$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e140a1f1-be4e-4870-a629-9485f0e9df59.roa File: e140a1f1-be4e-4870-a629-9485f0e9df59.roa (raw, json) Hash identifier: 8/YFRcYWCwk/sx6uusvdCCTFgNtYkHeF9I5ocB8HK+w= Subject key identifier: 0B:DC:14:D4:8C:74:98:0F:21:C6:E1:64:13:12:CA:E2:0F:77:94:CE Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 2EAD4BDAFB55C12FCDF1971ECE8682EFDE157470 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e140a1f1-be4e-4870-a629-9485f0e9df59.roa Signing time: Tue 05 Aug 2025 15:22:07 +0000 ROA not before: Tue 05 Aug 2025 15:22:07 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ad:4b:da:fb:55:c1:2f:cd:f1:97:1e:ce:86:82:ef:de:15:74:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 15:22:07 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=ae1a0b473607ecb544dca3a072e55dab8bb44a772e0bed1d95d1bdcc5a1911a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:48:43:08:dd:a2:97:32:48:0c:cf:88:e1: 4a:01:64:d4:6b:aa:1f:70:b2:b7:0a:b9:a1:12:b0: b4:db:65:e3:b5:25:99:3b:a1:f3:29:0c:3a:91:42: 07:e9:41:89:3f:69:a0:b8:30:59:8e:18:ae:fb:a8: 74:fb:42:29:36:7f:e0:c7:d0:95:35:78:47:9c:9f: b8:85:9a:7b:ef:16:1f:17:34:e0:fa:51:3a:27:e9: 23:a1:fa:17:23:a5:c2:e6:97:04:8f:cd:32:e6:56: d3:db:8e:cb:1e:28:2a:b7:7e:ed:ea:11:1a:86:bc: 8a:7b:74:5a:32:e6:2a:3f:a6:60:cc:19:21:24:12: 56:e5:0f:51:70:b3:02:d4:26:fb:b6:bf:ce:d1:1a: df:b0:6c:7a:98:f5:9a:61:40:c9:63:be:74:82:09: 2c:20:b3:6b:97:00:ad:a0:17:70:07:59:d8:a8:07: d1:bb:a0:4e:d7:55:0c:67:18:e0:5a:2e:d4:28:e9: 69:8e:95:69:94:a2:ed:91:46:aa:6e:c7:c7:6c:1a: 52:b1:77:de:fe:15:8d:e3:77:a4:7f:44:3a:3a:d6: dd:84:33:96:63:43:f9:63:b8:30:d8:46:aa:13:2c: b2:89:92:58:48:79:c2:00:53:c7:7f:73:9f:6f:96: c9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DC:14:D4:8C:74:98:0F:21:C6:E1:64:13:12:CA:E2:0F:77:94:CE X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e140a1f1-be4e-4870-a629-9485f0e9df59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.214.0/24 Signature Algorithm: sha256WithRSAEncryption 22:7c:78:88:25:90:f2:df:72:b9:23:10:1b:8e:8c:4a:18:92: f5:d8:d8:c1:01:81:60:5b:b3:c0:34:19:2d:eb:e4:d4:c2:5c: 31:35:bc:61:3d:6e:bb:cb:b2:b9:22:39:75:c4:84:82:ba:0f: bc:a0:5f:3c:13:a0:6f:cb:f2:7a:a3:ef:bf:21:ce:5a:2d:3d: 46:7c:3d:4f:59:fb:b1:a2:62:14:4f:0e:bb:59:76:75:17:00: 70:dd:26:a7:e7:8e:9d:5d:d0:78:13:b8:38:92:be:9d:8e:92: ba:aa:08:53:0a:1c:7d:81:df:47:bd:eb:83:98:56:5f:d1:ab: b8:6b:54:cd:8b:35:4a:b5:38:14:a3:fd:e7:82:45:9b:c5:19: 1a:ec:3c:99:7b:c2:24:66:00:37:a1:49:aa:66:7d:16:8d:80: 60:f4:2a:24:8e:49:3b:e5:da:0b:4f:95:f9:89:5f:12:b4:1a: 1b:2a:b8:79:e5:f8:25:12:37:d8:6d:03:fa:06:63:9b:bb:ca: 00:63:1d:03:33:1c:4b:7c:e2:57:df:15:89:bf:b0:2e:b4:c7: 7d:40:05:64:67:a4:1d:2c:16:8c:15:09:c8:37:59:0e:6f:c3: 82:2f:5b:be:7a:7f:c7:a7:98:26:2d:ce:6b:8a:fc:21:5b:d5: 8f:9f:e3:f7 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIULq1L2vtVwS/N8ZcezoaC794VdHAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODA1MTUyMjA3WhcNMjUwOTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0BhZTFhMGI0NzM2MDdlY2I1NDRkY2EzYTA3MmU1NWRhYjhi YjQ0YTc3MmUwYmVkMWQ5NWQxYmRjYzVhMTkxMWE2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCdYUhDCN2ilzJIDM+I4UoBZNRrqh9wsrcKuaESsLTbZeO1 JZk7ofMpDDqRQgfpQYk/aaC4MFmOGK77qHT7Qik2f+DH0JU1eEecn7iFmnvvFh8X NOD6UTon6SOh+hcjpcLmlwSPzTLmVtPbjsseKCq3fu3qERqGvIp7dFoy5io/pmDM GSEkElblD1FwswLUJvu2v87RGt+wbHqY9ZphQMljvnSCCSwgs2uXAK2gF3AHWdio B9G7oE7XVQxnGOBaLtQo6WmOlWmUou2RRqpux8dsGlKxd97+FY3jd6R/RDo61t2E M5ZjQ/ljuDDYRqoTLLKJklhIecIAU8d/c59vlslPAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUC9wU1Ix0mA8hxuFkExLK4g93lM4wHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2UxNDBhMWYxLWJlNGUtNDg3MC1hNjI5LTk0ODVmMGU5ZGY1OS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5tYwDQYJKoZIhvcNAQELBQADggEBACJ8eIglkPLfcrkjEBuOjEoYkvXY 2MEBgWBbs8A0GS3r5NTCXDE1vGE9brvLsrkiOXXEhIK6D7ygXzwToG/L8nqj778h zlotPUZ8PU9Z+7GiYhRPDrtZdnUXAHDdJqfnjp1d0HgTuDiSvp2OkrqqCFMKHH2B 30e964OYVl/Rq7hrVM2LNUq1OBSj/eeCRZvFGRrsPJl7wiRmADehSapmfRaNgGD0 KiSOSTvl2gtPlfmJXxK0GhsquHnl+CUSN9htA/oGY5u7ygBjHQMzHEt84lffFYm/ sC60x31ABWRnpB0sFowVCcg3WQ5vw4IvW756f8enmCYtzmuK/CFb1Y+f4/c= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:06 2025 by rpki-client