$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a903758-2696-4354-8472-ca655b20d494.roa File: 4a903758-2696-4354-8472-ca655b20d494.roa (raw, json) Hash identifier: tlIzfWuqt4pu77RjYT1SpqHBLRn5bqU7tjzudgCbuXc= Subject key identifier: C1:32:74:A1:63:E9:E3:73:47:95:D7:4D:8A:35:04:1F:75:44:A3:FD Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 20E4C5E3ED0AFE5A0FCE3C8FBF03B91DD768184F Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a903758-2696-4354-8472-ca655b20d494.roa Signing time: Fri 15 Aug 2025 15:01:06 +0000 ROA not before: Fri 15 Aug 2025 15:01:06 +0000 ROA not after: Fri 19 Sep 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.181.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e4:c5:e3:ed:0a:fe:5a:0f:ce:3c:8f:bf:03:b9:1d:d7:68:18:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 15 15:01:06 2025 GMT Not After : Sep 19 23:59:59 2025 GMT Subject: serialNumber=87c2c1ea49562acd9c92d64857460fc17648736647a31d1aa000a89d385b19b6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:01:4b:f1:f8:c4:c3:1a:30:b8:28:64:08:4b: 0d:9e:c2:d6:7c:3b:2d:c9:b1:2e:bc:12:0f:2f:ec: 6c:df:d0:d5:4d:4d:d8:3e:b0:48:f9:43:5a:b0:b5: dd:af:0f:52:09:77:d7:ee:30:eb:bd:fe:22:5d:53: a9:6e:81:7f:32:61:ee:25:bc:13:d0:db:81:23:d4: 53:97:a1:77:91:d4:3e:f8:f4:ae:4f:3d:36:b6:cd: 33:ab:92:4b:7f:15:c1:f7:aa:09:cc:74:23:9c:ab: 14:6f:e8:d6:a3:37:71:e1:21:aa:e7:01:a3:4f:1e: 84:03:97:b4:1a:07:df:c0:2f:94:15:d6:14:89:5b: 62:99:35:8e:ba:e6:a3:ac:b3:98:6b:c0:5e:93:c3: a6:b6:38:be:99:d6:a4:6f:ea:73:78:c7:9c:f4:94: bf:a3:1e:17:6b:5b:e5:52:f3:a0:be:58:19:2f:2e: 4e:00:11:b6:4e:e4:2e:f4:15:ed:42:9a:16:de:9b: 62:0b:f6:ce:47:8a:1b:4f:8a:50:c7:b5:20:40:36: a5:3f:fd:4f:36:f8:d6:a2:5f:4e:ef:ef:7c:0d:4b: 01:b4:b9:7f:c7:dc:fd:b6:3a:82:0f:5e:ee:b3:18: 84:31:57:d3:10:9f:50:10:1f:c3:06:93:ad:f8:d1: f9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:32:74:A1:63:E9:E3:73:47:95:D7:4D:8A:35:04:1F:75:44:A3:FD X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a903758-2696-4354-8472-ca655b20d494.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.104.0/21 Signature Algorithm: sha256WithRSAEncryption b2:88:a4:a9:c3:78:1f:3f:19:8e:80:de:e5:6c:ac:84:db:18: 7f:11:88:98:b3:6e:48:5c:66:23:4a:8e:cc:c1:32:c2:e6:e9: a9:9a:24:c4:7f:c2:79:8a:1a:26:7f:66:e8:f2:74:9d:62:c5: 65:77:16:09:af:fb:82:a8:e3:ed:81:09:47:1b:d0:d5:04:a3: 69:5c:70:38:f8:9e:a9:76:01:b2:70:44:ed:35:bf:8b:2c:e5: 74:c9:a4:2e:8a:29:17:21:60:5b:5a:17:46:04:af:19:94:a9: d8:e5:30:5b:a5:8d:bd:8f:95:d9:e5:0b:92:35:26:35:41:0d: 6f:86:da:4f:f5:a2:b5:72:05:ca:cf:91:cf:e2:30:1f:9a:38: 28:ff:b2:f3:ba:53:b3:92:47:7e:31:ba:71:03:54:f3:56:4a: f4:c2:8d:1b:49:90:bf:f4:d8:fd:c8:40:89:12:14:52:48:46: bc:96:05:0f:25:1c:4b:47:ba:10:36:0b:0e:48:2b:fe:51:88: df:fe:10:1b:e8:04:0f:6a:ae:71:1d:aa:7f:9c:b4:d7:6c:a9: 80:7d:67:69:c3:c2:e8:ee:83:31:f5:c2:69:96:d9:cd:a8:ff: 23:ef:5c:76:58:bd:78:a8:22:94:8f:d0:28:c8:42:b7:e2:73: e8:ae:57:2d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUIOTF4+0K/loPzjyPvwO5HddoGE8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE1MTUwMTA2WhcNMjUwOTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4N2MyYzFlYTQ5NTYyYWNkOWM5MmQ2NDg1NzQ2MGZjMTc2 NDg3MzY2NDdhMzFkMWFhMDAwYTg5ZDM4NWIxOWI2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvAUvx+MTDGjC4KGQISw2ewtZ8Oy3JsS68Eg8v7Gzf0NVN Tdg+sEj5Q1qwtd2vD1IJd9fuMOu9/iJdU6lugX8yYe4lvBPQ24Ej1FOXoXeR1D74 9K5PPTa2zTOrkkt/FcH3qgnMdCOcqxRv6NajN3HhIarnAaNPHoQDl7QaB9/AL5QV 1hSJW2KZNY665qOss5hrwF6Tw6a2OL6Z1qRv6nN4x5z0lL+jHhdrW+VS86C+WBkv Lk4AEbZO5C70Fe1Cmhbem2IL9s5HihtPilDHtSBANqU//U82+NaiX07v73wNSwG0 uX/H3P22OoIPXu6zGIQxV9MQn1AQH8MGk6340fkJAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUwTJ0oWPp43NHlddNijUEH3VEo/0wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRhOTAzNzU4LTI2OTYtNDM1NC04NDcyLWNhNjU1YjIwZDQ5NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPtWgwDQYJKoZIhvcNAQELBQADggEBALKIpKnDeB8/GY6A3uVsrITbGH8R iJizbkhcZiNKjszBMsLm6amaJMR/wnmKGiZ/ZujydJ1ixWV3Fgmv+4Ko4+2BCUcb 0NUEo2lccDj4nql2AbJwRO01v4ss5XTJpC6KKRchYFtaF0YErxmUqdjlMFuljb2P ldnlC5I1JjVBDW+G2k/1orVyBcrPkc/iMB+aOCj/svO6U7OSR34xunEDVPNWSvTC jRtJkL/02P3IQIkSFFJIRryWBQ8lHEtHuhA2Cw5IK/5RiN/+EBvoBA9qrnEdqn+c tNdsqYB9Z2nDwujugzH1wmmW2c2o/yPvXHZYvXioIpSP0CjIQrfic+iuVy0= -----END CERTIFICATE-----Generated at Thu Aug 21 03:00:02 2025 by rpki-client