$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa File: b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa (raw, json) Hash identifier: EIQkq4HzRF/JB4TBmiYQW4l+Eo5f37YnMsIVgtm8Y50= Subject key identifier: D5:39:B6:9E:03:CE:2D:81:36:90:6A:3F:F5:DF:B9:36:7C:66:7B:AC Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 11ADEB874FA748AF2AF1FF8C84E273E023D5FD1B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa Signing time: Mon 01 Sep 2025 16:00:57 +0000 ROA not before: Mon 01 Sep 2025 16:00:57 +0000 ROA not after: Mon 06 Oct 2025 23:59:59 +0000 asID: 3209 IP address blocks: 15.145.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ad:eb:87:4f:a7:48:af:2a:f1:ff:8c:84:e2:73:e0:23:d5:fd:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 1 16:00:57 2025 GMT Not After : Oct 6 23:59:59 2025 GMT Subject: serialNumber=9139273e0673acb5cde49cb016722c79c475e0514369c540087ceb7db23f7847, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:46:c5:af:31:1f:df:ac:b6:05:64:f2:d3: 0e:f9:d1:77:ab:c4:eb:85:b8:6e:00:9d:d7:84:a8: 3c:4a:f4:6c:61:2b:f5:52:bb:a2:9c:34:92:e5:a1: 03:f5:ad:e1:7b:7c:ce:79:e4:95:9d:9b:de:9d:86: 7e:9e:f3:63:8e:ee:4b:d6:01:4c:3b:42:bc:41:44: 71:32:29:7b:f4:ed:03:bb:fc:a7:1d:44:b0:f3:75: 57:c8:b6:69:62:18:75:81:48:79:9c:27:c9:70:bc: 9c:af:01:f9:a6:61:25:4b:a1:5e:b1:8f:32:80:01: 5a:4a:50:b8:3e:48:f3:00:17:93:ac:1e:d2:a2:9a: b2:12:52:4b:77:8d:4d:91:49:09:9a:6a:ee:20:40: 98:0f:e3:da:a7:ad:77:01:7c:6e:ca:8b:3b:41:f9: 98:f3:6f:dc:56:d6:6a:83:37:57:ad:e3:f0:af:4e: 71:0f:27:35:44:ff:39:98:ed:bf:fe:4a:8b:25:60: 10:56:2d:19:a6:21:f2:7b:ab:62:05:d9:40:57:e1: bd:4c:a4:96:d2:fd:c3:76:22:bb:6c:ef:0c:fd:14: 18:ec:62:d0:89:ad:b3:75:c9:b1:04:ef:61:17:8f: 64:27:33:54:4b:0b:64:10:71:a6:6c:73:8f:85:99: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:39:B6:9E:03:CE:2D:81:36:90:6A:3F:F5:DF:B9:36:7C:66:7B:AC X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.145.12.0/22 Signature Algorithm: sha256WithRSAEncryption 66:6d:12:b3:ff:6c:25:98:c5:a9:93:6c:f3:79:92:a4:3b:6a: 2a:f1:67:d5:da:77:61:d8:86:a5:76:f5:68:18:bd:b7:f8:d1: 7c:07:22:69:d2:dc:1a:a6:65:80:b4:1c:ee:37:3a:f8:be:db: e3:a5:fc:fd:5a:36:60:ea:34:2e:0c:e2:ab:44:86:e7:17:68: 6b:75:12:f1:8b:2d:d9:c6:cb:40:8e:34:09:97:2a:80:b8:6f: bf:fc:98:af:1b:a3:6f:20:af:1a:7b:d2:a8:ac:fd:4b:39:7c: 49:a8:7f:8d:e3:f8:35:1f:07:6c:3f:a1:79:5c:03:f6:cd:cb: 6b:0e:c0:56:88:f3:2a:04:7d:1d:fa:2f:4d:33:84:15:c5:a6: c7:fb:ac:8d:71:67:18:da:0d:9d:de:e1:91:c6:4a:e3:e6:2a: c1:76:be:ef:b0:2f:55:a7:a3:75:1b:9c:7c:b1:f4:ef:9b:f6: d6:d6:85:df:15:17:b0:20:e8:3e:07:91:07:96:d7:77:61:78: bd:34:12:d2:d4:b0:51:e6:89:32:a2:25:a8:55:1f:a9:bb:8b: 82:7e:88:a6:77:19:79:b4:b5:b6:ee:80:81:49:84:d4:0a:0e: bc:ff:97:51:99:46:3a:01:21:8c:7f:28:2c:e3:d3:d9:3a:ad: 51:ec:c4:03 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEa3rh0+nSK8q8f+MhOJz4CPV/RswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwOTAxMTYwMDU3WhcNMjUxMDA2MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTM5MjczZTA2NzNhY2I1Y2RlNDljYjAxNjcyMmM3OWM0 NzVlMDUxNDM2OWM1NDAwODdjZWI3ZGIyM2Y3ODQ3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCTHUbFrzEf36y2BWTy0w750XerxOuFuG4AndeEqDxK9Gxh K/VSu6KcNJLloQP1reF7fM555JWdm96dhn6e82OO7kvWAUw7QrxBRHEyKXv07QO7 /KcdRLDzdVfItmliGHWBSHmcJ8lwvJyvAfmmYSVLoV6xjzKAAVpKULg+SPMAF5Os HtKimrISUkt3jU2RSQmaau4gQJgP49qnrXcBfG7KiztB+Zjzb9xW1mqDN1et4/Cv TnEPJzVE/zmY7b/+SoslYBBWLRmmIfJ7q2IF2UBX4b1MpJbS/cN2Irts7wz9FBjs YtCJrbN1ybEE72EXj2QnM1RLC2QQcaZsc4+FmZ+9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU1Tm2ngPOLYE2kGo/9d+5Nnxme6wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2I3N2I3ZDMyLTQ0NTAtNGRkMC04YmI0LTczMWRjOWEzMjZmZS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIPkQwwDQYJKoZIhvcNAQELBQADggEBAGZtErP/bCWYxamTbPN5kqQ7airx Z9Xad2HYhqV29WgYvbf40XwHImnS3BqmZYC0HO43Ovi+2+Ol/P1aNmDqNC4M4qtE hucXaGt1EvGLLdnGy0CONAmXKoC4b7/8mK8bo28grxp70qis/Us5fEmof43j+DUf B2w/oXlcA/bNy2sOwFaI8yoEfR36L00zhBXFpsf7rI1xZxjaDZ3e4ZHGSuPmKsF2 vu+wL1Wno3UbnHyx9O+b9tbWhd8VF7Ag6D4HkQeW13dheL00EtLUsFHmiTKiJahV H6m7i4J+iKZ3GXm0tbbugIFJhNQKDrz/l1GZRjoBIYx/KCzj09k6rVHsxAM= -----END CERTIFICATE-----Generated at Tue Sep 16 07:06:46 2025 by rpki-client