$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0584bcf4-20b6-4da5-a7fb-e7bbea81ff74.roa File: 0584bcf4-20b6-4da5-a7fb-e7bbea81ff74.roa (raw, json) Hash identifier: E50CwypGh1CvqHeriaQEaFuU5xSgzCXYtAxkkd+mOyk= Subject key identifier: 91:BB:3F:5F:99:CC:7F:3E:0B:0C:65:0E:E0:B2:AD:27:56:A3:C0:49 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A5997CEE853626653F1B1976C4627CE68A0CB44 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0584bcf4-20b6-4da5-a7fb-e7bbea81ff74.roa Signing time: Tue 22 Apr 2025 17:50:15 +0000 ROA not before: Tue 22 Apr 2025 17:50:15 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 14618 IP address blocks: 150.222.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:59:97:ce:e8:53:62:66:53:f1:b1:97:6c:46:27:ce:68:a0:cb:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 17:50:15 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=c12ad903205288e419f09c485207d337cbf9794f7fa279529b803bf9d23df679, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:28:42:9a:73:ab:76:9d:20:fa:02:c9:32:be: 82:ed:f6:7a:3e:d1:15:8d:32:d4:c8:f7:db:c1:62: b1:20:1f:c7:f9:a4:3b:48:ec:42:ee:27:5d:cd:aa: 81:8a:12:f2:16:6e:05:a0:98:c4:75:45:4f:a1:b3: 3d:c1:48:c3:e4:46:2f:72:0a:0a:c1:e1:74:ba:ad: 6d:67:e1:c3:60:41:19:3a:9e:cb:21:fe:7a:53:10: 9a:69:9d:ef:b1:37:9b:9d:2e:03:77:c6:1e:02:dc: 4c:9a:50:98:0e:cf:5a:a3:7f:63:11:08:38:b1:5b: f9:fe:d2:80:08:b5:9b:27:a9:a6:3b:32:fc:41:1d: 8e:50:f9:25:a3:11:e7:46:cc:aa:ee:7f:ff:96:c9: 87:16:c3:90:c9:3e:35:38:96:94:c8:2b:e3:44:e9: c1:c2:b3:ff:a6:1f:9c:1c:ca:bd:48:d4:e6:f6:94: c1:42:d8:45:ed:fc:17:16:17:e0:00:5a:55:06:75: bc:09:85:30:29:72:07:ad:d0:88:2e:ad:a0:21:81: d3:9c:15:7a:bb:0d:03:ac:04:33:09:c5:36:a1:e8: f7:ed:a7:32:3e:40:e1:46:8b:66:c5:72:9b:b8:c0: 11:68:08:d9:ca:fe:47:10:4c:f5:ce:0a:e5:01:52: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BB:3F:5F:99:CC:7F:3E:0B:0C:65:0E:E0:B2:AD:27:56:A3:C0:49 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0584bcf4-20b6-4da5-a7fb-e7bbea81ff74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.2.0/24 Signature Algorithm: sha256WithRSAEncryption 38:03:98:bd:ef:30:0f:0a:6b:7f:d8:97:a2:c4:8f:ae:cc:fc: 14:55:85:05:93:9b:30:cf:4d:24:c5:61:9c:7b:a5:d0:18:d6: 9e:fc:ae:2d:4b:e8:47:70:26:e7:43:24:1a:83:d7:00:1e:8e: b2:ec:aa:a2:cf:02:65:db:70:d4:a6:0b:cc:2d:cd:a9:11:bc: 15:b6:a4:09:1b:b8:72:98:b3:6f:28:97:50:49:b2:06:dd:bb: 15:6e:34:11:8b:12:3b:de:b1:6f:e8:75:19:91:aa:ea:4e:32: 10:22:24:21:ad:63:47:9a:87:f8:b0:f7:06:ef:b4:46:9e:ef: 4a:0c:c4:54:e9:8a:47:27:78:aa:63:88:69:fd:92:fb:89:37: f9:2b:a1:8f:1a:ae:5d:66:34:6e:0b:70:10:10:de:4b:69:33: 6b:5e:01:e3:c1:6b:37:c7:42:de:e5:7d:82:83:16:82:d0:47: be:9e:b3:79:44:b0:35:f0:33:88:37:38:68:75:c8:ed:5c:4a: 6d:0d:82:60:43:e9:e1:eb:77:d0:ef:27:dd:d7:ef:45:34:cc: 95:25:df:69:1a:43:95:4e:07:12:a3:ce:4a:b4:46:eb:97:69: 28:9d:11:b5:f7:42:11:a8:77:19:d6:d0:77:6d:48:12:6a:73: 43:d2:e6:7e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOlmXzuhTYmZT8bGXbEYnzmigy0QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTc1MDE1WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTJhZDkwMzIwNTI4OGU0MTlmMDljNDg1MjA3ZDMzN2Ni Zjk3OTRmN2ZhMjc5NTI5YjgwM2JmOWQyM2RmNjc5MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCSKEKac6t2nSD6AskyvoLt9no+0RWNMtTI99vBYrEgH8f5 pDtI7ELuJ13NqoGKEvIWbgWgmMR1RU+hsz3BSMPkRi9yCgrB4XS6rW1n4cNgQRk6 nssh/npTEJppne+xN5udLgN3xh4C3EyaUJgOz1qjf2MRCDixW/n+0oAItZsnqaY7 MvxBHY5Q+SWjEedGzKruf/+WyYcWw5DJPjU4lpTIK+NE6cHCs/+mH5wcyr1I1Ob2 lMFC2EXt/BcWF+AAWlUGdbwJhTApcget0IguraAhgdOcFXq7DQOsBDMJxTah6Pft pzI+QOFGi2bFcpu4wBFoCNnK/kcQTPXOCuUBUpkzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUkbs/X5nMfz4LDGUO4LKtJ1ajwEkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA1ODRiY2Y0LTIwYjYtNGRhNS1hN2ZiLWU3YmJlYTgxZmY3NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3gIwDQYJKoZIhvcNAQELBQADggEBADgDmL3vMA8Ka3/Yl6LEj67M/BRV hQWTmzDPTSTFYZx7pdAY1p78ri1L6EdwJudDJBqD1wAejrLsqqLPAmXbcNSmC8wt zakRvBW2pAkbuHKYs28ol1BJsgbduxVuNBGLEjvesW/odRmRqupOMhAiJCGtY0ea h/iw9wbvtEae70oMxFTpikcneKpjiGn9kvuJN/kroY8arl1mNG4LcBAQ3ktpM2te AePBazfHQt7lfYKDFoLQR76es3lEsDXwM4g3OGh1yO1cSm0NgmBD6eHrd9DvJ93X 70U0zJUl32kaQ5VOBxKjzkq0RuuXaSidEbX3QhGodxnW0HdtSBJqc0PS5n4= -----END CERTIFICATE-----Generated at Sat Apr 26 17:35:39 2025 by rpki-client