$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/892ae50d-c045-4187-ab27-2692064604e7.roa File: 892ae50d-c045-4187-ab27-2692064604e7.roa (raw, json) Hash identifier: XpZmblqFDInCotkM2JBUUy5tAK7RqgEPT2qhZUuYXls= Subject key identifier: 13:C9:20:F2:44:05:16:94:92:CB:34:B4:9C:60:3C:49:B1:E0:BA:70 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4B5A6747B95B31AC00AA2890140C2977391812BB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/892ae50d-c045-4187-ab27-2692064604e7.roa Signing time: Sat 28 Jun 2025 00:40:18 +0000 ROA not before: Sat 28 Jun 2025 00:40:18 +0000 ROA not after: Sat 02 Aug 2025 23:59:59 +0000 asID: 14618 IP address blocks: 15.177.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:5a:67:47:b9:5b:31:ac:00:aa:28:90:14:0c:29:77:39:18:12:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 28 00:40:18 2025 GMT Not After : Aug 2 23:59:59 2025 GMT Subject: serialNumber=6da32fc67778289b8414bdad0b4b809a8c3a69578dcc5d41a3bcb951db5ba21a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5a:82:d3:50:9c:c5:03:22:08:1e:14:0d:2d: 42:1d:4c:ea:27:b3:87:03:8c:8e:3a:32:ef:9e:28: e3:f0:2d:12:8b:e3:d5:b3:c6:55:ef:c5:90:eb:7f: c2:56:63:83:39:94:ec:bf:98:29:39:29:5e:04:9c: 70:68:ca:11:01:18:bd:05:28:37:99:60:1b:ef:b2: 14:c8:1c:a3:58:21:72:08:75:4e:6b:09:dd:ae:ea: 35:23:d6:4e:e8:14:b7:29:f0:a7:a5:98:f5:09:34: 36:ef:e7:b6:b6:a9:1e:bb:67:76:c3:a9:00:89:c9: 06:cf:46:c3:8f:df:6c:47:1d:28:23:dd:2c:4e:ea: 4d:eb:09:27:c0:21:d4:69:45:68:72:fa:31:95:7b: 82:a7:79:fc:c6:a8:5e:61:88:fe:ba:24:98:3b:c3: 06:e0:cc:48:c5:dc:fc:33:b9:8b:62:71:5c:5c:ba: ff:b9:df:73:0a:fd:30:ce:db:4c:21:60:53:9f:3d: d1:40:36:74:26:2f:02:70:29:0d:b9:5f:4d:ba:a3: dd:73:9a:15:39:4e:79:be:1c:87:c9:d7:5d:80:fc: 33:ba:0e:02:7d:6b:a2:58:ac:77:06:ca:f1:8e:0e: 1a:93:1a:a7:8e:8f:45:67:d1:5c:84:14:c1:36:d8: e4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C9:20:F2:44:05:16:94:92:CB:34:B4:9C:60:3C:49:B1:E0:BA:70 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/892ae50d-c045-4187-ab27-2692064604e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.0.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:f1:00:5f:6e:7a:ec:24:fc:aa:53:43:b8:f5:92:5d:1a:d5: 8a:58:92:d1:4e:77:c6:2e:9b:1e:c9:f5:5f:5e:bc:09:9f:52: 92:ff:ff:2a:f7:0e:67:53:a5:c7:75:42:90:cb:64:df:0e:67: 29:49:f2:92:75:1c:a9:b8:ea:de:e9:2f:c4:c1:16:b0:03:0b: 07:7f:75:9d:49:75:4f:ae:93:58:a7:95:70:4b:6e:77:6e:fc: f3:f5:e2:a5:61:95:26:d6:46:a1:17:5c:95:b7:84:d5:43:b5: 0d:4b:b9:ca:54:52:bd:0c:5e:d0:35:fd:55:da:14:c6:37:f8: 72:a3:8c:82:ae:a9:da:4f:f9:aa:b7:48:85:ea:ee:66:8d:ec: fe:f7:b4:2f:0c:aa:19:d6:cd:c9:38:a5:f0:54:bb:6f:be:dd: c5:f2:6d:bf:31:21:8f:8a:d5:87:77:bb:ec:bc:55:59:6c:26: 1d:c2:d6:c3:2c:65:03:95:92:1b:3d:b7:7a:4a:63:60:82:ea: 5f:c5:ae:2a:90:a8:69:05:de:2a:7d:21:7c:bf:45:62:24:90: 0f:7f:a9:06:bd:0b:ff:71:3f:ae:9b:60:a1:ec:c9:16:74:53: 60:ed:c8:87:52:29:c3:f0:f3:43:6b:05:6e:a0:02:f2:fa:b0: 90:95:a2:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS1pnR7lbMawAqiiQFAwpdzkYErswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjI4MDA0MDE4WhcNMjUwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZGEzMmZjNjc3NzgyODliODQxNGJkYWQwYjRiODA5YThj M2E2OTU3OGRjYzVkNDFhM2JjYjk1MWRiNWJhMjFhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDSWoLTUJzFAyIIHhQNLUIdTOons4cDjI46Mu+eKOPwLRKL 49WzxlXvxZDrf8JWY4M5lOy/mCk5KV4EnHBoyhEBGL0FKDeZYBvvshTIHKNYIXII dU5rCd2u6jUj1k7oFLcp8KelmPUJNDbv57a2qR67Z3bDqQCJyQbPRsOP32xHHSgj 3SxO6k3rCSfAIdRpRWhy+jGVe4KnefzGqF5hiP66JJg7wwbgzEjF3PwzuYticVxc uv+533MK/TDO20whYFOfPdFANnQmLwJwKQ25X026o91zmhU5Tnm+HIfJ112A/DO6 DgJ9a6JYrHcGyvGODhqTGqeOj0Vn0VyEFME22ORlAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUE8kg8kQFFpSSyzS0nGA8SbHgunAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzg5MmFlNTBkLWMwNDUtNDE4Ny1hYjI3LTI2OTIwNjQ2MDRlNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMPsQAwDQYJKoZIhvcNAQELBQADggEBADvxAF9ueuwk/KpTQ7j1kl0a1YpY ktFOd8Yumx7J9V9evAmfUpL//yr3DmdTpcd1QpDLZN8OZylJ8pJ1HKm46t7pL8TB FrADCwd/dZ1JdU+uk1inlXBLbndu/PP14qVhlSbWRqEXXJW3hNVDtQ1LucpUUr0M XtA1/VXaFMY3+HKjjIKuqdpP+aq3SIXq7maN7P73tC8MqhnWzck4pfBUu2++3cXy bb8xIY+K1Yd3u+y8VVlsJh3C1sMsZQOVkhs9t3pKY2CC6l/FriqQqGkF3ip9IXy/ RWIkkA9/qQa9C/9xP66bYKHsyRZ0U2DtyIdSKcPw80NrBW6gAvL6sJCVojE= -----END CERTIFICATE-----Generated at Tue Jul 1 06:50:18 2025 by rpki-client