$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/473a7e54-fd20-4bc8-8eb6-714108e669c3.roa File: 473a7e54-fd20-4bc8-8eb6-714108e669c3.roa (raw, json) Hash identifier: ItuK/9BPmpCPQ8kcTFz/SZwA/wXzSRAriah7nzFmxho= Subject key identifier: 25:DC:B0:87:85:D2:76:13:19:CD:84:91:F5:21:6E:90:E2:59:18:33 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 70F7FD05DC427A6DFADC0DB89AAFBE75F2F3426D Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/473a7e54-fd20-4bc8-8eb6-714108e669c3.roa Signing time: Mon 30 Jun 2025 15:51:40 +0000 ROA not before: Mon 30 Jun 2025 15:51:40 +0000 ROA not after: Mon 04 Aug 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f7:fd:05:dc:42:7a:6d:fa:dc:0d:b8:9a:af:be:75:f2:f3:42:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 30 15:51:40 2025 GMT Not After : Aug 4 23:59:59 2025 GMT Subject: serialNumber=e026fbc4cc1e4693b7469ce488d7be10c01a2e3aed614af0eace1ea8f280e6f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0d:8f:57:ca:bb:24:6c:eb:11:5f:60:85:45: 9b:70:4c:61:76:89:02:c8:33:c8:f6:c5:f7:a8:05: 18:e1:da:da:e1:99:98:3d:2b:fc:76:9b:4f:93:bf: ac:18:c6:c5:f0:a0:d9:1a:62:9d:f0:b1:0e:b9:67: 53:df:32:74:ab:78:3a:8d:f6:9f:a6:aa:4e:fb:82: 9b:42:74:e2:e0:b5:19:ac:c8:77:54:90:2d:b6:51: d2:1e:f1:46:93:cd:5a:34:c6:43:d0:1d:6f:15:45: 6d:29:8b:a3:99:45:61:d9:1e:fc:fb:40:c6:69:c9: fd:06:62:06:af:cc:14:1a:ef:27:71:79:d6:70:c8: 81:cc:28:69:d3:4c:f5:e0:6d:3c:35:7d:60:0b:2d: ab:b5:4a:55:51:3d:ac:05:76:28:c4:b3:a2:09:ff: a5:eb:0f:20:d6:8a:fd:8d:ab:90:99:cb:c5:af:81: 43:69:48:f9:89:bf:7b:68:5c:f8:6d:9f:9f:fd:b4: 0d:a7:67:73:5d:81:0d:bb:42:dd:23:fc:6d:cf:ec: 77:23:18:69:5b:3c:64:c7:b8:a0:59:a8:7c:36:2b: 54:00:ff:98:81:dd:ab:9f:23:ed:47:4f:1f:84:28: a1:ac:57:20:db:fe:27:d9:62:ca:90:e6:3b:69:4c: 59:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:DC:B0:87:85:D2:76:13:19:CD:84:91:F5:21:6E:90:E2:59:18:33 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/473a7e54-fd20-4bc8-8eb6-714108e669c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.40.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:c7:63:67:4d:c8:b9:40:59:6d:4d:f9:06:31:8d:c4:c4:e0: 5f:a3:34:06:77:ba:1c:61:9f:f1:ff:c3:c5:a2:37:13:5d:d3: 13:72:8c:8e:a1:ac:dd:6c:df:e9:f1:29:ef:85:d9:2f:64:9c: 9e:b2:28:59:a6:0e:4f:38:ee:54:1e:17:7d:13:f6:0d:21:4e: 29:71:5e:18:63:c2:7b:7f:a5:16:09:0c:c3:37:5c:9d:e4:2f: cf:80:d0:3e:47:7b:50:f4:82:b2:98:b6:3d:8e:23:b1:52:d4: 6d:8c:15:32:23:f9:8b:d4:e7:8c:db:44:d6:a0:c4:3a:52:9c: d4:4b:5e:ac:93:5b:1b:b1:71:14:76:1b:57:89:3d:30:c7:b7: e7:ab:6b:f5:66:56:e0:46:f5:3a:bf:0f:b3:7a:08:59:96:8e: 27:33:27:15:87:08:05:90:70:75:ec:f6:a5:01:a9:55:79:91: e4:4a:7a:04:2a:0b:e6:86:9a:00:09:47:55:1c:22:68:24:7a: 66:11:5e:58:42:e2:0a:22:a5:8b:1e:4e:28:7e:29:a5:01:f5: 8c:8f:7c:24:89:90:30:74:95:46:c0:c3:e1:08:3b:d5:9f:9b: f6:3e:35:60:e9:ca:ca:67:58:f8:0c:cb:1e:42:00:e8:a5:8c: 48:5e:72:83 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUcPf9BdxCem363A24mq++dfLzQm0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjMwMTU1MTQwWhcNMjUwODA0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMDI2ZmJjNGNjMWU0NjkzYjc0NjljZTQ4OGQ3YmUxMGMw MWEyZTNhZWQ2MTRhZjBlYWNlMWVhOGYyODBlNmY1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCgDY9XyrskbOsRX2CFRZtwTGF2iQLIM8j2xfeoBRjh2trh mZg9K/x2m0+Tv6wYxsXwoNkaYp3wsQ65Z1PfMnSreDqN9p+mqk77gptCdOLgtRms yHdUkC22UdIe8UaTzVo0xkPQHW8VRW0pi6OZRWHZHvz7QMZpyf0GYgavzBQa7ydx edZwyIHMKGnTTPXgbTw1fWALLau1SlVRPawFdijEs6IJ/6XrDyDWiv2Nq5CZy8Wv gUNpSPmJv3toXPhtn5/9tA2nZ3NdgQ27Qt0j/G3P7HcjGGlbPGTHuKBZqHw2K1QA /5iB3aufI+1HTx+EKKGsVyDb/ifZYsqQ5jtpTFl9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUJdywh4XSdhMZzYSR9SFukOJZGDMwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzQ3M2E3ZTU0LWZkMjAtNGJjOC04ZWI2LTcxNDEwOGU2NjljMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPtSgwDQYJKoZIhvcNAQELBQADggEBAGzHY2dNyLlAWW1N+QYxjcTE4F+j NAZ3uhxhn/H/w8WiNxNd0xNyjI6hrN1s3+nxKe+F2S9knJ6yKFmmDk847lQeF30T 9g0hTilxXhhjwnt/pRYJDMM3XJ3kL8+A0D5He1D0grKYtj2OI7FS1G2MFTIj+YvU 54zbRNagxDpSnNRLXqyTWxuxcRR2G1eJPTDHt+era/VmVuBG9Tq/D7N6CFmWjicz JxWHCAWQcHXs9qUBqVV5keRKegQqC+aGmgAJR1UcImgkemYRXlhC4goipYseTih+ KaUB9YyPfCSJkDB0lUbAw+EIO9Wfm/Y+NWDpyspnWPgMyx5CAOiljEhecoM= -----END CERTIFICATE-----Generated at Mon Jun 30 23:30:38 2025 by rpki-client