$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa File: eca36373-2c2b-4810-b0c5-c530f9afed33.roa (raw, json) Hash identifier: LcMNIWqJZCIAUdMnwnW2L4wjSzIONLJO3hUSxMSasvA= Subject key identifier: 6D:FD:B2:31:D9:74:2E:98:2B:89:8F:B3:1F:8D:DC:D6:72:60:9B:CA Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 381F3BEB3C4C2669C1D77C6BAA28FD45204EBB Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa Signing time: Tue 05 Aug 2025 16:20:12 +0000 ROA not before: Tue 05 Aug 2025 16:20:12 +0000 ROA not after: Tue 09 Sep 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.177.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:1f:3b:eb:3c:4c:26:69:c1:d7:7c:6b:aa:28:fd:45:20:4e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Aug 5 16:20:12 2025 GMT Not After : Sep 9 23:59:59 2025 GMT Subject: serialNumber=f9e0773bda1f1f3ef72e3ccc0142ed6301e2c1966509be6646f2acfb4e95f2e5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:3d:22:6e:83:43:02:07:21:39:9d:71:8b: d8:1e:ba:0f:9e:95:91:29:89:23:04:00:3a:5f:7d: a2:33:60:d0:dd:f4:df:79:25:e3:12:2f:f3:cb:bb: a0:d3:76:eb:29:77:01:18:1a:9a:d6:6c:80:78:4b: b8:d5:9a:f3:8c:6b:81:29:5a:3e:3d:8b:05:10:ec: 1b:8e:9d:c3:cf:1f:a2:31:51:56:7e:56:e9:fb:82: b3:f2:65:83:44:0c:5b:53:02:b8:ef:ea:6b:f3:f2: 95:29:5d:e6:ef:6c:2c:36:97:60:17:23:61:13:43: 8e:9c:33:87:f4:1e:fc:54:fd:7d:13:12:61:25:e1: cd:99:a9:0e:d6:90:8f:05:61:75:7f:e5:4f:79:b2: a4:46:d9:7e:eb:3c:f1:9e:58:4d:f1:6e:fe:25:27: 38:00:82:25:d8:f6:09:c4:76:78:d9:a2:10:ab:47: de:59:21:df:91:88:56:a5:78:3c:c2:57:e3:05:f0: 62:27:6b:10:ca:d3:b5:28:29:e0:a7:f7:fb:79:56: ba:97:33:e3:99:54:2f:40:c8:38:5d:e2:23:38:bf: 6f:7e:43:88:de:a9:70:c2:14:5b:f3:9d:30:ff:b2: c1:ac:f7:9f:7e:d1:ea:ac:71:f0:a0:6e:8c:d8:10: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FD:B2:31:D9:74:2E:98:2B:89:8F:B3:1F:8D:DC:D6:72:60:9B:CA X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eca36373-2c2b-4810-b0c5-c530f9afed33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.177.88.0/24 Signature Algorithm: sha256WithRSAEncryption 97:db:06:ee:ad:d2:94:c1:35:28:43:42:76:7c:0d:5a:c9:e5: 25:3a:ad:ce:cc:55:e0:2c:87:68:2f:b6:ac:4f:f3:27:a7:21: 00:09:1e:99:ec:8e:a1:93:30:07:12:4f:93:43:02:4e:7f:cf: 71:36:13:a2:b6:74:f4:26:df:99:7b:24:a4:45:ad:f4:ae:89: 13:ad:b1:e1:a6:39:ec:c1:49:11:09:34:26:85:73:5b:da:32: 92:3e:62:9a:c9:5f:22:4a:14:1e:5c:72:64:90:e6:2e:8c:b2: