$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89fd09a6-1f98-468f-bd2d-1efec4b7a65e.roa File: 89fd09a6-1f98-468f-bd2d-1efec4b7a65e.roa (raw, json) Hash identifier: SFNwgxy5Ue2wZRRVBKNhczKnObiZYM/59xcPfiZrscw= Subject key identifier: 65:A4:EF:5A:5F:4C:75:11:C7:00:3F:F7:1D:A5:10:59:14:C8:32:E1 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 44540F2B18B5106047E7964B4943EAB6808A53 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89fd09a6-1f98-468f-bd2d-1efec4b7a65e.roa Signing time: Mon 18 Aug 2025 16:10:56 +0000 ROA not before: Mon 18 Aug 2025 16:10:56 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:54:0f:2b:18:b5:10:60:47:e7:96:4b:49:43:ea:b6:80:8a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 16:10:56 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=59bedfff39e3efe4d0efc291b04863afa6e2a0b09890797f685e3fd0b74ccd15, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fd:2e:5d:46:9d:59:ad:e8:86:91:55:52:e3: d4:ed:e9:c3:fa:0e:b1:84:b6:0d:d5:87:b1:24:e9: d5:a7:e2:82:7a:e4:94:3a:06:3f:96:9e:4b:d3:27: f9:65:52:bb:14:74:3c:bd:be:b7:72:7f:35:39:8c: 16:a9:fe:53:a3:1c:8a:81:76:de:d8:f9:c9:cc:0f: 2e:f3:27:79:2b:13:b2:91:eb:6a:20:0a:5d:66:8d: 47:cb:6b:ff:38:b2:77:ab:45:35:71:39:c8:df:6f: 1f:0e:6d:72:32:19:5e:3c:cb:ca:c0:83:36:de:2d: e8:30:22:2f:3b:f0:dd:f5:df:b6:38:ae:60:a6:13: 09:28:24:e2:13:24:29:8f:9c:03:0c:33:32:ca:96: 4d:69:3a:fb:a7:e9:49:e6:03:57:96:14:be:50:b3: 4f:42:12:3c:e5:1b:74:3d:f6:bf:9a:6a:ae:a8:6a: 25:21:f7:e5:cf:b7:9d:73:09:c2:9f:a0:8b:f7:8c: 05:6c:59:10:89:93:3b:7c:7b:e3:36:31:5c:cf:00: e6:20:45:85:fd:f9:bc:5f:c6:20:db:a6:89:41:1b: c0:ea:a9:dc:45:67:80:de:88:86:19:c2:76:55:b5: 9e:29:54:d7:fd:8f:36:19:b5:31:dc:06:50:22:2a: 2d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A4:EF:5A:5F:4C:75:11:C7:00:3F:F7:1D:A5:10:59:14:C8:32:E1 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/89fd09a6-1f98-468f-bd2d-1efec4b7a65e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.40.0/22 Signature Algorithm: sha256WithRSAEncryption 50:d0:da:2c:e5:14:13:a3:52:8a:67:1a:c2:57:44:5a:17:5b: 6e:42:bb:be:d9:10:32:ea:34:38:8a:41:63:a9:4e:1e:e2:2b: 95:db:83:fa:c0:15:44:d1:15:06:9f:71:8f:7b:43:70:1d:43: 19:b9:93:fd:c5:58:72:a6:12:83:d0:09:4d:a1:5b:e9:4f:fd: 31:b0:fd:f3:9f:b2:69:30:6b:2d:bb:8d:d3:a6:20:f3:10:88: 77:29:61:c1:60:38:c1:6a:16:45:df:46:d5:36:cf:9a:bc:58: ac:ee:ce:0c:ba:65:2f:d4:d1:ab:3a:21:7d:74:d2:64:8a:2d: d9:35:45:09:5e:79:0a:af:82:c3:a1:93:f0:ee:0e:98:f8:b7: 5a:47:ef:9d:11:a7:fd:dd:6b:59:a2:78:7d:81:fb:55:68:5b: 29:ac:2e:60:d0:32:6f:41:b6:16:9c:bb:9f:5d:e2:b8:fd:af: de:55:9b:1a:d1:82:6e:0d:47:a2:46:ef:a7:22:d9:55:9d:93: 2e:55:20:ae:d5:91:cb:86:53:bb:d0:30:a3:1c:e8:79:fe:2b: 15:44:8d:bd:20:7d:62:95:9e:8f:e3:50:35:a8:0e:96:73:a1: 3d:9c:8b:2c:c5:87:f7:ff:31:23:2b:b0:2d:d1:ee:e2:7c:69: c4:7a:e0:b7 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITRFQPKxi1EGBH55ZLSUPqtoCKUzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA4MTgxNjEwNTZaFw0yNTA5MjIyMzU5NTla MHoxSTBHBgNVBAUTQDU5YmVkZmZmMzllM2VmZTRkMGVmYzI5MWIwNDg2M2FmYTZl MmEwYjA5ODkwNzk3ZjY4NWUzZmQwYjc0Y2NkMTUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALb9Ll1GnVmt6IaRVVLj1O3pw/oOsYS2DdWHsSTp1afignrk lDoGP5aeS9Mn+WVSuxR0PL2+t3J/NTmMFqn+U6McioF23tj5ycwPLvMneSsTspHr aiAKXWaNR8tr/ziyd6tFNXE5yN9vHw5tcjIZXjzLysCDNt4t6DAiLzvw3fXftjiu YKYTCSgk4hMkKY+cAwwzMsqWTWk6+6fpSeYDV5YUvlCzT0ISPOUbdD32v5pqrqhq JSH35c+3nXMJwp+gi/eMBWxZEImTO3x74zYxXM8A5iBFhf35vF/GINumiUEbwOqp 3EVngN6IhhnCdlW1nilU1/2PNhm1MdwGUCIqLeMCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRlpO9aX0x1EccAP/cdpRBZFMgy4TAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvODlmZDA5YTYtMWY5OC00NjhmLWJkMmQtMWVmZWM0YjdhNjVlLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAg/cKDANBgkqhkiG9w0BAQsFAAOCAQEAUNDaLOUUE6NSimcawldEWhdbbkK7 vtkQMuo0OIpBY6lOHuIrlduD+sAVRNEVBp9xj3tDcB1DGbmT/cVYcqYSg9AJTaFb 6U/9MbD985+yaTBrLbuN06Yg8xCIdylhwWA4wWoWRd9G1TbPmrxYrO7ODLplL9TR qzohfXTSZIot2TVFCV55Cq+Cw6GT8O4OmPi3WkfvnRGn/d1rWaJ4fYH7VWhbKawu YNAyb0G2Fpy7n13iuP2v3lWbGtGCbg1HokbvpyLZVZ2TLlUgrtWRy4ZTu9Awoxzo ef4rFUSNvSB9YpWej+NQNagOlnOhPZyLLMWH9/8xIyuwLdHu4nxpxHrgtw== -----END CERTIFICATE-----Generated at Wed Aug 20 10:38:20 2025 by rpki-client