$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa File: 25d1778a-9121-4e26-8dc8-e7eed6e82870.roa (raw, json) Hash identifier: tWB6PrHhjcWGwITwF9Iucg7wM4Q6cgNn24CmqIJ9sNs= Subject key identifier: A1:A3:9F:36:47:1C:90:1E:99:D8:0C:4C:6D:73:C1:41:C5:00:8B:F8 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 5EC86F9F993EA6AE1855CBD779B988D99EFB4E32 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa Signing time: Wed 16 Apr 2025 00:20:52 +0000 ROA not before: Wed 16 Apr 2025 00:20:52 +0000 ROA not after: Wed 21 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.181.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c8:6f:9f:99:3e:a6:ae:18:55:cb:d7:79:b9:88:d9:9e:fb:4e:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 16 00:20:52 2025 GMT Not After : May 21 23:59:59 2025 GMT Subject: serialNumber=0cc16304edf73dfe24ef640c9b5867421afc6f3361d29b0a149b66d72358045f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f0:bc:07:81:c2:92:ab:e7:89:3a:29:38:fa: 60:07:c2:35:64:bc:29:e4:c8:a0:ba:d8:7e:60:19: ae:ad:55:de:cc:d3:fa:02:ec:9a:1c:ad:48:b8:29: 65:f4:c7:5e:75:16:90:f9:08:14:92:93:4d:70:2e: e0:84:c6:53:ed:1f:12:02:83:2f:c8:fd:8e:16:8d: 39:ad:f2:8c:c1:4d:11:9a:27:5d:0a:e9:41:34:9e: 4c:d4:4d:31:ab:dc:55:6c:99:17:80:00:e5:c5:2c: ad:ed:65:ba:df:42:58:e7:6c:64:2e:31:5e:d3:1f: 78:f7:90:74:98:ca:b0:a9:2f:92:3d:90:95:f6:62: eb:b7:83:14:12:6b:42:de:e8:01:28:01:4a:78:37: 39:35:df:33:da:f2:7a:9d:0b:90:c2:18:eb:ce:b7: 69:b0:b1:94:01:e5:cb:58:29:68:bd:ec:e3:ee:a4: fe:79:9a:76:40:d1:c8:11:c1:44:17:ed:66:6b:15: 08:c5:31:94:b8:03:a1:ee:e3:21:9e:24:02:91:c6: e8:90:2e:3c:cf:13:af:eb:97:a9:72:cf:53:9d:d9: 48:4b:ef:d4:d4:7a:2a:d9:7a:3b:85:4c:b3:39:c4: 33:bd:58:43:7b:4c:a6:a5:b3:c7:e9:bc:8b:d3:1e: a2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A3:9F:36:47:1C:90:1E:99:D8:0C:4C:6D:73:C1:41:C5:00:8B:F8 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25d1778a-9121-4e26-8dc8-e7eed6e82870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.181.16.0/20 Signature Algorithm: sha256WithRSAEncryption 50:1f:db:76:bb:e1:3c:4d:77:4b:20:e8:80:71:be:5b:40:f3: 34:8a:7f:0f:cd:96:92:a0:37:33:a3:99:03:b0:88:9a:01:aa: 76:d2:3d:51:67:39:f6:37:db:aa:ff:67:ee:04:1a:1f:b1:b9: d3:64:89:08:5f:9e:1b:13:46:e8:52:84:6c:67:8d:cf:fb:97: f7:23:f1:0d:ed:a4:a5:f4:65:e0:81:15:c1:e7:b2:c0:29:ee: d0:82:44:9b:d8:2b:e0:a9:00:e4:38:ea:ac:89:a9:20:70:b4: f2:0d:c2:f0:53:5a:03:d6:2b:8d:38:ca:ad:6a:5a:2a:94:e6: 90:99:b9:9d:e4:53:08:9d:cb:85:e2:f0:e5:f7:8d:69:c0:58: ba:ff:1a:e2:e9:60:bd:7b:de:93:0f:84:07:60:da:d4:81:21: 4d:35:94:a9:c4:cf:5f:bb:a6:cf:b9:1c:a9:3e:70:4d:68:6b: f6:71:4d:cd:7c:0a:72:8b:60:15:85:f7:15:ad:f5:ee:0a:37: a7:ef:b8:80:64:e7:61:b2:57:8e:e7:dc:82:98:4a:2a:26:d5: df:e3:7b:1b:61:70:01:4f:ab:23:39:cd:8c:7d:20:f3:47:75: 11:93:a1:61:18:47:3c:67:03:4f:92:c9:f4:63:9d:a5:cf:71: e9:af:25:50 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXshvn5k+pq4YVcvXebmI2Z77TjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE2MDAyMDUyWhcNMjUwNTIxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwY2MxNjMwNGVkZjczZGZlMjRlZjY0MGM5YjU4Njc0MjFh ZmM2ZjMzNjFkMjliMGExNDliNjZkNzIzNTgwNDVmMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC+8LwHgcKSq+eJOik4+mAHwjVkvCnkyKC62H5gGa6tVd7M 0/oC7JocrUi4KWX0x151FpD5CBSSk01wLuCExlPtHxICgy/I/Y4WjTmt8ozBTRGa J10K6UE0nkzUTTGr3FVsmReAAOXFLK3tZbrfQljnbGQuMV7TH3j3kHSYyrCpL5I9 kJX2Yuu3gxQSa0Le6AEoAUp4Nzk13zPa8nqdC5DCGOvOt2mwsZQB5ctYKWi97OPu pP55mnZA0cgRwUQX7WZrFQjFMZS4A6Hu4yGeJAKRxuiQLjzPE6/rl6lyz1Od2UhL 79TUeirZejuFTLM5xDO9WEN7TKals8fpvIvTHqKDAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUoaOfNkcckB6Z2AxMbXPBQcUAi/gwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzI1ZDE3NzhhLTkxMjEtNGUyNi04ZGM4LWU3ZWVkNmU4Mjg3MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQPtRAwDQYJKoZIhvcNAQELBQADggEBAFAf23a74TxNd0sg6IBxvltA8zSK fw/NlpKgNzOjmQOwiJoBqnbSPVFnOfY326r/Z+4EGh+xudNkiQhfnhsTRuhShGxn jc/7l/cj8Q3tpKX0ZeCBFcHnssAp7tCCRJvYK+CpAOQ46qyJqSBwtPINwvBTWgPW K404yq1qWiqU5pCZuZ3kUwidy4Xi8OX3jWnAWLr/GuLpYL173pMPhAdg2tSBIU01 lKnEz1+7ps+5HKk+cE1oa/ZxTc18CnKLYBWF9xWt9e4KN6fvuIBk52GyV47n3IKY Siom1d/jexthcAFPqyM5zYx9IPNHdRGToWEYRzxnA0+SyfRjnaXPcemvJVA= -----END CERTIFICATE-----Generated at Sat Apr 26 17:38:51 2025 by rpki-client