$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa File: 8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa (raw, json) Hash identifier: 3yX+4mRMg72G4r3jOtWibxwkR3qZeMT0XroyQCqTgyw= Subject key identifier: 61:F7:5F:EB:9A:5F:D1:19:07:26:83:99:5B:92:D4:83:3C:C9:9E:3C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6A2A1C861245DF948D08C661E20B419BFB6272D5 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa Signing time: Mon 16 Jun 2025 16:30:57 +0000 ROA not before: Mon 16 Jun 2025 16:30:57 +0000 ROA not after: Mon 21 Jul 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.221.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:2a:1c:86:12:45:df:94:8d:08:c6:61:e2:0b:41:9b:fb:62:72:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Jun 16 16:30:57 2025 GMT Not After : Jul 21 23:59:59 2025 GMT Subject: serialNumber=19511bdf9e2b2550170d7b48bc094b05346abbe6ab41b50d71760d587c8990a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:5e:c1:8e:ee:b7:4c:d3:86:a4:40:17:3d: 64:dd:fd:4e:3b:6d:72:bb:02:52:c9:8a:df:9f:ab: ba:89:d2:63:e2:c7:b3:d1:c4:5e:22:ca:d3:01:b1: 80:f2:7d:e5:38:3e:56:fc:47:0b:6a:65:1c:e8:23: 75:7a:58:aa:69:95:43:10:6b:58:0a:a2:30:b8:38: d5:ee:f7:f8:2e:7a:ff:34:d3:04:e1:05:52:34:62: a5:3f:b8:35:8f:73:f0:1c:14:ef:05:8c:09:89:aa: ee:0d:ab:97:4b:e9:54:f4:10:2c:30:0e:17:df:40: 86:af:cf:0b:06:76:e5:db:2a:81:22:6e:9a:49:29: 41:39:73:e4:dc:65:46:77:a0:8c:38:ab:fe:05:11: 53:e6:ce:af:9b:84:14:60:03:ee:2b:cb:7d:3a:67: d3:13:01:9d:ba:63:8b:80:9c:2f:c2:1a:5c:2f:63: 38:01:16:86:25:fe:cc:86:f2:12:35:93:6d:ae:d5: 5a:7c:c4:4e:a1:82:5c:fb:95:5b:f2:1c:f7:bf:36: ad:2e:33:41:1c:46:0f:0a:d0:4e:0b:ed:20:2d:bc: ea:9e:68:7f:74:72:b9:b4:3f:4f:ef:e6:3b:19:39: ff:9d:30:6c:ca:5b:c8:2b:ef:0e:27:6e:81:e2:8b: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F7:5F:EB:9A:5F:D1:19:07:26:83:99:5B:92:D4:83:3C:C9:9E:3C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8ab2ad23-e3ab-410f-b497-d0c7181fe691.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.221.24.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:33:99:c9:78:06:85:8b:8f:44:81:a5:d5:fa:e5:a8:3b:fe: 60:5c:df:f0:07:94:b3:b5:66:15:fb:b2:c9:43:7a:89:7f:fa: a5:6a:57:c4:df:3b:6a:f7:fd:d1:b9:16:fe:45:e9:94:00:f2: 80:73:b8:8a:fe:b7:99:6c:30:4d:fd:fa:43:d5:3b:e2:b2:8d: 7b:7c:5e:05:01:ba:44:68:5e:91:17:bc:0b:fb:7f:ca:c8:b5: 13:fc:e4:76:0b:84:d2:49:9d:fe:b3:b2:4c:aa:7c:21:f4:01: e7:c6:56:dd:dd:2e:a9:32:c6:e6:6c:96:86:18:73:59:85:92: a3:bf:8c:34:68:0a:8c:08:63:36:14:8b:10:8c:14:73:3d:f7: 11:ae:dc:e9:dc:0d:79:4c:d7:e8:96:bf:55:e3:04:1c:89:51: a7:04:3e:4e:93:12:e6:c5:b3:a6:a6:97:6d:2c:21:4f:ba:07: 88:f4:20:7a:d6:72:0d:1e:71:12:b6:c8:8d:aa:58:4c:d3:b4: 1c:fb:05:8c:85:14:08:15:f8:90:aa:53:67:a8:cc:18:44:4a: 1f:a0:c4:36:e7:cf:18:b3:ba:55:3f:56:58:46:e5:f6:fb:b9: 27:2b:33:1e:d2:8a:9a:9d:32:b4:ac:83:69:30:40:9c:40:7d: 94:c9:85:f9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaiochhJF35SNCMZh4gtBm/tictUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNjE2MTYzMDU3WhcNMjUwNzIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxOTUxMWJkZjllMmIyNTUwMTcwZDdiNDhiYzA5NGIwNTM0 NmFiYmU2YWI0MWI1MGQ3MTc2MGQ1ODdjODk5MGE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCZ217Bju63TNOGpEAXPWTd/U47bXK7AlLJit+fq7qJ0mPi x7PRxF4iytMBsYDyfeU4Plb8RwtqZRzoI3V6WKpplUMQa1gKojC4ONXu9/guev80 0wThBVI0YqU/uDWPc/AcFO8FjAmJqu4Nq5dL6VT0ECwwDhffQIavzwsGduXbKoEi bppJKUE5c+TcZUZ3oIw4q/4FEVPmzq+bhBRgA+4ry306Z9MTAZ26Y4uAnC/CGlwv YzgBFoYl/syG8hI1k22u1Vp8xE6hglz7lVvyHPe/Nq0uM0EcRg8K0E4L7SAtvOqe aH90crm0P0/v5jsZOf+dMGzKW8gr7w4nboHiizQnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUYfdf65pf0RkHJoOZW5LUgzzJnjwwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzhhYjJhZDIzLWUzYWItNDEwZi1iNDk3LWQwYzcxODFmZTY5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3RgwDQYJKoZIhvcNAQELBQADggEBAIszmcl4BoWLj0SBpdX65ag7/mBc 3/AHlLO1ZhX7sslDeol/+qVqV8TfO2r3/dG5Fv5F6ZQA8oBzuIr+t5lsME39+kPV O+KyjXt8XgUBukRoXpEXvAv7f8rItRP85HYLhNJJnf6zskyqfCH0AefGVt3dLqky xuZsloYYc1mFkqO/jDRoCowIYzYUixCMFHM99xGu3OncDXlM1+iWv1XjBByJUacE Pk6TEubFs6aml20sIU+6B4j0IHrWcg0ecRK2yI2qWEzTtBz7BYyFFAgV+JCqU2eo zBhESh+gxDbnzxizulU/VlhG5fb7uScrMx7SipqdMrSsg2kwQJxAfZTJhfk= -----END CERTIFICATE-----Generated at Tue Jul 1 04:33:40 2025 by rpki-client