$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67243aca-9f5a-4822-a70d-880eedd69366.roa File: 67243aca-9f5a-4822-a70d-880eedd69366.roa (raw, json) Hash identifier: n5YOZgP5hSV60upjVD00UIBLzqqfs11rHMiILof25RY= Subject key identifier: A8:96:28:C9:10:FD:90:86:6D:99:BF:53:D5:44:05:0C:A0:5D:E0:37 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 100FE00AAD00559795260D06D805EEDB831D30E9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67243aca-9f5a-4822-a70d-880eedd69366.roa Signing time: Fri 25 Apr 2025 15:30:24 +0000 ROA not before: Fri 25 Apr 2025 15:30:24 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 3209 IP address blocks: 15.145.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0f:e0:0a:ad:00:55:97:95:26:0d:06:d8:05:ee:db:83:1d:30:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 15:30:24 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=4cfb3c83dc634b0e249fdf38bd40c37fc73a9ec6399319ae272df64a04bc723c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:5c:3e:5d:19:54:85:ad:1e:f0:49:82:b5: 9e:96:44:7d:07:6a:c3:18:bf:ba:13:47:02:ac:96: a7:ee:83:be:de:5d:97:9e:e9:d4:96:39:31:e3:84: 5d:05:8d:39:e0:1a:6e:7f:83:6c:db:c5:f3:78:74: be:36:44:42:40:49:fc:21:85:d6:59:04:31:84:86: f9:d4:53:c9:a4:ea:22:14:83:89:61:73:6d:b4:f7: 12:57:1c:4b:6e:7d:58:f2:4d:c5:ad:16:5c:23:18: 56:03:46:23:bf:6d:ed:5d:74:20:c7:6a:3c:24:b7: 91:1c:47:a1:0b:f7:b2:89:86:14:89:0c:c1:1f:8d: 66:82:53:b5:22:46:eb:04:f4:e3:de:f3:83:78:6b: 42:2a:c5:b1:b0:67:1a:d5:46:4e:f7:65:3a:11:e5: c1:0d:b3:58:b8:26:3a:93:da:67:77:08:b7:ec:5e: 9e:25:7b:d8:48:67:26:75:db:7c:62:8c:91:b6:45: cb:4e:4e:2a:0d:98:7c:bb:7f:fc:31:e0:57:f4:e2: 02:55:82:38:93:2d:aa:d9:f6:ea:86:e2:73:78:87: 1a:a7:19:91:8a:49:79:21:9d:15:02:90:55:5d:13: 21:f6:a9:c2:54:cb:97:0b:61:0d:aa:7f:f9:9a:83: e9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:96:28:C9:10:FD:90:86:6D:99:BF:53:D5:44:05:0C:A0:5D:E0:37 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/67243aca-9f5a-4822-a70d-880eedd69366.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.145.0.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:6e:79:4c:09:9f:17:f4:78:67:f1:7f:cd:f5:97:64:c1:71: d3:a3:ac:b1:a6:16:3d:23:d5:31:b3:06:2d:d4:f5:b6:95:7b: d6:fa:f8:8c:33:69:d7:17:0f:2c:8a:ef:76:16:12:80:09:f7: 36:7b:5d:9e:48:29:7d:05:39:4e:ee:86:56:36:d8:dc:37:ea: 27:71:35:9a:af:64:24:34:a5:6f:b5:fe:d2:a8:66:51:ec:a6: 52:df:7e:99:06:0f:b8:9d:30:5c:8d:36:6e:06:10:7a:0a:db: 66:12:5b:45:5e:20:ce:fd:1f:63:a4:59:6a:49:7a:ae:a7:86: 22:55:01:3d:45:6b:fd:89:61:97:ea:08:f5:1e:67:ca:0e:67: a5:52:6e:d1:44:de:2a:e8:c3:83:4c:cc:ea:81:8d:9f:4b:fe: df:c1:af:56:be:43:c3:7c:91:af:27:5e:42:2d:36:91:a2:30: 64:cc:c1:22:c7:1b:f9:19:68:4e:66:8c:c5:f2:ad:93:01:a1: 63:f4:c7:6f:5b:ca:67:ae:ca:27:70:ec:8d:89:bc:7a:f3:55: 18:0d:a2:e2:fe:01:49:ab:a7:0b:19:0b:09:7e:05:3b:54:f7: ec:65:03:a1:8f:d5:1c:a6:d9:ce:7d:05:ef:f7:b2:40:7f:8a: 60:79:ad:ac -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUEA/gCq0AVZeVJg0G2AXu24MdMOkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTUzMDI0WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0Y2ZiM2M4M2RjNjM0YjBlMjQ5ZmRmMzhiZDQwYzM3ZmM3 M2E5ZWM2Mzk5MzE5YWUyNzJkZjY0YTA0YmM3MjNjMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCzH1w+XRlUha0e8EmCtZ6WRH0HasMYv7oTRwKslqfug77e XZee6dSWOTHjhF0FjTngGm5/g2zbxfN4dL42REJASfwhhdZZBDGEhvnUU8mk6iIU g4lhc2209xJXHEtufVjyTcWtFlwjGFYDRiO/be1ddCDHajwkt5EcR6EL97KJhhSJ DMEfjWaCU7UiRusE9OPe84N4a0IqxbGwZxrVRk73ZToR5cENs1i4JjqT2md3CLfs Xp4le9hIZyZ123xijJG2RctOTioNmHy7f/wx4Ff04gJVgjiTLarZ9uqG4nN4hxqn GZGKSXkhnRUCkFVdEyH2qcJUy5cLYQ2qf/mag+lVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqJYoyRD9kIZtmb9T1UQFDKBd4DcwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzY3MjQzYWNhLTlmNWEtNDgyMi1hNzBkLTg4MGVlZGQ2OTM2Ni5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEPkQAwDQYJKoZIhvcNAQELBQADggEBAJpueUwJnxf0eGfxf831l2TBcdOj rLGmFj0j1TGzBi3U9baVe9b6+IwzadcXDyyK73YWEoAJ9zZ7XZ5IKX0FOU7uhlY2 2Nw36idxNZqvZCQ0pW+1/tKoZlHsplLffpkGD7idMFyNNm4GEHoK22YSW0VeIM79 H2OkWWpJeq6nhiJVAT1Fa/2JYZfqCPUeZ8oOZ6VSbtFE3irow4NMzOqBjZ9L/t/B r1a+Q8N8ka8nXkItNpGiMGTMwSLHG/kZaE5mjMXyrZMBoWP0x29bymeuyidw7I2J vHrzVRgNouL+AUmrpwsZCwl+BTtU9+xlA6GP1Rym2c59Be/3skB/imB5raw= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:39 2025 by rpki-client