$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4caf245f-1d9c-437f-a1a0-088097e69e75.roa File: 4caf245f-1d9c-437f-a1a0-088097e69e75.roa (raw, json) Hash identifier: HT2veyt1STLx84I5Mha4CYnH1Ge+haxudtoG5WKLhpw= Subject key identifier: 8D:D4:22:49:F5:5E:98:E0:DF:90:E7:A2:2B:B9:86:81:D7:B4:01:8B Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 1D3FF516BFBAE62AECF74F9DE77972FDC2846D26 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4caf245f-1d9c-437f-a1a0-088097e69e75.roa Signing time: Mon 16 Jun 2025 16:41:00 +0000 ROA not before: Mon 16 Jun 2025 16:41:00 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.253.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:3f:f5:16:bf:ba:e6:2a:ec:f7:4f:9d:e7:79:72:fd:c2:84:6d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:41:00 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=c7257c090171f934194331bf0520fdc2f410d32b2883358be1ce7cc893081f94, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:52:ca:4d:3b:19:ad:c4:bd:da:d4:a9:ba: ed:b8:dd:17:83:cc:bc:b3:69:3e:1f:25:69:c4:00: 3d:d4:e0:f9:a8:35:96:58:04:0f:1b:d9:9a:d4:cf: d5:93:0a:65:1e:eb:4a:3d:d9:99:31:94:d0:1f:0a: ef:de:61:c7:b8:1d:33:7b:40:21:17:7d:3e:ff:e2: e7:00:08:e2:20:cf:d3:8a:e9:e5:68:8a:5f:b7:ff: 2e:b2:2d:70:49:92:84:79:7f:e9:0c:ff:1f:aa:18: 60:f4:1a:c4:03:6d:23:49:b7:b2:e4:13:90:9b:24: f8:7d:65:80:90:83:e2:10:9c:42:04:05:ff:eb:03: 46:a0:c7:d0:b7:0b:f8:9a:ef:ea:34:7f:e8:c5:a9: bc:ed:85:68:b0:1f:3b:ec:dd:0c:23:54:7f:c4:7f: 68:99:17:5f:e4:be:92:57:10:53:5e:32:9f:c0:c3: cb:eb:97:e4:e4:31:d7:05:5e:5e:6c:18:bc:58:d6: 92:36:a6:59:f0:0c:bf:e6:cd:d0:28:65:6b:f0:c5: d7:74:49:3f:8e:8a:5f:82:67:39:9e:55:13:97:21: b0:b1:06:8e:10:9d:05:d7:ab:b8:e3:90:de:b7:89: a4:96:80:d2:a0:53:be:50:24:90:ef:a9:2f:5f:fd: 48:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:22:49:F5:5E:98:E0:DF:90:E7:A2:2B:B9:86:81:D7:B4:01:8B X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4caf245f-1d9c-437f-a1a0-088097e69e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.253.0.0/16 Signature Algorithm: sha256WithRSAEncryption 68:55:30:50:9e:86:ca:35:d3:0e:5a:84:ba:fe:7f:5f:2e:29: d3:62:bf:b4:fb:2f:7f:05:d5:2b:e7:37:a3:fd:d0:29:de:cb: ee:f9:e4:a3:71:f4:ab:1d:22:66:2f:da:94:25:1c:3e:7a:0d: 48:c8:87:02:1c:06:1e:e1:ad:86:f3:26:a6:18:37:f1:94:43: b0:5c:a9:dd:cf:7a:8f:b8:28:9a:0c:9d:21:61:f1:83:e5:c1: ad:b8:cb:fe:f8:af:dd:b6:60:b0:df:b3:29:4a:98:f3:c1:ed: 83:e4:e7:86:e0:02:44:d5:2a:8b:e8:d4:74:e7:9c:e9:84:00: 4f:6e:91:77:77:cd:21:f0:0c:b9:4e:5e:7f:44:d0:4d:77:29: 05:51:eb:91:63:10:5d:c1:b5:6f:95:31:38:f7:e0:2a:2e:69: e9:ad:f6:b0:be:20:68:05:2d:6a:e7:70:fb:5d:65:31:39:6b: 5c:fb:b5:45:e7:56:f9:54:cb:87:19:c1:60:5f:ba:11:cb:54: d5:43:1e:df:89:e9:a9:de:e3:45:8d:12:fb:bd:a3:8f:a9:27: 34:86:b4:ae:91:29:ee:49:60:59:14:2d:a4:62:f7:c4:ca:75: e1:a1:89:f5:32:30:76:ad:17:1c:62:0f:9b:7c:7f:44:88:18: 8d:33:41:4b -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUHT/1Fr+65irs90+d53ly/cKEbSYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTY0MTAwWhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNzI1N2MwOTAxNzFmOTM0MTk0MzMxYmYwNTIwZmRjMmY0 MTBkMzJiMjg4MzM1OGJlMWNlN2NjODkzMDgxZjk0MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCq6lLKTTsZrcS92tSpuu243ReDzLyzaT4fJWnEAD3U4Pmo NZZYBA8b2ZrUz9WTCmUe60o92ZkxlNAfCu/eYce4HTN7QCEXfT7/4ucACOIgz9OK 6eVoil+3/y6yLXBJkoR5f+kM/x+qGGD0GsQDbSNJt7LkE5CbJPh9ZYCQg+IQnEIE Bf/rA0agx9C3C/ia7+o0f+jFqbzthWiwHzvs3QwjVH/Ef2iZF1/kvpJXEFNeMp/A w8vrl+TkMdcFXl5sGLxY1pI2plnwDL/mzdAoZWvwxdd0ST+Oil+CZzmeVROXIbCx Bo4QnQXXq7jjkN63iaSWgNKgU75QJJDvqS9f/UidAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUjdQiSfVemODfkOeiK7mGgde0AYswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjYWYyNDVmLTFkOWMtNDM3Zi1hMWEwLTA4ODA5N2U2OWU3NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP/TANBgkqhkiG9w0BAQsFAAOCAQEAaFUwUJ6GyjXTDlqEuv5/Xy4p02K/ tPsvfwXVK+c3o/3QKd7L7vnko3H0qx0iZi/alCUcPnoNSMiHAhwGHuGthvMmphg3 8ZRDsFyp3c96j7gomgydIWHxg+XBrbjL/viv3bZgsN+zKUqY88Htg+TnhuACRNUq i+jUdOec6YQAT26Rd3fNIfAMuU5ef0TQTXcpBVHrkWMQXcG1b5UxOPfgKi5p6a32 sL4gaAUtaudw+11lMTlrXPu1RedW+VTLhxnBYF+6EctU1UMe34npqd7jRY0S+72j j6knNIa0rpEp7klgWRQtpGL3xMp14aGJ9TIwdq0XHGIPm3x/RIgYjTNBSw== -----END CERTIFICATE-----Generated at Mon Jun 30 22:42:53 2025 by rpki-client