$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f616a60-68cc-4425-8f92-af3483d9d9d4.roa File: 3f616a60-68cc-4425-8f92-af3483d9d9d4.roa (raw, json) Hash identifier: Y4LDOKdhXWPQzsFcFtvw0cLzvc5E54wQ3uiFGfi461A= Subject key identifier: E0:3B:0B:47:C0:40:D6:FC:3B:D2:74:F2:5F:A4:F7:29:13:81:4C:A4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5369A997D7A15ABDD78F2D4FA0F7A74A370DB91F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f616a60-68cc-4425-8f92-af3483d9d9d4.roa Signing time: Mon 18 Aug 2025 16:11:35 +0000 ROA not before: Mon 18 Aug 2025 16:11:35 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:69:a9:97:d7:a1:5a:bd:d7:8f:2d:4f:a0:f7:a7:4a:37:0d:b9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 16:11:35 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=ad2dfa00bfa4f4e258c7455e4a1c9e3a6b9e3d375d066b926c298beaed1dfd86, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:86:2f:3f:97:5d:14:60:a9:d7:a1:2d:89: a8:b8:34:3a:5f:92:90:39:15:e3:5f:09:a1:d1:f6: 39:19:1b:1c:5e:f2:e7:7b:18:fa:24:95:5e:32:2c: a3:af:bf:4b:b2:05:10:23:b9:2b:95:87:64:90:57: 6f:ad:8e:1f:09:f8:c9:59:e6:3c:79:ce:69:8a:bc: d9:6b:9f:82:c1:44:79:80:92:fe:3e:26:70:ac:52: ac:5d:35:1e:1f:f1:7c:f8:b4:f3:c5:0a:5f:67:52: e7:8b:d3:b4:70:0b:cb:99:3c:fc:fb:97:ca:8e:24: 6c:4a:cd:2e:c2:cb:3b:11:4d:1d:10:61:73:e8:df: 96:ec:23:75:c0:62:4b:aa:74:e8:b4:e3:8a:ac:38: c6:72:a3:94:43:4d:ad:f9:bf:dc:f0:34:64:0d:e9: 41:b3:1a:f0:9e:e0:c1:c5:96:b0:e4:25:3a:28:15: 3b:7c:64:8f:2e:30:0f:39:34:e9:30:81:c1:e2:ba: 06:86:59:9d:c8:b5:e2:8d:57:ce:45:45:59:d0:f2: 87:b7:be:1d:53:24:d7:76:4a:a1:27:0b:fb:97:d1: 61:2e:a1:a8:65:25:42:91:f4:d2:81:d7:6b:b6:67: ff:93:c6:0a:5c:c3:c9:b2:43:ef:78:ec:b2:f5:b3: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:3B:0B:47:C0:40:D6:FC:3B:D2:74:F2:5F:A4:F7:29:13:81:4C:A4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3f616a60-68cc-4425-8f92-af3483d9d9d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.96.0/20 Signature Algorithm: sha256WithRSAEncryption 9e:19:f7:cd:7a:69:e6:0d:b5:4c:44:81:53:b8:97:e5:61:06: 44:30:4b:3f:e6:52:b7:6c:71:95:9a:cb:e7:74:9c:88:94:2d: 1e:c2:dd:6d:0f:97:ab:80:33:d8:5a:dc:e5:7b:ec:2f:8d:e2: 65:ba:5f:44:1e:b1:3e:f6:2b:34:9a:b8:d3:e5:72:13:a9:e8: 0b:df:8d:97:d7:f8:ac:ef:66:98:f8:3c:50:38:03:b5:50:b2: a6:56:53:e5:7a:61:b2:08:f5:b9:e2:45:5d:02:e1:59:20:62: 12:0d:ae:5a:8c:77:77:5b:27:65:9f:de:c3:36:ef:8b:ce:32: 78:44:84:9e:20:f2:ed:f9:5b:e2:ad:e2:ff:93:c4:11:96:0c: c9:f2:ff:0e:88:b9:61:3d:5e:5a:5b:63:15:86:26:97:47:c3: 1a:b1:10:14:2f:c4:b1:51:cf:42:ec:38:2d:08:87:e4:7d:2c: 8e:51:67:65:e5:95:22:52:f6:ff:ba:40:88:1b:27:d0:72:34: 79:4e:4a:64:d0:2d:75:a8:d4:53:8a:db:cf:10:09:06:76:d0: 12:b7:27:50:a9:41:5b:67:0f:2c:2f:0c:d8:60:4a:b2:1f:d6: 11:25:60:df:39:a7:10:b0:86:ec:40:60:71:2e:79:5c:a2:21: 42:c1:62:6b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUU2mpl9ehWr3Xjy1PoPenSjcNuR8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTYxMTM1WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZDJkZmEwMGJmYTRmNGUyNThjNzQ1NWU0YTFjOWUzYTZi OWUzZDM3NWQwNjZiOTI2YzI5OGJlYWVkMWRmZDg2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9aYYvP5ddFGCp16Etiai4NDpfkpA5FeNfCaHR9jkZGxxe 8ud7GPoklV4yLKOvv0uyBRAjuSuVh2SQV2+tjh8J+MlZ5jx5zmmKvNlrn4LBRHmA kv4+JnCsUqxdNR4f8Xz4tPPFCl9nUueL07RwC8uZPPz7l8qOJGxKzS7CyzsRTR0Q YXPo35bsI3XAYkuqdOi044qsOMZyo5RDTa35v9zwNGQN6UGzGvCe4MHFlrDkJToo FTt8ZI8uMA85NOkwgcHiugaGWZ3IteKNV85FRVnQ8oe3vh1TJNd2SqEnC/uX0WEu oahlJUKR9NKB12u2Z/+Txgpcw8myQ+947LL1s11DAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4DsLR8BA1vw70nTyX6T3KROBTKQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzNmNjE2YTYwLTY4Y2MtNDQyNS04ZjkyLWFmMzQ4M2Q5ZDlkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQPtWAwDQYJKoZIhvcNAQELBQADggEBAJ4Z9816aeYNtUxEgVO4l+VhBkQw Sz/mUrdscZWay+d0nIiULR7C3W0Pl6uAM9ha3OV77C+N4mW6X0QesT72KzSauNPl chOp6AvfjZfX+KzvZpj4PFA4A7VQsqZWU+V6YbII9bniRV0C4VkgYhINrlqMd3db J2Wf3sM274vOMnhEhJ4g8u35W+Kt4v+TxBGWDMny/w6IuWE9XlpbYxWGJpdHwxqx EBQvxLFRz0LsOC0Ih+R9LI5RZ2XllSJS9v+6QIgbJ9ByNHlOSmTQLXWo1FOK288Q CQZ20BK3J1CpQVtnDywvDNhgSrIf1hElYN85pxCwhuxAYHEueVyiIULBYms= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:29 2025 by rpki-client