$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/803b603e-f68a-414e-843f-493ca139f31b.roa File: 803b603e-f68a-414e-843f-493ca139f31b.roa (raw, json) Hash identifier: Zn3UtylebrbAsPYoWP90wHLWMNJBg2xBnF2ITdbYCI0= Subject key identifier: B2:8F:61:29:8D:79:61:C8:04:C5:BF:5A:38:77:A0:ED:16:6A:3C:D2 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 6C7DE76EF862D849B4FE9E627600EAC52ABEF111 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/803b603e-f68a-414e-843f-493ca139f31b.roa Signing time: Fri 25 Apr 2025 16:10:46 +0000 ROA not before: Fri 25 Apr 2025 16:10:46 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.185.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7d:e7:6e:f8:62:d8:49:b4:fe:9e:62:76:00:ea:c5:2a:be:f1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:10:46 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=f6f9a56816411cd398eb2268e9cad5d06dad81412088dac27fffefb9d8bc1be0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:cf:22:49:11:37:55:b5:9e:76:3f:65:fa: e6:98:90:58:e2:da:3c:28:05:5a:c5:ef:e2:3d:40: 1e:d8:62:48:f6:b8:bc:a4:55:30:9d:04:8e:d9:1f: d5:38:f5:b6:77:b3:29:9b:3b:62:68:0c:62:e8:ad: 98:f2:78:58:9a:76:39:53:fb:a8:56:ce:01:26:07: 6a:94:b9:7f:1f:48:9f:21:89:b5:ff:f5:56:6b:5b: 09:36:d3:df:8a:14:f4:70:c5:fc:12:39:16:12:13: 38:52:f1:34:de:dc:cf:71:1e:d9:1b:71:a3:98:bc: eb:f8:de:d7:7f:6e:01:4c:ea:6e:bf:c0:a6:85:46: 02:e5:9d:26:49:00:fa:c7:89:ba:c1:a3:fc:0c:2b: d2:ae:3a:cd:bb:b1:89:7d:76:80:c9:66:e4:62:9d: 7e:cb:0e:7a:13:ef:b6:15:c6:72:41:78:1f:33:1c: f2:4d:b3:79:ec:64:09:32:c2:12:95:6e:cd:41:8a: c4:b7:42:81:70:f1:fd:2b:f8:3c:7f:4b:ad:d2:09: 20:ad:fd:76:5d:5a:70:de:00:32:b9:72:d4:e7:02: 4a:91:d5:96:8f:91:ff:f9:fc:9b:25:26:64:70:08: 66:5d:9a:5d:94:99:f6:d1:b0:69:46:75:dd:9f:7f: d4:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8F:61:29:8D:79:61:C8:04:C5:BF:5A:38:77:A0:ED:16:6A:3C:D2 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/803b603e-f68a-414e-843f-493ca139f31b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.185.0.0/16 Signature Algorithm: sha256WithRSAEncryption 5d:53:37:8a:d6:ef:7d:a9:3b:b4:c4:80:d4:88:e7:e5:02:01: 2f:4d:c6:f0:19:6d:ed:b0:4a:e5:6b:81:2e:43:aa:bb:aa:32: 46:b9:31:30:17:9f:f8:83:e4:2b:c5:7d:15:87:44:0c:91:12: de:d9:cc:79:25:4c:82:74:a2:8e:6f:3b:dc:17:17:82:77:8c: 2d:fe:82:15:ce:ba:3c:dd:3b:f1:6d:cc:c5:6a:ab:88:02:18: 08:c9:d3:88:ad:22:d3:db:e1:64:24:c7:e7:94:09:f3:c3:7e: d6:d2:0c:db:b8:81:b3:6b:f7:3f:fa:35:65:d2:59:75:96:1d: b3:cd:ab:4a:c7:99:69:c0:3a:50:73:c9:d8:35:cf:f4:89:da: c6:01:5f:b6:93:29:b9:b3:fd:81:e4:66:ae:24:5e:53:cd:08: 84:2a:03:b9:d0:55:9f:93:ff:c7:4a:80:b8:e6:7f:5f:c9:61: f5:ae:a9:62:7c:dd:5a:47:86:00:9d:12:fe:00:1a:13:05:78: 9f:d3:a4:08:9e:c0:31:31:74:02:2e:13:4f:b8:b0:2f:58:f6: b6:fa:41:ae:a9:14:2c:7f:aa:8c:a8:d1:3e:c1:27:2d:7f:5a: c9:75:0a:cf:10:e6:17:4d:78:3d:ef:f7:ee:3c:80:9a:cd:11: 9d:c4:0a:f2 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUbH3nbvhi2Em0/p5idgDqxSq+8REwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYxMDQ2WhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BmNmY5YTU2ODE2NDExY2QzOThlYjIyNjhlOWNhZDVkMDZk YWQ4MTQxMjA4OGRhYzI3ZmZmZWZiOWQ4YmMxYmUwMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCiys8iSRE3VbWedj9l+uaYkFji2jwoBVrF7+I9QB7YYkj2 uLykVTCdBI7ZH9U49bZ3symbO2JoDGLorZjyeFiadjlT+6hWzgEmB2qUuX8fSJ8h ibX/9VZrWwk209+KFPRwxfwSORYSEzhS8TTe3M9xHtkbcaOYvOv43td/bgFM6m6/ wKaFRgLlnSZJAPrHibrBo/wMK9KuOs27sYl9doDJZuRinX7LDnoT77YVxnJBeB8z HPJNs3nsZAkywhKVbs1BisS3QoFw8f0r+Dx/S63SCSCt/XZdWnDeADK5ctTnAkqR 1ZaPkf/5/JslJmRwCGZdml2UmfbRsGlGdd2ff9TVAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUso9hKY15YcgExb9aOHeg7RZqPNIwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgwM2I2MDNlLWY2OGEtNDE0ZS04NDNmLTQ5M2NhMTM5ZjMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAPuTANBgkqhkiG9w0BAQsFAAOCAQEAXVM3itbvfak7tMSA1Ijn5QIBL03G 8Blt7bBK5WuBLkOqu6oyRrkxMBef+IPkK8V9FYdEDJES3tnMeSVMgnSijm873BcX gneMLf6CFc66PN078W3MxWqriAIYCMnTiK0i09vhZCTH55QJ88N+1tIM27iBs2v3 P/o1ZdJZdZYds82rSseZacA6UHPJ2DXP9InaxgFftpMpubP9geRmriReU80IhCoD udBVn5P/x0qAuOZ/X8lh9a6pYnzdWkeGAJ0S/gAaEwV4n9OkCJ7AMTF0Ai4TT7iw L1j2tvpBrqkULH+qjKjRPsEnLX9ayXUKzxDmF014Pe/37jyAms0RncQK8g== -----END CERTIFICATE-----Generated at Sat Apr 26 12:50:08 2025 by rpki-client