$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/942b5540-9fd4-429b-b70c-0e643baf23ec.roa File: 942b5540-9fd4-429b-b70c-0e643baf23ec.roa (raw, json) Hash identifier: yDaYeR2Vm0ki/8wZHtvGiAV4lflar7wzbGLWth7mup0= Subject key identifier: B8:D1:F7:0F:94:F1:3E:12:66:0C:E5:CB:7B:69:9E:ED:65:98:95:E7 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 101432C3474F171D344C697937F0942B6363359A Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/942b5540-9fd4-429b-b70c-0e643baf23ec.roa Signing time: Wed 20 Aug 2025 00:31:53 +0000 ROA not before: Wed 20 Aug 2025 00:31:53 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.197.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:14:32:c3:47:4f:17:1d:34:4c:69:79:37:f0:94:2b:63:63:35:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:31:53 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=4a380b9cb3c621e23f78dd2164bb07973c649c6a143ea22a83999ebfa882656c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2e:4b:b7:80:da:11:a7:2f:10:51:45:34:86: 96:19:88:21:a7:e9:15:c4:4f:4e:14:74:fb:cc:33: 80:11:94:cd:64:a2:af:a8:32:77:78:54:5f:62:c7: d2:f3:c9:51:4c:a2:88:30:b8:34:e5:ec:e1:57:0a: cf:a5:27:6d:8c:e8:57:71:d6:74:58:04:f9:4e:81: e9:89:58:93:19:01:55:5d:4e:ab:08:80:5d:a2:b4: 53:46:da:42:61:69:ea:8a:ed:fe:53:01:63:70:de: ca:5e:ed:9b:95:95:cd:64:12:1c:d6:77:71:8d:2c: f8:86:66:9f:81:56:28:e1:d5:04:d0:7c:a4:70:08: a3:88:2c:77:eb:c5:74:d7:67:e8:05:77:ea:f5:f6: 21:e6:ff:2e:48:c8:c8:61:73:37:16:2b:72:c2:ce: 55:84:6d:47:02:40:f7:70:88:36:a3:58:5b:0c:4d: cb:b3:3d:20:b1:04:0f:71:be:58:09:a5:fc:b7:dc: c8:a1:ff:e2:29:4e:86:c2:26:fa:a1:d8:53:b0:0e: d2:91:75:92:3d:bc:42:10:56:a0:97:1d:39:52:f8: ba:59:6c:83:05:e6:9f:7b:79:e0:86:8b:3f:77:ad: ec:b9:52:12:a8:99:64:e5:54:30:a7:76:aa:93:88: f2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D1:F7:0F:94:F1:3E:12:66:0C:E5:CB:7B:69:9E:ED:65:98:95:E7 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/942b5540-9fd4-429b-b70c-0e643baf23ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.197.0.0/16 Signature Algorithm: sha256WithRSAEncryption 48:6d:a0:8c:5b:ab:70:b1:c0:5a:da:5e:ac:07:bf:2d:a6:c4: 83:f9:ab:af:2e:c7:a1:be:b5:b7:67:3f:d5:f2:47:39:ae:89: 5f:2b:7d:4f:72:e9:4c:c2:fd:ef:55:96:d8:9c:1e:e0:e4:e2: 1d:eb:80:51:20:4c:ce:99:86:b9:19:9f:cd:fa:60:06:f0:d7: f6:c7:7e:3c:f8:3d:c3:6f:3d:28:09:b3:4b:54:cb:75:2e:76: 13:6f:fc:dd:fb:d8:1f:8f:be:99:97:b1:77:d0:3d:e2:9e:8d: 39:3b:04:b2:30:1e:34:86:60:70:25:9b:3e:73:7b:7f:ce:d7: 49:23:98:80:91:38:1f:90:18:49:e3:00:c2:57:3e:e0:56:81: 60:f1:14:c3:44:5e:a6:fe:c6:3d:4b:28:97:e8:b7:fd:03:b6: 68:81:2b:42:2d:fb:bf:00:d4:3e:95:b0:03:de:0d:ee:a7:48: d0:a4:87:5d:8c:75:d6:98:18:2d:7c:28:af:03:a8:2a:0c:4b: c6:a0:fa:74:cd:16:ef:bd:e3:d9:03:77:c2:7e:fe:bb:d1:0c: 97:84:fc:ff:4e:49:ed:23:85:df:92:0b:28:fb:bb:4e:2e:39: 47:41:f8:80:02:a6:69:75:57:72:de:ee:2b:18:af:b9:20:32: 7b:52:13:aa -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEBQyw0dPFx00TGl5N/CUK2NjNZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIwMDAzMTUzWhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A0YTM4MGI5Y2IzYzYyMWUyM2Y3OGRkMjE2NGJiMDc5NzNj NjQ5YzZhMTQzZWEyMmE4Mzk5OWViZmE4ODI2NTZjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDELku3gNoRpy8QUUU0hpYZiCGn6RXET04UdPvMM4ARlM1k oq+oMnd4VF9ix9LzyVFMoogwuDTl7OFXCs+lJ22M6Fdx1nRYBPlOgemJWJMZAVVd TqsIgF2itFNG2kJhaeqK7f5TAWNw3spe7ZuVlc1kEhzWd3GNLPiGZp+BVijh1QTQ fKRwCKOILHfrxXTXZ+gFd+r19iHm/y5IyMhhczcWK3LCzlWEbUcCQPdwiDajWFsM TcuzPSCxBA9xvlgJpfy33Mih/+IpTobCJvqh2FOwDtKRdZI9vEIQVqCXHTlS+LpZ bIMF5p97eeCGiz93rey5UhKomWTlVDCndqqTiPKxAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUuNH3D5TxPhJmDOXLe2me7WWYlecwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzk0MmI1NTQwLTlmZDQtNDI5Yi1iNzBjLTBlNjQzYmFmMjNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPxTANBgkqhkiG9w0BAQsFAAOCAQEASG2gjFurcLHAWtperAe/LabEg/mr ry7Hob61t2c/1fJHOa6JXyt9T3LpTML971WW2Jwe4OTiHeuAUSBMzpmGuRmfzfpg BvDX9sd+PPg9w289KAmzS1TLdS52E2/83fvYH4++mZexd9A94p6NOTsEsjAeNIZg cCWbPnN7f87XSSOYgJE4H5AYSeMAwlc+4FaBYPEUw0Repv7GPUsol+i3/QO2aIEr Qi37vwDUPpWwA94N7qdI0KSHXYx11pgYLXworwOoKgxLxqD6dM0W773j2QN3wn7+ u9EMl4T8/05J7SOF35ILKPu7Ti45R0H4gAKmaXVXct7uKxivuSAye1ITqg== -----END CERTIFICATE-----Generated at Wed Aug 20 10:37:10 2025 by rpki-client