$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a5ea825-f892-4c21-82cc-2c7733e15af7.roa File: 6a5ea825-f892-4c21-82cc-2c7733e15af7.roa (raw, json) Hash identifier: 8IieZ1fSPDAPxsJjNM1/rjm8od3XCZjFER0xhBOdl4o= Subject key identifier: 30:B3:92:4D:D5:A9:BB:05:8C:EB:9C:69:B6:16:08:C7:06:22:C6:C9 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 3A37A1A95B360D59387DD586D8E25C43E1898907 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a5ea825-f892-4c21-82cc-2c7733e15af7.roa Signing time: Fri 25 Apr 2025 16:31:21 +0000 ROA not before: Fri 25 Apr 2025 16:31:21 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 18.238.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:37:a1:a9:5b:36:0d:59:38:7d:d5:86:d8:e2:5c:43:e1:89:89:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:31:21 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=aaea99554e2e8d2de175c33fd056721516e0ac8a2f9ea1c47d6663766221ad75, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ba:5f:f9:48:66:f3:13:e4:27:10:ad:36:a8: 15:64:c8:58:d6:a5:7f:89:99:fc:8f:29:a2:c7:30: d8:c7:6a:49:75:d1:b2:19:0f:34:f3:bb:6e:d9:d2: 01:e1:b6:e3:8e:93:5f:2d:2c:cb:81:a6:83:93:16: 70:2e:5e:e7:a0:73:53:b8:85:89:63:cf:4a:3a:0a: 2c:dc:7c:0f:05:72:b4:69:33:59:1c:47:c8:5d:ad: c7:24:d2:59:d7:2d:4c:23:85:58:b6:eb:4d:ba:24: e1:ac:44:21:9c:6b:79:36:7b:73:f9:1a:fb:6b:15: 54:69:84:bf:b6:b3:19:45:28:35:1d:17:e1:67:a0: 08:ba:8d:a5:fe:7e:b6:dc:cf:4c:aa:a0:c5:ab:b7: 91:96:9e:5e:17:e3:74:46:1e:a6:d7:5f:55:b9:84: c6:f2:9a:84:fa:84:49:4e:90:b9:d8:50:2c:09:7b: 52:62:de:c9:5f:41:ec:91:97:9e:c0:73:45:e8:12: 1a:d7:2a:30:b2:09:a0:01:06:b9:51:d6:12:6e:d2: 7a:c8:90:75:32:f1:c4:b0:6e:06:a9:0a:ed:23:bf: 17:b9:ca:11:4f:7c:18:7e:da:8a:b7:82:1b:68:12: b7:4e:85:b4:ef:91:d3:dd:9d:80:c5:e5:80:4c:7c: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B3:92:4D:D5:A9:BB:05:8C:EB:9C:69:B6:16:08:C7:06:22:C6:C9 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6a5ea825-f892-4c21-82cc-2c7733e15af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 18.238.0.0/15 Signature Algorithm: sha256WithRSAEncryption 58:0f:38:f0:2a:86:ac:d5:40:31:94:7a:8d:02:19:07:b7:ad: 1a:50:cd:58:88:7d:b2:cd:16:58:0a:f3:1d:b6:68:60:3f:4a: 0d:73:0e:71:0c:50:1e:aa:6d:a7:28:08:8c:5e:ae:2f:83:8a: 76:10:64:4c:57:f3:9d:86:b8:de:9d:fb:3e:22:c3:b7:ba:59: d0:ee:d3:b5:1e:a5:be:f4:a9:e6:45:e0:7b:ae:75:64:4f:ec: 0b:2c:5a:75:bd:6d:12:99:82:c1:9e:c3:0c:bf:da:a7:29:2b: 5a:76:90:5a:50:77:39:b0:3e:53:21:5d:5c:e9:8b:9d:45:9e: 51:d1:5a:29:c9:0e:bf:be:4f:2b:cc:16:0b:f2:07:7b:64:c0: 94:52:01:f3:91:35:11:30:7d:71:c4:da:07:ea:18:3f:ef:f4: 78:3b:94:4c:12:4d:2e:6b:d5:1d:c5:c9:a4:0c:e9:4a:b2:c8: 22:b2:fc:b5:4b:dd:e8:b1:42:a5:66:2a:92:e4:05:e0:e1:91: 2f:fa:d5:70:81:90:c2:f5:0e:38:d0:0b:1b:d5:25:49:cd:58: 18:ab:fc:6e:40:f3:02:e1:43:c4:61:66:ba:4a:31:85:77:db: 91:d5:37:de:48:fa:40:9e:08:b1:70:15:67:22:c4:6e:0f:29: 7e:a7:77:e5 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUOjehqVs2DVk4fdWG2OJcQ+GJiQcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYzMTIxWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BhYWVhOTk1NTRlMmU4ZDJkZTE3NWMzM2ZkMDU2NzIxNTE2 ZTBhYzhhMmY5ZWExYzQ3ZDY2NjM3NjYyMjFhZDc1MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDcul/5SGbzE+QnEK02qBVkyFjWpX+JmfyPKaLHMNjHakl1 0bIZDzTzu27Z0gHhtuOOk18tLMuBpoOTFnAuXuegc1O4hYljz0o6CizcfA8FcrRp M1kcR8hdrcck0lnXLUwjhVi26026JOGsRCGca3k2e3P5GvtrFVRphL+2sxlFKDUd F+FnoAi6jaX+frbcz0yqoMWrt5GWnl4X43RGHqbXX1W5hMbymoT6hElOkLnYUCwJ e1Ji3slfQeyRl57Ac0XoEhrXKjCyCaABBrlR1hJu0nrIkHUy8cSwbgapCu0jvxe5 yhFPfBh+2oq3ghtoErdOhbTvkdPdnYDF5YBMfJQ1AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUMLOSTdWpuwWM65xpthYIxwYixskwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzZhNWVhODI1LWY4OTItNGMyMS04MmNjLTJjNzczM2UxNWFmNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwES7jANBgkqhkiG9w0BAQsFAAOCAQEAWA848CqGrNVAMZR6jQIZB7etGlDN WIh9ss0WWArzHbZoYD9KDXMOcQxQHqptpygIjF6uL4OKdhBkTFfznYa43p37PiLD t7pZ0O7TtR6lvvSp5kXge651ZE/sCyxadb1tEpmCwZ7DDL/apykrWnaQWlB3ObA+ UyFdXOmLnUWeUdFaKckOv75PK8wWC/IHe2TAlFIB85E1ETB9ccTaB+oYP+/0eDuU TBJNLmvVHcXJpAzpSrLIIrL8tUvd6LFCpWYqkuQF4OGRL/rVcIGQwvUOONALG9Ul Sc1YGKv8bkDzAuFDxGFmukoxhXfbkdU33kj6QJ4IsXAVZyLEbg8pfqd35Q== -----END CERTIFICATE-----Generated at Sat Apr 26 17:38:01 2025 by rpki-client