$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa045e51-9d82-484e-be6e-bba0a2f8b7ed.roa File: aa045e51-9d82-484e-be6e-bba0a2f8b7ed.roa (raw, json) Hash identifier: 8cjRXZhEO6S/tCu2xZZrX/qkDBmVXtoUeCAEdECb+hA= Subject key identifier: EE:E6:AA:2B:0F:3A:5A:54:47:B3:64:56:8E:14:BB:38:00:06:D2:B8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2F45D1F78955910ADA3D18A24427023C20CF67B1 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa045e51-9d82-484e-be6e-bba0a2f8b7ed.roa Signing time: Mon 18 Aug 2025 16:11:05 +0000 ROA not before: Mon 18 Aug 2025 16:11:05 +0000 ROA not after: Mon 22 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:45:d1:f7:89:55:91:0a:da:3d:18:a2:44:27:02:3c:20:cf:67:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 18 16:11:05 2025 GMT Not After : Sep 22 23:59:59 2025 GMT Subject: serialNumber=2ecad595cdf15052e024025f78c4c993dc5de7ca5bc3f4169fd2b0e98024c116, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:09:86:a0:f6:e7:4d:ad:ed:8b:91:a9:70: ec:3b:0f:33:5d:73:85:17:f4:7e:e2:0d:f8:b6:1a: 28:0a:8a:cf:d0:e0:60:f6:4f:8e:ca:33:e4:05:c2: c7:22:42:63:29:09:26:1e:7a:b8:29:dd:22:19:d1: 17:6f:23:77:2b:fa:7a:50:22:fb:74:e1:64:65:72: 79:c5:7f:69:85:dc:de:37:f2:cd:67:f0:ef:1d:21: 65:dc:51:44:e0:c6:56:a9:01:f4:a3:dd:25:05:17: 43:57:0f:79:c1:db:29:75:a8:9f:3d:00:68:a3:ae: 0e:22:d8:e2:57:c2:7a:8b:cc:ce:72:8d:c7:f7:82: 45:44:b9:28:ea:66:ea:22:1f:e5:8a:ac:3d:6e:bc: 91:ac:17:1f:24:01:83:84:3a:8a:94:4c:d1:e5:9e: da:bc:3b:52:2e:a4:e5:49:bf:43:8b:05:93:43:e7: 8d:f2:62:7b:9c:c0:ea:a7:97:a0:e3:cb:69:5c:a8: b3:56:e1:d5:17:65:fb:d7:c7:fc:16:1d:51:cf:0d: c8:34:1f:f1:59:92:43:e7:4f:a6:25:a7:f8:55:4e: 4f:f2:f0:6e:e1:0a:b2:39:7d:36:90:e9:10:a6:e3: 08:c2:b7:31:04:64:91:36:71:8e:f4:82:67:85:e0: ea:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E6:AA:2B:0F:3A:5A:54:47:B3:64:56:8E:14:BB:38:00:06:D2:B8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa045e51-9d82-484e-be6e-bba0a2f8b7ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.208.0/21 Signature Algorithm: sha256WithRSAEncryption a9:36:2c:2d:bb:09:06:8f:96:9e:fb:21:91:9f:27:40:46:24: 7d:96:3e:ac:ba:c9:08:30:4e:5f:fe:a5:b2:66:d0:17:10:83: 50:dc:f5:f8:9e:40:f6:7f:93:ba:86:b2:fd:be:84:a5:cd:79: 9f:6b:2f:f0:18:75:6b:8a:be:8f:ea:22:e7:a5:8b:3e:b5:a0: 24:09:5e:0d:5e:b9:1b:7b:94:48:16:e3:07:35:6a:5f:68:ef: 53:88:fe:c0:55:93:e8:15:4e:e6:91:c1:36:08:20:93:f4:d2: 63:17:d3:1d:b3:cf:9f:72:71:3f:d7:c7:1b:0b:95:ff:ff:00: 2a:76:bc:3a:be:9e:79:1a:2a:6e:93:f6:99:9b:69:01:0e:22: 65:c4:7f:fc:ee:6e:87:1d:9d:a9:11:b5:9a:58:c8:ac:c3:09: e4:44:43:86:e7:5d:5b:03:75:99:4b:42:85:aa:68:a3:cb:bf: c4:8c:1a:f3:f1:7a:11:7e:bd:73:b1:9c:d6:a8:bc:23:be:18: 77:f2:d1:58:fd:6b:ae:22:d5:5d:60:57:e1:26:56:d6:29:af: 21:e4:2b:c0:48:3a:a2:05:ff:12:c1:94:e9:21:9c:cd:9d:b8: ff:02:f0:f5:c9:ba:f2:7f:21:00:6b:27:1c:93:26:2a:56:6e: be:63:be:53 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUL0XR94lVkQraPRiiRCcCPCDPZ7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODE4MTYxMTA1WhcNMjUwOTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyZWNhZDU5NWNkZjE1MDUyZTAyNDAyNWY3OGM0Yzk5M2Rj NWRlN2NhNWJjM2Y0MTY5ZmQyYjBlOTgwMjRjMTE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCmjgmGoPbnTa3ti5GpcOw7DzNdc4UX9H7iDfi2GigKis/Q 4GD2T47KM+QFwsciQmMpCSYeergp3SIZ0RdvI3cr+npQIvt04WRlcnnFf2mF3N43 8s1n8O8dIWXcUUTgxlapAfSj3SUFF0NXD3nB2yl1qJ89AGijrg4i2OJXwnqLzM5y jcf3gkVEuSjqZuoiH+WKrD1uvJGsFx8kAYOEOoqUTNHlntq8O1IupOVJv0OLBZND 543yYnucwOqnl6Djy2lcqLNW4dUXZfvXx/wWHVHPDcg0H/FZkkPnT6Ylp/hVTk/y 8G7hCrI5fTaQ6RCm4wjCtzEEZJE2cY70gmeF4OpbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7uaqKw86WlRHs2RWjhS7OAAG0rgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2FhMDQ1ZTUxLTlkODItNDg0ZS1iZTZlLWJiYTBhMmY4YjdlZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAMP3NAwDQYJKoZIhvcNAQELBQADggEBAKk2LC27CQaPlp77IZGfJ0BGJH2W Pqy6yQgwTl/+pbJm0BcQg1Dc9fieQPZ/k7qGsv2+hKXNeZ9rL/AYdWuKvo/qIuel iz61oCQJXg1euRt7lEgW4wc1al9o71OI/sBVk+gVTuaRwTYIIJP00mMX0x2zz59y cT/XxxsLlf//ACp2vDq+nnkaKm6T9pmbaQEOImXEf/zubocdnakRtZpYyKzDCeRE Q4bnXVsDdZlLQoWqaKPLv8SMGvPxehF+vXOxnNaovCO+GHfy0Vj9a64i1V1gV+Em VtYpryHkK8BIOqIF/xLBlOkhnM2duP8C8PXJuvJ/IQBrJxyTJipWbr5jvlM= -----END CERTIFICATE-----Generated at Wed Aug 20 10:37:15 2025 by rpki-client