$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa File: df263476-feea-4096-8e6e-d4907dc5e98a.roa (raw, json) Hash identifier: 86UDV8yFu5Dm/6Lc7UFs4fY0RFGSW+i0DRyoKWbldFE= Subject key identifier: 2F:E8:3D:91:C0:E8:69:EA:1E:26:84:AB:C0:07:8C:89:AA:9A:D5:AB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 0ABA0343AC0EB10684557BFC464D410F7A17822C Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa Signing time: Wed 20 Aug 2025 00:21:33 +0000 ROA not before: Wed 20 Aug 2025 00:21:33 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ba:03:43:ac:0e:b1:06:84:55:7b:fc:46:4d:41:0f:7a:17:82:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:21:33 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=7601b47e5c5af19b045272e623da674582780ae9e39d58fdfcbf099c6f24bc91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:b9:d7:e1:c4:14:24:b6:28:92:5b:1e:db: 29:2d:53:6e:83:07:4f:bb:f7:1d:cb:b8:0d:d5:7f: e4:36:d5:41:33:3d:d4:2b:51:14:01:c6:2b:28:6a: ba:0c:08:07:5e:f0:40:eb:2a:5e:59:85:5f:76:54: 2b:a9:7a:c4:b4:c3:af:9f:b0:4e:c8:c8:e3:2d:38: a5:85:6d:06:0f:b8:3a:91:06:52:e7:22:e1:39:01: b7:ee:d6:98:27:ad:47:8d:16:75:f9:ca:a0:5f:96: 7f:a0:c6:17:51:fb:e2:af:d6:fc:ed:53:e6:24:86: 46:70:d4:0a:c2:d3:eb:52:f7:22:20:8b:23:c9:3c: 7d:d6:9a:b5:01:6b:23:49:d9:30:55:ad:a3:7d:bd: c8:83:ca:ce:39:aa:1a:54:8a:89:6c:52:8a:3a:64: 16:7e:b9:db:19:2c:f3:2e:d0:d4:4f:8d:f0:79:c4: 94:75:bd:3a:01:36:48:f1:f6:d7:ba:61:3c:5e:9b: a1:a1:0b:2b:ab:b5:b0:98:50:52:0f:c1:6e:fb:e4: c2:bb:ed:64:4f:45:f2:f5:59:3e:4d:7b:9c:4a:ab: 00:f1:48:be:d9:55:cb:78:36:65:71:d8:d7:79:ae: 00:7d:8e:b0:2e:ef:9b:3a:7e:1c:af:6d:c7:10:52: 97:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E8:3D:91:C0:E8:69:EA:1E:26:84:AB:C0:07:8C:89:AA:9A:D5:AB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df263476-feea-4096-8e6e-d4907dc5e98a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.99.0/24 Signature Algorithm: sha256WithRSAEncryption 47:27:a1:c5:06:98:d9:8a:bb:74:cf:de:14:cd:c8:5e:15:53: b5:51:08:4f:99:23:ac:3f:bf:08:83:a7:99:52:32:d2:39:e3: c9:5d:4b:f1:b5:ec:e9:a6:be:04:3d:c4:a0:b8:a9:74:7c:ba: d8:d8:6e:a5:39:ef:f2:19:c6:8a:71:04:92:76:ad:74:85:d1: bd:45:87:3a:fd:16:68:5a:a5:ea:e3:d8:42:e7:6b:04:30:1c: 31:0e:c3:80:f9:ff:7c:23:c1:85:bf:ff:68:65:a9:1e:bb:5f: 9a:6c:d2:6a:18:d2:49:98:82:f8:ce:44:8c:06:a0:98:f5:d9: 9b:e0:82:d5:1f:f8:aa:ca:cc:1b:f4:9f:d8:e5:1d:85:ee:21: a5:8a:b9:72:21:f0:a1:20:8a:fa:0a:43:4a:61:d1:48:7b:bc: 33:61:68:80:27:45:f3:ad:de:9f:4a:62:b7:a0:d8:21:17:84: d8:0f:be:4d:b4:8a:b6:3f:7c:07:48:5c:a1:08:3f:33:af:b4: 8d:55:9c:2a:d8:9d:a8:2b:2b:08:0d:8e:e0:b8:22:62:c7:ae: 5e:ff:af:98:74:84:4a:9c:1b:9f:31:43:c0:b2:91:80:f5:22: a8:ee:55:ff:51:cd:50:5b:84:be:d9:87:1f:af:f9:01:61:99: 34:27:b2:66 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCroDQ6wOsQaEVXv8Rk1BD3oXgiwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIwMDAyMTMzWhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NjAxYjQ3ZTVjNWFmMTliMDQ1MjcyZTYyM2RhNjc0NTgy NzgwYWU5ZTM5ZDU4ZmRmY2JmMDk5YzZmMjRiYzkxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC0YbnX4cQUJLYoklse2yktU26DB0+79x3LuA3Vf+Q21UEz PdQrURQBxisoaroMCAde8EDrKl5ZhV92VCupesS0w6+fsE7IyOMtOKWFbQYPuDqR BlLnIuE5Abfu1pgnrUeNFnX5yqBfln+gxhdR++Kv1vztU+YkhkZw1ArC0+tS9yIg iyPJPH3WmrUBayNJ2TBVraN9vciDys45qhpUiolsUoo6ZBZ+udsZLPMu0NRPjfB5 xJR1vToBNkjx9te6YTxem6GhCyurtbCYUFIPwW775MK77WRPRfL1WT5Ne5xKqwDx SL7ZVct4NmVx2Nd5rgB9jrAu75s6fhyvbccQUpeDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUL+g9kcDoaeoeJoSrwAeMiaqa1aswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2RmMjYzNDc2LWZlZWEtNDA5Ni04ZTZlLWQ0OTA3ZGM1ZTk4YS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAPsWMwDQYJKoZIhvcNAQELBQADggEBAEcnocUGmNmKu3TP3hTNyF4VU7VR CE+ZI6w/vwiDp5lSMtI548ldS/G17OmmvgQ9xKC4qXR8utjYbqU57/IZxopxBJJ2 rXSF0b1Fhzr9Fmhaperj2ELnawQwHDEOw4D5/3wjwYW//2hlqR67X5ps0moY0kmY gvjORIwGoJj12ZvggtUf+KrKzBv0n9jlHYXuIaWKuXIh8KEgivoKQ0ph0Uh7vDNh aIAnRfOt3p9KYreg2CEXhNgPvk20irY/fAdIXKEIPzOvtI1VnCrYnagrKwgNjuC4 ImLHrl7/r5h0hEqcG58xQ8CykYD1IqjuVf9RzVBbhL7Zhx+v+QFhmTQnsmY= -----END CERTIFICATE-----Generated at Wed Aug 20 10:42:13 2025 by rpki-client