$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/605889ea-ac6a-4eac-93bf-bdad6dfaed82.roa File: 605889ea-ac6a-4eac-93bf-bdad6dfaed82.roa (raw, json) Hash identifier: JZ2s2xCJ7CtYnphj2i/qWLsUytyhurH6uOMAVKD9SyI= Subject key identifier: 7A:F5:75:CF:94:5C:24:E5:C5:63:45:DC:D8:22:91:2A:A3:8F:9F:39 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 237E8EA83D7FFEE89FA1F8AB3288ABE5C01EE20B Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/605889ea-ac6a-4eac-93bf-bdad6dfaed82.roa Signing time: Mon 14 Apr 2025 15:51:08 +0000 ROA not before: Mon 14 Apr 2025 15:51:08 +0000 ROA not after: Mon 19 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.220.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7e:8e:a8:3d:7f:fe:e8:9f:a1:f8:ab:32:88:ab:e5:c0:1e:e2:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 14 15:51:08 2025 GMT Not After : May 19 23:59:59 2025 GMT Subject: serialNumber=7559dfec2afc5528fe614c38f6ed7dccfb8ba15dceb2563f7b72e990a8c10cdc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:29:7e:8b:8a:1b:96:02:23:86:39:9f:c0:58: 26:8d:73:64:4d:6d:b5:ec:fc:a8:1e:ab:5b:fa:91: 5e:3c:c6:7a:3f:a9:ec:a8:2a:34:ec:bd:27:92:2c: e5:f3:23:1c:a9:76:bb:7a:70:13:32:96:4f:86:65: fe:d9:81:60:42:b6:79:de:78:dd:a4:22:df:d2:d7: 30:bb:02:b1:04:a5:90:26:bd:ed:fd:f4:9d:25:c4: 92:cb:ba:a8:12:b2:b0:14:b4:34:0f:44:ed:85:aa: 82:91:99:ef:de:09:8d:0c:16:a4:b5:38:17:1f:ad: 28:73:55:7b:06:b4:8a:64:26:95:5d:a8:30:8a:cc: 75:e9:88:e4:44:17:0e:29:73:04:c4:18:6d:6f:12: 73:62:45:76:0e:08:0c:82:42:08:d5:2f:24:be:15: 9a:f6:e7:4a:cc:90:0a:6e:cd:e5:05:34:98:37:04: 20:ee:85:90:03:71:1c:0d:90:ef:14:a3:d5:aa:a4: 14:29:e8:56:b8:3e:b5:3f:64:4e:d8:b7:41:b6:d7: 70:f8:b4:14:68:44:e5:8b:d5:44:30:43:8d:7b:27: 93:eb:c0:17:a2:17:da:fc:ac:1c:7b:34:68:fa:6f: f6:42:ba:d8:d7:b0:22:8e:60:a9:25:d1:fb:59:fd: 06:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:75:CF:94:5C:24:E5:C5:63:45:DC:D8:22:91:2A:A3:8F:9F:39 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/605889ea-ac6a-4eac-93bf-bdad6dfaed82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.220.248.0/23 Signature Algorithm: sha256WithRSAEncryption 82:fd:0b:de:f2:da:1a:5f:92:f4:a2:32:65:e6:3e:0a:df:71: 9b:5a:b8:1e:7d:cf:16:09:d6:9f:1e:18:b5:b7:d7:53:0e:71: dc:0d:f4:0d:5d:a7:75:52:9a:62:f8:6a:4c:23:3b:c1:19:f6: 45:c1:e2:16:1c:6f:38:8a:d6:dc:90:b7:46:e7:5c:d5:0f:a2: ac:a2:95:25:ba:e6:53:1b:c6:95:db:95:21:c5:5f:9a:6c:7e: b7:08:01:ef:f6:fd:9a:15:0e:42:f4:48:33:23:11:fc:ec:e5: 72:d2:13:bc:0d:af:65:90:4a:b9:e3:62:3b:40:cb:a8:ea:fc: 5a:e5:27:40:62:e2:f5:8c:8a:87:a9:5c:a7:af:8f:c9:89:df: 0b:1a:15:fd:ef:64:6a:69:73:cf:7f:2e:09:0e:f2:1a:5b:c1: c3:70:ac:02:02:22:ba:b0:7c:54:cc:68:28:27:5a:d7:a0:68: 8a:74:1f:79:5e:a6:b4:f1:64:b2:7e:16:79:1f:69:09:11:77: 4d:2a:ed:c2:30:a7:69:32:ea:96:d8:2a:e4:83:02:29:d6:3d: c3:51:4b:db:96:1a:10:26:f0:86:69:0b:4d:8c:03:bc:71:7c: d8:53:e6:f0:dd:cc:b4:25:fd:6b:53:fb:35:25:31:38:0c:34: 7f:d8:93:6c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI36OqD1//uifofirMoir5cAe4gswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDE0MTU1MTA4WhcNMjUwNTE5MjM1OTU5 WjB6MUkwRwYDVQQFE0A3NTU5ZGZlYzJhZmM1NTI4ZmU2MTRjMzhmNmVkN2RjY2Zi OGJhMTVkY2ViMjU2M2Y3YjcyZTk5MGE4YzEwY2RjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaKX6LihuWAiOGOZ/AWCaNc2RNbbXs/Kgeq1v6kV48xno/ qeyoKjTsvSeSLOXzIxypdrt6cBMylk+GZf7ZgWBCtnneeN2kIt/S1zC7ArEEpZAm ve399J0lxJLLuqgSsrAUtDQPRO2FqoKRme/eCY0MFqS1OBcfrShzVXsGtIpkJpVd qDCKzHXpiOREFw4pcwTEGG1vEnNiRXYOCAyCQgjVLyS+FZr250rMkApuzeUFNJg3 BCDuhZADcRwNkO8Uo9WqpBQp6Fa4PrU/ZE7Yt0G213D4tBRoROWL1UQwQ417J5Pr wBeiF9r8rBx7NGj6b/ZCutjXsCKOYKkl0ftZ/QbFAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUevV1z5RcJOXFY0Xc2CKRKqOPnzkwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYwNTg4OWVhLWFjNmEtNGVhYy05M2JmLWJkYWQ2ZGZhZWQ4Mi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEP3PgwDQYJKoZIhvcNAQELBQADggEBAIL9C97y2hpfkvSiMmXmPgrfcZta uB59zxYJ1p8eGLW311MOcdwN9A1dp3VSmmL4akwjO8EZ9kXB4hYcbziK1tyQt0bn XNUPoqyilSW65lMbxpXblSHFX5psfrcIAe/2/ZoVDkL0SDMjEfzs5XLSE7wNr2WQ SrnjYjtAy6jq/FrlJ0Bi4vWMioepXKevj8mJ3wsaFf3vZGppc89/LgkO8hpbwcNw rAICIrqwfFTMaCgnWtegaIp0H3leprTxZLJ+FnkfaQkRd00q7cIwp2ky6pbYKuSD AinWPcNRS9uWGhAm8IZpC02MA7xxfNhT5vDdzLQl/WtT+zUlMTgMNH/Yk2w= -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:43 2025 by rpki-client