$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66eaf27-6000-4c1d-95a8-839eb1c55554.roa File: d66eaf27-6000-4c1d-95a8-839eb1c55554.roa (raw, json) Hash identifier: t2tBDfR/kozIHLeI3PkXWdlClW5NuHPPkjGbqv5YNGc= Subject key identifier: 6A:AB:C9:3A:62:A0:65:91:91:3D:87:5B:C1:7A:26:F6:F4:EA:48:50 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 047F45B1D3E51AE688AAAA65F3BE83A77A5B3C36 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66eaf27-6000-4c1d-95a8-839eb1c55554.roa Signing time: Tue 05 Aug 2025 15:41:14 +0000 ROA not before: Tue 05 Aug 2025 15:41:14 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.168.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:7f:45:b1:d3:e5:1a:e6:88:aa:aa:65:f3:be:83:a7:7a:5b:3c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:41:14 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=a7358e93e8aed0e39914a6825ad03fec3e1038ce027e2da7c361d1431015827a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:45:1e:73:c0:8b:70:6d:c9:e4:a7:6f:6a: 2c:8b:bd:d1:75:6b:7b:a5:c4:5f:bd:b1:7a:26:02: f8:cc:ce:7d:8d:3e:ce:42:9a:dd:60:15:34:62:52: d0:66:ed:ad:ce:c7:8b:a0:49:ad:28:83:74:b2:7c: 31:29:7b:26:c0:4a:22:ca:39:94:c5:bb:6f:30:2e: a2:9d:e3:60:7e:95:b7:1e:6c:ca:91:2d:b7:8a:81: 4c:10:7c:26:00:77:e8:ca:8e:cb:d8:d0:05:20:29: 1e:5c:ce:df:fb:41:49:6c:e8:01:1c:f1:a7:80:5e: b5:48:ff:7c:e3:86:4d:ac:53:07:bc:16:4e:41:1a: 5b:06:c8:ac:81:19:02:1b:a4:43:3f:a3:4f:94:42: aa:bb:ad:9c:80:43:0c:d2:3c:3f:d7:ef:28:40:f9: 29:90:06:81:12:42:95:49:83:0d:c9:66:d8:a1:1e: 76:36:9b:dd:91:6d:b3:2a:04:4c:05:c2:13:80:c1: 1b:d5:ac:a7:cf:64:19:bd:73:23:b8:e1:74:03:bd: 2e:75:a0:9a:b3:63:bf:5e:9d:da:65:17:cd:28:45: 87:ef:85:52:2b:43:3a:67:31:cd:c5:f3:3c:4f:3d: ef:53:d5:58:3c:14:70:1a:7c:5c:35:dc:0b:ea:03: f3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AB:C9:3A:62:A0:65:91:91:3D:87:5B:C1:7A:26:F6:F4:EA:48:50 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d66eaf27-6000-4c1d-95a8-839eb1c55554.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.168.162.0/23 Signature Algorithm: sha256WithRSAEncryption 54:f4:e3:cc:e9:55:34:8a:aa:68:d8:24:28:5a:6e:88:15:5b: dc:89:5b:5c:56:6d:26:d6:89:6e:a1:c8:47:cc:79:cc:11:a0: 4a:ed:43:5c:ce:8c:af:3d:48:af:93:cb:c4:1d:e1:39:77:f6: 82:0f:fc:05:d6:e7:3c:7d:b3:87:12:d1:6c:f6:bb:f1:32:b1: c9:14:80:d7:bc:92:e3:0b:02:64:5b:2c:84:01:05:cf:48:9c: 95:d4:c7:be:f1:73:f1:92:7c:e9:6f:a7:06:64:2e:53:df:fd: 27:98:b4:c2:9e:2b:7a:1d:dc:32:09:46:65:b4:b9:da:22:a7: d6:4f:a8:16:d4:32:a9:58:fe:20:d9:4f:40:3c:67:3b:07:d9: 7a:c8:63:3a:cc:77:3d:88:80:aa:b6:7d:5c:4c:cb:4a:46:5e: 65:30:42:a8:9c:24:6a:c0:52:67:02:a6:3a:5b:1b:ab:b0:2d: 77:b3:ef:28:a2:b8:43:b4:61:3b:36:0e:b0:64:cb:4c:77:c7: 6f:1a:b0:bf:c3:fe:76:3b:53:58:be:13:da:05:93:ad:15:a9: 23:0f:e2:04:68:ec:38:30:dd:9e:b0:e2:9d:ed:15:9f:94:d2: 6f:d9:84:0f:7c:16:60:ab:2e:22:7e:7c:94:7a:8c:77:9f:54: 7c:0c:66:99 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUBH9FsdPlGuaIqqpl876Dp3pbPDYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTU0MTE0WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhNzM1OGU5M2U4YWVkMGUzOTkxNGE2ODI1YWQwM2ZlYzNl MTAzOGNlMDI3ZTJkYTdjMzYxZDE0MzEwMTU4MjdhMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjrUUec8CLcG3J5KdvaiyLvdF1a3ulxF+9sXomAvjMzn2N Ps5Cmt1gFTRiUtBm7a3Ox4ugSa0og3SyfDEpeybASiLKOZTFu28wLqKd42B+lbce bMqRLbeKgUwQfCYAd+jKjsvY0AUgKR5czt/7QUls6AEc8aeAXrVI/3zjhk2sUwe8 Fk5BGlsGyKyBGQIbpEM/o0+UQqq7rZyAQwzSPD/X7yhA+SmQBoESQpVJgw3JZtih HnY2m92RbbMqBEwFwhOAwRvVrKfPZBm9cyO44XQDvS51oJqzY79endplF80oRYfv hVIrQzpnMc3F8zxPPe9T1Vg8FHAafFw13AvqA/NVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUaqvJOmKgZZGRPYdbwXom9vTqSFAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2Q2NmVhZjI3LTYwMDAtNGMxZC05NWE4LTgzOWViMWM1NTU1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPqKIwDQYJKoZIhvcNAQELBQADggEBAFT048zpVTSKqmjYJChabogVW9yJ W1xWbSbWiW6hyEfMecwRoErtQ1zOjK89SK+Ty8Qd4Tl39oIP/AXW5zx9s4cS0Wz2 u/EysckUgNe8kuMLAmRbLIQBBc9InJXUx77xc/GSfOlvpwZkLlPf/SeYtMKeK3od 3DIJRmW0udoip9ZPqBbUMqlY/iDZT0A8ZzsH2XrIYzrMdz2IgKq2fVxMy0pGXmUw QqicJGrAUmcCpjpbG6uwLXez7yiiuEO0YTs2DrBky0x3x28asL/D/nY7U1i+E9oF k60VqSMP4gRo7Dgw3Z6w4p3tFZ+U0m/ZhA98FmCrLiJ+fJR6jHefVHwMZpk= -----END CERTIFICATE-----Generated at Wed Aug 20 10:41:25 2025 by rpki-client