$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805c8a20-11ef-4716-a168-844aa023f13f.roa File: 805c8a20-11ef-4716-a168-844aa023f13f.roa (raw, json) Hash identifier: OKhyzI7AXo4ywML+hphDNKYTRm+VkmX+Oac+gygGMqU= Subject key identifier: 42:D3:A8:7C:CB:53:28:6F:AD:97:14:6C:61:74:C0:26:30:47:1F:26 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4F35E9ABD04D067CC0359D019DB51C939BA0EF28 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805c8a20-11ef-4716-a168-844aa023f13f.roa Signing time: Tue 05 Aug 2025 15:21:12 +0000 ROA not before: Tue 05 Aug 2025 15:21:12 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.169.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:35:e9:ab:d0:4d:06:7c:c0:35:9d:01:9d:b5:1c:93:9b:a0:ef:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:21:12 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=b003a0a7591c8020dcc39b2938e9ee583d050772cf9a331ee4404976841f618c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:35:57:1c:d8:2d:78:cd:47:33:30:b5:e8: 70:fe:5f:06:81:41:05:69:59:e0:2a:c4:22:32:b2: 27:13:ae:f6:77:a5:fa:b8:25:7c:b4:4f:69:08:e3: af:5b:b3:da:95:42:12:f7:37:5c:97:56:c2:87:82: 4a:91:a9:0e:f3:6e:fe:16:a9:53:12:77:73:35:26: 87:c7:00:22:35:99:6b:4b:55:7e:21:b3:dc:0f:a7: f4:ec:1a:d1:eb:a7:c3:7a:d3:a6:64:12:17:46:af: 1b:54:cc:2c:bc:f3:e4:4f:50:18:b8:cc:a7:e3:5b: 9b:ab:7d:2e:84:58:6f:34:62:e7:11:04:25:97:7a: b6:ff:50:9e:01:c9:e8:7a:f1:c6:59:e9:c8:bc:f4: 24:b3:c8:4e:97:1a:4e:ac:d4:38:79:50:53:55:e6: 9e:46:32:57:6a:7f:e2:b1:d7:f6:0f:34:fe:36:ad: fa:05:c3:b4:87:74:cb:07:e5:51:de:f5:3c:49:85: 6d:d3:00:d6:0f:b5:e7:5d:d3:15:7c:5a:22:31:0d: 3e:11:68:36:2c:48:c9:92:8f:61:80:d3:29:c3:3d: e1:d0:e0:cf:79:42:ac:40:1b:33:31:23:4e:4a:4d: a1:02:2a:98:85:5d:69:17:8a:2f:1a:47:f4:81:5a: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D3:A8:7C:CB:53:28:6F:AD:97:14:6C:61:74:C0:26:30:47:1F:26 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/805c8a20-11ef-4716-a168-844aa023f13f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.169.0.0/16 Signature Algorithm: sha256WithRSAEncryption 6a:fe:7b:10:a1:16:e4:60:09:72:12:d7:74:5b:1e:af:77:be: eb:0b:7b:0d:17:cf:9f:2a:72:77:53:6c:95:7e:a2:cf:b8:41: 0c:f7:64:84:9f:4f:56:b1:86:c3:b0:be:f1:b0:da:98:e7:58: 6a:cc:0e:df:9b:cd:1f:df:30:a1:26:ff:8e:48:8e:0a:32:3e: dd:27:68:78:e1:4f:24:c8:bd:d4:94:49:e4:67:af:8a:71:98: 27:2c:e8:c0:81:54:ac:8e:2b:1c:68:99:29:a0:ff:9e:29:dc: e9:c4:8b:56:d7:b8:29:51:a4:3d:a7:95:a1:02:48:f3:a8:c1: 13:77:5d:7c:7b:29:22:14:f0:5e:45:be:8f:63:d1:54:3a:33: b0:11:9f:06:a5:7f:10:ed:dd:09:49:03:c8:df:db:f8:62:87: 6b:78:a2:ff:d8:79:fe:6a:2d:23:ce:50:aa:c3:40:e5:c3:e8: 6b:dc:44:94:88:16:43:f3:35:24:0f:07:41:f3:40:31:22:04: 2e:e1:f5:8f:51:93:b3:c0:18:88:65:95:eb:be:3f:74:85:c1: 09:ba:4f:53:d8:36:b4:d7:45:46:cb:44:f8:5a:7c:42:a3:3b: 0b:65:dc:aa:4a:60:46:fc:cf:01:87:77:a2:f9:c7:5c:28:8c: 58:ab:54:7e -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTzXpq9BNBnzANZ0BnbUck5ug7ygwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTUyMTEyWhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BiMDAzYTBhNzU5MWM4MDIwZGNjMzliMjkzOGU5ZWU1ODNk MDUwNzcyY2Y5YTMzMWVlNDQwNDk3Njg0MWY2MThjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7iDVXHNgteM1HMzC16HD+XwaBQQVpWeAqxCIysicTrvZ3 pfq4JXy0T2kI469bs9qVQhL3N1yXVsKHgkqRqQ7zbv4WqVMSd3M1JofHACI1mWtL VX4hs9wPp/TsGtHrp8N606ZkEhdGrxtUzCy88+RPUBi4zKfjW5urfS6EWG80YucR BCWXerb/UJ4Byeh68cZZ6ci89CSzyE6XGk6s1Dh5UFNV5p5GMldqf+Kx1/YPNP42 rfoFw7SHdMsH5VHe9TxJhW3TANYPtedd0xV8WiIxDT4RaDYsSMmSj2GA0ynDPeHQ 4M95QqxAGzMxI05KTaECKpiFXWkXii8aR/SBWlKBAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUQtOofMtTKG+tlxRsYXTAJjBHHyYwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwNWM4YTIwLTExZWYtNDcxNi1hMTY4LTg0NGFhMDIzZjEzZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPqTANBgkqhkiG9w0BAQsFAAOCAQEAav57EKEW5GAJchLXdFser3e+6wt7 DRfPnypyd1NslX6iz7hBDPdkhJ9PVrGGw7C+8bDamOdYaswO35vNH98woSb/jkiO CjI+3SdoeOFPJMi91JRJ5GevinGYJyzowIFUrI4rHGiZKaD/ninc6cSLVte4KVGk PaeVoQJI86jBE3ddfHspIhTwXkW+j2PRVDozsBGfBqV/EO3dCUkDyN/b+GKHa3ii /9h5/motI85QqsNA5cPoa9xElIgWQ/M1JA8HQfNAMSIELuH1j1GTs8AYiGWV674/ dIXBCbpPU9g2tNdFRstE+Fp8QqM7C2XcqkpgRvzPAYd3ovnHXCiMWKtUfg== -----END CERTIFICATE-----Generated at Wed Aug 20 10:43:54 2025 by rpki-client