$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b415600-e5c5-45af-b51d-800cb6b60664.roa File: 7b415600-e5c5-45af-b51d-800cb6b60664.roa (raw, json) Hash identifier: wZ8zFZVkKXvr0Ublf1+lKsdMtWISwCOX4fN8jVC5wQ0= Subject key identifier: B2:A0:05:1E:51:54:FA:DB:61:86:73:63:A8:53:EA:28:28:29:D3:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6975D5496AB273CF6DA663A2DC8F76CAAEA047F9 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b415600-e5c5-45af-b51d-800cb6b60664.roa Signing time: Fri 25 Apr 2025 16:10:16 +0000 ROA not before: Fri 25 Apr 2025 16:10:16 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.156.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:75:d5:49:6a:b2:73:cf:6d:a6:63:a2:dc:8f:76:ca:ae:a0:47:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:10:16 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=09762f29a3e6425cd0a78aba3edc59d62c13b337c5a1ced43b1def73547db656, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:27:23:41:cd:6c:2e:be:10:33:7d:69:0e: e7:39:3b:ae:0a:11:60:5c:e8:a3:25:31:af:9f:60: 1e:e8:34:43:37:12:46:81:19:ea:62:5c:3f:5c:87: 9f:3d:12:8f:d9:a2:b7:11:19:d5:4f:c8:7f:ea:6a: ef:86:21:c3:78:e4:74:b6:be:1e:01:fe:75:32:da: c9:71:38:fd:2b:cb:06:aa:bb:9f:a0:cf:9d:61:ae: f9:a8:e7:bf:a3:8e:f8:11:50:84:57:0a:46:76:de: 20:3d:5a:4b:e5:d8:31:9d:63:42:00:5b:ff:98:22: 06:90:5a:24:5a:11:6d:b0:54:31:2b:1c:20:21:3d: 3c:91:c6:5f:2f:82:4b:8f:21:6a:3e:48:f4:7d:4f: f4:c3:04:69:d1:91:8f:5a:f1:59:3d:07:3d:d1:87: 97:40:f5:77:63:e7:43:eb:c0:7c:90:0d:90:37:d7: 80:07:20:b4:be:85:fb:b7:ae:13:7f:9c:c3:c9:24: 9c:14:a7:29:68:06:26:4b:d3:e9:76:f3:87:21:19: ba:f4:9d:04:12:87:8b:d5:f0:81:0d:7d:c1:06:4f: 48:6c:a1:e6:05:9d:e9:7e:0c:62:93:88:bc:b3:06: 67:ad:40:b2:03:18:0a:3e:76:62:31:a4:76:e8:38: 83:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A0:05:1E:51:54:FA:DB:61:86:73:63:A8:53:EA:28:28:29:D3:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7b415600-e5c5-45af-b51d-800cb6b60664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.156.212.0/22 Signature Algorithm: sha256WithRSAEncryption ab:36:ab:85:46:22:5a:8a:5c:53:a2:16:46:3e:bf:08:76:ba: a5:d8:d7:be:f6:4b:b0:d6:95:a6:5d:a5:67:98:10:49:88:d3: 27:b0:a1:d8:52:61:29:64:c1:67:94:72:e2:a3:12:73:69:6b: 39:74:a6:d5:bd:a8:1c:ac:a6:9b:04:9d:d6:f8:b3:1e:84:23: 1c:69:f3:9e:4b:cb:e5:20:cc:85:cf:cb:8c:9a:dd:d4:ca:96: 3f:4b:ec:19:84:9b:b6:50:40:3d:22:6a:82:73:ec:22:aa:84: 98:3b:34:72:2d:56:70:58:3f:d9:74:4d:e7:cb:f0:00:d8:3a: 4c:c2:4f:d8:40:cd:c7:3e:93:0e:e0:c9:d8:49:e7:40:2e:36: 76:25:98:3e:bc:33:f2:e2:b1:50:e4:96:c1:c7:d6:15:51:07: f2:88:22:51:44:54:06:5a:67:9e:54:29:62:35:f1:0d:ed:58: 3c:69:0c:1a:13:56:ab:7f:6c:e5:95:67:89:53:75:0c:90:99: 0b:2c:dd:1c:b3:56:8f:f1:b4:7e:07:bf:48:a4:41:3b:66:9e: 99:07:64:a3:77:b6:60:ff:a8:dd:80:23:bb:c0:76:53:e8:b9: c4:63:e2:4e:db:cd:9c:47:3b:8f:d0:7d:b0:b4:9f:99:3d:fd: ee:39:43:1b -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUaXXVSWqyc89tpmOi3I92yq6gR/kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYxMDE2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0AwOTc2MmYyOWEzZTY0MjVjZDBhNzhhYmEzZWRjNTlkNjJj MTNiMzM3YzVhMWNlZDQzYjFkZWY3MzU0N2RiNjU2MS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiiScjQc1sLr4QM31pDuc5O64KEWBc6KMlMa+fYB7oNEM3 EkaBGepiXD9ch589Eo/ZorcRGdVPyH/qau+GIcN45HS2vh4B/nUy2slxOP0rywaq u5+gz51hrvmo57+jjvgRUIRXCkZ23iA9Wkvl2DGdY0IAW/+YIgaQWiRaEW2wVDEr HCAhPTyRxl8vgkuPIWo+SPR9T/TDBGnRkY9a8Vk9Bz3Rh5dA9Xdj50PrwHyQDZA3 14AHILS+hfu3rhN/nMPJJJwUpyloBiZL0+l284chGbr0nQQSh4vV8IENfcEGT0hs oeYFnel+DGKTiLyzBmetQLIDGAo+dmIxpHboOIMnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUsqAFHlFU+tthhnNjqFPqKCgp0xgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzdiNDE1NjAwLWU1YzUtNDVhZi1iNTFkLTgwMGNiNmI2MDY2NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIPnNQwDQYJKoZIhvcNAQELBQADggEBAKs2q4VGIlqKXFOiFkY+vwh2uqXY 1772S7DWlaZdpWeYEEmI0yewodhSYSlkwWeUcuKjEnNpazl0ptW9qBysppsEndb4 sx6EIxxp855Ly+UgzIXPy4ya3dTKlj9L7BmEm7ZQQD0iaoJz7CKqhJg7NHItVnBY P9l0TefL8ADYOkzCT9hAzcc+kw7gydhJ50AuNnYlmD68M/LisVDklsHH1hVRB/KI IlFEVAZaZ55UKWI18Q3tWDxpDBoTVqt/bOWVZ4lTdQyQmQss3RyzVo/xtH4Hv0ik QTtmnpkHZKN3tmD/qN2AI7vAdlPoucRj4k7bzZxHO4/QfbC0n5k9/e45Qxs= -----END CERTIFICATE-----Generated at Sat Apr 26 12:47:18 2025 by rpki-client