$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa File: 16788add-b139-4af8-bd22-fe8b2177c578.roa (raw, json) Hash identifier: bGhbRl2hqDFNbyO+7qovr8abn3y4iDpGsT/2jHamR/k= Subject key identifier: B5:94:88:2D:D6:40:69:46:90:C3:1D:F9:D3:0B:BA:79:39:C8:E6:00 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5A475EF85A1D0E087F4A06AE5613417DBDFAAB7E Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa Signing time: Fri 25 Apr 2025 15:30:19 +0000 ROA not before: Fri 25 Apr 2025 15:30:19 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.137.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:47:5e:f8:5a:1d:0e:08:7f:4a:06:ae:56:13:41:7d:bd:fa:ab:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:30:19 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=150796faeebd74638f06593d2ba6f752ee04966f983048e35d444daf2408e897, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4b:3c:f4:f3:1c:59:01:eb:13:f4:53:42:2d: d3:51:c2:94:df:87:e9:29:67:aa:20:0b:11:fe:83: 06:6d:6a:eb:4a:af:87:be:4f:d4:db:d1:b6:ff:e1: f1:33:bd:63:d3:17:48:68:e7:d8:89:87:93:70:cd: b3:ea:5e:af:d3:8b:99:2f:69:d7:fc:5d:44:df:a7: 5a:d6:34:d2:23:cc:6d:e4:0a:4f:7d:0b:d2:55:ed: ba:98:ba:0f:27:76:5a:13:96:73:0b:da:f6:b8:0b: b9:d2:41:39:39:2e:70:84:e6:c1:e6:fe:03:ce:f3: f9:b4:d8:78:f0:43:a7:d8:4d:39:f2:53:1e:03:8b: 72:27:3f:92:91:6d:e1:41:d0:1c:43:93:3c:3d:b7: 1c:f1:80:62:14:86:e4:bc:3e:73:1e:e9:77:36:a1: cf:30:dc:9a:c7:3c:1c:6f:67:01:18:af:6a:6d:e3: cf:d0:0a:8e:cb:da:63:b6:cf:d2:15:90:34:34:00: bd:14:c4:dc:0e:e2:fd:7b:66:cd:cb:62:42:e9:32: e7:4a:fc:e9:c5:8c:16:58:36:ec:8b:81:fa:77:a4: df:0a:45:27:61:fa:78:b2:ec:1f:49:97:9e:8e:2f: eb:9c:c7:79:cc:4f:8a:b9:36:da:15:a0:8e:23:8f: 89:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:94:88:2D:D6:40:69:46:90:C3:1D:F9:D3:0B:BA:79:39:C8:E6:00 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/16788add-b139-4af8-bd22-fe8b2177c578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.137.0.0/16 Signature Algorithm: sha256WithRSAEncryption 7e:20:4a:28:a2:c3:01:bb:4a:10:f2:4f:fa:57:b3:53:5f:aa: 08:78:3e:7a:dc:99:7d:cf:ea:5b:09:b3:32:64:47:52:93:ef: d4:1c:8f:37:d1:7d:a8:e5:47:e1:5f:e0:1a:cb:37:15:0a:c5: 60:2b:1f:6a:a8:6b:41:62:d2:b4:9d:4c:a5:73:22:1a:45:2e: fa:af:6f:0d:cc:80:70:88:85:02:8c:f3:a5:92:fb:01:2b:94: f7:75:7a:4c:4f:30:5a:e4:a9:77:71:47:bb:1a:81:49:c4:fe: 58:30:3e:1a:69:fa:74:ac:04:81:a2:89:f0:35:12:14:ff:f8: 6d:8c:f8:da:06:e9:f0:81:0a:8e:0a:e1:dc:8c:e2:11:48:8c: 59:16:dd:d8:1b:d9:01:43:f9:50:7d:bc:ee:ee:eb:b3:07:c1: b6:86:d6:f7:95:ea:60:ff:26:6e:25:b3:4f:22:0a:5d:52:38: 89:26:2a:b7:87:dc:9f:b6:ed:a5:26:7d:21:dd:ef:3d:07:4f: 8c:77:6f:42:a5:8a:5a:a3:94:ff:90:57:3f:b5:71:0a:a6:83: fb:f8:c0:15:b4:d6:dd:b7:00:ec:42:e5:ad:92:98:1c:ed:10: e1:88:9e:50:ad:f7:56:8d:c4:d1:fb:12:ea:bb:b3:a4:57:3d: bb:a7:2a:50 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUWkde+FodDgh/SgauVhNBfb36q34wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTUzMDE5WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNTA3OTZmYWVlYmQ3NDYzOGYwNjU5M2QyYmE2Zjc1MmVl MDQ5NjZmOTgzMDQ4ZTM1ZDQ0NGRhZjI0MDhlODk3MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCoSzz08xxZAesT9FNCLdNRwpTfh+kpZ6ogCxH+gwZtautK r4e+T9Tb0bb/4fEzvWPTF0ho59iJh5NwzbPqXq/Ti5kvadf8XUTfp1rWNNIjzG3k Ck99C9JV7bqYug8ndloTlnML2va4C7nSQTk5LnCE5sHm/gPO8/m02HjwQ6fYTTny Ux4Di3InP5KRbeFB0BxDkzw9txzxgGIUhuS8PnMe6Xc2oc8w3JrHPBxvZwEYr2pt 48/QCo7L2mO2z9IVkDQ0AL0UxNwO4v17Zs3LYkLpMudK/OnFjBZYNuyLgfp3pN8K RSdh+niy7B9Jl56OL+ucx3nMT4q5NtoVoI4jj4kvAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUtZSILdZAaUaQwx350wu6eTnI5gAwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzE2Nzg4YWRkLWIxMzktNGFmOC1iZDIyLWZlOGIyMTc3YzU3OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPiTANBgkqhkiG9w0BAQsFAAOCAQEAfiBKKKLDAbtKEPJP+lezU1+qCHg+ etyZfc/qWwmzMmRHUpPv1ByPN9F9qOVH4V/gGss3FQrFYCsfaqhrQWLStJ1MpXMi GkUu+q9vDcyAcIiFAozzpZL7ASuU93V6TE8wWuSpd3FHuxqBScT+WDA+Gmn6dKwE gaKJ8DUSFP/4bYz42gbp8IEKjgrh3IziEUiMWRbd2BvZAUP5UH287u7rswfBtobW 95XqYP8mbiWzTyIKXVI4iSYqt4fcn7btpSZ9Id3vPQdPjHdvQqWKWqOU/5BXP7Vx CqaD+/jAFbTW3bcA7ELlrZKYHO0Q4YieUK33Vo3E0fsS6ruzpFc9u6cqUA== -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:09 2025 by rpki-client