4:54:a0:87:23:e6:92:46: 4f:bf:01:3c:3c:85:e6:4d:46:a2:0e:49:72:b0:a5:64:bd:39: 93:e6:19:4c:43:f3:b6:8d:e9:89:fd:f8:61:06:3c:82:be:5e: 41:31:a6:6d:84:8e:1a:49:46:a9:99:77:4e:5f:37:c7:67:60: 33:8f:2f:f3:99:41:9d:61:c7:f1:a3:5a:ec:90:ba:f6:c3:fc: ad:16:fc:05:cf:35:c4:27:ce:3b:e1:88:46:22:c6:96:1c:2e: d4:0d:5f:9c:98:8a:72:68:cd:7b:ad:c0:41:a5:bc:c5:a9:22: 9b:c8:ac:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDzwgf+U6ufhhzuuyT3Dwub3XXKQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTYxMTA3WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BiNGY3MTJkOGZhYzY0OGU2MmE4MWM5Yjg1YWExNzQwNGNm YmRmMjMyMDgzOGJmMTlhOTJiZGY4M2JhYzJkZWUzMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDFebOBl6GE6JYhYuxu6yrEBOaH+V/AQTYLQbTsIWrlpPpf SChgDQfKJWVoTHre+hQls2pv+RpLFEVkJvowIwndeyuro2SiJen4fkRw6ZknisnI w6SzzMeBGg/WaIKsfqraavfdDaBg9LbAkS301F5XZGhvRYri/4BUoxTPfYriP0SG CSM84h4niCMnmB8Gzu6xgVv1PvrwTroAW5lhcem/jsVeRrJyxegeO43vEsUyYa3P TRpiiMHGBU4t0ykBOt4GRdJIaxUyzDYjbCbF9sCEcP3G1TXW9P2qIGFLGBhFSBXg Z5mfR70Vb0IreM1gf8M4bIztmbjyZVIFNPOCohxvAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUU3YHUyehpwV6wfmE8/pv0tTfJawwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJjM2YyM2QzLWY3NjktNGMwMS04N2JiLTMyZTRmNjU5OTM2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3BgwDQYJKoZIhvcNAQELBQADggEBAFnc5xVCyWCnLDSTGKaNx+bwDuA3 DwSWrrfDsrkytc7TXB9ZwuEwGNpdBtTw6YQOAmIFPEp2oaNBBYWSC9sIpakkyqKN ptyQ6Vc/isbyDrdv2iLqAwh7E95YKIXGpr+97hFM/A5GAMc4+zqqmMgSVzAzuRHi mPOhJkOj58SpI+UQVFyvN8KqcozUVKCHI+aSRk+/ATw8heZNRqIOSXKwpWS9OZPm GUxD87aN6Yn9+GEGPIK+XkExpm2EjhpJRqmZd05fN8dnYDOPL/OZQZ1hx/GjWuyQ uvbD/K0W/AXPNcQnzjvhiEYixpYcLtQNX5yYinJozXutwEGlvMWpIpvIrJk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:50 2025 by rpki-client