$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/821c91d6-50d4-4ad7-bfd4-132adbc85480.roa File: 821c91d6-50d4-4ad7-bfd4-132adbc85480.roa (raw, json) Hash identifier: 1W28TtR0FSnJung2cS5Yv54Yj4zOCeE/xJNjdaP8QYQ= Subject key identifier: FB:57:AF:13:95:7D:84:78:26:4E:CA:23:B1:83:63:29:A9:66:37:18 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 23568868140A9A8334ED15FA8022E9A1AADD1F27 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/821c91d6-50d4-4ad7-bfd4-132adbc85480.roa Signing time: Wed 21 May 2025 00:10:28 +0000 ROA not before: Wed 21 May 2025 00:10:28 +0000 ROA not after: Wed 25 Jun 2025 23:59:59 +0000 asID: 16509 IP address blocks: 150.222.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:56:88:68:14:0a:9a:83:34:ed:15:fa:80:22:e9:a1:aa:dd:1f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: May 21 00:10:28 2025 GMT Not After : Jun 25 23:59:59 2025 GMT Subject: serialNumber=4d4483ff0a95dac54f429ab51ef7997c331347ed9bc1d656da76316a1378a0e1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:79:f3:09:a0:d8:4d:3f:26:81:75:84:c0:73: ab:81:f4:b7:7f:43:d1:a7:37:2e:86:97:b4:7a:3a: ce:30:47:c3:1b:e7:9f:e9:26:2d:00:5c:5b:f6:bb: 0f:11:1e:48:96:7e:b0:e9:09:b6:04:c2:c9:88:6c: 70:04:b9:73:ed:a5:2a:28:98:3d:40:76:8b:fe:b1: cf:8b:a2:6a:ca:ac:c8:33:b3:3e:b6:9d:f6:ba:ef: 37:39:8b:f0:2f:40:4a:dd:9e:59:53:ac:50:80:ef: 44:62:85:d9:32:f5:ea:1b:e1:8c:36:47:7a:39:ef: ff:33:21:dd:4a:8a:3c:c5:e6:63:7c:73:c3:38:64: e5:70:84:5a:d8:8b:1e:8b:7f:b4:54:88:fb:1e:87: fd:41:12:e3:70:e2:60:56:c3:db:27:8a:ea:1c:8e: 5c:32:ca:2d:15:6d:02:d9:0d:60:08:01:4e:71:3b: 7e:17:f0:c5:d5:99:b9:31:5a:80:9b:b8:ed:e8:3e: 32:3e:4b:23:7f:7e:50:c7:96:1c:5f:b7:64:62:e6: f3:e8:b2:df:f0:d7:04:21:0c:2b:c4:f1:08:86:b4: 51:4e:7e:78:0f:01:da:c9:fb:e6:d3:f9:97:83:db: e6:09:73:e6:ce:71:e2:5b:13:37:2a:ca:1c:27:55: fb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:AF:13:95:7D:84:78:26:4E:CA:23:B1:83:63:29:A9:66:37:18 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/821c91d6-50d4-4ad7-bfd4-132adbc85480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 150.222.211.0/24 Signature Algorithm: sha256WithRSAEncryption a0:61:fa:8a:6c:f8:85:8b:53:5f:cf:1a:07:a0:95:70:86:52: 18:0e:a3:09:1b:b9:ba:af:39:b1:b8:f9:6a:9f:45:0e:1e:49: 14:a0:8a:fa:7a:6b:c7:89:36:11:79:2a:54:9c:9d:9e:59:4d: 0e:d4:1c:5b:71:f5:8f:74:45:3f:cd:e5:13:b1:f9:5d:10:15: fe:71:59:5e:f6:bd:6a:d2:f7:e2:7a:21:7a:b3:db:50:d1:9e: 91:a7:fe:e9:c1:d1:9b:2a:88:e7:65:95:51:6f:42:09:a6:7e: 5d:10:e5:40:3c:88:e4:9e:d8:7a:d7:e9:a5:4c:dd:5c:f7:07: f1:62:91:ea:88:46:9a:9f:f0:5d:71:ed:f8:1a:9d:3e:81:2b: 37:ac:51:96:13:cc:b7:d9:9a:b0:62:da:1d:54:4d:08:d5:49: cd:ad:d3:df:e9:56:cc:2f:1c:b0:9a:7e:09:2a:00:52:65:87: f9:35:98:d1:60:2b:7a:ce:fc:29:c4:cb:d2:20:22:f5:e3:1c: 87:d6:43:4a:e6:bd:9f:cb:e4:c4:0d:c3:24:7a:c1:66:a0:85: 31:e7:76:f4:38:3a:a3:41:14:9c:6a:6c:28:aa:cf:bf:75:96: 37:24:0f:bf:22:78:ea:1e:cf:7b:da:fd:6f:3b:0e:72:4d:22: a1:8b:df:49 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUI1aIaBQKmoM07RX6gCLpoardHycwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNTIxMDAxMDI4WhcNMjUwNjI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZDQ0ODNmZjBhOTVkYWM1NGY0MjlhYjUxZWY3OTk3YzMz MTM0N2VkOWJjMWQ2NTZkYTc2MzE2YTEzNzhhMGUxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDMefMJoNhNPyaBdYTAc6uB9Ld/Q9GnNy6Gl7R6Os4wR8Mb 55/pJi0AXFv2uw8RHkiWfrDpCbYEwsmIbHAEuXPtpSoomD1Adov+sc+LomrKrMgz sz62nfa67zc5i/AvQErdnllTrFCA70Rihdky9eob4Yw2R3o57/8zId1KijzF5mN8 c8M4ZOVwhFrYix6Lf7RUiPseh/1BEuNw4mBWw9sniuocjlwyyi0VbQLZDWAIAU5x O34X8MXVmbkxWoCbuO3oPjI+SyN/flDHlhxft2Ri5vPost/w1wQhDCvE8QiGtFFO fngPAdrJ++bT+ZeD2+YJc+bOceJbEzcqyhwnVfvtAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU+1evE5V9hHgmTsojsYNjKalmNxgwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzgyMWM5MWQ2LTUwZDQtNGFkNy1iZmQ0LTEzMmFkYmM4NTQ4MC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBACW3tMwDQYJKoZIhvcNAQELBQADggEBAKBh+ops+IWLU1/PGgeglXCGUhgO owkbubqvObG4+WqfRQ4eSRSgivp6a8eJNhF5KlScnZ5ZTQ7UHFtx9Y90RT/N5ROx +V0QFf5xWV72vWrS9+J6IXqz21DRnpGn/unB0ZsqiOdllVFvQgmmfl0Q5UA8iOSe 2HrX6aVM3Vz3B/FikeqIRpqf8F1x7fganT6BKzesUZYTzLfZmrBi2h1UTQjVSc2t 09/pVswvHLCafgkqAFJlh/k1mNFgK3rO/CnEy9IgIvXjHIfWQ0rmvZ/L5MQNwyR6 wWaghTHndvQ4OqNBFJxqbCiqz791ljckD78ieOoez3va/W87DnJNIqGL30k= -----END CERTIFICATE-----Generated at Sat Jun 14 05:54:53 2025 by rpki-client