$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa File: 8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa (raw, json) Hash identifier: lTZkfDNZF2pJAGBEyfblJjOvk7kFzVmPvM5PoV+P/yo= Subject key identifier: A5:06:A8:32:D4:64:C0:4C:F4:82:62:06:8A:B0:BA:AF:2A:8C:3F:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 26D225834B879D4D0EBA69AE98A1BDCD394859EF Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa Signing time: Tue 05 Aug 2025 15:41:28 +0000 ROA not before: Tue 05 Aug 2025 15:41:28 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.221.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d2:25:83:4b:87:9d:4d:0e:ba:69:ae:98:a1:bd:cd:39:48:59:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:41:28 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=433a1633c18284be20daa327079eadb831edec721ac16ebca73fd576d12a278f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0f:6e:e6:13:2c:9e:f6:0d:af:ce:82:cf:cc: 58:0a:1d:ed:7b:be:5b:c7:8a:57:4a:ba:f4:bc:a8: d5:62:b6:82:88:9c:36:a1:9f:84:b3:52:81:0e:d1: 0b:fa:3c:52:6a:36:ef:00:7a:3d:ad:04:68:3d:9a: 2a:91:3d:23:20:6a:e3:3a:d2:fe:f9:47:93:da:22: fd:fb:47:e0:0e:e7:ac:5b:8a:ba:a5:b7:43:de:3a: ca:8d:85:ed:b4:96:06:a8:f0:f6:1c:21:d4:cf:e3: bb:be:6e:9d:2d:35:aa:b4:e6:aa:c8:9c:09:9c:a1: 8c:2b:44:12:29:3f:34:0a:37:49:a1:ad:e1:f7:82: 5b:f2:d0:01:09:ba:3e:e0:f0:32:62:e8:de:72:92: d6:64:5f:90:d0:75:dd:a4:df:6e:86:78:da:e9:d2: 30:b5:f6:3a:ed:32:ed:35:4e:d0:69:b1:6e:ee:14: ec:d1:31:1f:cc:11:d6:c2:6a:0b:06:78:88:a0:bc: 53:d1:ad:f5:3b:bd:86:3e:92:6c:32:d0:aa:24:74: cc:be:dc:bc:f5:3c:2f:c4:03:af:be:44:19:4f:79: 32:02:f0:f9:36:a6:8e:99:7b:3c:7f:b6:6d:97:d9: 1a:60:c4:7f:0b:f5:6c:c0:5a:0e:b4:7b:18:68:93: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:06:A8:32:D4:64:C0:4C:F4:82:62:06:8A:B0:BA:AF:2A:8C:3F:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.221.24.0/21 Signature Algorithm: sha256WithRSAEncryption 39:5b:7c:60:cb:df:39:cb:71:88:17:b0:a6:29:5f:d3:8e:03: e3:7b:1a:e8:76:ac:37:ab:62:24:73:38:7f:0d:cc:69:03:21: 90:6c:d7:a1:ff:bd:b6:e8:e5:01:73:76:8e:82:44:e3:54:42: be:2f:a0:e6:88:42:72:61:49:f7:6f:69:76:02:89:03:a7:7e: 8d:7c:df:2f:4a:17:50:0b:5b:a8:ac:20:06:23:e7:c3:e5:a7: e3:ca:f9:22:df:65:84:a0:5b:f9:29:94:99:3e:1a:23:55:2b: db:37:00:a0:48:a6:8f:0f:bb:66:57:a3:be:4d:ae:0c:42:83: a2:27:6b:54:a3:9c:cc:c8:2b:75:28:df:95:8e:40:f7:da:38: 74:95:be:de:93:62:a5:ce:88:c7:b9:f4:a5:5b:90:ff:7f:af: be:d9:c1:60:8e:0f:e4:7f:5f:d3:2a:69:17:50:71:ba:5b:de: c1:a1:37:f2:1c:be:e6:02:7d:18:d1:b7:8b:ea:0e:49:f6:7a: 9c:e3:67:22:b9:63:92:20:78:95:f7:ff:66:de:8a:29:3c:ec: 93:da:2b:4e:bf:5a:dd:b8:bb:63:60:d2:0b:05:4b:93:ba:a1: 64:d4:8c:f3:b2:78:9f:04:85:ec:98:79:e5:7b:f2:f5:b3:17: 38:b8:2b:e9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUJtIlg0uHnU0OummumKG9zTlIWe8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTU0MTI4WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0A0MzNhMTYzM2MxODI4NGJlMjBkYWEzMjcwNzllYWRiODMx ZWRlYzcyMWFjMTZlYmNhNzNmZDU3NmQxMmEyNzhmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDpD27mEyye9g2vzoLPzFgKHe17vlvHildKuvS8qNVitoKI nDahn4SzUoEO0Qv6PFJqNu8Aej2tBGg9miqRPSMgauM60v75R5PaIv37R+AO56xb irqlt0PeOsqNhe20lgao8PYcIdTP47u+bp0tNaq05qrInAmcoYwrRBIpPzQKN0mh reH3glvy0AEJuj7g8DJi6N5yktZkX5DQdd2k326GeNrp0jC19jrtMu01TtBpsW7u FOzRMR/MEdbCagsGeIigvFPRrfU7vYY+kmwy0KokdMy+3Lz1PC/EA6++RBlPeTIC 8Pk2po6Zezx/tm2X2RpgxH8L9WzAWg60exhokz11AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUpQaoMtRkwEz0gmIGirC6ryqMP/gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhYjJhZDIzLWUzYWItNDEwZi1iNDk3LWQwYzcxODFmZTY5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3RgwDQYJKoZIhvcNAQELBQADggEBADlbfGDL3znLcYgXsKYpX9OOA+N7 Guh2rDerYiRzOH8NzGkDIZBs16H/vbbo5QFzdo6CRONUQr4voOaIQnJhSfdvaXYC iQOnfo183y9KF1ALW6isIAYj58Plp+PK+SLfZYSgW/kplJk+GiNVK9s3AKBIpo8P u2ZXo75NrgxCg6Ina1SjnMzIK3Uo35WOQPfaOHSVvt6TYqXOiMe59KVbkP9/r77Z wWCOD+R/X9MqaRdQcbpb3sGhN/IcvuYCfRjRt4vqDkn2epzjZyK5Y5IgeJX3/2be iik87JPaK06/Wt24u2Ng0gsFS5O6oWTUjPOyeJ8EheyYeeV78vWzFzi4K+k= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:36 2025 by rpki-client