$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6073987d-7094-4e34-bf3f-2089273eb061.roa File: 6073987d-7094-4e34-bf3f-2089273eb061.roa (raw, json) Hash identifier: FhVsKWLth2lFq62TGiZdKPu5/Jd32pvtxuHynUFeO8Y= Subject key identifier: 10:8A:21:B7:A0:5A:11:95:8F:E8:76:FD:60:2F:82:FE:5C:41:15:45 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 14217FD8531389D4F50B6FEB45D6EF45A3456DA0 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6073987d-7094-4e34-bf3f-2089273eb061.roa Signing time: Fri 25 Apr 2025 15:31:32 +0000 ROA not before: Fri 25 Apr 2025 15:31:32 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 3209 IP address blocks: 15.145.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:21:7f:d8:53:13:89:d4:f5:0b:6f:eb:45:d6:ef:45:a3:45:6d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:31:32 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=15c35d2d38c98991a716d08b4d191521926c2a7e6cca7ee05509aa135760733e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fe:82:60:4d:44:7b:92:66:46:06:dd:1a:d7: a0:5a:f4:2b:1c:f6:ce:ad:84:c1:90:3a:a2:43:18: 4e:6f:b3:a3:9e:4b:e9:83:c1:0e:e3:14:10:88:8a: 2c:f5:4a:52:92:e6:f8:65:23:d6:aa:d6:b1:cc:6d: 4d:8a:fd:8c:c5:58:fb:22:23:34:c5:53:78:e6:c2: 4b:bb:34:be:22:76:7e:e9:45:22:d3:d1:5b:4b:cc: 0c:cd:95:c8:33:61:46:8a:13:fe:b3:e3:98:0d:71: 3c:55:f1:a6:66:52:e1:f9:c0:21:3c:f6:9b:c3:9d: bd:5c:9b:90:00:a2:a2:ba:d2:ef:56:4c:1c:b7:fc: 1e:00:8f:4f:c4:7e:22:83:68:99:7d:7b:01:fd:34: 82:d0:fc:a9:87:19:86:3e:81:9d:79:7d:a3:6d:24: dd:b8:8d:47:a2:8b:7d:a4:cd:1d:83:4d:95:77:43: 66:32:27:b7:89:e5:0c:3a:c6:eb:54:ae:ca:51:f5: 56:ea:5b:d5:05:d3:d7:49:3f:42:4f:e7:19:0b:79: dc:82:52:1d:8a:d7:df:f2:27:c5:69:87:b6:4b:ff: 35:fa:a9:35:11:4d:6d:7c:3c:2c:97:c0:c6:af:d0: 1b:c2:99:37:a2:f3:d3:83:43:68:37:7d:69:89:48: 45:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8A:21:B7:A0:5A:11:95:8F:E8:76:FD:60:2F:82:FE:5C:41:15:45 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6073987d-7094-4e34-bf3f-2089273eb061.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.145.8.0/22 Signature Algorithm: sha256WithRSAEncryption 79:74:38:21:61:48:67:30:6c:9c:dc:43:90:8c:47:2e:41:91: e1:30:d2:99:90:d6:8e:89:7a:02:2a:3e:36:51:5c:ec:dc:ad: 08:3e:36:35:8e:92:59:d5:49:6e:cc:77:9a:e7:fb:7f:e8:fc: c9:b8:7e:41:f4:44:51:f1:70:ce:54:42:f4:0a:e3:bc:c7:9d: 15:7f:5a:3d:36:de:15:65:8b:f7:55:95:1f:8e:db:77:d8:43: 8c:ea:14:3e:fb:b8:fa:75:1c:d1:15:89:26:07:c2:59:92:2f: 64:9a:25:9c:0f:38:7a:a4:39:b1:47:58:43:65:35:6c:12:01: a0:7c:bf:08:2e:30:86:49:e9:0d:50:d0:a1:ed:b4:ea:24:63: 9d:60:c6:4e:76:b0:4d:d5:5e:24:df:5c:0d:12:88:ec:68:db: 29:14:fa:9b:e6:34:fa:c0:a5:66:63:e6:53:2d:93:35:d6:d1: cd:95:6f:5b:44:88:10:fe:42:7f:14:1e:56:ce:01:52:22:53: 26:dc:96:a3:01:33:ab:72:93:e8:45:0a:20:6f:e5:e1:f5:af: 01:a5:d4:aa:7d:09:fb:fc:63:07:51:e7:65:fd:2a:f8:30:7d: d7:c0:66:de:77:ac:25:f8:16:e3:55:f9:34:56:54:d5:27:d1: 73:47:f2:4b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFCF/2FMTidT1C2/rRdbvRaNFbaAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTUzMTMyWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AxNWMzNWQyZDM4Yzk4OTkxYTcxNmQwOGI0ZDE5MTUyMTky NmMyYTdlNmNjYTdlZTA1NTA5YWExMzU3NjA3MzNlMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCz/oJgTUR7kmZGBt0a16Ba9Csc9s6thMGQOqJDGE5vs6Oe S+mDwQ7jFBCIiiz1SlKS5vhlI9aq1rHMbU2K/YzFWPsiIzTFU3jmwku7NL4idn7p RSLT0VtLzAzNlcgzYUaKE/6z45gNcTxV8aZmUuH5wCE89pvDnb1cm5AAoqK60u9W TBy3/B4Aj0/EfiKDaJl9ewH9NILQ/KmHGYY+gZ15faNtJN24jUeii32kzR2DTZV3 Q2YyJ7eJ5Qw6xutUrspR9VbqW9UF09dJP0JP5xkLedyCUh2K19/yJ8Vph7ZL/zX6 qTURTW18PCyXwMav0BvCmTei89ODQ2g3fWmJSEUBAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUEIoht6BaEZWP6Hb9YC+C/lxBFUUwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzYwNzM5ODdkLTcwOTQtNGUzNC1iZjNmLTIwODkyNzNlYjA2MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIPkQgwDQYJKoZIhvcNAQELBQADggEBAHl0OCFhSGcwbJzcQ5CMRy5BkeEw 0pmQ1o6JegIqPjZRXOzcrQg+NjWOklnVSW7Md5rn+3/o/Mm4fkH0RFHxcM5UQvQK 47zHnRV/Wj023hVli/dVlR+O23fYQ4zqFD77uPp1HNEViSYHwlmSL2SaJZwPOHqk ObFHWENlNWwSAaB8vwguMIZJ6Q1Q0KHttOokY51gxk52sE3VXiTfXA0SiOxo2ykU +pvmNPrApWZj5lMtkzXW0c2Vb1tEiBD+Qn8UHlbOAVIiUybclqMBM6tyk+hFCiBv 5eH1rwGl1Kp9Cfv8YwdR52X9KvgwfdfAZt53rCX4FuNV+TRWVNUn0XNH8ks= -----END CERTIFICATE-----Generated at Sat Apr 26 18:04:48 2025 by rpki-client