$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/642201bd-f14c-4f5f-b01b-79a15d7550b7.roa File: 642201bd-f14c-4f5f-b01b-79a15d7550b7.roa (raw, json) Hash identifier: lyry5sTZjG50iiqpWo2/xbub83/XZkxLYti3FBKjsuM= Subject key identifier: D0:E2:0A:84:DE:D1:FC:1D:DD:89:31:98:FD:27:B5:64:7C:1E:BD:C4 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11389A211D78F657FE7DE948A3CE239E148ED324 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/642201bd-f14c-4f5f-b01b-79a15d7550b7.roa Signing time: Tue 05 Aug 2025 15:21:14 +0000 ROA not before: Tue 05 Aug 2025 15:21:14 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.172.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:38:9a:21:1d:78:f6:57:fe:7d:e9:48:a3:ce:23:9e:14:8e:d3:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:21:14 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=835e128a799221b82d6934efe17cb9e6ea7d705608ce113b1da1c1c84cff18f6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:14:74:91:eb:0d:93:ec:91:b4:62:24:d3:b2: ab:31:c9:37:e9:bb:3b:6d:d6:63:f1:10:54:e8:05: e3:d2:4d:9a:39:43:2e:21:73:26:4c:48:de:af:2f: 18:18:29:38:4a:bd:0b:da:43:98:36:5c:b1:67:e3: 8a:a4:36:ea:23:97:e9:1b:b2:84:b6:2e:dc:fc:da: 57:e0:8e:87:f6:40:e9:5c:8c:9d:fd:ec:3b:f3:42: 95:28:31:1a:39:e9:70:ce:33:a9:e7:1d:ef:fd:db: b7:38:52:81:8b:ae:13:71:a0:f7:7e:44:99:de:b6: ce:58:d7:33:e4:fd:50:46:e9:aa:ae:78:01:c4:bc: ce:d6:e5:0a:10:73:e2:26:87:5e:0e:c1:82:ca:ce: 92:ce:ea:76:3d:59:d4:40:e3:e0:2c:14:f4:1d:a9: 02:94:1b:f1:1a:a6:83:ea:bd:61:7f:9d:a6:11:a1: c5:e4:35:46:95:a3:7f:f0:92:8d:2e:dd:e2:79:3f: 6e:a1:22:47:19:d1:ba:90:58:eb:21:04:2b:9b:e3: 22:85:7d:cc:9d:04:c8:07:b0:ed:bc:57:1b:39:a7: 53:5b:88:ab:fc:9e:97:26:86:32:a8:0c:47:9f:67: d1:c6:7c:c8:56:99:a2:32:14:ba:22:2f:17:53:95: c7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E2:0A:84:DE:D1:FC:1D:DD:89:31:98:FD:27:B5:64:7C:1E:BD:C4 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/642201bd-f14c-4f5f-b01b-79a15d7550b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.172.0.0/16 Signature Algorithm: sha256WithRSAEncryption ae:7a:b1:bf:c5:dd:b4:70:f1:d8:ce:72:fe:2d:4f:51:86:4f: 60:f7:93:c5:7e:fb:fc:65:27:66:2c:17:e6:86:ed:7c:6d:35: fa:df:6b:10:22:75:fc:b2:fc:c0:56:1b:df:b1:a1:ca:60:3c: 0d:34:95:85:b2:40:e3:33:f1:6d:5b:19:24:1a:ad:51:ee:cb: 9e:ae:cb:96:dd:9a:0e:b5:12:1f:e8:4f:16:dc:1d:06:ac:77: 3c:d1:29:c8:5a:e5:63:37:d6:80:82:10:f8:10:ce:f8:7a:20: 5b:04:c0:ef:db:a8:fd:c8:8b:c7:c8:77:d6:5c:e7:55:ae:6a: e0:18:e7:ee:8f:e7:84:8d:26:10:0c:a7:3b:df:7a:b4:ef:69: 5d:20:e7:89:2b:8c:ac:80:81:ae:c9:72:5c:7d:31:f3:e7:ce: fc:7b:7d:3a:a7:7b:73:89:0e:73:e9:c3:3a:3b:01:65:96:fd: 81:43:59:e1:7d:dd:7f:cc:11:eb:a9:a0:98:0c:14:23:4b:78: 7a:e9:c2:9d:31:2e:27:bd:41:f9:20:1e:62:0a:16:96:d4:8c: aa:c4:49:1c:8a:1d:d6:18:ea:83:a5:85:72:02:f5:da:91:ac: 83:5e:8b:07:d5:8f:02:5c:29:bf:3a:39:cc:06:39:d8:5f:42: 7a:4d:6a:f2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUETiaIR149lf+felIo84jnhSO0yQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTUyMTE0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A4MzVlMTI4YTc5OTIyMWI4MmQ2OTM0ZWZlMTdjYjllNmVh N2Q3MDU2MDhjZTExM2IxZGExYzFjODRjZmYxOGY2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQClFHSR6w2T7JG0YiTTsqsxyTfpuztt1mPxEFToBePSTZo5 Qy4hcyZMSN6vLxgYKThKvQvaQ5g2XLFn44qkNuojl+kbsoS2Ltz82lfgjof2QOlc jJ397DvzQpUoMRo56XDOM6nnHe/927c4UoGLrhNxoPd+RJnets5Y1zPk/VBG6aqu eAHEvM7W5QoQc+Imh14OwYLKzpLO6nY9WdRA4+AsFPQdqQKUG/EapoPqvWF/naYR ocXkNUaVo3/wko0u3eJ5P26hIkcZ0bqQWOshBCub4yKFfcydBMgHsO28Vxs5p1Nb iKv8npcmhjKoDEefZ9HGfMhWmaIyFLoiLxdTlccDAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQU0OIKhN7R/B3diTGY/Se1ZHwevcQwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY0MjIwMWJkLWYxNGMtNGY1Zi1iMDFiLTc5YTE1ZDc1NTBiNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPrDANBgkqhkiG9w0BAQsFAAOCAQEArnqxv8XdtHDx2M5y/i1PUYZPYPeT xX77/GUnZiwX5obtfG01+t9rECJ1/LL8wFYb37GhymA8DTSVhbJA4zPxbVsZJBqt Ue7Lnq7Llt2aDrUSH+hPFtwdBqx3PNEpyFrlYzfWgIIQ+BDO+HogWwTA79uo/ciL x8h31lznVa5q4Bjn7o/nhI0mEAynO996tO9pXSDniSuMrICBrslyXH0x8+fO/Ht9 Oqd7c4kOc+nDOjsBZZb9gUNZ4X3df8wR66mgmAwUI0t4eunCnTEuJ71B+SAeYgoW ltSMqsRJHIod1hjqg6WFcgL12pGsg16LB9WPAlwpvzo5zAY52F9Cek1q8g== -----END CERTIFICATE-----Generated at Wed Aug 20 10:37:22 2025 by rpki-client