$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cf096bd-2366-4fa6-b05e-036ead523d5f.roa File: 4cf096bd-2366-4fa6-b05e-036ead523d5f.roa (raw, json) Hash identifier: 3nNY0uNC/OLI30tuA9njPZW7BTjKjVjkdOwtaz1lFDA= Subject key identifier: 82:EC:D4:C5:E3:8B:82:D5:D3:11:1C:C1:EA:74:42:51:32:97:4E:29 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4AA2EA13E899DD92C8ECCC3652947411AFAAE9DC Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cf096bd-2366-4fa6-b05e-036ead523d5f.roa Signing time: Fri 25 Apr 2025 15:30:26 +0000 ROA not before: Fri 25 Apr 2025 15:30:26 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 3209 IP address blocks: 15.145.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a2:ea:13:e8:99:dd:92:c8:ec:cc:36:52:94:74:11:af:aa:e9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:30:26 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=dc415db024b566a1e902faf0e21df9ed330b434475c44d4e1f1d9bfd0e791473, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:bf:52:2a:db:42:a7:da:f9:55:de:d2:97: 36:c1:ae:f6:07:c7:ff:d3:5c:85:bb:dd:10:4c:aa: 97:14:3d:ad:ba:ea:fb:4d:93:fe:c0:8f:9a:ff:7d: 1b:20:6f:ce:86:ed:93:16:16:f9:24:90:f2:ff:83: 30:0f:ba:d9:b0:3a:53:10:3a:a2:bb:03:e4:35:cf: 7d:18:2a:9a:73:d9:5b:2d:af:c1:7d:83:d7:7a:4d: 5e:66:6d:9c:de:b8:2d:28:fd:66:f8:aa:17:f3:39: 09:08:8b:df:f3:13:9c:35:b0:04:97:32:f9:be:3b: d1:78:83:be:31:c9:d9:f6:bb:93:78:95:72:c0:18: 9a:49:c3:8b:7e:b9:3a:52:bb:76:80:82:19:70:96: 62:02:af:64:c6:f5:d6:12:10:52:a8:46:f4:04:5a: e6:94:64:fb:70:0d:b1:25:b0:d1:fd:2c:af:8a:3d: a3:ea:1d:0d:c0:e9:4e:83:08:32:1f:15:a0:b5:39: d9:85:f7:31:a1:73:09:7c:29:a6:6e:45:7f:df:17: 9e:91:b3:b7:f6:f1:f3:c8:68:e1:36:6a:be:d5:04: ef:41:56:1c:58:03:25:b4:e6:b1:2e:eb:b0:b9:4a: 3a:68:24:d2:30:90:7c:d5:08:7f:d3:1b:96:a8:a4: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EC:D4:C5:E3:8B:82:D5:D3:11:1C:C1:EA:74:42:51:32:97:4E:29 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4cf096bd-2366-4fa6-b05e-036ead523d5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.145.16.0/22 Signature Algorithm: sha256WithRSAEncryption 79:dd:1e:39:53:d7:d2:d9:91:11:7f:be:8d:2d:4f:7e:8f:d9: a2:80:1e:c3:43:dc:18:ec:30:f0:a0:e9:39:26:2e:ce:88:3f: 8a:e5:07:6c:d0:23:71:c6:32:c1:d5:d2:6b:42:4e:50:56:66: 62:e9:4b:74:49:d9:9a:d9:5f:93:6a:90:86:ba:f2:44:b2:97: 3a:73:3f:3b:3f:de:78:1e:30:de:39:84:40:b1:e2:42:1c:4f: 9c:45:ca:cd:3c:24:0c:aa:65:cf:92:8e:e6:4d:96:66:dc:80: 2f:21:61:fc:e5:ce:77:9d:1f:da:aa:1e:7b:f2:02:e8:8a:98: d4:ba:fa:25:77:3e:bb:50:a9:fa:32:f3:5c:fe:d7:ac:16:5e: b2:71:34:c8:ae:31:51:50:73:42:c7:21:5b:56:b6:55:c1:38: 62:a3:29:bc:90:0a:de:62:2c:c5:1c:16:be:66:a0:27:a6:76: 4c:93:3b:3a:dc:60:eb:b4:21:48:bb:25:fe:91:bb:70:4f:5d: 2a:34:7a:a0:e3:e8:1b:4a:16:92:35:8e:47:ac:b9:9b:6e:69: 13:ed:ab:42:b5:46:bc:dc:dc:c8:f3:a1:b4:c4:9e:30:3b:44: ec:25:bb:21:0f:5a:89:77:7e:31:cf:c8:6b:c8:6d:09:0a:f9: 5f:77:5e:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUSqLqE+iZ3ZLI7Mw2UpR0Ea+q6dwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTUzMDI2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BkYzQxNWRiMDI0YjU2NmExZTkwMmZhZjBlMjFkZjllZDMz MGI0MzQ0NzVjNDRkNGUxZjFkOWJmZDBlNzkxNDczMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3Mb9SKttCp9r5Vd7SlzbBrvYHx//TXIW73RBMqpcUPa26 6vtNk/7Aj5r/fRsgb86G7ZMWFvkkkPL/gzAPutmwOlMQOqK7A+Q1z30YKppz2Vst r8F9g9d6TV5mbZzeuC0o/Wb4qhfzOQkIi9/zE5w1sASXMvm+O9F4g74xydn2u5N4 lXLAGJpJw4t+uTpSu3aAghlwlmICr2TG9dYSEFKoRvQEWuaUZPtwDbElsNH9LK+K PaPqHQ3A6U6DCDIfFaC1OdmF9zGhcwl8KaZuRX/fF56Rs7f28fPIaOE2ar7VBO9B VhxYAyW05rEu67C5SjpoJNIwkHzVCH/TG5aopBpnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUguzUxeOLgtXTERzB6nRCUTKXTikwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzRjZjA5NmJkLTIzNjYtNGZhNi1iMDVlLTAzNmVhZDUyM2Q1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIPkRAwDQYJKoZIhvcNAQELBQADggEBAHndHjlT19LZkRF/vo0tT36P2aKA HsND3BjsMPCg6TkmLs6IP4rlB2zQI3HGMsHV0mtCTlBWZmLpS3RJ2ZrZX5NqkIa6 8kSylzpzPzs/3ngeMN45hECx4kIcT5xFys08JAyqZc+SjuZNlmbcgC8hYfzlzned H9qqHnvyAuiKmNS6+iV3PrtQqfoy81z+16wWXrJxNMiuMVFQc0LHIVtWtlXBOGKj KbyQCt5iLMUcFr5moCemdkyTOzrcYOu0IUi7Jf6Ru3BPXSo0eqDj6BtKFpI1jkes uZtuaRPtq0K1Rrzc3MjzobTEnjA7ROwluyEPWol3fjHPyGvIbQkK+V93Xhs= -----END CERTIFICATE-----Generated at Sat Apr 26 14:46:54 2025 by rpki-client