$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3812adde-98d7-40ca-b60c-24475a9c3999.roa File: 3812adde-98d7-40ca-b60c-24475a9c3999.roa (raw, json) Hash identifier: 81UePs+rf0gZ070agHBxYcjignURd1MuhgX9/BRNRWg= Subject key identifier: 10:F9:38:21:43:BE:92:3C:00:8B:FC:C8:9E:9F:04:45:EC:5C:ED:62 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5CCF4B204FBC37EDD33F0ABD573AE515BA46AC77 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3812adde-98d7-40ca-b60c-24475a9c3999.roa Signing time: Mon 18 Aug 2025 16:11:39 +0000 ROA not before: Mon 18 Aug 2025 16:11:39 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:cf:4b:20:4f:bc:37:ed:d3:3f:0a:bd:57:3a:e5:15:ba:46:ac:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 16:11:39 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=f8f359e4f539738818cff71c838a7f1ca0e129d2bdca52d7abfecab83b5f9f46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b3:4f:a1:6e:b1:88:f5:40:8e:e6:0e:c4:fe: f5:48:26:38:5d:f4:1c:72:e0:92:57:49:af:7f:2e: 8d:a5:ce:7b:67:b7:d9:7b:48:95:fd:4a:89:06:60: 32:60:01:13:5e:15:60:94:a2:52:9b:64:4b:05:e2: 98:e1:f1:9c:be:ed:f9:65:c2:63:50:c3:cd:8b:1a: 24:6c:7e:cf:24:fb:82:a1:59:31:c3:8d:9d:55:f6: 9b:b0:80:04:b6:1d:ec:ed:5f:94:5d:1e:ed:bc:ba: 92:53:36:d3:fa:af:b2:97:85:a5:8f:02:08:b3:f7: 45:cb:1b:ab:d1:68:0d:c3:70:01:74:37:b3:8c:15: b9:6a:8e:93:5e:e4:e6:d1:80:98:a4:f1:15:07:9a: 88:bc:45:8e:82:e8:37:60:28:54:80:17:92:59:29: ae:3a:97:3c:05:cb:04:b2:21:ff:54:64:37:ad:5f: 02:4b:ab:12:b1:3d:98:87:7a:3b:d3:58:ab:63:f7: ed:60:d7:cd:7b:89:ba:a5:bc:09:f8:41:2a:e6:51: 28:8c:3d:1c:e8:0c:c3:6f:83:e5:5e:fa:ed:7c:59: 35:5c:c8:66:a7:24:0a:9c:41:4b:8b:70:28:e1:11: f9:43:e2:2d:d8:64:0a:b3:bb:da:25:ba:0c:2d:5a: 47:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F9:38:21:43:BE:92:3C:00:8B:FC:C8:9E:9F:04:45:EC:5C:ED:62 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3812adde-98d7-40ca-b60c-24475a9c3999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.160.0/22 Signature Algorithm: sha256WithRSAEncryption 40:d3:10:7d:8a:8a:6e:1c:0d:f9:d9:f3:79:67:43:7d:2a:9a: 8f:7e:22:eb:96:90:ab:c9:c4:5b:a0:0f:1c:7d:ac:ff:b8:4a: 7f:e4:e4:04:6d:ee:fc:62:80:90:ba:e3:fe:cd:29:6e:22:89: 0b:0c:8f:fc:15:b6:c5:e1:03:5a:5b:2a:5a:28:98:51:aa:3b: ab:cd:a6:ba:94:0e:d3:2c:be:18:a4:e1:ef:6a:45:27:83:61: 84:6b:7f:9b:f8:23:20:44:c9:e6:6d:f7:fe:10:21:75:8b:a2: 3a:03:6d:e8:b2:42:60:23:63:c2:fb:eb:18:7b:3a:7b:64:58: 24:e6:71:19:1f:4a:4d:68:2c:bb:17:0c:af:89:47:f1:9a:76: c2:6e:d3:f2:06:5e:7f:84:65:60:db:1b:8c:74:53:03:aa:6e: 8a:8f:43:13:c3:62:e2:0a:2f:ae:40:0e:25:5e:e1:6e:c2:20: ed:a3:19:29:1e:ba:ce:68:12:1d:70:26:97:2f:16:26:5a:d9: 9a:61:0f:8e:e6:ce:94:57:2c:42:d9:99:05:21:ef:80:f1:22: e8:aa:21:e2:16:00:d9:9f:e7:ff:01:1e:b3:85:70:7f:6b:d9: 10:19:e6:54:c7:b9:c8:5a:d6:0e:cf:63:45:51:1e:e3:0a:ca: ea:4b:e1:6a -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXM9LIE+8N+3TPwq9VzrlFbpGrHcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTYxMTM5WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BmOGYzNTllNGY1Mzk3Mzg4MThjZmY3MWM4MzhhN2YxY2Ew ZTEyOWQyYmRjYTUyZDdhYmZlY2FiODNiNWY5ZjQ2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCes0+hbrGI9UCO5g7E/vVIJjhd9Bxy4JJXSa9/Lo2lzntn t9l7SJX9SokGYDJgARNeFWCUolKbZEsF4pjh8Zy+7fllwmNQw82LGiRsfs8k+4Kh WTHDjZ1V9puwgAS2HeztX5RdHu28upJTNtP6r7KXhaWPAgiz90XLG6vRaA3DcAF0 N7OMFblqjpNe5ObRgJik8RUHmoi8RY6C6DdgKFSAF5JZKa46lzwFywSyIf9UZDet XwJLqxKxPZiHejvTWKtj9+1g1817ibqlvAn4QSrmUSiMPRzoDMNvg+Ve+u18WTVc yGanJAqcQUuLcCjhEflD4i3YZAqzu9olugwtWkcNAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEPk4IUO+kjwAi/zInp8ERexc7WIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzM4MTJhZGRlLTk4ZDctNDBjYS1iNjBjLTI0NDc1YTljMzk5OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIPtaAwDQYJKoZIhvcNAQELBQADggEBAEDTEH2Kim4cDfnZ83lnQ30qmo9+ IuuWkKvJxFugDxx9rP+4Sn/k5ARt7vxigJC64/7NKW4iiQsMj/wVtsXhA1pbKloo mFGqO6vNprqUDtMsvhik4e9qRSeDYYRrf5v4IyBEyeZt9/4QIXWLojoDbeiyQmAj Y8L76xh7OntkWCTmcRkfSk1oLLsXDK+JR/GadsJu0/IGXn+EZWDbG4x0UwOqboqP QxPDYuIKL65ADiVe4W7CIO2jGSkeus5oEh1wJpcvFiZa2ZphD47mzpRXLELZmQUh 74DxIuiqIeIWANmf5/8BHrOFcH9r2RAZ5lTHucha1g7PY0VRHuMKyupL4Wo= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:02 2025 by rpki-client