$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dd7a024-db52-4108-9fa9-13dd95fd85c7.roa File: 2dd7a024-db52-4108-9fa9-13dd95fd85c7.roa (raw, json) Hash identifier: 6UtlRZjUJFePnw2Rn1O+vrcahvKR6Ieelj0uEqxdbwU= Subject key identifier: 37:81:40:15:76:79:DD:DD:4A:7F:E7:B3:7F:52:83:40:0F:87:83:5C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C5095539F47818DA2EE1956F7A287DE5DA0E4E6 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dd7a024-db52-4108-9fa9-13dd95fd85c7.roa Signing time: Tue 22 Apr 2025 17:41:48 +0000 ROA not before: Tue 22 Apr 2025 17:41:48 +0000 ROA not after: Tue 27 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.250.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:50:95:53:9f:47:81:8d:a2:ee:19:56:f7:a2:87:de:5d:a0:e4:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 22 17:41:48 2025 GMT Not After : May 27 23:59:59 2025 GMT Subject: serialNumber=1c8d99cbf90513fb5da72070eb1cb44a3476423caa9753c4ffd619c8b1483320, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:20:86:1d:31:0e:28:34:53:eb:3f:db:ee: 59:ea:e4:1f:36:d4:48:00:57:a3:0d:cd:b7:b5:9d: 20:cb:11:a1:2b:29:84:b9:e5:64:a1:d4:82:44:49: ac:b9:80:94:f9:0c:e7:5d:42:fc:97:06:4e:f2:cd: ab:de:5f:11:cb:97:e6:7e:cf:6f:1c:03:1a:df:f9: a5:5b:d6:b2:c4:e4:60:a7:19:a0:e0:c0:57:f2:5e: f3:97:31:b1:8d:e3:96:ee:f6:4c:69:03:cb:a4:5b: ec:08:21:91:4e:b1:98:49:69:c2:a8:1a:9d:42:83: 0e:ef:e5:7d:4e:5d:2b:2b:64:56:d2:7f:0f:20:f1: 38:e4:5e:7e:14:58:49:ab:2b:54:64:67:bf:3b:a4: 55:4b:5e:06:96:b9:c4:7b:00:30:75:6e:01:2c:96: 9c:0a:74:4d:8d:a0:17:c0:79:ff:60:c2:29:5f:34: 0b:1b:38:e7:2d:a8:b0:97:d3:40:60:e7:bf:a2:20: ab:9c:9e:be:0f:3b:95:d0:8a:63:f3:02:f6:ee:88: be:95:06:1c:0b:4b:23:99:1b:a0:79:1d:fd:ad:f5: 08:3f:7c:5b:14:9c:7e:3a:1f:96:e3:89:55:39:46: 52:b2:a4:96:e3:e5:52:54:e0:ed:7b:dc:d9:22:e7: ff:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:81:40:15:76:79:DD:DD:4A:7F:E7:B3:7F:52:83:40:0F:87:83:5C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2dd7a024-db52-4108-9fa9-13dd95fd85c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.250.0.0/16 Signature Algorithm: sha256WithRSAEncryption 45:22:61:0d:6d:f7:3a:5e:76:16:1f:16:19:32:6a:b6:fd:76: 1a:88:14:51:9f:b0:ab:99:50:90:d8:5e:54:3c:22:30:2c:b7: 89:aa:30:2d:bd:23:be:64:64:48:e6:4c:6f:c9:ef:1c:6c:99: 06:d3:4e:25:50:1f:99:51:fc:8c:c1:a1:e6:a5:8b:4b:6f:44: aa:a6:69:bd:5a:79:e0:a4:30:8a:f9:d4:97:79:29:07:84:95: d5:cf:9a:0e:7d:5b:5c:24:0b:3e:30:75:74:27:d9:4e:f7:d8: 40:69:7d:7b:42:ce:da:d2:17:5c:32:e0:5a:a0:37:af:88:d9: e4:16:04:b0:6c:19:56:23:dd:21:4c:97:b9:ad:c6:38:fb:fc: ec:b0:39:80:36:b5:98:70:e2:79:48:79:ef:b8:39:b4:cc:72: 49:0a:91:6d:ca:7c:eb:06:b5:e9:75:e0:6e:47:11:4e:13:89: c7:9a:d3:94:ab:03:2d:f8:94:af:0b:64:de:3a:05:e8:72:8b: cb:6f:7d:27:63:b1:2b:bb:41:6c:38:48:bd:09:6e:1e:70:c8: 1c:1b:ec:cd:34:90:28:68:75:e0:3f:77:71:0b:1e:4e:38:15: e7:e7:1d:04:55:99:6e:ec:77:d1:7b:db:06:a7:04:12:4c:5d: f2:7c:e3:d6 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbFCVU59HgY2i7hlW96KH3l2g5OYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDIyMTc0MTQ4WhcNMjUwNTI3MjM1OTU5 WjB6MUkwRwYDVQQFE0AxYzhkOTljYmY5MDUxM2ZiNWRhNzIwNzBlYjFjYjQ0YTM0 NzY0MjNjYWE5NzUzYzRmZmQ2MTljOGIxNDgzMzIwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDdKiCGHTEOKDRT6z/b7lnq5B821EgAV6MNzbe1nSDLEaEr KYS55WSh1IJESay5gJT5DOddQvyXBk7yzaveXxHLl+Z+z28cAxrf+aVb1rLE5GCn GaDgwFfyXvOXMbGN45bu9kxpA8ukW+wIIZFOsZhJacKoGp1Cgw7v5X1OXSsrZFbS fw8g8TjkXn4UWEmrK1RkZ787pFVLXgaWucR7ADB1bgEslpwKdE2NoBfAef9gwilf NAsbOOctqLCX00Bg57+iIKucnr4PO5XQimPzAvbuiL6VBhwLSyOZG6B5Hf2t9Qg/ fFsUnH46H5bjiVU5RlKypJbj5VJU4O173Nki5/9NAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUN4FAFXZ53d1Kf+ezf1KDQA+Hg1wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzJkZDdhMDI0LWRiNTItNDEwOC05ZmE5LTEzZGQ5NWZkODVjNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP+jANBgkqhkiG9w0BAQsFAAOCAQEARSJhDW33Ol52Fh8WGTJqtv12GogU UZ+wq5lQkNheVDwiMCy3iaowLb0jvmRkSOZMb8nvHGyZBtNOJVAfmVH8jMGh5qWL S29EqqZpvVp54KQwivnUl3kpB4SV1c+aDn1bXCQLPjB1dCfZTvfYQGl9e0LO2tIX XDLgWqA3r4jZ5BYEsGwZViPdIUyXua3GOPv87LA5gDa1mHDieUh577g5tMxySQqR bcp86wa16XXgbkcRThOJx5rTlKsDLfiUrwtk3joF6HKLy299J2OxK7tBbDhIvQlu HnDIHBvszTSQKGh14D93cQseTjgV5+cdBFWZbux30XvbBqcEEkxd8nzj1g== -----END CERTIFICATE-----Generated at Sun Apr 27 07:07:39 2025 by rpki-client