$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb5fdf11-c718-42eb-a7d7-efdf54d19abb.roa File: eb5fdf11-c718-42eb-a7d7-efdf54d19abb.roa (raw, json) Hash identifier: FsZ8VGedTIXjEhvuj2wTWZ6g4pFV0L3mPgv32K00qjI= Subject key identifier: C8:6B:B0:1E:51:4E:29:86:75:88:CC:43:B0:3B:EC:97:B9:4A:EC:EB Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 352504E0B9136E1BC61A752E43D59DD647142FF2 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb5fdf11-c718-42eb-a7d7-efdf54d19abb.roa Signing time: Wed 20 Aug 2025 00:30:58 +0000 ROA not before: Wed 20 Aug 2025 00:30:58 +0000 ROA not after: Wed 24 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.230.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:25:04:e0:b9:13:6e:1b:c6:1a:75:2e:43:d5:9d:d6:47:14:2f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 20 00:30:58 2025 GMT Not After : Sep 24 23:59:59 2025 GMT Subject: serialNumber=d6636da508563e79dad9073a7320f20ca359815a4f4f53c29342692170a054c1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:8a:bb:dc:a2:ec:c7:c2:90:97:b4:fc:95: ab:0e:f5:28:49:15:3e:ce:5e:5a:dc:96:1a:c5:ed: de:5b:d6:b3:b9:4f:5c:d9:c7:79:69:3a:d7:7a:ff: f1:2c:5e:0a:8e:bd:e5:ac:79:55:57:4e:29:aa:4f: 71:21:87:bf:ec:3c:7e:a8:31:3c:9d:db:5b:14:f3: 58:d4:ac:12:5e:26:99:27:3d:bf:13:13:9b:c3:c9: 62:18:a9:1a:87:5b:d4:30:4c:4c:f5:b3:2e:76:0d: ba:aa:7b:be:0f:49:7e:06:e1:cc:96:15:2a:59:5e: dc:24:b1:05:dc:8b:6f:fb:25:37:90:ef:16:19:15: e1:9e:b0:6e:7c:de:8c:3f:d4:08:43:d9:d2:40:73: 06:f1:09:41:23:c4:1d:84:fe:a0:e2:7c:4f:56:ab: 41:7f:20:b6:be:2a:80:c1:c1:fe:b1:61:af:1f:63: 40:74:0e:65:a4:9e:a6:d6:21:98:5c:80:56:8c:57: 5a:61:2b:76:dd:fa:d6:04:bb:a6:1b:2e:1e:5c:14: 08:e3:96:2d:03:f1:51:db:b5:b9:85:3f:98:1e:03: 56:a7:b7:a5:35:d1:62:a4:3c:ef:15:c7:dd:4c:89: 48:98:38:5a:08:7d:3e:e5:b1:62:49:5c:53:2f:a2: 7e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6B:B0:1E:51:4E:29:86:75:88:CC:43:B0:3B:EC:97:B9:4A:EC:EB X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eb5fdf11-c718-42eb-a7d7-efdf54d19abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.230.208.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:5f:b9:44:84:2c:19:b1:39:41:e4:d1:5a:c9:56:12:f5:9c: 2c:67:87:73:0a:bd:01:6d:01:4a:ba:c5:d1:15:2e:b9:59:9b: f4:5c:51:39:15:bc:a5:e3:c8:f4:a5:d9:c7:fd:ce:0d:10:6c: 98:b6:b4:36:3d:08:f9:bd:5a:8a:45:cd:00:56:36:40:69:a5: 2f:07:f0:53:36:be:74:17:b3:06:99:24:f7:fd:84:8e:56:c3: a3:ba:34:4e:cd:09:24:b2:32:b8:8e:b7:b4:b5:0a:47:0d:a8: 9c:18:86:80:26:67:53:cb:0f:51:87:63:61:66:cf:9b:4f:a3: f9:1b:29:35:ef:c4:98:b9:f2:0c:b7:8a:e9:71:49:b5:27:23: 54:70:0b:aa:a0:36:fd:a4:5d:5f:63:1b:17:ee:bc:dd:da:86: 11:16:bb:60:91:ea:8d:dc:a7:ef:89:eb:f6:19:2a:97:0c:fe: 3f:21:0b:84:7d:b9:10:34:ae:73:f7:6f:c6:f3:67:53:78:cf: c0:1e:0f:e6:10:97:0e:eb:91:50:b2:75:eb:33:da:c1:cf:d9: 2d:61:48:c8:e6:80:eb:55:bd:63:1a:95:e1:0a:d8:99:e8:42: a9:9a:87:76:9b:40:b4:10:f3:77:bb:61:94:28:76:17:7a:3d: 97:d2:9d:1c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUNSUE4LkTbhvGGnUuQ9Wd1kcUL/IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwODIwMDAzMDU4WhcNMjUwOTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjYzNmRhNTA4NTYzZTc5ZGFkOTA3M2E3MzIwZjIwY2Ez NTk4MTVhNGY0ZjUzYzI5MzQyNjkyMTcwYTA1NGMxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRXIq73KLsx8KQl7T8lasO9ShJFT7OXlrclhrF7d5b1rO5 T1zZx3lpOtd6//EsXgqOveWseVVXTimqT3Ehh7/sPH6oMTyd21sU81jUrBJeJpkn Pb8TE5vDyWIYqRqHW9QwTEz1sy52Dbqqe74PSX4G4cyWFSpZXtwksQXci2/7JTeQ 7xYZFeGesG583ow/1AhD2dJAcwbxCUEjxB2E/qDifE9Wq0F/ILa+KoDBwf6xYa8f Y0B0DmWknqbWIZhcgFaMV1phK3bd+tYEu6YbLh5cFAjjli0D8VHbtbmFP5geA1an t6U10WKkPO8Vx91MiUiYOFoIfT7lsWJJXFMvon6fAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUyGuwHlFOKYZ1iMxDsDvsl7lK7OswHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyL2ViNWZkZjExLWM3MTgtNDJlYi1hN2Q3LWVmZGY1NGQxOWFiYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAP5tAwDQYJKoZIhvcNAQELBQADggEBAD1fuUSELBmxOUHk0VrJVhL1nCxn h3MKvQFtAUq6xdEVLrlZm/RcUTkVvKXjyPSl2cf9zg0QbJi2tDY9CPm9WopFzQBW NkBppS8H8FM2vnQXswaZJPf9hI5Ww6O6NE7NCSSyMriOt7S1CkcNqJwYhoAmZ1PL D1GHY2Fmz5tPo/kbKTXvxJi58gy3iulxSbUnI1RwC6qgNv2kXV9jGxfuvN3ahhEW u2CR6o3cp++J6/YZKpcM/j8hC4R9uRA0rnP3b8bzZ1N4z8AeD+YQlw7rkVCydesz 2sHP2S1hSMjmgOtVvWMaleEK2JnoQqmah3abQLQQ83e7YZQodhd6PZfSnRw= -----END CERTIFICATE-----Generated at Wed Aug 20 10:39:22 2025 by rpki-client