$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/920c2679-a607-4621-8630-24d2e4985cab.roa File: 920c2679-a607-4621-8630-24d2e4985cab.roa (raw, json) Hash identifier: 7Ys+TVu9GnJqPKh1WsXTJWkM+z80JysgHIVyQC1+grM= Subject key identifier: AA:63:B2:E8:CB:58:C9:9C:F1:FE:96:B8:D3:07:A2:19:22:F0:9F:67 Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 4E3D4C01609226BB8C90E16D38D3DE8890C305DD Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/920c2679-a607-4621-8630-24d2e4985cab.roa Signing time: Fri 25 Apr 2025 16:21:20 +0000 ROA not before: Fri 25 Apr 2025 16:21:20 +0000 ROA not after: Fri 30 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 15.248.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3d:4c:01:60:92:26:bb:8c:90:e1:6d:38:d3:de:88:90:c3:05:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Apr 25 16:21:20 2025 GMT Not After : May 30 23:59:59 2025 GMT Subject: serialNumber=e19d14eee6417cb66f5473b9ed85852d651c29dac76ede4cb1895c59d63dfd6b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4f:23:4e:f8:f1:7f:4d:43:cf:5f:69:65:f6: 74:41:a2:b6:a0:80:77:3e:7b:57:7c:97:15:5c:6e: 26:9f:e5:b9:c0:73:29:85:96:e2:d6:5b:d8:6e:f7: d0:9f:19:01:61:af:17:02:a5:d1:4d:73:4b:b6:dc: 2c:4b:1f:97:44:e2:52:05:1b:d9:95:f5:ba:6d:fa: dc:fb:6d:bc:1d:8f:93:7a:f2:c1:a9:81:bf:5d:a8: db:c3:0e:e9:a9:11:26:64:a6:f6:3f:33:be:2c:36: 19:6a:5d:50:5b:11:d2:9c:ed:df:38:8a:23:31:0b: e8:7a:fe:e1:51:8d:b3:10:5c:45:37:74:00:c9:24: 17:96:f8:72:76:36:78:17:6d:0f:b5:18:7f:60:26: e3:9c:e5:e6:07:4b:66:c2:cb:fc:3d:37:ab:2d:13: 69:14:2b:e6:b8:6d:92:0d:02:56:4f:f4:73:a6:ea: 59:39:71:4a:b7:18:42:51:ec:9d:5e:1f:f3:e8:98: 6c:4a:57:22:af:28:34:e0:76:69:d9:e2:96:f9:92: 21:c2:6e:78:00:c3:71:fd:c8:93:09:1f:5e:33:15: 05:e8:5e:33:6a:03:bc:c8:ca:c3:f7:e3:31:16:2a: e3:56:5d:39:02:67:5b:20:65:db:7e:31:9b:31:e1: 3e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:63:B2:E8:CB:58:C9:9C:F1:FE:96:B8:D3:07:A2:19:22:F0:9F:67 X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/920c2679-a607-4621-8630-24d2e4985cab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 15.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 64:50:0f:c6:cb:53:a2:0b:a1:72:2c:a2:b8:9d:73:aa:77:9e: b3:de:79:93:18:d2:b6:36:e5:1a:a0:6e:1f:d1:02:5d:a8:f7: fd:9b:4c:d8:7f:95:25:5c:21:49:ca:6d:a4:46:b5:03:7c:26: 7f:41:61:a4:9a:a2:f4:ec:4d:f1:25:fd:3e:4c:07:01:9c:94: 7f:0b:29:d9:20:48:4d:ee:e1:d9:74:57:7e:c5:d0:71:0d:3a: 3c:07:41:32:30:55:85:1a:97:b3:00:dc:0d:40:ea:6b:e1:73: b4:a2:38:54:5a:de:14:cd:2e:ae:2a:30:25:01:ec:cd:1f:f4: 6a:b0:31:84:24:51:59:77:6a:a8:1c:e6:1b:07:6f:ad:84:7e: 33:62:c7:2d:f5:8d:6e:d1:e7:36:69:a7:5d:ee:a8:5f:d3:89: 12:c6:4b:a7:89:e9:d5:e5:1c:70:f4:1a:73:af:b6:aa:6a:74: dd:e7:b4:e2:ee:53:5a:c5:fc:97:37:f6:a3:e3:95:c7:58:27: 0b:a8:5f:84:26:02:12:f6:93:e2:1b:3f:23:03:7e:d8:0f:f5: b6:ea:c5:92:59:a1:c9:5e:11:02:af:be:d7:60:6f:3d:fa:d5: 2a:60:c6:93:48:94:da:a8:f1:5f:1b:3d:96:32:61:01:c3:27: 41:d8:1e:da -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUTj1MAWCSJruMkOFtONPeiJDDBd0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjUwNDI1MTYyMTIwWhcNMjUwNTMwMjM1OTU5 WjB6MUkwRwYDVQQFE0BlMTlkMTRlZWU2NDE3Y2I2NmY1NDczYjllZDg1ODUyZDY1 MWMyOWRhYzc2ZWRlNGNiMTg5NWM1OWQ2M2RmZDZiMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC7TyNO+PF/TUPPX2ll9nRBoraggHc+e1d8lxVcbiaf5bnA cymFluLWW9hu99CfGQFhrxcCpdFNc0u23CxLH5dE4lIFG9mV9bpt+tz7bbwdj5N6 8sGpgb9dqNvDDumpESZkpvY/M74sNhlqXVBbEdKc7d84iiMxC+h6/uFRjbMQXEU3 dADJJBeW+HJ2NngXbQ+1GH9gJuOc5eYHS2bCy/w9N6stE2kUK+a4bZINAlZP9HOm 6lk5cUq3GEJR7J1eH/PomGxKVyKvKDTgdmnZ4pb5kiHCbngAw3H9yJMJH14zFQXo XjNqA7zIysP34zEWKuNWXTkCZ1sgZdt+MZsx4T6PAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUqmOy6MtYyZzx/pa40weiGSLwn2cwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzkyMGMyNjc5LWE2MDctNDYyMS04NjMwLTI0ZDJlNDk4NWNhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAP+DANBgkqhkiG9w0BAQsFAAOCAQEAZFAPxstToguhciyiuJ1zqnees955 kxjStjblGqBuH9ECXaj3/ZtM2H+VJVwhScptpEa1A3wmf0FhpJqi9OxN8SX9PkwH AZyUfwsp2SBITe7h2XRXfsXQcQ06PAdBMjBVhRqXswDcDUDqa+FztKI4VFreFM0u riowJQHszR/0arAxhCRRWXdqqBzmGwdvrYR+M2LHLfWNbtHnNmmnXe6oX9OJEsZL p4np1eUccPQac6+2qmp03ee04u5TWsX8lzf2o+OVx1gnC6hfhCYCEvaT4hs/IwN+ 2A/1turFklmhyV4RAq++12BvPfrVKmDGk0iU2qjxXxs9ljJhAcMnQdge2g== -----END CERTIFICATE-----Generated at Sat Apr 26 18:34:06 2025 by rpki-client