c5:06:98:a0:ae:85:5d:af:95:4b:47:c8:f6:2e:4b:a9:01:0c: c0:b5:e1:2f:0e:f0:21:eb:fa:70:77:67:ee:e3:63:39:e2:f7: 84:e4:99:e9:85:d3:39:a3:8f:11:c8:0f:2d:69:79:be:c3:6e: 17:5c:24:b1:d6:5d:e0:17:8c:eb:be:dd:77:a6:f5:f7:14:b6: 1b:fa:ab:98:5d:98:99:6c:b1:03:62:39:bd:90:0f:c1:12:30: 6d:34:dc:a8:f5:5b:8f:c4:33:a1:eb:43:fa:de:6d:74:62:cd: 85:04:bc:17:d1:06:a0:13:14:e1:49:ea:34:fe:2b:03:42:55: 9f:22:b1:b4:82:e6:0c:c9:b2:49:1d:71:41:f0:db:1a:17:3d: ac:33:9d:14 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgITOB876zxMJmnB13xrqij9RSBOuzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJkZjZmM2IzYTM0YjYzODZkMWEzMmQ4ZjRmYTMxNzhlZjMx ODg3ZDhiNDI4ZGZhYTQ3NjAeFw0yNTA4MDUxNjIwMTJaFw0yNTA5MDkyMzU5NTla MHoxSTBHBgNVBAUTQGY5ZTA3NzNiZGExZjFmM2VmNzJlM2NjYzAxNDJlZDYzMDFl MmMxOTY2NTA5YmU2NjQ2ZjJhY2ZiNGU5NWYyZTUxLTArBgNVBAMTJDVmMjc2MDQ1 LTViOWYtNDVlZi05MjNkLWYzZmNlMjRhNjIyNTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAJK0PSJug0MCByE5nXGL2B66D56VkSmJIwQAOl99ojNg0N30 33kl4xIv88u7oNN26yl3ARgamtZsgHhLuNWa84xrgSlaPj2LBRDsG46dw88fojFR Vn5W6fuCs/Jlg0QMW1MCuO/qa/PylSld5u9sLDaXYBcjYRNDjpwzh/Qe/FT9fRMS YSXhzZmpDtaQjwVhdX/lT3mypEbZfus88Z5YTfFu/iUnOACCJdj2CcR2eNmiEKtH 3lkh35GIVqV4PMJX4wXwYidrEMrTtSgp4Kf3+3lWupcz45lUL0DIOF3iIzi/b35D iN6pcMIUW/OdMP+ywaz3n37R6qxx8KBujNgQw6MCAwEAAaOCArEwggKtMB0GA1Ud DgQWBBRt/bIx2XQumCuJj7MfjdzWcmCbyjAfBgNVHSMEGDAWgBQlrdNCsB63pY6t GZAmiLVLP4H0uDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzg1MWNlZjE3LTEz MmEtNDMzNy1iN2QxLWJmMTZhNTJmZmQwMy9kZjZmM2IzYTM0YjYzODZkMWEzMmQ4 ZjRmYTMxNzhlZjMxODg3ZDhiNDI4ZGZhYTQ3Ni5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS9mNzAzNjk2ZS1lNDdiLTRjMjAtYmQ5My02Zjgw OTA0ZTQyZDIvZWNhMzYzNzMtMmMyYi00ODEwLWIwYzUtYzUzMGY5YWZlZDMzLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMt NmY4MDkwNGU0MmQyL3RqaHRHakxZOVBveGVPOHhpSDJMUW8zNnBIWS5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAA+xWDANBgkqhkiG9w0BAQsFAAOCAQEAl9sG7q3SlME1KENCdnwNWsnlJTqt zsxV4CyHaC+2rE/zJ6chAAkemeyOoZMwBxJPk0MCTn/PcTYTorZ09CbfmXskpEWt 9K6JE62x4aY57MFJEQk0JoVzW9oykj5imslfIkoUHlxyZJDmLoyyxQaYoK6FXa+V S0fI9i5LqQEMwLXhLw7wIev6cHdn7uNjOeL3hOSZ6YXTOaOPEcgPLWl5vsNuF1wk sdZd4BeM677dd6b19xS2G/qrmF2YmWyxA2I5vZAPwRIwbTTcqPVbj8QzoetD+t5t dGLNhQS8F9EGoBMU4UnqNP4rA0JVnyKxtILmDMmySR1xQfDbGhc9rDOdFA== -----END CERTIFICATE-----Generated at Wed Aug 20 10:40:24 2025 by rpki-client